This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft File: TDfyfrSZezvvnygmajlpQFD-dPk.mft (raw, json) Hash identifier: S/IOpj4sf2wzggjZMFYkESSs0Zj84WnY2UC07OuhpEk= Subject key identifier: 44:5A:76:4B:76:43:5C:4C:06:0E:61:4D:FC:7F:C0:52:8C:86:1C:73 Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9 Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9 Certificate serial: 019AF163DAF897782502BF19F99CEFD9A4D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft Manifest number: 17C1 Signing time: Sat 06 Dec 2025 02:00:44 +0000 Manifest this update: Sat 06 Dec 2025 02:00:44 +0000 Manifest next update: Sun 07 Dec 2025 02:00:44 +0000 Files and hashes: 1: O9nHfOl2QVEFkw8z5PZAG-bDmQE.roa (hash: CmUudjBRBoLhGNB6o4EaSfh+UkgJVlz+52jeWbtrV5A=) 2: SzyIBUJURbOXMTDJ4Z_haTgvNpI.roa (hash: wJIDwOiFxDwrE3GURrkhai8iWOYh1f3lI6qeGAaNPyc=) 3: TDfyfrSZezvvnygmajlpQFD-dPk.crl (hash: xwxQ9SzotoL99xubmRipavjJcNNefc2qDyiIb+UemEg=) 4: UVW-IEFCCq7ahpPdj9WY7Kn8QqE.roa (hash: MZl++GgZA3uWjf7S8QTsOZZtzVITuzAAAAPegKRXupI=) 5: VIrZrIPn5JgwIWuerakwG37U7jA.roa (hash: +9EBlzR1H7BphSJTPeOlUDa4YDh16MokR5NsBCSFTMs=) 6: dQ4y2x688XsG8rEL7o8Sp4uIl8M.roa (hash: LuvxH8ju8nmShoj6OHN3o8s0V6hBxEddqrv3+BFDAgQ=) 7: gQDaBeXH0szJXrJTEvqe4lIGCV4.roa (hash: fhlImZ1nrh4i7H6LIP2R5ZbAmjbxd5MHcou/l4C25qU=) 8: lPoIPYo1ITlq-R71JXKfxiC_US0.roa (hash: 1ODRbC1wRix1ieOTK6Ku3fYNq0UfGPEvF5Esjd3aqDM=) 9: luug-CwXmvS54qQ88cgMGt-f5zU.roa (hash: HAfj14rHhfvfAv/i1MqUIJYZwmFczeoc01ZA/poLVk8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:da:f8:97:78:25:02:bf:19:f9:9c:ef:d9:a4:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9 Validity Not Before: Dec 6 02:00:44 2025 GMT Not After : Dec 7 02:00:44 2025 GMT Subject: CN=445a764b76435c4c060e614dfc7fc0528c861c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b3:f4:96:fe:9f:d5:d8:a4:cf:e2:01:ec:08: 3f:14:5e:e9:aa:23:00:93:87:fd:8c:8a:72:1e:c4: 47:8d:18:5f:74:f0:58:c8:2c:0d:43:76:60:96:75: 7b:b1:bb:a4:fa:4e:e4:24:28:a8:a7:9e:c7:56:8f: 74:df:1c:39:40:3d:d6:f9:d1:f6:5f:35:26:9b:e1: 2d:9f:e7:da:0d:ee:2a:2e:6f:24:24:01:bb:ba:58: 7d:f7:c9:dc:af:48:f3:f7:b9:90:65:f0:47:2d:eb: f3:77:06:20:49:b6:69:f1:60:c2:06:52:76:93:61: fc:be:b5:78:77:e6:ff:b6:fe:30:cd:16:4a:ef:0d: f8:54:f6:5a:36:16:db:5b:08:51:60:4b:43:69:67: d1:db:7a:21:79:54:bb:4e:b0:67:27:73:b5:d4:9d: f1:4e:bc:98:60:ff:86:09:e4:6c:40:9a:a3:c5:77: ce:49:1a:8f:10:21:89:d1:16:9c:72:d2:4e:5d:d0: 14:e2:41:f2:3e:8c:10:64:b1:a1:d8:d1:e2:4e:6b: 4d:c2:d9:a5:33:45:64:45:20:59:be:99:08:7a:21: 5c:48:f5:0e:66:ed:c6:f3:46:8f:37:32:99:9f:80: 6d:8f:d6:fd:8c:c1:99:8c:7c:3b:dc:df:f8:7f:cd: 77:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5A:76:4B:76:43:5C:4C:06:0E:61:4D:FC:7F:C0:52:8C:86:1C:73 X509v3 Authority Key Identifier: keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d7:b1:60:fa:fd:fe:fe:04:e8:87:dd:b3:5d:f1:71:8e:c0: 5e:bc:db:60:46:18:53:da:df:af:6c:f1:2e:74:f8:bf:7d:22: df:11:bd:dd:6d:19:52:7a:f8:21:8d:c7:0e:10:3e:a3:2a:c3: e5:46:2c:94:52:af:a1:a8:3c:ad:64:0f:61:43:cc:d2:e8:f5: 5d:95:ba:eb:f2:ea:af:68:26:8e:ee:21:ba:41:89:72:28:dd: 6b:86:91:99:b6:43:82:c1:7b:02:d3:0a:0d:52:47:e3:6a:a7: de:9e:09:d6:28:af:87:06:b3:51:eb:e4:76:05:41:31:eb:38: 19:88:67:87:c8:10:a4:21:0a:91:0f:7a:cf:33:d4:88:43:56: 23:e5:a0:98:48:af:23:18:22:3d:94:63:df:e0:fd:4e:06:01: 06:44:42:3a:5b:6b:16:f4:c1:2d:61:72:c9:cd:53:67:a7:6b: e3:74:60:02:2a:2b:ca:19:44:e2:da:bf:48:11:89:c5:b7:7f: f0:a4:19:3e:6a:a8:15:d3:81:b0:d2:a7:ce:56:86:15:b9:16: b4:e4:64:81:57:72:e1:15:b2:da:8f:f7:3f:ff:d5:1a:ba:62: 64:40:f5:7e:c0:db:ac:a5:83:71:3c:a5:d7:3c:90:44:26:45: 48:ed:7f:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9r4l3glAr8Z+Zzv2aTSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzdmMjdlYjQ5OTdiM2JlZjlmMjgyNjZhMzk2OTQwNTBm ZTc0ZjkwHhcNMjUxMjA2MDIwMDQ0WhcNMjUxMjA3MDIwMDQ0WjAzMTEwLwYDVQQD Eyg0NDVhNzY0Yjc2NDM1YzRjMDYwZTYxNGRmYzdmYzA1MjhjODYxYzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17P0lv6f1dikz+IB7Ag/FF7pqiMA k4f9jIpyHsRHjRhfdPBYyCwNQ3ZglnV7sbuk+k7kJCiop57HVo903xw5QD3W+dH2 XzUmm+Etn+faDe4qLm8kJAG7ulh998ncr0jz97mQZfBHLevzdwYgSbZp8WDCBlJ2 k2H8vrV4d+b/tv4wzRZK7w34VPZaNhbbWwhRYEtDaWfR23oheVS7TrBnJ3O11J3x TryYYP+GCeRsQJqjxXfOSRqPECGJ0RacctJOXdAU4kHyPowQZLGh2NHiTmtNwtml M0VkRSBZvpkIeiFcSPUOZu3G80aPNzKZn4Btj9b9jMGZjHw73N/4f813UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERadkt2Q1xMBg5hTfx/wFKMhhxzMB8GA1UdIwQY MBaAFEw38n60mXs7758oJmo5aUBQ/nT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEt ZWI1YTYyN2U3NmEzLzEvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEtZWI1YTYyN2U3NmEz LzEvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj9exYPr9 /v4E6Ifds13xcY7AXrzbYEYYU9rfr2zxLnT4v30i3xG93W0ZUnr4IY3HDhA+oyrD 5UYslFKvoag8rWQPYUPM0uj1XZW66/Lqr2gmju4hukGJcijda4aRmbZDgsF7AtMK DVJH42qn3p4J1iivhwazUevkdgVBMes4GYhnh8gQpCEKkQ96zzPUiENWI+WgmEiv IxgiPZRj3+D9TgYBBkRCOltrFvTBLWFyyc1TZ6dr43RgAioryhlE4tq/SBGJxbd/ 8KQZPmqoFdOBsNKnzlaGFbkWtORkgVdy4RWy2o/3P//VGrpiZED1fsDbrKWDcTyl 1zyQRCZFSO1/Pg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:02 2025 by rpki-client