This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft File: TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft (raw, json) Hash identifier: 3fxCgx1uBDeEWU55v/DWjQzIpkjvq0m0wzT1+WKHkzI= Subject key identifier: A2:44:C1:9B:03:2C:C6:F6:BF:04:0A:42:66:41:6D:5F:E2:FA:61:0B Authority key identifier: 4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1 Certificate issuer: /CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1 Certificate serial: 019AF12D7685B40A8C4CD67539DE7CFFF122 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft Manifest number: 0821 Signing time: Sat 06 Dec 2025 01:01:19 +0000 Manifest this update: Sat 06 Dec 2025 01:01:19 +0000 Manifest next update: Sun 07 Dec 2025 01:01:19 +0000 Files and hashes: 1: CmDicAfDfoz93maibb20vLFeJSE.roa (hash: T8rIp3ZOIEv2U6cB/WhgBqnN/oGzchfMmPBfz5rrS5E=) 2: D2t0G5l-no81p6rarPw2-EpQMYw.roa (hash: Ao7GMS7CFmzAFJghE2/XSbtoAU6qWDBHEwHUCZKTHwY=) 3: DGY9DRUJrYLpsverneGppUeA19c.roa (hash: BCikbUDAbYpSarrQzlAQJBis5jeq62TU6gwB+aPdaEk=) 4: TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl (hash: mOED0THy8v0tSD2Gk+cvo5KzUJHXO31dhmiLBaccXL4=) 5: wVkI_Szt3pr4XGdNEoWckhxFxCk.roa (hash: g7wpqUCSc32Jx8X0zDboKVFnJQIoCmmZncv7BRTwxHA=) 6: yZi5kswzr7A4DzlGCWa5weE8ZXs.roa (hash: Anf6GmhoZMZWxPMhTL0WiBitC7uHDJE3iNPWcCU2CB0=) 7: yaeBzALTksFutDMDSo14HWi1pcc.roa (hash: TCSIw7g3HWASSSDxcMQYHErKzGbepcCJReN+FTRV2MI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:76:85:b4:0a:8c:4c:d6:75:39:de:7c:ff:f1:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1 Validity Not Before: Dec 6 01:01:19 2025 GMT Not After : Dec 7 01:01:19 2025 GMT Subject: CN=a244c19b032cc6f6bf040a4266416d5fe2fa610b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8e:99:27:8b:27:3f:76:40:06:27:c9:5b:98: d4:cb:96:da:21:f2:fa:d5:34:db:b0:90:ae:c0:31: 35:a3:0f:a0:8e:69:ca:6c:7d:b4:9a:ec:2a:b6:7c: 2b:56:1a:4e:c7:bc:28:6f:f8:0f:eb:60:27:cb:68: 7a:3e:06:29:0d:cb:40:e6:7a:07:a9:31:4d:2a:ac: 29:80:8e:2e:7a:50:64:c8:a6:ac:96:e2:2e:55:57: 2f:ab:68:1a:46:b4:c2:ba:db:f7:1c:e7:20:e9:d2: 11:9b:19:60:bf:20:ba:77:e1:22:cf:e6:81:2a:f1: 7c:cc:7f:e7:ee:d4:25:ab:15:21:cc:ac:d2:99:ee: d1:82:2f:92:3b:38:86:dc:34:eb:10:db:5d:22:4e: cc:bd:1c:0d:6d:77:89:34:55:18:1b:ee:84:a9:35: 5b:36:35:c6:84:46:69:dd:b8:5e:55:e6:0f:26:82: 9a:27:9c:c1:9f:e6:ef:56:20:7c:e4:56:74:b1:53: b2:eb:92:48:0a:c1:b9:d3:25:dc:4f:f8:b2:30:c1: ef:44:59:cf:55:d4:5a:be:48:90:a7:bf:c2:8b:c5: 2c:35:90:d0:dd:1c:9e:15:d2:41:d0:e5:eb:0a:a3: fa:5c:48:5b:2c:aa:94:1c:ff:65:73:31:12:f1:99: c9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:44:C1:9B:03:2C:C6:F6:BF:04:0A:42:66:41:6D:5F:E2:FA:61:0B X509v3 Authority Key Identifier: keyid:4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:62:c6:37:f2:a2:0c:63:fe:26:ac:57:e6:4a:6b:71:9f:8b: d7:38:df:b5:68:6b:fd:72:6d:13:93:a4:56:b9:31:af:01:66: 71:bc:a0:14:f1:a6:46:8a:19:eb:ae:0d:c2:d1:b5:3c:6c:45: 0a:65:63:10:bd:93:f0:00:0e:e3:20:13:a7:f1:fa:a4:e9:f7: 92:84:39:90:9f:eb:da:cc:6b:96:fc:29:7e:61:0d:27:a6:7a: 5f:02:bc:9f:17:0a:31:9a:a4:65:ff:52:82:99:f6:81:93:2b: 93:f6:71:63:8e:60:1a:81:8d:77:eb:ed:67:12:8e:83:dc:13: 0b:6b:41:38:61:10:40:11:d2:40:6d:3b:63:2a:26:f0:d3:72: e2:34:c9:75:87:df:3a:25:6a:a7:ce:b8:85:d3:6c:01:6e:48: 60:c7:0c:84:87:ab:22:38:f1:26:95:e1:25:bd:f0:9d:13:64: 3d:c8:d9:32:d9:8b:12:06:78:bc:01:04:5f:1f:1e:6b:4e:ff: 1a:d9:53:ca:ba:0d:db:60:39:35:24:4d:b4:6c:cd:39:4e:3c: a1:56:98:e7:ef:92:77:ef:03:4e:86:cd:b8:e9:67:10:6b:35: 0f:0c:59:0f:2a:1c:d7:49:fb:58:29:35:e3:c6:39:af:71:7c: 5a:26:e3:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLXaFtAqMTNZ1Od58//EiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzc4OWVjZjY3ZTA0Mjk4YzVlZTQ0YzY3ZDhmYjdmNWQ2 ZDk1YTEwHhcNMjUxMjA2MDEwMTE5WhcNMjUxMjA3MDEwMTE5WjAzMTEwLwYDVQQD EyhhMjQ0YzE5YjAzMmNjNmY2YmYwNDBhNDI2NjQxNmQ1ZmUyZmE2MTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI6ZJ4snP3ZABifJW5jUy5baIfL6 1TTbsJCuwDE1ow+gjmnKbH20muwqtnwrVhpOx7wob/gP62Any2h6PgYpDctA5noH qTFNKqwpgI4uelBkyKasluIuVVcvq2gaRrTCutv3HOcg6dIRmxlgvyC6d+Eiz+aB KvF8zH/n7tQlqxUhzKzSme7Rgi+SOziG3DTrENtdIk7MvRwNbXeJNFUYG+6EqTVb NjXGhEZp3bheVeYPJoKaJ5zBn+bvViB85FZ0sVOy65JICsG50yXcT/iyMMHvRFnP VdRavkiQp7/Ci8UsNZDQ3RyeFdJB0OXrCqP6XEhbLKqUHP9lczES8ZnJ7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJEwZsDLMb2vwQKQmZBbV/i+mELMB8GA1UdIwQY MBaAFEw3iez2fgQpjF7kTGfY+39dbZWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERlSjdQWi1CQ21NWHVSTVo5ajdmMTF0bGFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83ZWQ3YjEtYjhmMy00M2YzLTk2ZTMt MWRjNTRkMWMwM2EzLzEvVERlSjdQWi1CQ21NWHVSTVo5ajdmMTF0bGFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC83ZWQ3YjEtYjhmMy00M2YzLTk2ZTMtMWRjNTRkMWMwM2Ez LzEvVERlSjdQWi1CQ21NWHVSTVo5ajdmMTF0bGFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAymLGN/Ki DGP+JqxX5kprcZ+L1zjftWhr/XJtE5OkVrkxrwFmcbygFPGmRooZ664NwtG1PGxF CmVjEL2T8AAO4yATp/H6pOn3koQ5kJ/r2sxrlvwpfmENJ6Z6XwK8nxcKMZqkZf9S gpn2gZMrk/ZxY45gGoGNd+vtZxKOg9wTC2tBOGEQQBHSQG07Yyom8NNy4jTJdYff OiVqp864hdNsAW5IYMcMhIerIjjxJpXhJb3wnRNkPcjZMtmLEgZ4vAEEXx8ea07/ GtlTyroN22A5NSRNtGzNOU48oVaY5++Sd+8DTobNuOlnEGs1DwxZDyoc10n7WCk1 48Y5r3F8WibjsA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:55 2025 by rpki-client