This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft File: TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft (raw, json) Hash identifier: rA3HGvJpDk0f/Dee6mRuBgQBbkrZSkV9aQMLJ9cipjg= Subject key identifier: F8:B3:D0:C6:1C:DB:2B:50:2B:92:96:1F:CC:0E:96:D1:0C:C3:32:49 Authority key identifier: 4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17 Certificate issuer: /CN=4c38a306a37ee87bebff7236553e0d3cb672cd17 Certificate serial: 019AF2400363FE4C2920420FC94AA60EBD7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft Manifest number: 0237 Signing time: Sat 06 Dec 2025 06:01:12 +0000 Manifest this update: Sat 06 Dec 2025 06:01:12 +0000 Manifest next update: Sun 07 Dec 2025 06:01:12 +0000 Files and hashes: 1: 54qil-gtsg-VmWMUKBbSoP89Sh4.roa (hash: +lFuYFZIeWq9AFirWvNO/gLe0U+wLrmb+nny8MFDRhE=) 2: TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl (hash: mA4Jb7HpyQ8B54K7fteqT4uMm5Pu3arFJcPByUQQeo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:03:63:fe:4c:29:20:42:0f:c9:4a:a6:0e:bd:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c38a306a37ee87bebff7236553e0d3cb672cd17 Validity Not Before: Dec 6 06:01:12 2025 GMT Not After : Dec 7 06:01:12 2025 GMT Subject: CN=f8b3d0c61cdb2b502b92961fcc0e96d10cc33249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5e:40:56:f5:13:95:c6:0d:d8:2e:68:13:1c: cb:51:bb:1a:10:86:5f:9b:dc:4a:c8:3b:e4:84:12: 59:a1:22:b0:28:90:87:9f:2f:56:d2:ac:1e:b9:af: cb:af:e3:c7:05:0e:54:60:8f:a0:f3:24:5e:ca:14: 43:ca:5b:5b:6d:15:af:fc:91:9a:63:c7:79:14:d7: 9f:3a:e3:dc:3d:65:65:40:64:2a:96:72:6d:1d:5c: 0f:a2:5b:7a:2f:d3:6f:3b:3f:11:23:da:90:ee:ed: f9:80:f6:87:99:63:17:4a:42:ef:85:3b:30:5b:ea: 52:e9:61:2a:63:e2:86:fa:33:e7:57:76:f0:e4:42: 96:37:a8:5f:a6:0b:d4:6a:4b:78:ee:da:49:2d:75: c4:0d:c8:02:5f:ab:a1:ee:48:f9:7e:87:09:ec:72: 77:34:03:66:ea:63:d4:0b:d9:3e:4c:fc:6b:0b:0c: 8e:e1:6d:29:75:89:e2:07:aa:c1:f0:a8:9a:ae:bc: 5b:31:7b:04:48:a0:5c:ec:74:ca:10:51:6c:1c:b3: 8b:e3:f2:34:ea:a2:30:54:7d:a9:75:77:a4:58:82: 48:15:45:49:b9:c0:36:eb:b4:d1:64:e3:f9:61:16: f5:88:b4:9a:65:21:e7:76:68:37:a9:a1:b1:9d:9d: 23:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B3:D0:C6:1C:DB:2B:50:2B:92:96:1F:CC:0E:96:D1:0C:C3:32:49 X509v3 Authority Key Identifier: keyid:4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:40:bb:e4:81:6c:c7:89:45:d4:8a:68:98:30:a6:0d:86:b0: f7:38:74:dd:9c:1d:b0:de:41:a4:41:f5:19:08:36:73:c7:11: 33:fb:54:2b:3b:8e:b1:af:a7:db:9a:86:7d:42:8f:ed:18:a3: 9a:e5:04:17:7d:c9:37:5f:0d:29:e4:3d:a3:b7:4b:a9:fc:04: 29:7c:b5:43:9f:bd:f1:78:66:c8:18:e7:91:19:8e:bf:1a:d2: f4:90:64:c2:31:71:e9:bc:61:95:cd:7f:ec:b5:5b:8f:6d:65: 6a:43:5a:ee:f0:f1:00:d5:f7:cc:9a:e6:f0:ae:e2:09:1d:fe: d6:fe:a6:1f:1f:36:1a:dd:1d:a6:d5:c9:fd:34:49:fd:28:c6: c5:c7:0b:92:f2:56:d2:a6:f7:a8:7c:34:c0:fa:b4:92:8f:36: 8c:46:e6:75:d0:37:5c:3e:da:02:a4:fe:b9:80:e7:6a:e6:af: fc:74:d8:43:29:e7:ac:72:4e:20:0e:ed:2d:d9:20:8e:3e:bb: b8:e6:e7:26:0d:5e:42:15:77:e6:28:4c:57:17:fd:6e:99:d2: f0:b9:94:2b:1c:36:e6:fa:b7:82:e2:b5:d9:5e:b4:a3:91:d7: f9:e4:f8:1e:65:6a:05:a5:b6:21:06:f2:c6:1a:5c:64:87:2e: 70:1f:86:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQANj/kwpIEIPyUqmDr19MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzhhMzA2YTM3ZWU4N2JlYmZmNzIzNjU1M2UwZDNjYjY3 MmNkMTcwHhcNMjUxMjA2MDYwMTEyWhcNMjUxMjA3MDYwMTEyWjAzMTEwLwYDVQQD EyhmOGIzZDBjNjFjZGIyYjUwMmI5Mjk2MWZjYzBlOTZkMTBjYzMzMjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF5AVvUTlcYN2C5oExzLUbsaEIZf m9xKyDvkhBJZoSKwKJCHny9W0qweua/Lr+PHBQ5UYI+g8yReyhRDyltbbRWv/JGa Y8d5FNefOuPcPWVlQGQqlnJtHVwPolt6L9NvOz8RI9qQ7u35gPaHmWMXSkLvhTsw W+pS6WEqY+KG+jPnV3bw5EKWN6hfpgvUakt47tpJLXXEDcgCX6uh7kj5focJ7HJ3 NANm6mPUC9k+TPxrCwyO4W0pdYniB6rB8KiarrxbMXsESKBc7HTKEFFsHLOL4/I0 6qIwVH2pdXekWIJIFUVJucA267TRZOP5YRb1iLSaZSHndmg3qaGxnZ0j5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPiz0MYc2ytQK5KWH8wOltEMwzJJMB8GA1UdIwQY MBaAFEw4owajfuh76/9yNlU+DTy2cs0XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERpakJxTi02SHZyXzNJMlZUNE5QTFp5elJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8wOGNkOTMtMDg3Ni00M2ZkLTkyYzAt Yjg2M2MwYTk4YjJkLzEvVERpakJxTi02SHZyXzNJMlZUNE5QTFp5elJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8wOGNkOTMtMDg3Ni00M2ZkLTkyYzAtYjg2M2MwYTk4YjJk LzEvVERpakJxTi02SHZyXzNJMlZUNE5QTFp5elJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANUC75IFs x4lF1IpomDCmDYaw9zh03ZwdsN5BpEH1GQg2c8cRM/tUKzuOsa+n25qGfUKP7Rij muUEF33JN18NKeQ9o7dLqfwEKXy1Q5+98XhmyBjnkRmOvxrS9JBkwjFx6bxhlc1/ 7LVbj21lakNa7vDxANX3zJrm8K7iCR3+1v6mHx82Gt0dptXJ/TRJ/SjGxccLkvJW 0qb3qHw0wPq0ko82jEbmddA3XD7aAqT+uYDnauav/HTYQynnrHJOIA7tLdkgjj67 uObnJg1eQhV35ihMVxf9bpnS8LmUKxw25vq3guK12V60o5HX+eT4HmVqBaW2IQby xhpcZIcucB+GJA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:43 2025 by rpki-client