This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft File: TdL8TSP9nCQgxASRhxgI7FQkpnA.mft (raw, json) Hash identifier: mKoIfPM8G1ZBkKie1wmH9v5yJABXtHzAaJST3oAGOBo= Subject key identifier: 79:FA:05:06:B5:93:5F:04:61:E2:AA:AC:54:4A:A0:3B:0B:80:67:BE Authority key identifier: 4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70 Certificate issuer: /CN=4dd2fc4d23fd9c2420c40491871808ec5424a670 Certificate serial: 019B5A5153E672B7771024C4925065CACC01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft Manifest number: 179B Signing time: Fri 26 Dec 2025 11:00:37 +0000 Manifest this update: Fri 26 Dec 2025 11:00:37 +0000 Manifest next update: Sat 27 Dec 2025 11:00:37 +0000 Files and hashes: 1: 6PYHTPLOKPA_a6iVYvGQByWG7yU.roa (hash: w5WzWtoII8U9oezorMTaJGrRrTvsQaItUP16lTCSY7s=) 2: TdL8TSP9nCQgxASRhxgI7FQkpnA.crl (hash: VyNxFFOlzqhjXE2oH0kTeDVB2uC3DVH/XJiWvwv4uRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:53:e6:72:b7:77:10:24:c4:92:50:65:ca:cc:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd2fc4d23fd9c2420c40491871808ec5424a670 Validity Not Before: Dec 26 11:00:37 2025 GMT Not After : Dec 27 11:00:37 2025 GMT Subject: CN=79fa0506b5935f0461e2aaac544aa03b0b8067be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3c:71:c8:42:54:ca:6b:9e:34:00:99:5f:30: 0d:da:b8:42:cc:a5:e6:06:5c:7a:84:34:c0:2c:f8: a1:3d:13:7e:7f:9a:0e:af:20:f8:99:0a:eb:80:51: 15:44:08:97:74:24:6d:33:2c:0a:2e:65:d4:08:dc: 2d:9c:5b:63:88:4f:28:fd:a8:33:3b:f7:ff:2f:53: de:3a:c0:a7:5e:17:19:ae:c4:a3:c7:2e:a3:d7:e7: 08:a6:97:14:44:0a:1d:0a:1f:49:09:f0:3a:89:00: 69:f1:32:c6:de:3c:b2:ae:7e:6f:b5:56:11:59:d7: f1:86:ee:8d:9e:a0:15:52:d2:e4:a8:e7:2c:0f:23: 9f:3a:10:f5:34:54:d6:de:ca:b5:d8:70:2b:c2:f6: 99:eb:a1:a4:56:c5:a4:a1:e3:5b:f3:c9:84:c1:5d: c9:10:02:6a:69:7e:4e:12:79:9b:88:7b:41:d3:57: a5:ae:f4:66:86:da:55:bf:83:5f:33:d3:00:c1:1c: 3d:4c:91:26:74:9c:af:99:bf:82:aa:e5:c0:3d:b1: 83:74:5a:76:6c:2c:c9:c9:52:5c:2b:d7:08:e5:7d: 5f:a2:5d:41:b5:a5:57:54:01:a5:e3:05:97:f2:b9: 1f:4e:8c:4f:10:e3:57:81:96:90:13:07:c4:cb:f0: e2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:FA:05:06:B5:93:5F:04:61:E2:AA:AC:54:4A:A0:3B:0B:80:67:BE X509v3 Authority Key Identifier: keyid:4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:52:b5:72:96:d1:1a:5d:fa:a4:84:b8:e8:64:ca:2d:c0:1c: 17:25:c2:35:ea:da:83:dd:4c:0c:e4:d5:a7:ad:1a:de:89:62: 99:3c:36:7b:a3:e8:46:9a:98:a7:73:5e:90:6e:5d:4b:ab:cc: 8b:4a:25:af:19:45:be:49:4c:bc:a8:0e:35:96:89:b1:f5:37: dd:ee:81:85:2b:7b:e4:45:2d:02:28:f7:fd:48:e8:15:5b:c1: 8c:4c:d9:71:92:8b:71:1a:4f:de:d6:21:71:e9:a8:03:c1:68: 35:1a:51:86:63:28:32:14:10:65:81:ec:cf:c1:93:f4:a3:6d: 18:67:91:bd:c7:6c:05:30:49:a5:fe:f0:9a:f5:61:0d:1b:1a: 9d:fc:62:6f:d3:49:22:ec:aa:76:38:3e:ba:18:82:6a:02:49: c6:ae:3f:b9:60:d8:a5:4a:01:53:90:21:3c:a3:83:81:21:cd: fb:9e:44:2e:21:22:3c:52:3a:71:db:b7:fa:bd:43:f4:d1:15: a7:a2:c8:38:a0:a2:e9:67:bc:8a:aa:d9:aa:13:07:69:ee:8c: aa:31:77:6d:88:77:a0:43:c1:74:b5:b4:9e:19:4f:2c:93:87: c7:a1:4b:f8:39:10:93:02:23:97:86:a8:b9:21:70:89:0a:05: 78:5e:20:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUVPmcrd3ECTEklBlyswBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDJmYzRkMjNmZDljMjQyMGM0MDQ5MTg3MTgwOGVjNTQy NGE2NzAwHhcNMjUxMjI2MTEwMDM3WhcNMjUxMjI3MTEwMDM3WjAzMTEwLwYDVQQD Eyg3OWZhMDUwNmI1OTM1ZjA0NjFlMmFhYWM1NDRhYTAzYjBiODA2N2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTxxyEJUymueNACZXzAN2rhCzKXm Blx6hDTALPihPRN+f5oOryD4mQrrgFEVRAiXdCRtMywKLmXUCNwtnFtjiE8o/agz O/f/L1PeOsCnXhcZrsSjxy6j1+cIppcURAodCh9JCfA6iQBp8TLG3jyyrn5vtVYR Wdfxhu6NnqAVUtLkqOcsDyOfOhD1NFTW3sq12HArwvaZ66GkVsWkoeNb88mEwV3J EAJqaX5OEnmbiHtB01elrvRmhtpVv4NfM9MAwRw9TJEmdJyvmb+CquXAPbGDdFp2 bCzJyVJcK9cI5X1fol1BtaVXVAGl4wWX8rkfToxPEONXgZaQEwfEy/DiiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHn6BQa1k18EYeKqrFRKoDsLgGe+MB8GA1UdIwQY MBaAFE3S/E0j/ZwkIMQEkYcYCOxUJKZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRMOFRTUDluQ1FneEFTUmh4Z0k3RlFrcG5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zZThlNDItZGZmYi00MzVkLWJkMmIt ZWI4YjFlY2M0NzQxLzEvVGRMOFRTUDluQ1FneEFTUmh4Z0k3RlFrcG5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8zZThlNDItZGZmYi00MzVkLWJkMmItZWI4YjFlY2M0NzQx LzEvVGRMOFRTUDluQ1FneEFTUmh4Z0k3RlFrcG5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn1K1cpbR Gl36pIS46GTKLcAcFyXCNerag91MDOTVp60a3olimTw2e6PoRpqYp3NekG5dS6vM i0olrxlFvklMvKgONZaJsfU33e6BhSt75EUtAij3/UjoFVvBjEzZcZKLcRpP3tYh cemoA8FoNRpRhmMoMhQQZYHsz8GT9KNtGGeRvcdsBTBJpf7wmvVhDRsanfxib9NJ Iuyqdjg+uhiCagJJxq4/uWDYpUoBU5AhPKODgSHN+55ELiEiPFI6cdu3+r1D9NEV p6LIOKCi6We8iqrZqhMHae6MqjF3bYh3oEPBdLW0nhlPLJOHx6FL+DkQkwIjl4ao uSFwiQoFeF4gFg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:06 2025 by rpki-client