This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft File: TD6do79ZOALMgz_l2UelJpb1jI0.mft (raw, json) Hash identifier: PIDW31R2dC6b92IJ4vGwgjQoWtC8fZR7eovx39a/fVU= Subject key identifier: EB:2A:89:07:0A:9F:F0:9F:19:AF:59:B0:4E:8E:9F:FD:64:DB:B2:BD Authority key identifier: 4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D Certificate issuer: /CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d Certificate serial: 019B1013634A0DDB70EFFA47A1848E13762E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft Manifest number: 16B1 Signing time: Fri 12 Dec 2025 01:01:04 +0000 Manifest this update: Fri 12 Dec 2025 01:01:04 +0000 Manifest next update: Sat 13 Dec 2025 01:01:04 +0000 Files and hashes: 1: EWuOguv1P9Rw7Q-U1qAW9dBN2No.roa (hash: rN97euvDe5WCriK9EjJsNO5wn2cUGLmPhpQvNqo71q8=) 2: TD6do79ZOALMgz_l2UelJpb1jI0.crl (hash: uZlbHZ2njAW0CCMDbevVL3bVDSyoJfSn/gOuIBGHQ60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:63:4a:0d:db:70:ef:fa:47:a1:84:8e:13:76:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d Validity Not Before: Dec 12 01:01:04 2025 GMT Not After : Dec 13 01:01:04 2025 GMT Subject: CN=eb2a89070a9ff09f19af59b04e8e9ffd64dbb2bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:af:cc:5d:01:fa:cf:5f:18:72:38:f0:39:72: 56:7c:ab:45:4a:79:25:14:a4:c4:4d:1f:55:d2:19: c2:d7:5d:41:0f:ef:a4:1c:c8:16:6f:ce:f6:ea:37: c7:44:b0:d9:87:25:d0:a2:8f:ba:e0:12:23:c5:24: e6:97:95:4f:cf:ad:35:41:68:22:93:46:47:71:27: 40:b9:b6:a2:2d:29:cc:96:37:4b:72:9e:30:03:6b: 62:7c:92:73:00:ff:f0:25:1f:55:65:9d:bb:3f:94: ba:e0:62:29:1f:cc:09:37:8b:71:d9:14:09:df:c2: 03:7a:c6:1e:f5:28:54:94:54:fe:f3:85:0d:50:d5: f9:a9:46:61:9e:af:0f:3f:09:7b:ee:a5:22:e4:c7: 72:5e:6f:22:76:12:be:ef:5d:31:16:2d:92:91:30: 8d:75:32:da:e8:d6:dd:f9:24:bf:32:66:ae:f6:61: 6f:58:24:68:f9:37:48:93:02:ce:0d:94:a8:59:8d: 8b:e5:88:9d:f8:78:56:88:45:30:93:3d:6e:ea:3c: cd:ac:3e:db:e0:fb:e9:29:5f:6d:e9:d1:fb:99:6f: 8e:40:2b:70:83:de:42:13:70:7b:69:7c:1d:26:80: db:66:22:e8:1d:64:bf:aa:f1:90:d3:16:03:d5:ac: d9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:2A:89:07:0A:9F:F0:9F:19:AF:59:B0:4E:8E:9F:FD:64:DB:B2:BD X509v3 Authority Key Identifier: keyid:4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:90:18:4d:20:ae:a1:58:b2:fb:cb:86:8a:75:66:87:37:82: ec:1e:80:13:ec:d4:bf:de:a7:9f:94:4a:23:ae:03:c0:91:16: 44:59:0d:4e:60:37:5b:06:ca:1a:6e:74:01:e5:a4:25:d4:c9: 43:c1:be:af:2a:4d:75:cd:29:8f:af:04:f5:42:cc:45:63:33: 48:be:9e:dd:47:a4:9e:61:e9:1e:c1:8c:94:a4:68:56:e6:01: 92:8b:42:43:06:d3:03:b6:3e:95:15:c2:21:22:80:91:db:f1: 90:1c:a6:9d:ec:e5:67:d1:9e:0d:2b:55:4f:ac:98:f2:b2:44: bd:c4:ff:b5:a0:cf:3e:53:2f:b9:f2:16:62:1b:bb:ac:ba:eb: c6:92:44:52:13:39:6f:87:7a:6b:ec:44:12:50:b7:a6:2e:db: 48:06:22:27:8b:4c:8c:47:7d:49:4f:90:8f:36:de:53:20:68: ac:41:e4:d1:47:28:b7:48:c0:05:8d:3f:3d:1f:bc:9c:57:82: db:b8:98:cc:40:11:c0:ea:95:43:34:e7:7c:da:ee:84:5d:a7: 49:3d:d9:49:9c:0a:e8:6f:89:1d:7f:58:5f:59:7c:cf:e6:48: 01:69:39:1a:51:ca:39:ae:6b:7b:e2:51:c4:2f:2b:52:7e:76: c9:ee:41:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE2NKDdtw7/pHoYSOE3YuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjM2U5ZGEzYmY1OTM4MDJjYzgzM2ZlNWQ5NDdhNTI2OTZm NThjOGQwHhcNMjUxMjEyMDEwMTA0WhcNMjUxMjEzMDEwMTA0WjAzMTEwLwYDVQQD EyhlYjJhODkwNzBhOWZmMDlmMTlhZjU5YjA0ZThlOWZmZDY0ZGJiMmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6/MXQH6z18YcjjwOXJWfKtFSnkl FKTETR9V0hnC111BD++kHMgWb8726jfHRLDZhyXQoo+64BIjxSTml5VPz601QWgi k0ZHcSdAubaiLSnMljdLcp4wA2tifJJzAP/wJR9VZZ27P5S64GIpH8wJN4tx2RQJ 38IDesYe9ShUlFT+84UNUNX5qUZhnq8PPwl77qUi5MdyXm8idhK+710xFi2SkTCN dTLa6Nbd+SS/Mmau9mFvWCRo+TdIkwLODZSoWY2L5Yid+HhWiEUwkz1u6jzNrD7b 4PvpKV9t6dH7mW+OQCtwg95CE3B7aXwdJoDbZiLoHWS/qvGQ0xYD1azZuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsqiQcKn/CfGa9ZsE6On/1k27K9MB8GA1UdIwQY MBaAFEw+naO/WTgCzIM/5dlHpSaW9YyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEQ2ZG83OVpPQUxNZ3pfbDJVZWxKcGIxakkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iOWE4MzAtNjk5Mi00OWM2LTg5NzMt ZWFjYjQ5NjVmZTM4LzEvVEQ2ZG83OVpPQUxNZ3pfbDJVZWxKcGIxakkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9iOWE4MzAtNjk5Mi00OWM2LTg5NzMtZWFjYjQ5NjVmZTM4 LzEvVEQ2ZG83OVpPQUxNZ3pfbDJVZWxKcGIxakkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZAYTSCu oViy+8uGinVmhzeC7B6AE+zUv96nn5RKI64DwJEWRFkNTmA3WwbKGm50AeWkJdTJ Q8G+rypNdc0pj68E9ULMRWMzSL6e3UeknmHpHsGMlKRoVuYBkotCQwbTA7Y+lRXC ISKAkdvxkBymnezlZ9GeDStVT6yY8rJEvcT/taDPPlMvufIWYhu7rLrrxpJEUhM5 b4d6a+xEElC3pi7bSAYiJ4tMjEd9SU+QjzbeUyBorEHk0Ucot0jABY0/PR+8nFeC 27iYzEARwOqVQzTnfNruhF2nST3ZSZwK6G+JHX9YX1l8z+ZIAWk5GlHKOa5re+JR xC8rUn52ye5BKg== -----END CERTIFICATE-----Generated at Fri Dec 12 08:00:33 2025 by rpki-client