This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft File: Tds9zfXmvuCYJcN787i98otvtZM.mft (raw, json) Hash identifier: ne3XAvuM9qt8xPiQdP1pq4AFYArPFk2RF8002uFYJuE= Subject key identifier: C2:1C:5E:BE:F5:66:6A:0E:AC:03:3D:76:39:20:5B:5E:54:33:64:BC Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93 Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593 Certificate serial: 019AF35233FF122D73258D28B7B29E40225A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft Manifest number: 1775 Signing time: Sat 06 Dec 2025 11:00:41 +0000 Manifest this update: Sat 06 Dec 2025 11:00:41 +0000 Manifest next update: Sun 07 Dec 2025 11:00:41 +0000 Files and hashes: 1: 3wToZwYlYJhmj7mm8PpwNtnWHVk.roa (hash: O8XdzrDLKhZRvl13MXXTR1JiyTE2ZlieoyWEJ7nOUTA=) 2: 46uAO_7C_hVEQvZIAiRuYmh3QSo.roa (hash: MFUM6s6M1weGqv2Xn6LhhIWodXnFo4p8KwKjPUo7OXo=) 3: 4imq6_MMpyIjPy7JyGjrhcoftH4.roa (hash: htblR8fOEERQI20b0BNRdDO8FoijKodXH42ZRIpJlTM=) 4: BhB4QRUPoERbo_tuXIOvKFT5tus.roa (hash: asfvJzhTCTkNeMXKQv12QThiuP/0k3pLDDHOuHxC3r4=) 5: FFPDMHJ-Jqx3kk-gvkD1qDp-v9k.roa (hash: Ymsup5BEwzDp7E2mJg5hRNMRIrzKpWGEglwuk0pdV74=) 6: Tds9zfXmvuCYJcN787i98otvtZM.crl (hash: y1LYKfAwTWIeWTJpbb+i4HExRHc8LcnLh7mSxILOvso=) 7: Tw0TTktdyzp0HyCOraKp8Ikm9Zw.roa (hash: z4UO2288Zpke2+cJIS0jIR44dlwwS+r5fy09OgwTYzs=) 8: Y7zkYH7Aw7PVsj10RPb-MkdugUk.roa (hash: o+fhjuQlK8kmiCnbZvXdSlpO05Hoo31DLBlRx7EaZLM=) 9: b7oMoNLEeexBq7MIfZdfTx6xx-k.roa (hash: OSaZRd3wcs3q/SzG2reGUiR0uNvDtIWlv9sr3p7/FyU=) 10: h90uqc_De15c5RcLX88cwk7dD8c.roa (hash: o2sSFjPuw1OAEBfBb9Dp1k2BsAtNCgsonI20CxguO14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:33:ff:12:2d:73:25:8d:28:b7:b2:9e:40:22:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593 Validity Not Before: Dec 6 11:00:41 2025 GMT Not After : Dec 7 11:00:41 2025 GMT Subject: CN=c21c5ebef5666a0eac033d7639205b5e543364bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e1:08:06:7e:f4:81:cc:5b:58:fd:a1:9e:cf: 27:98:ba:90:47:3f:f5:d0:ba:14:89:ed:ae:e3:62: aa:07:ee:46:5e:fc:09:2e:00:8b:4c:09:ca:47:7f: f8:43:49:0e:8c:a5:0a:b4:5d:32:6b:e9:06:c2:c1: aa:26:83:4f:d4:88:97:6f:c3:43:ea:7b:70:21:59: 58:03:7c:4f:c2:9d:df:55:26:04:2d:2f:1f:b0:5e: 02:37:20:43:20:a5:a6:58:ad:60:14:25:0c:9d:84: 25:e1:79:31:bd:0c:a6:cd:ee:4e:51:3a:da:1f:ab: 2e:6a:73:27:a3:79:b0:00:74:b9:16:6b:cf:47:ab: 27:a9:2c:41:2d:56:20:49:2e:73:5f:b5:91:5c:6d: 5e:7a:03:bc:cf:11:64:5e:c2:9e:fa:ea:65:b3:fc: 07:29:c7:40:7b:b0:30:20:7b:50:2e:b6:e9:e2:bc: d8:64:6e:6f:db:f5:82:7f:36:90:e1:bc:47:f0:7d: c9:71:e8:8f:b0:0e:0a:a5:bc:b6:bc:03:f1:90:0c: 8f:a7:9a:4b:af:58:52:d5:ca:3d:7a:ac:d5:a4:88: 13:0f:60:19:fa:d8:f2:2b:e4:6c:ba:ec:75:ca:96: dc:07:21:37:49:c1:4d:75:d4:fe:c5:be:01:b7:95: 39:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1C:5E:BE:F5:66:6A:0E:AC:03:3D:76:39:20:5B:5E:54:33:64:BC X509v3 Authority Key Identifier: keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:27:42:87:e4:88:8e:84:df:ab:8d:a9:bd:2b:1d:f5:83:c7: 3a:df:46:9b:f6:b8:03:bf:85:ca:e1:1a:42:b8:37:28:e4:c3: 32:24:f4:31:ac:05:48:d6:66:08:29:49:11:73:94:59:53:09: 18:89:2a:60:e3:a3:e7:b1:cb:68:38:11:b2:9d:1d:60:f1:fd: cc:b3:3a:a5:52:17:9f:d3:4f:0e:b5:d3:95:e5:73:aa:8a:20: d0:01:1d:6c:f4:38:c1:11:46:4b:57:f8:3a:82:3a:f1:3b:77: 2f:e6:c2:9e:c2:8d:a1:bf:60:43:bf:da:8d:8c:fd:63:2d:0b: 2b:c2:db:5a:84:ce:08:9d:6e:89:2a:6f:13:a9:7b:76:1b:29: 21:60:6c:20:d4:3a:0a:17:bb:e6:e0:71:f2:7a:e5:ba:1c:7f: 89:93:50:99:61:41:3b:7b:46:0f:82:03:da:5e:6a:c4:c5:0e: a0:d8:ab:f0:f4:d7:ac:b2:d2:06:76:b3:37:a4:8f:a9:4a:3e: 99:2e:94:3a:b5:23:5f:85:93:0b:e6:0d:4b:6f:cc:a7:4b:ba: 08:68:4e:2e:c3:8c:f6:27:ee:b1:6c:0d:56:9b:db:17:71:c0: ea:b6:0e:18:02:c0:16:35:ed:d9:f0:6c:3c:c9:42:d8:91:7a: fa:cb:48:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUjP/Ei1zJY0ot7KeQCJaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZGIzZGNkZjVlNmJlZTA5ODI1YzM3YmYzYjhiZGYyOGI2 ZmI1OTMwHhcNMjUxMjA2MTEwMDQxWhcNMjUxMjA3MTEwMDQxWjAzMTEwLwYDVQQD EyhjMjFjNWViZWY1NjY2YTBlYWMwMzNkNzYzOTIwNWI1ZTU0MzM2NGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+EIBn70gcxbWP2hns8nmLqQRz/1 0LoUie2u42KqB+5GXvwJLgCLTAnKR3/4Q0kOjKUKtF0ya+kGwsGqJoNP1IiXb8ND 6ntwIVlYA3xPwp3fVSYELS8fsF4CNyBDIKWmWK1gFCUMnYQl4XkxvQymze5OUTra H6suanMno3mwAHS5FmvPR6snqSxBLVYgSS5zX7WRXG1eegO8zxFkXsKe+upls/wH KcdAe7AwIHtQLrbp4rzYZG5v2/WCfzaQ4bxH8H3JceiPsA4Kpby2vAPxkAyPp5pL r1hS1co9eqzVpIgTD2AZ+tjyK+Rsuux1ypbcByE3ScFNddT+xb4Bt5U5OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIcXr71ZmoOrAM9djkgW15UM2S8MB8GA1UdIwQY MBaAFE3bPc315r7gmCXDe/O4vfKLb7WTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEt MjE3MGM1YzFkM2VkLzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEtMjE3MGM1YzFkM2Vk LzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnidCh+SI joTfq42pvSsd9YPHOt9Gm/a4A7+FyuEaQrg3KOTDMiT0MawFSNZmCClJEXOUWVMJ GIkqYOOj57HLaDgRsp0dYPH9zLM6pVIXn9NPDrXTleVzqoog0AEdbPQ4wRFGS1f4 OoI68Tt3L+bCnsKNob9gQ7/ajYz9Yy0LK8LbWoTOCJ1uiSpvE6l7dhspIWBsINQ6 Che75uBx8nrluhx/iZNQmWFBO3tGD4ID2l5qxMUOoNir8PTXrLLSBnazN6SPqUo+ mS6UOrUjX4WTC+YNS2/Mp0u6CGhOLsOM9ifusWwNVpvbF3HA6rYOGALAFjXt2fBs PMlC2JF6+stIOg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:40:45 2025 by rpki-client