This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft File: TeHTcc2fJqEftklGZ0wxl198Lt8.mft (raw, json) Hash identifier: C6KhwqUYVF3nJDJtQ31hpDFPfKOTM0W5M9NHj1itlJE= Subject key identifier: DE:32:24:6A:A6:0A:05:18:CD:FE:80:63:16:6C:E0:DA:7F:92:B8:39 Authority key identifier: 4D:E1:D3:71:CD:9F:26:A1:1F:B6:49:46:67:4C:31:97:5F:7C:2E:DF Certificate issuer: /CN=4de1d371cd9f26a11fb64946674c31975f7c2edf Certificate serial: 019B2B53AF3B186AE9AA561B89C61EE2A819 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 08:01:03 +0000 Manifest this update: Wed 17 Dec 2025 08:01:03 +0000 Manifest next update: Thu 18 Dec 2025 08:01:03 +0000 Files and hashes: 1: N-aQc5ZHzbkuvMdLo2TUuIB_oc4.roa (hash: IAepQRK7ijnLHmjIcS6HiPXZXeTO8dWbShOBaF70B2w=) 2: TeHTcc2fJqEftklGZ0wxl198Lt8.crl (hash: 4Df6NOtEOf2EuREPVS9JZq/6BrgG0thkXLnP1U+hUKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:af:3b:18:6a:e9:aa:56:1b:89:c6:1e:e2:a8:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4de1d371cd9f26a11fb64946674c31975f7c2edf Validity Not Before: Dec 17 08:01:03 2025 GMT Not After : Dec 18 08:01:03 2025 GMT Subject: CN=de32246aa60a0518cdfe8063166ce0da7f92b839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:70:52:90:60:dc:f8:70:37:e2:d7:1b:19:76: ac:f1:51:df:31:0f:50:0e:13:71:60:07:23:78:70: 1c:ea:ab:47:d7:26:1c:d1:e8:7e:51:38:14:49:79: d5:14:24:0a:eb:62:2b:42:34:0b:b8:80:dd:e1:fa: 82:c3:c1:83:a7:a5:e2:ca:85:ec:5e:b7:c4:93:b9: 38:3e:d2:54:0a:32:c0:8b:41:45:06:0d:70:e3:a3: 94:92:84:f3:75:e9:6b:7b:f6:84:32:ac:7a:76:26: 2a:f8:e2:48:6a:38:81:e5:47:2d:29:cf:5b:b5:0c: 48:a5:97:df:f2:d4:2c:1e:f4:a0:96:00:e9:9f:20: 2f:51:0f:ed:56:f1:0c:f9:e8:2b:d8:bc:6d:c2:a5: 7a:75:5d:b4:5f:b3:64:54:8d:83:c0:65:ad:d6:cc: 9a:5a:fc:c9:fc:5f:1c:b3:2b:b9:20:43:a2:40:56: 9a:2d:74:a7:f1:3b:05:01:88:11:c4:87:6d:d4:cf: ad:66:7d:8d:82:54:68:0c:48:76:7f:25:0d:5c:1f: 48:60:17:d7:20:22:55:94:3c:c6:d1:d0:3b:cc:d0: 67:7f:7b:1f:68:09:3d:18:e7:dd:0e:d9:f9:70:ad: 94:e5:77:c6:75:88:23:32:04:3d:fe:e4:3d:d3:f9: 67:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:32:24:6A:A6:0A:05:18:CD:FE:80:63:16:6C:E0:DA:7F:92:B8:39 X509v3 Authority Key Identifier: keyid:4D:E1:D3:71:CD:9F:26:A1:1F:B6:49:46:67:4C:31:97:5F:7C:2E:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:6e:5f:b4:ca:93:93:95:dd:54:53:81:5e:d2:9a:77:a3:d2: de:d8:1a:5d:27:7c:5e:ac:d2:da:6b:de:f0:11:28:68:75:51: 13:8b:24:ad:32:fa:b8:a7:db:e0:40:0d:5c:62:d3:17:f9:08: f8:b7:de:0e:3a:0c:1e:28:d7:15:53:fe:d0:4e:fb:d5:1b:bc: 1b:70:0c:7d:3c:d4:2a:52:a0:d5:5c:e7:f5:cc:cd:24:3e:d0: f1:85:42:1d:43:02:30:4f:72:39:ff:45:2a:2c:16:75:6f:41: e1:fe:64:c8:0c:15:d6:37:c3:cc:18:1b:4f:27:6f:df:41:9b: 31:ff:19:df:c8:92:7f:2b:0b:fa:f2:4f:20:62:51:a7:70:83: 75:7e:1f:d0:88:bd:1f:8e:42:1b:60:7b:d0:8b:c9:21:8f:7d: f8:4f:20:74:9a:c1:7f:ab:09:3d:44:88:8e:68:59:7a:d2:de: 3f:61:eb:ae:2c:28:d2:fe:3e:b4:7d:6a:f0:6c:34:27:45:27: ac:fc:5a:51:c0:8b:c5:76:b4:8c:de:2f:e4:ee:a7:a2:0b:42: a4:ba:9e:54:48:d7:a9:31:e8:84:6e:67:98:0d:9a:f3:ae:e0: 83:c2:14:66:75:44:6a:71:e5:22:20:6e:32:f6:8b:96:cc:f2: 3b:e1:25:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrU687GGrpqlYbicYe4qgZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZTFkMzcxY2Q5ZjI2YTExZmI2NDk0NjY3NGMzMTk3NWY3 YzJlZGYwHhcNMjUxMjE3MDgwMTAzWhcNMjUxMjE4MDgwMTAzWjAzMTEwLwYDVQQD EyhkZTMyMjQ2YWE2MGEwNTE4Y2RmZTgwNjMxNjZjZTBkYTdmOTJiODM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13BSkGDc+HA34tcbGXas8VHfMQ9Q DhNxYAcjeHAc6qtH1yYc0eh+UTgUSXnVFCQK62IrQjQLuIDd4fqCw8GDp6XiyoXs XrfEk7k4PtJUCjLAi0FFBg1w46OUkoTzdelre/aEMqx6diYq+OJIajiB5UctKc9b tQxIpZff8tQsHvSglgDpnyAvUQ/tVvEM+egr2LxtwqV6dV20X7NkVI2DwGWt1sya WvzJ/F8csyu5IEOiQFaaLXSn8TsFAYgRxIdt1M+tZn2NglRoDEh2fyUNXB9IYBfX ICJVlDzG0dA7zNBnf3sfaAk9GOfdDtn5cK2U5XfGdYgjMgQ9/uQ90/lnAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4yJGqmCgUYzf6AYxZs4Np/krg5MB8GA1UdIwQY MBaAFE3h03HNnyahH7ZJRmdMMZdffC7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGVIVGNjMmZKcUVmdGtsR1owd3hsMTk4THQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8wNjFmMjMtNGZiOC00NjM2LWI4NzQt NWU0MmEzZjY2ZjMyLzEvVGVIVGNjMmZKcUVmdGtsR1owd3hsMTk4THQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8wNjFmMjMtNGZiOC00NjM2LWI4NzQtNWU0MmEzZjY2ZjMy LzEvVGVIVGNjMmZKcUVmdGtsR1owd3hsMTk4THQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWm5ftMqT k5XdVFOBXtKad6PS3tgaXSd8XqzS2mve8BEoaHVRE4skrTL6uKfb4EANXGLTF/kI +LfeDjoMHijXFVP+0E771Ru8G3AMfTzUKlKg1Vzn9czNJD7Q8YVCHUMCME9yOf9F KiwWdW9B4f5kyAwV1jfDzBgbTydv30GbMf8Z38iSfysL+vJPIGJRp3CDdX4f0Ii9 H45CG2B70IvJIY99+E8gdJrBf6sJPUSIjmhZetLeP2Hrriwo0v4+tH1q8Gw0J0Un rPxaUcCLxXa0jN4v5O6nogtCpLqeVEjXqTHohG5nmA2a867gg8IUZnVEanHlIiBu MvaLlszyO+El1w== -----END CERTIFICATE-----Generated at Wed Dec 17 15:28:35 2025 by rpki-client