This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft File: tgdgRQHeNgl2jFunxMypxWth-dU.mft (raw, json) Hash identifier: JTR3MhQK6ZSA0T7tgUSLCEcMxmETHdblG1iseCa+QWs= Subject key identifier: AB:73:C3:81:98:6E:D4:E0:9D:E6:96:7C:6D:F0:73:C1:6B:FB:EE:57 Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019AF087F89618FDB6025E0AB89638CC38C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft Manifest number: 20 Signing time: Fri 05 Dec 2025 22:00:34 +0000 Manifest this update: Fri 05 Dec 2025 22:00:34 +0000 Manifest next update: Sat 06 Dec 2025 22:00:34 +0000 Files and hashes: 1: 3wmc1QYw4mfuocmEfGMfi1HHD8k.roa (hash: SS3zb4L+Y19yv16W1udbGaR8EWB9tuMbwSavNQhf5RQ=) 2: 5v-xs4SjsBX3F7o5sCHUUhLEVaI.roa (hash: F3y4xuefLk6xYOCwbOg7ZZSbHpsb0d0yzbiAbMyYOZw=) 3: AMTyl2NmOJzWYIdDioCqD2l3o74.roa (hash: KueLQl5N1mcezdycmNIiNC1iPrlf8pNhCrc2qwqwyuk=) 4: EN200_fHuS3Y54Exmp7fn74_RLI.roa (hash: BVm8C5g07MheS5G/dZUeBM8M5KiLFd4oRI2mTZ8pE+o=) 5: QiANL6hD31O5NTAaW1W-Nvlf9gY.roa (hash: uXLv0uniDn8Rar8jmxGxebjw15OBJXAN7sUxsLeh2Ro=) 6: T9JqdOCwNhjHEy72ZfNfRkVAito.roa (hash: QrX7NzM9kSSnpfIRIBJUfwnvKzWfzdW6zC1sKAREjM8=) 7: TCmTK7NJX8puhN8to4156UZz-78.roa (hash: U1wNw1BCYDW5bA+bL2oNFTORSfPO4Pns6r2IGFi4l/I=) 8: ZXZDaDi-XBkpqP9YKXeGj84e004.roa (hash: qZqA5o0uL/9qLnfwxOSfBRMkrlBMmLZN/t7qia4F8sw=) 9: cMI9aaoe5XEx76TGXVunHrV4vwY.roa (hash: JDNCzzOpLYcvgpwGrkn4GpN69CUvTkONneBGxsB4W8o=) 10: kVUBj-jv3JPb-hlgSX4k_viNe9U.roa (hash: PEIXpoFZM+hlxNARLic2jW38vF6SQe4FptG7axrWOn0=) 11: oyDxBVtF1LjTnCQDciTh8zuFqYQ.roa (hash: pYXg+Vf94Nw+ugeuc3FGDfBMx7ld+TJ8OE/NCWTXTOo=) 12: tgdgRQHeNgl2jFunxMypxWth-dU.crl (hash: 3LC0mWY+Sfy4j7wFkE7okfAFsusIKCUBZX49CDYUxM4=) 13: usP-L7HqUJP4XiTEa53HsdKGiOc.roa (hash: yhPkLQS6WBCaRHO9lJJSPKGObPTt1MU1vHfLTLVpdn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:87:f8:96:18:fd:b6:02:5e:0a:b8:96:38:cc:38:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Dec 5 22:00:34 2025 GMT Not After : Dec 6 22:00:34 2025 GMT Subject: CN=ab73c381986ed4e09de6967c6df073c16bfbee57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e0:d5:59:98:80:b5:c3:03:aa:8d:c8:cd:25: a3:2d:fd:0c:50:d7:29:5d:90:31:17:a8:71:d2:33: 4c:0e:53:b3:ee:d4:81:a8:02:d9:7d:14:40:11:ec: a1:2e:9e:c3:2c:f6:0c:7e:eb:ee:7d:29:54:9e:da: 72:cc:9d:85:26:47:89:b2:69:8f:2c:9d:f7:78:11: 79:c4:54:29:00:aa:da:e4:92:66:d4:0c:af:57:c0: 80:25:b8:da:89:c0:b9:ba:4e:c5:11:62:ec:bb:a0: 20:9f:33:71:95:24:58:45:51:e7:16:29:bd:fe:80: e3:28:a8:d8:0a:a2:e3:14:ed:8d:f3:53:28:61:f8: 52:af:2c:e3:86:17:ab:10:e6:ad:84:bf:a6:0f:d3: 62:c3:fe:df:9c:96:c5:38:77:bc:7a:b9:3b:8d:4b: 41:6f:95:08:a0:02:97:ba:26:db:e2:4d:90:e9:1b: e8:ec:e4:59:1b:7a:80:eb:84:6d:b7:e6:0c:e3:7c: ae:38:26:f0:64:76:4b:69:4f:dc:7d:10:c9:e8:7d: fe:4b:98:c6:63:07:95:d9:ac:36:8a:f9:d7:11:61: b6:4d:34:fb:7d:1e:a5:bf:d3:5c:d4:88:b9:0b:18: dc:e1:50:31:83:d6:37:00:10:87:43:8b:ca:d0:13: d2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:73:C3:81:98:6E:D4:E0:9D:E6:96:7C:6D:F0:73:C1:6B:FB:EE:57 X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:fc:40:7e:65:ba:cc:b0:e7:00:c9:6b:f2:88:e4:07:02:cf: 90:14:a7:e4:af:05:20:6d:63:4c:18:e0:eb:2d:97:da:77:af: f8:50:5c:50:9d:7c:bc:85:29:28:de:bc:5b:0d:f2:76:5a:67: 70:8b:f0:8b:97:59:6f:e8:27:6f:81:7f:93:32:34:80:a7:86: 0a:b9:b5:e0:7e:c8:0b:93:0a:17:0b:45:f6:a1:7f:7d:08:e1: fa:6f:1e:a7:51:15:5f:c2:87:bb:b5:eb:1a:be:01:60:68:15: 2f:61:c3:6a:3a:22:75:b2:5f:f3:62:0b:5d:9c:a1:54:36:10: 44:86:11:77:4f:90:d9:1a:be:5d:c2:c1:c1:fd:b3:b2:b2:09: 26:28:1f:6b:66:82:40:86:6d:b3:f6:7d:a9:9f:2f:75:96:e3: 8f:5f:6d:92:33:95:29:93:88:3e:66:6c:3e:a7:ed:47:b4:67: e8:d5:31:00:ea:71:18:d9:78:7e:53:c7:be:f6:ce:54:fe:f4: a3:f8:f3:f3:f9:d1:ca:bc:cf:f1:e9:57:a6:d0:c2:8c:d9:84: cf:17:08:fd:aa:6f:6a:13:c3:9b:38:7b:8b:0f:03:6d:9d:5e: 4f:47:90:d8:4f:eb:bb:13:9e:45:fe:4c:63:c1:b8:73:9d:08: 9f:da:91:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwh/iWGP22Al4KuJY4zDjIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjUxMjA1MjIwMDM0WhcNMjUxMjA2MjIwMDM0WjAzMTEwLwYDVQQD EyhhYjczYzM4MTk4NmVkNGUwOWRlNjk2N2M2ZGYwNzNjMTZiZmJlZTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxODVWZiAtcMDqo3IzSWjLf0MUNcp XZAxF6hx0jNMDlOz7tSBqALZfRRAEeyhLp7DLPYMfuvufSlUntpyzJ2FJkeJsmmP LJ33eBF5xFQpAKra5JJm1AyvV8CAJbjaicC5uk7FEWLsu6AgnzNxlSRYRVHnFim9 /oDjKKjYCqLjFO2N81MoYfhSryzjhherEOathL+mD9Niw/7fnJbFOHe8erk7jUtB b5UIoAKXuibb4k2Q6Rvo7ORZG3qA64Rtt+YM43yuOCbwZHZLaU/cfRDJ6H3+S5jG YweV2aw2ivnXEWG2TTT7fR6lv9Nc1Ii5Cxjc4VAxg9Y3ABCHQ4vK0BPS/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtzw4GYbtTgneaWfG3wc8Fr++5XMB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifxAfmW6 zLDnAMlr8ojkBwLPkBSn5K8FIG1jTBjg6y2X2nev+FBcUJ18vIUpKN68Ww3ydlpn cIvwi5dZb+gnb4F/kzI0gKeGCrm14H7IC5MKFwtF9qF/fQjh+m8ep1EVX8KHu7Xr Gr4BYGgVL2HDajoidbJf82ILXZyhVDYQRIYRd0+Q2Rq+XcLBwf2zsrIJJigfa2aC QIZts/Z9qZ8vdZbjj19tkjOVKZOIPmZsPqftR7Rn6NUxAOpxGNl4flPHvvbOVP70 o/jz8/nRyrzP8elXptDCjNmEzxcI/apvahPDmzh7iw8DbZ1eT0eQ2E/ruxOeRf5M Y8G4c50In9qR3w== -----END CERTIFICATE-----Generated at Sat Dec 6 06:37:35 2025 by rpki-client