This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft File: TdA6WGuXinCqqC4JWKkBUucmedk.mft (raw, json) Hash identifier: OE/Fo7xwD9pgQP1gX1IFf878eB+ERU6YHb9VHwHGKcY= Subject key identifier: 6A:17:FB:D0:BB:13:92:2B:16:7B:6F:15:EE:4B:AA:39:74:66:AD:F8 Authority key identifier: 4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9 Certificate issuer: /CN=4dd03a586b978a70aaa82e0958a90152e72679d9 Certificate serial: 019AF12DF99C73FE37E411B62005CF4AC20D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft Manifest number: 09C1 Signing time: Sat 06 Dec 2025 01:01:53 +0000 Manifest this update: Sat 06 Dec 2025 01:01:53 +0000 Manifest next update: Sun 07 Dec 2025 01:01:53 +0000 Files and hashes: 1: TdA6WGuXinCqqC4JWKkBUucmedk.crl (hash: oqeJr1LZ73ys5cozfsuTPDIAHKpsATR9feg0J/PDm+M=) 2: bMiFWbEVmjXACwoqhdLryOI7ecM.roa (hash: y4qa2SV/D4+dXjdntmc66BpYAvlL021xKDW12tsJ7Ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:f9:9c:73:fe:37:e4:11:b6:20:05:cf:4a:c2:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd03a586b978a70aaa82e0958a90152e72679d9 Validity Not Before: Dec 6 01:01:53 2025 GMT Not After : Dec 7 01:01:53 2025 GMT Subject: CN=6a17fbd0bb13922b167b6f15ee4baa397466adf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:16:3b:f3:78:a0:f9:a4:1a:49:a7:f1:12:83: ee:e0:06:2c:07:b1:d0:2f:16:a2:8c:dc:0c:f8:3d: c6:20:ad:2a:88:c6:ad:7c:84:ae:1d:6d:90:f4:ef: 56:2a:d6:66:99:59:ff:23:93:ff:f0:50:a8:58:3e: eb:94:14:78:a6:c3:e4:db:30:25:72:85:ac:1a:22: 3c:df:87:9e:9d:84:8e:de:4c:a3:4b:12:32:5d:6e: ec:b0:fb:e3:fe:8c:00:98:ac:38:f4:ec:9a:41:c9: d2:27:78:71:2e:78:79:f6:2f:73:98:f6:15:b0:30: 40:5e:3d:84:50:d4:ca:d3:7f:bb:b7:c3:3d:23:d3: 63:e2:df:88:c8:eb:26:62:80:c3:5c:85:1b:6a:a1: 04:69:fb:1c:ad:c2:e8:63:cc:97:67:f7:1f:a1:a9: 87:7b:79:26:f0:fe:bd:7d:4d:d6:12:73:1b:e6:4b: fc:83:db:01:d9:42:de:0d:aa:71:6b:30:c9:9f:d4: ed:31:bf:42:bb:3e:6f:73:03:4b:37:18:9c:4f:e3: 0c:90:9d:49:06:d3:57:6d:71:18:e2:b2:a7:96:48: 07:78:29:96:2e:0a:4f:90:39:e2:2f:4f:b1:01:4b: d5:1e:c2:7e:35:02:ac:26:81:7a:b1:72:ed:26:a8: 15:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:17:FB:D0:BB:13:92:2B:16:7B:6F:15:EE:4B:AA:39:74:66:AD:F8 X509v3 Authority Key Identifier: keyid:4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:e4:1c:73:a6:95:08:22:97:0f:3d:54:5b:1e:94:d5:cc:a4: e3:91:92:61:d5:dd:2c:ea:28:b1:c6:79:f9:02:37:3d:52:3a: 0a:cf:13:ea:2b:42:50:1f:d5:15:7e:2d:fe:28:61:d7:46:ac: eb:30:dd:1a:1a:71:19:3f:b8:9e:e5:f5:f0:4d:56:3a:36:5a: 0c:64:f8:88:a6:91:4e:01:50:ce:28:68:25:5e:41:ca:4e:a8: d2:56:6b:a7:62:e2:a4:b4:1a:97:c8:5a:96:ba:80:a8:27:4f: cb:3b:da:e8:9f:b0:c1:2e:a7:e0:a9:ed:4c:15:2e:a7:69:c5: 16:b5:c0:fb:03:39:9d:c3:18:42:7f:60:ff:15:4b:05:3e:bf: 59:1a:fc:10:37:d3:24:5b:f8:d2:60:fe:44:f1:62:fc:04:ce: 0c:1d:7a:20:dc:f4:d4:6b:09:4f:3d:fa:b0:b8:06:df:e7:79: b5:7a:fe:09:46:67:4a:c5:8b:c2:35:73:26:b2:12:2c:61:8b: e1:cf:1f:c9:1b:8f:d5:96:23:52:34:01:74:de:65:b9:f5:9c: ca:37:1f:3c:1a:3a:db:08:e7:a9:ae:58:d2:21:35:f4:13:6c: 5e:54:ff:1e:12:8a:a5:fb:64:9e:2c:95:03:d2:55:18:3e:9d: f4:f6:10:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfmcc/435BG2IAXPSsINMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDAzYTU4NmI5NzhhNzBhYWE4MmUwOTU4YTkwMTUyZTcy Njc5ZDkwHhcNMjUxMjA2MDEwMTUzWhcNMjUxMjA3MDEwMTUzWjAzMTEwLwYDVQQD Eyg2YTE3ZmJkMGJiMTM5MjJiMTY3YjZmMTVlZTRiYWEzOTc0NjZhZGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBY783ig+aQaSafxEoPu4AYsB7HQ LxaijNwM+D3GIK0qiMatfISuHW2Q9O9WKtZmmVn/I5P/8FCoWD7rlBR4psPk2zAl coWsGiI834eenYSO3kyjSxIyXW7ssPvj/owAmKw49OyaQcnSJ3hxLnh59i9zmPYV sDBAXj2EUNTK03+7t8M9I9Nj4t+IyOsmYoDDXIUbaqEEafscrcLoY8yXZ/cfoamH e3km8P69fU3WEnMb5kv8g9sB2ULeDapxazDJn9TtMb9Cuz5vcwNLNxicT+MMkJ1J BtNXbXEY4rKnlkgHeCmWLgpPkDniL0+xAUvVHsJ+NQKsJoF6sXLtJqgVqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGoX+9C7E5IrFntvFe5Lqjl0Zq34MB8GA1UdIwQY MBaAFE3QOlhrl4pwqqguCVipAVLnJnnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRBNldHdVhpbkNxcUM0SldLa0JVdWNtZWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jOWQ1MjMtMGJiOS00NTczLTk1OTUt NzZhM2ExMGEyNmYyLzEvVGRBNldHdVhpbkNxcUM0SldLa0JVdWNtZWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9jOWQ1MjMtMGJiOS00NTczLTk1OTUtNzZhM2ExMGEyNmYy LzEvVGRBNldHdVhpbkNxcUM0SldLa0JVdWNtZWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxeQcc6aV CCKXDz1UWx6U1cyk45GSYdXdLOooscZ5+QI3PVI6Cs8T6itCUB/VFX4t/ihh10as 6zDdGhpxGT+4nuX18E1WOjZaDGT4iKaRTgFQzihoJV5Byk6o0lZrp2LipLQal8ha lrqAqCdPyzva6J+wwS6n4KntTBUup2nFFrXA+wM5ncMYQn9g/xVLBT6/WRr8EDfT JFv40mD+RPFi/ATODB16INz01GsJTz36sLgG3+d5tXr+CUZnSsWLwjVzJrISLGGL 4c8fyRuP1ZYjUjQBdN5lufWcyjcfPBo62wjnqa5Y0iE19BNsXlT/HhKKpftkniyV A9JVGD6d9PYQBA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:05:50 2025 by rpki-client