This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft File: Tddxzuh-yov3sS4KYwbxgdKlWm0.mft (raw, json) Hash identifier: dtMgAfKi94rhhZegqHpmbKktButfW2Tw0ahpZOVDoak= Subject key identifier: 32:2C:72:15:99:56:2C:9C:DB:55:D5:AD:CD:D3:66:99:01:71:C5:63 Authority key identifier: 4D:D7:71:CE:E8:7E:CA:8B:F7:B1:2E:0A:63:06:F1:81:D2:A5:5A:6D Certificate issuer: /CN=4dd771cee87eca8bf7b12e0a6306f181d2a55a6d Certificate serial: 019AF23F943D0809FBE7F46D8F7BF926F466 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tddxzuh-yov3sS4KYwbxgdKlWm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft Manifest number: 0328 Signing time: Sat 06 Dec 2025 06:00:44 +0000 Manifest this update: Sat 06 Dec 2025 06:00:44 +0000 Manifest next update: Sun 07 Dec 2025 06:00:44 +0000 Files and hashes: 1: Tddxzuh-yov3sS4KYwbxgdKlWm0.crl (hash: 4ZRouGPFLwlhtPLMB6twgkaevlyCOrz9B5f7LlekwQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.crl rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft rsync://rpki.ripe.net/repository/DEFAULT/Tddxzuh-yov3sS4KYwbxgdKlWm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:94:3d:08:09:fb:e7:f4:6d:8f:7b:f9:26:f4:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd771cee87eca8bf7b12e0a6306f181d2a55a6d Validity Not Before: Dec 6 06:00:44 2025 GMT Not After : Dec 7 06:00:44 2025 GMT Subject: CN=322c721599562c9cdb55d5adcdd366990171c563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ae:e9:c9:ce:55:59:ec:d2:d0:a6:22:a1:db: a9:09:c2:54:14:9f:38:3a:18:e4:3c:a9:f9:a0:8c: c2:43:c3:0e:62:7d:1f:f6:5c:6a:8c:06:76:d0:4d: 6f:da:aa:3d:bd:9a:19:df:08:60:7b:6c:88:fc:7f: 90:02:f2:00:c2:ef:c6:fb:84:b6:6e:a9:37:5c:f4: 8c:b2:e5:6a:0c:fb:55:05:61:f7:4a:95:0d:5b:96: ca:7d:7e:4e:f9:57:a7:a8:54:4a:0a:7f:88:f3:fe: b2:25:2a:57:c8:41:5a:7d:13:e5:94:20:5b:c7:ed: f3:cf:b4:1b:99:68:4d:f3:b3:3b:a9:33:2c:e9:8c: 27:ba:0f:e3:4e:c4:7c:51:e2:91:f4:53:a8:0b:2c: 54:16:92:62:49:97:88:12:ca:60:f4:3e:08:5a:7c: 69:95:7f:cd:38:1a:4f:99:6b:a1:91:ef:5f:25:48: 15:0e:74:c4:87:9e:1f:eb:95:cf:fe:fc:a7:06:78: dc:6c:04:7d:5c:04:be:b1:bd:43:be:cb:ba:5a:eb: d4:48:32:9f:b9:6f:ab:e4:93:92:d3:1e:3d:7b:4e: 34:56:c9:eb:0f:0f:17:19:ef:64:63:91:5e:f7:39: 34:32:cd:1f:d6:56:2f:d0:fe:fd:00:cd:7c:04:ff: a8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2C:72:15:99:56:2C:9C:DB:55:D5:AD:CD:D3:66:99:01:71:C5:63 X509v3 Authority Key Identifier: keyid:4D:D7:71:CE:E8:7E:CA:8B:F7:B1:2E:0A:63:06:F1:81:D2:A5:5A:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tddxzuh-yov3sS4KYwbxgdKlWm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:03:36:7d:d4:6f:59:c3:db:f7:81:98:45:48:ad:da:73:50: 4b:4f:0c:27:f0:f9:c3:fc:96:ca:46:74:ba:44:1b:39:55:81: 0e:e2:41:b5:00:0b:63:c9:e6:62:70:9a:70:8c:ac:e0:d6:6a: 72:2f:fb:88:98:35:10:ad:50:9a:29:54:3a:e1:40:82:fd:5f: 47:26:15:6f:75:36:b6:6a:9b:c1:4d:93:59:8c:e1:7c:7d:39: 71:87:3d:cd:9c:cd:71:e1:42:77:36:ee:9e:de:25:5e:2e:84: 6d:31:6f:21:0f:11:b6:2e:d9:d1:d1:72:ff:01:aa:b6:38:a4: 7e:ab:22:b2:af:85:60:4b:a8:ff:f7:85:8f:51:83:54:e1:1a: 1a:d9:34:2c:de:3d:65:5c:16:11:e6:89:5c:34:3b:f3:b9:9a: 26:94:23:42:5c:9c:2e:f3:20:ae:d3:e1:70:a8:a2:53:aa:12: c8:f4:4e:a0:ac:38:b5:bc:33:a6:f7:1c:14:e5:21:cb:5a:0b: f2:22:fc:fa:03:87:84:2e:21:6c:81:cf:a0:d0:6f:1b:31:b7: 97:2b:5c:57:04:bb:52:c9:4f:bf:61:d5:ac:89:cd:43:ab:7a: 00:79:9e:46:0d:c2:8b:58:84:86:7d:0a:5a:da:a2:55:1b:04: 71:5a:3c:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5Q9CAn75/Rtj3v5JvRmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDc3MWNlZTg3ZWNhOGJmN2IxMmUwYTYzMDZmMTgxZDJh NTVhNmQwHhcNMjUxMjA2MDYwMDQ0WhcNMjUxMjA3MDYwMDQ0WjAzMTEwLwYDVQQD EygzMjJjNzIxNTk5NTYyYzljZGI1NWQ1YWRjZGQzNjY5OTAxNzFjNTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi67pyc5VWezS0KYiodupCcJUFJ84 OhjkPKn5oIzCQ8MOYn0f9lxqjAZ20E1v2qo9vZoZ3whge2yI/H+QAvIAwu/G+4S2 bqk3XPSMsuVqDPtVBWH3SpUNW5bKfX5O+VenqFRKCn+I8/6yJSpXyEFafRPllCBb x+3zz7QbmWhN87M7qTMs6Ywnug/jTsR8UeKR9FOoCyxUFpJiSZeIEspg9D4IWnxp lX/NOBpPmWuhke9fJUgVDnTEh54f65XP/vynBnjcbAR9XAS+sb1Dvsu6WuvUSDKf uW+r5JOS0x49e040VsnrDw8XGe9kY5Fe9zk0Ms0f1lYv0P79AM18BP+o3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIschWZViyc21XVrc3TZpkBccVjMB8GA1UdIwQY MBaAFE3Xcc7ofsqL97EuCmMG8YHSpVptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRkeHp1aC15b3Yzc1M0S1l3YnhnZEtsV20wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mMjFiZjAtYmE0OS00M2JhLTg5OGMt NTM5ZjljYmEwMGM1LzEvVGRkeHp1aC15b3Yzc1M0S1l3YnhnZEtsV20wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mMjFiZjAtYmE0OS00M2JhLTg5OGMtNTM5ZjljYmEwMGM1 LzEvVGRkeHp1aC15b3Yzc1M0S1l3YnhnZEtsV20wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASAM2fdRv WcPb94GYRUit2nNQS08MJ/D5w/yWykZ0ukQbOVWBDuJBtQALY8nmYnCacIys4NZq ci/7iJg1EK1QmilUOuFAgv1fRyYVb3U2tmqbwU2TWYzhfH05cYc9zZzNceFCdzbu nt4lXi6EbTFvIQ8Rti7Z0dFy/wGqtjikfqsisq+FYEuo//eFj1GDVOEaGtk0LN49 ZVwWEeaJXDQ787maJpQjQlycLvMgrtPhcKiiU6oSyPROoKw4tbwzpvccFOUhy1oL 8iL8+gOHhC4hbIHPoNBvGzG3lytcVwS7UslPv2HVrInNQ6t6AHmeRg3Ci1iEhn0K WtqiVRsEcVo87w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:42:14 2025 by rpki-client