This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft File: tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft (raw, json) Hash identifier: 3XbkCHO1RavmWBjrJMvqHuSG9N+R2LUENfvz8L/ox7c= Subject key identifier: C1:3A:36:4C:7E:CB:B0:42:92:FB:00:9E:02:27:50:ED:2A:74:B3:31 Authority key identifier: B5:D8:7F:DC:27:2A:E0:58:61:87:86:E7:41:70:75:57:BF:4E:1A:33 Certificate issuer: /CN=b5d87fdc272ae058618786e741707557bf4e1a33 Certificate serial: 019AF0BEE6FA4E30DFD7D25C59BDF2E4070E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft Manifest number: 04FC Signing time: Fri 05 Dec 2025 23:00:34 +0000 Manifest this update: Fri 05 Dec 2025 23:00:34 +0000 Manifest next update: Sat 06 Dec 2025 23:00:34 +0000 Files and hashes: 1: qQy9nbutIB840i93Gc6Vw1Yt6lA.roa (hash: 65g5a8+QhFyUXfSxWzLsMCFvk+W/xMxKhOR8kW2aeMw=) 2: tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl (hash: aATd/NCisIIxqaQPjsiqoxT51vMZPVO+donDcylldbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:e6:fa:4e:30:df:d7:d2:5c:59:bd:f2:e4:07:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5d87fdc272ae058618786e741707557bf4e1a33 Validity Not Before: Dec 5 23:00:34 2025 GMT Not After : Dec 6 23:00:34 2025 GMT Subject: CN=c13a364c7ecbb04292fb009e022750ed2a74b331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:37:7b:45:a6:29:35:45:e2:15:d6:a1:22:b7: 43:a5:c8:72:1c:2f:da:de:7b:c3:ab:46:d4:60:eb: e2:5d:ae:20:04:31:81:ab:b0:46:c5:63:06:1e:17: 54:c6:9c:e6:26:88:05:4e:3c:62:83:21:92:8c:a1: 0c:24:c5:9c:fd:04:21:2d:8e:13:9f:0a:a4:02:38: 27:ac:9b:16:ed:d7:46:6a:84:e0:4d:6d:ed:63:5e: c8:ea:b9:04:5f:dc:b3:6f:0d:9a:e4:23:ac:81:10: 85:06:ad:5c:05:76:16:cc:67:02:de:a3:9e:d0:0d: 8a:a3:e3:10:86:2c:56:39:95:20:58:af:ef:e1:83: 6e:ec:65:b9:7a:a6:c9:c0:56:49:60:1d:91:4b:23: 0c:ca:87:f3:e9:b5:e9:65:62:b8:52:6d:6c:11:29: ce:72:83:9d:f0:86:19:d7:f1:8f:a1:75:a0:4e:32: 32:60:7f:f8:d8:1a:36:c6:ea:09:90:41:91:1d:29: f8:c8:c2:68:b8:cb:05:8d:0d:e0:b2:7c:50:11:80: 42:d2:ad:19:dc:1f:be:c7:b3:f6:fe:91:e5:04:a5: e1:cf:16:bb:f4:02:50:df:10:73:13:97:8d:58:27: e0:83:2d:e9:b3:a1:f4:03:54:3d:d3:7e:5d:e6:fc: 97:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:3A:36:4C:7E:CB:B0:42:92:FB:00:9E:02:27:50:ED:2A:74:B3:31 X509v3 Authority Key Identifier: keyid:B5:D8:7F:DC:27:2A:E0:58:61:87:86:E7:41:70:75:57:BF:4E:1A:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:57:e5:e6:91:27:4a:7f:f5:1f:3a:b9:c5:91:17:25:04:df: e5:50:0d:ed:1e:64:d2:6a:b2:67:0b:84:0a:5d:a7:f7:3f:96: 7f:07:27:39:d1:7b:66:4f:28:46:7c:1d:e2:59:69:12:2f:4a: ce:e7:f0:60:7c:22:ab:d0:21:1c:f7:81:56:f4:5e:bd:26:22: 7d:2c:52:87:3b:5c:ef:4d:86:56:07:81:f2:8c:c3:16:d9:bf: 0c:99:80:88:64:7d:30:f2:41:e5:bf:b0:ef:c3:6a:c9:d1:9a: a8:74:ce:07:8d:88:7c:a1:68:bc:52:43:e1:62:dd:72:b1:c4: 6a:7b:20:71:00:75:d9:44:85:97:12:12:c1:d8:4f:47:ba:6a: 8e:5f:d7:86:ef:e1:8a:c7:c5:03:33:34:b3:2c:72:04:95:20: 3c:a8:e2:a3:cb:9f:2a:3b:31:04:c7:47:28:74:2c:c2:35:8b: 86:e0:36:8c:2e:d5:79:9b:ef:00:15:75:22:9f:dd:28:26:2e: f2:0b:96:05:f7:28:14:24:2b:b8:c6:e4:df:61:1a:25:7c:e9: dc:08:e1:91:e9:1c:a7:04:6e:39:6d:f9:45:26:47:4c:ad:bc: f4:e2:f8:26:46:f0:73:da:8e:a3:9a:b8:75:77:a7:36:3c:d5: a3:ea:a2:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvub6TjDf19JcWb3y5AcOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ZDg3ZmRjMjcyYWUwNTg2MTg3ODZlNzQxNzA3NTU3YmY0 ZTFhMzMwHhcNMjUxMjA1MjMwMDM0WhcNMjUxMjA2MjMwMDM0WjAzMTEwLwYDVQQD EyhjMTNhMzY0YzdlY2JiMDQyOTJmYjAwOWUwMjI3NTBlZDJhNzRiMzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTd7RaYpNUXiFdahIrdDpchyHC/a 3nvDq0bUYOviXa4gBDGBq7BGxWMGHhdUxpzmJogFTjxigyGSjKEMJMWc/QQhLY4T nwqkAjgnrJsW7ddGaoTgTW3tY17I6rkEX9yzbw2a5COsgRCFBq1cBXYWzGcC3qOe 0A2Ko+MQhixWOZUgWK/v4YNu7GW5eqbJwFZJYB2RSyMMyofz6bXpZWK4Um1sESnO coOd8IYZ1/GPoXWgTjIyYH/42Bo2xuoJkEGRHSn4yMJouMsFjQ3gsnxQEYBC0q0Z 3B++x7P2/pHlBKXhzxa79AJQ3xBzE5eNWCfggy3ps6H0A1Q9035d5vyXHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFME6Nkx+y7BCkvsAngInUO0qdLMxMB8GA1UdIwQY MBaAFLXYf9wnKuBYYYeG50FwdVe/ThozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGRoXzNDY3E0RmhoaDRiblFYQjFWNzlPR2pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC82NzBiMTAtMTBlYi00NzZmLTg0ZWYt MTU2ZWRhMmI1NWI2LzEvdGRoXzNDY3E0RmhoaDRiblFYQjFWNzlPR2pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC82NzBiMTAtMTBlYi00NzZmLTg0ZWYtMTU2ZWRhMmI1NWI2 LzEvdGRoXzNDY3E0RmhoaDRiblFYQjFWNzlPR2pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR1fl5pEn Sn/1Hzq5xZEXJQTf5VAN7R5k0mqyZwuECl2n9z+WfwcnOdF7Zk8oRnwd4llpEi9K zufwYHwiq9AhHPeBVvRevSYifSxShztc702GVgeB8ozDFtm/DJmAiGR9MPJB5b+w 78NqydGaqHTOB42IfKFovFJD4WLdcrHEansgcQB12USFlxISwdhPR7pqjl/Xhu/h isfFAzM0syxyBJUgPKjio8ufKjsxBMdHKHQswjWLhuA2jC7VeZvvABV1Ip/dKCYu 8guWBfcoFCQruMbk32EaJXzp3AjhkekcpwRuOW35RSZHTK289OL4Jkbwc9qOo5q4 dXenNjzVo+qi5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:58 2025 by rpki-client