This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json) Hash identifier: uiLB01zDA06dLm1cSGAdnl4+KXBHpeYQQkLgLZtgvGs= Subject key identifier: 0A:02:F7:BF:97:51:74:2A:E3:49:0D:F0:95:FB:78:51:30:24:1F:6B Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18 Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318 Certificate serial: 019AF12D705EA858F7D2FCA130E640BFD61F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 01:01:18 +0000 Manifest this update: Sat 06 Dec 2025 01:01:18 +0000 Manifest next update: Sun 07 Dec 2025 01:01:18 +0000 Files and hashes: 1: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: 9HmqvdS+Yzx0Z4snqGHsGOQdSZEH6ogyhhL4SkqIwoE=) 2: gjoyy0FPdmf2zrdNnLaoUXfqkA8.roa (hash: RTgHJsDHudCpwL05o4vGq9BVppolqh2KaIXjwJZDWfA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:70:5e:a8:58:f7:d2:fc:a1:30:e6:40:bf:d6:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318 Validity Not Before: Dec 6 01:01:18 2025 GMT Not After : Dec 7 01:01:18 2025 GMT Subject: CN=0a02f7bf9751742ae3490df095fb785130241f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9d:0a:d4:80:d2:41:1d:c9:7d:03:a9:28:62: 00:5c:d5:3e:2d:aa:15:2a:30:ba:c6:e0:77:a1:2e: 6c:3d:d4:05:14:99:ab:41:b0:3a:12:68:e7:14:bd: d9:c6:61:93:58:f8:a1:a0:1a:96:d4:1f:f8:4e:42: ff:7f:9e:ee:97:7c:82:00:b4:eb:eb:9d:6f:3f:d6: 3f:54:2a:72:f6:64:9b:7a:53:88:cd:d3:07:72:f3: 55:ca:28:79:33:30:5c:dc:04:53:12:8b:5e:b8:1b: 3c:18:b1:26:e2:f8:21:a9:bd:e2:34:f3:e9:de:b9: 95:39:3d:ad:a4:97:4a:fa:79:7c:5f:05:27:38:7b: ec:52:b7:76:56:dc:92:78:c3:6f:ab:ad:e0:37:5c: 52:8c:30:3f:5d:9b:a8:d0:8b:fd:8f:ab:1a:e4:f9: 03:86:a5:84:de:08:12:0a:40:1e:16:d1:17:01:48: 78:eb:43:3e:9d:9c:3d:1e:a7:92:7f:ef:a0:b2:18: 3d:7f:a0:35:9a:87:ff:f0:d2:e8:23:a0:63:6a:6a: cc:e0:fb:50:c0:61:56:f7:56:85:b6:d0:c9:a1:fa: 8c:0d:0c:12:98:ec:e7:00:cc:e9:1b:ab:4c:11:38: be:e4:a1:bf:2d:7e:cc:46:ad:a8:8d:89:70:73:24: 3d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:02:F7:BF:97:51:74:2A:E3:49:0D:F0:95:FB:78:51:30:24:1F:6B X509v3 Authority Key Identifier: keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:5f:db:cc:0b:e4:31:d5:00:bc:84:a7:fc:40:14:07:da:ca: d1:6a:1e:49:ad:0d:c3:00:e4:4f:f9:b8:b7:72:51:fa:39:8c: 5e:5a:e1:d7:6e:a7:f9:05:b3:39:ff:4b:95:4c:a8:c4:e5:9a: 51:48:7a:39:2a:a5:df:f2:27:11:e4:35:04:3b:a0:ba:8c:e1: bc:30:58:97:6c:10:57:6c:73:80:ae:4d:d2:3c:98:46:8f:95: 71:f8:60:72:4b:f2:35:0d:1b:d5:84:8d:a0:19:da:07:2a:97: 2b:45:2c:dc:8e:70:41:19:79:6d:c0:2e:f5:a2:4e:73:f4:68: d4:29:79:ed:0c:6d:6c:03:c9:53:85:3a:85:c7:e3:cf:c7:66: 90:da:e0:d9:4b:b7:4f:ed:63:44:a7:05:17:94:ab:33:76:13: f5:51:7d:41:4d:57:4b:87:17:0c:95:4b:f2:39:17:4d:1e:08: 89:80:b6:a6:db:e1:24:cb:a7:67:bd:c0:ff:46:22:47:00:7b: 8f:35:13:1d:16:8f:0b:fc:46:47:0f:df:1f:e0:da:9c:d1:8e: cb:ca:2b:f7:d8:52:0f:a3:2f:bd:d5:ef:25:90:93:40:85:5a: 3b:8f:b0:85:47:59:10:a8:3f:d6:ca:20:9d:1f:99:20:99:fc: 85:54:eb:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLXBeqFj30vyhMOZAv9YfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDZlNzc5YTZjMGYwYjA5MjE2NjIyMzgwNDY3ZGNlMmQx MWEzMTgwHhcNMjUxMjA2MDEwMTE4WhcNMjUxMjA3MDEwMTE4WjAzMTEwLwYDVQQD EygwYTAyZjdiZjk3NTE3NDJhZTM0OTBkZjA5NWZiNzg1MTMwMjQxZjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu50K1IDSQR3JfQOpKGIAXNU+LaoV KjC6xuB3oS5sPdQFFJmrQbA6EmjnFL3ZxmGTWPihoBqW1B/4TkL/f57ul3yCALTr 651vP9Y/VCpy9mSbelOIzdMHcvNVyih5MzBc3ARTEoteuBs8GLEm4vghqb3iNPPp 3rmVOT2tpJdK+nl8XwUnOHvsUrd2VtySeMNvq63gN1xSjDA/XZuo0Iv9j6sa5PkD hqWE3ggSCkAeFtEXAUh460M+nZw9HqeSf++gshg9f6A1mof/8NLoI6BjamrM4PtQ wGFW91aFttDJofqMDQwSmOznAMzpG6tMETi+5KG/LX7MRq2ojYlwcyQ9nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoC97+XUXQq40kN8JX7eFEwJB9rMB8GA1UdIwQY MBaAFE3W53mmwPCwkhZiI4BGfc4tEaMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mMGIyODUtZDAzOC00ZGU2LTkzNzQt YzQ3MmU2MmViZWE4LzEvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9mMGIyODUtZDAzOC00ZGU2LTkzNzQtYzQ3MmU2MmViZWE4 LzEvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEV/bzAvk MdUAvISn/EAUB9rK0WoeSa0NwwDkT/m4t3JR+jmMXlrh126n+QWzOf9LlUyoxOWa UUh6OSql3/InEeQ1BDuguozhvDBYl2wQV2xzgK5N0jyYRo+VcfhgckvyNQ0b1YSN oBnaByqXK0Us3I5wQRl5bcAu9aJOc/Ro1Cl57QxtbAPJU4U6hcfjz8dmkNrg2Uu3 T+1jRKcFF5SrM3YT9VF9QU1XS4cXDJVL8jkXTR4IiYC2ptvhJMunZ73A/0YiRwB7 jzUTHRaPC/xGRw/fH+DanNGOy8or99hSD6MvvdXvJZCTQIVaO4+whUdZEKg/1sog nR+ZIJn8hVTrfw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:09 2025 by rpki-client