This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft File: TQreVMJ-b83aziYsT995DzIP7Zw.mft (raw, json) Hash identifier: z4mOjPIL/Vyzgv90a+0dfLb0KkSjqWLuKEAFTgG+FK8= Subject key identifier: 2B:BE:3E:E2:4C:83:FB:6E:8F:61:EE:AC:48:D4:DB:A4:12:83:63:59 Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C Certificate issuer: /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c Certificate serial: 019B0E932DF8DF4221A52CA39AF98BA6B9BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft Manifest number: 1777 Signing time: Thu 11 Dec 2025 18:01:25 +0000 Manifest this update: Thu 11 Dec 2025 18:01:25 +0000 Manifest next update: Fri 12 Dec 2025 18:01:25 +0000 Files and hashes: 1: 93DmKZhPP6C3A8rfNYLNAOSD7nY.roa (hash: dt3s4SYU1dR+fLajxJTR3/3GKKVmv0f+WTIVOmO+2as=) 2: A1lFiDlkwzd2kuuHtwLxrVifjIM.roa (hash: bheq6y6BKOc+FBTnE7aA9p7E54SloHCzl+8cgE33f9o=) 3: TQreVMJ-b83aziYsT995DzIP7Zw.crl (hash: yD+EfBRlGCwXIeIlhaKBqGx+xzUMeIyIlVaFZ6H6UmY=) 4: UD9G2KurtNeaAxJdizQiQcSD0uc.roa (hash: Es9ToT28+rspmgTLqxqTlnHgsgNlKjrlO13bAnzcF2g=) 5: XDIQZzxZW5-uUuoXNVfYPGALZY8.roa (hash: xZyhu94HluR+zrM/qfXRNVxIfS3klNJwNP/Gh4p7kNE=) 6: cYs_upIMBFM1qTzwqySxwaPDCLc.roa (hash: xI0Q9MYkvDP8hv/SnI33zJTsy3M/0ZO4tON1nbaFCD4=) 7: jk-_IfFTaD-MzFizpWx0AA1TkH4.roa (hash: wezPiSGoo0rul4hPDHDdcRTaZb8xQPAVvKZ9GBZZNU8=) 8: luOuJQnFXQhNggwM6MUJDK19PDQ.roa (hash: yd7LbwhPMHWjUutNzr3ySSl/LTeLlprMji5U1R9GXsM=) 9: mmpsKeeO5JUD0kNNB4aUsbfsoEs.roa (hash: mRAg2xOUvTrNMtJyTqYFatxVEZidyGOVjXZ4XpUtMSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:2d:f8:df:42:21:a5:2c:a3:9a:f9:8b:a6:b9:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c Validity Not Before: Dec 11 18:01:25 2025 GMT Not After : Dec 12 18:01:25 2025 GMT Subject: CN=2bbe3ee24c83fb6e8f61eeac48d4dba412836359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f4:a1:01:8b:58:01:43:23:d4:6a:4c:49:7f: a8:c9:56:a1:fd:f5:68:f9:9c:f5:ad:bf:3f:39:c8: c3:8a:c5:fd:81:fa:3f:3b:b8:cb:e5:a4:a7:39:7e: 3b:cd:87:ee:58:39:0f:f7:b4:3d:0c:70:0d:a4:9b: 6f:31:ae:73:b7:d1:f4:d1:62:cf:c9:ac:8f:f4:48: cf:44:22:9a:7d:a3:cd:69:c9:a4:3a:66:f5:9a:c5: 88:6c:3e:c3:89:da:2b:d7:66:16:db:79:52:43:53: 43:5e:23:e1:71:1f:4a:00:99:ea:91:c0:fb:70:c4: 33:05:d4:fd:98:a1:8d:b2:18:c7:95:cb:e1:aa:a1: c2:59:4c:c2:53:b7:44:13:f7:52:78:14:4d:72:25: 79:a9:4e:c5:0d:b6:46:50:d5:dc:1f:39:a3:48:3f: a8:ed:af:c5:79:36:a0:f5:71:94:55:d0:75:88:d0: 95:8d:e3:18:29:14:b2:73:60:27:50:e9:53:51:19: c2:b2:45:f8:85:c0:8f:5c:46:63:7d:17:ab:f7:65: a7:ff:56:de:c1:7c:fb:b1:50:d1:6c:d2:ab:de:fe: da:05:f5:bf:62:4d:61:56:94:70:fc:0f:49:d5:9b: 1e:8f:99:d9:1e:39:0f:5c:58:fd:64:94:cd:c8:1e: 21:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:BE:3E:E2:4C:83:FB:6E:8F:61:EE:AC:48:D4:DB:A4:12:83:63:59 X509v3 Authority Key Identifier: keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:3c:a2:d4:7a:fb:38:14:97:bb:58:44:b6:05:f2:5d:21:f1: 73:ad:91:42:f7:05:ef:fd:be:07:f8:05:21:54:9f:fa:10:f9: dd:fe:14:a8:a3:ef:fc:47:28:7d:64:ef:1c:f2:51:e8:0b:cd: d4:b3:31:3a:9b:c1:3c:84:b9:95:0b:fa:d2:09:2c:09:68:ea: 32:f9:1e:05:ed:85:b9:c3:92:d4:72:5a:8d:53:38:20:41:13: c6:af:3e:dd:a2:a2:dc:8d:36:d6:a9:ef:69:97:64:12:ea:71: 15:53:40:21:28:23:52:6b:eb:20:5f:19:87:c0:1c:a3:44:31: f5:e1:c4:03:95:1d:c9:91:c9:1b:6f:51:70:b0:74:70:35:12: 6b:df:33:c9:d2:ca:82:fe:aa:77:89:12:c3:97:9f:36:7f:e4: f9:b0:2a:97:6a:93:2b:e5:16:94:23:b6:bc:36:88:e9:56:46: 5d:b5:24:fe:a5:3b:43:52:bd:10:1b:ac:a9:0a:79:b2:7e:46: 8c:c8:31:95:a2:72:58:74:8e:41:40:44:bf:e2:b8:e1:b9:ec: e8:ef:5c:ff:0d:7b:8e:ab:cf:83:d7:23:1b:2f:50:c0:93:8a: f6:57:27:4c:95:e0:ad:aa:99:a9:3d:8e:8e:29:8e:2f:84:83: 5d:59:92:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOky3430IhpSyjmvmLprm6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMGFkZTU0YzI3ZTZmY2RkYWNlMjYyYzRmZGY3OTBmMzIw ZmVkOWMwHhcNMjUxMjExMTgwMTI1WhcNMjUxMjEyMTgwMTI1WjAzMTEwLwYDVQQD EygyYmJlM2VlMjRjODNmYjZlOGY2MWVlYWM0OGQ0ZGJhNDEyODM2MzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/ShAYtYAUMj1GpMSX+oyVah/fVo +Zz1rb8/OcjDisX9gfo/O7jL5aSnOX47zYfuWDkP97Q9DHANpJtvMa5zt9H00WLP yayP9EjPRCKafaPNacmkOmb1msWIbD7Didor12YW23lSQ1NDXiPhcR9KAJnqkcD7 cMQzBdT9mKGNshjHlcvhqqHCWUzCU7dEE/dSeBRNciV5qU7FDbZGUNXcHzmjSD+o 7a/FeTag9XGUVdB1iNCVjeMYKRSyc2AnUOlTURnCskX4hcCPXEZjfRer92Wn/1be wXz7sVDRbNKr3v7aBfW/Yk1hVpRw/A9J1Zsej5nZHjkPXFj9ZJTNyB4hIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCu+PuJMg/tuj2HurEjU26QSg2NZMB8GA1UdIwQY MBaAFE0K3lTCfm/N2s4mLE/feQ8yD+2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFFyZVZNSi1iODNhemlZc1Q5OTVEeklQN1p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84ZWZkOGItZTUxNi00YzQ5LTkyY2It ODkyOTZjY2IzNWY1LzEvVFFyZVZNSi1iODNhemlZc1Q5OTVEeklQN1p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC84ZWZkOGItZTUxNi00YzQ5LTkyY2ItODkyOTZjY2IzNWY1 LzEvVFFyZVZNSi1iODNhemlZc1Q5OTVEeklQN1p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDyi1Hr7 OBSXu1hEtgXyXSHxc62RQvcF7/2+B/gFIVSf+hD53f4UqKPv/EcofWTvHPJR6AvN 1LMxOpvBPIS5lQv60gksCWjqMvkeBe2FucOS1HJajVM4IEETxq8+3aKi3I021qnv aZdkEupxFVNAISgjUmvrIF8Zh8Aco0Qx9eHEA5UdyZHJG29RcLB0cDUSa98zydLK gv6qd4kSw5efNn/k+bAql2qTK+UWlCO2vDaI6VZGXbUk/qU7Q1K9EBusqQp5sn5G jMgxlaJyWHSOQUBEv+K44bns6O9c/w17jqvPg9cjGy9QwJOK9lcnTJXgraqZqT2O jimOL4SDXVmSJA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:58:06 2025 by rpki-client