This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json) Hash identifier: bifDuyLPNe+v4Km7UqWuxL89qhHNFq7r4bZTVRZuo8Y= Subject key identifier: 47:11:19:DF:35:59:7E:62:B1:37:FF:D3:C3:F9:18:DC:E7:8A:A2:C6 Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9 Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9 Certificate serial: 019AF19B4BBE545B6E1809C3B43EA880AC88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft Manifest number: 0BCD Signing time: Sat 06 Dec 2025 03:01:17 +0000 Manifest this update: Sat 06 Dec 2025 03:01:17 +0000 Manifest next update: Sun 07 Dec 2025 03:01:17 +0000 Files and hashes: 1: BGPcLkk4F9FLxsMbGn-M_F2CXto.roa (hash: PqbiTHE+O2cRLL+2/Q85oltHntGJN/X4GOAuPJ95eug=) 2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: UlCV7vuuMqdqhP2GTU1B7hUxsUdPGgzc+b4FV3yEZVE=) 3: nGObtVTwcFKea1knaujpvqhbims.roa (hash: l9jwJiOaQQcxbUJC1OWeTnOmsW+JZFElguXsrGzJSD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:4b:be:54:5b:6e:18:09:c3:b4:3e:a8:80:ac:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9 Validity Not Before: Dec 6 03:01:17 2025 GMT Not After : Dec 7 03:01:17 2025 GMT Subject: CN=471119df35597e62b137ffd3c3f918dce78aa2c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f9:08:ab:12:2a:7b:e3:68:a4:64:c8:bb:f2: 5a:e7:27:eb:a6:15:4a:9b:51:30:9b:bc:91:10:c8: e2:30:30:dc:04:9e:aa:5b:00:d7:72:3d:59:0a:23: ff:3e:0c:1a:a8:41:01:c4:83:61:9c:3f:7b:84:9f: 2c:88:b9:6b:ed:f1:d0:a5:cf:52:b6:30:4d:9d:a4: 37:9e:b5:7d:66:97:f9:85:a8:6b:28:04:34:e8:9e: 00:e2:11:d7:d0:83:34:e7:81:60:7b:2c:c2:59:45: 86:6b:92:42:f9:73:11:0b:6e:8a:92:00:99:82:41: 64:97:0c:06:34:e7:5e:4c:b7:e0:56:54:09:c8:96: 1b:b7:ab:56:03:b8:05:19:6d:08:ff:c1:00:6b:8d: d0:51:7f:df:84:b1:b4:74:4c:51:41:de:90:01:46: ea:6d:1c:a8:d8:53:c8:9c:03:a5:74:69:99:53:74: 31:4e:66:97:55:85:20:24:0d:bb:23:90:da:52:b4: 14:b4:4e:fc:66:29:24:cc:13:d5:d9:74:c0:61:67: 73:36:1d:29:b8:02:3a:27:43:f0:4d:7a:5c:d1:e4: 7f:dd:96:b0:52:7f:7b:02:90:1b:90:81:b9:5a:de: 79:18:83:f3:b4:cf:67:cf:75:85:4a:cb:b4:00:ba: 0a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:11:19:DF:35:59:7E:62:B1:37:FF:D3:C3:F9:18:DC:E7:8A:A2:C6 X509v3 Authority Key Identifier: keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:f7:ec:b1:1c:a9:d5:9c:68:76:c1:81:6c:dc:02:80:97:14: 35:15:0c:60:1e:47:04:df:cb:93:0c:e7:08:64:39:17:02:30: b1:63:87:c3:ba:57:ac:8d:ee:8d:58:49:25:e5:c3:4a:4d:b0: b7:71:fd:75:80:37:17:dd:85:b4:52:6e:d3:e4:f3:9e:2c:60: fd:84:6a:dc:ae:5f:de:9e:8e:06:c4:e0:1c:d4:b4:ee:d9:7d: 12:1c:04:cc:e7:77:2c:9f:ae:d0:99:83:c1:43:17:2c:97:22: 4a:37:42:99:6a:bd:8d:b5:ca:db:94:d1:ca:56:a3:26:d6:0b: 30:f4:7d:46:f7:b3:b3:dd:57:51:0e:b1:fe:81:7e:f4:ff:86: d3:5a:15:a2:04:01:bb:9e:e6:bb:e7:23:38:b4:62:ee:db:75: 56:8d:c6:f8:ea:b1:0f:4a:cb:9f:13:3a:ee:99:4e:11:61:93: 00:a1:35:15:fd:1f:8f:84:4d:b3:ff:13:29:24:70:3d:09:c9: b6:d2:53:83:8a:da:f7:a7:c2:a1:9d:46:4b:6d:60:f7:72:bb: ad:a4:01:4c:62:93:b1:e7:2b:10:e4:e4:71:cf:98:e0:fe:a1: 98:27:78:4f:74:0b:1a:61:8e:b0:d5:57:16:c0:c8:78:6b:d8: f0:cf:ce:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0u+VFtuGAnDtD6ogKyIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzlmOGI4ZmViYWI2ZDIwOWEyNDk4MWUzOTlmZDYwNDMy ZTFjYzkwHhcNMjUxMjA2MDMwMTE3WhcNMjUxMjA3MDMwMTE3WjAzMTEwLwYDVQQD Eyg0NzExMTlkZjM1NTk3ZTYyYjEzN2ZmZDNjM2Y5MThkY2U3OGFhMmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufkIqxIqe+NopGTIu/Ja5yfrphVK m1Ewm7yREMjiMDDcBJ6qWwDXcj1ZCiP/PgwaqEEBxINhnD97hJ8siLlr7fHQpc9S tjBNnaQ3nrV9Zpf5hahrKAQ06J4A4hHX0IM054FgeyzCWUWGa5JC+XMRC26KkgCZ gkFklwwGNOdeTLfgVlQJyJYbt6tWA7gFGW0I/8EAa43QUX/fhLG0dExRQd6QAUbq bRyo2FPInAOldGmZU3QxTmaXVYUgJA27I5DaUrQUtE78ZikkzBPV2XTAYWdzNh0p uAI6J0PwTXpc0eR/3ZawUn97ApAbkIG5Wt55GIPztM9nz3WFSsu0ALoK9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEcRGd81WX5isTf/08P5GNzniqLGMB8GA1UdIwQY MBaAFEw5+Lj+urbSCaJJgeOZ/WBDLhzJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84NGJiZTMtNGM2MS00MDMzLWI5YWYt OTMyMGZlMTNlNWZlLzEvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi84NGJiZTMtNGM2MS00MDMzLWI5YWYtOTMyMGZlMTNlNWZl LzEvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhffssRyp 1ZxodsGBbNwCgJcUNRUMYB5HBN/LkwznCGQ5FwIwsWOHw7pXrI3ujVhJJeXDSk2w t3H9dYA3F92FtFJu0+Tznixg/YRq3K5f3p6OBsTgHNS07tl9EhwEzOd3LJ+u0JmD wUMXLJciSjdCmWq9jbXK25TRylajJtYLMPR9Rvezs91XUQ6x/oF+9P+G01oVogQB u57mu+cjOLRi7tt1Vo3G+OqxD0rLnxM67plOEWGTAKE1Ff0fj4RNs/8TKSRwPQnJ ttJTg4ra96fCoZ1GS21g93K7raQBTGKTsecrEOTkcc+Y4P6hmCd4T3QLGmGOsNVX FsDIeGvY8M/OSg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:05:53 2025 by rpki-client