This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft File: TDJWN81N6a_lO9TxIav2IkX2cU8.mft (raw, json) Hash identifier: hp2ewAnVFGYX8jzaodZehQ3HLK6TGH0K9Fg6J2eOfzY= Subject key identifier: DB:7B:21:FC:59:84:D4:F3:E3:75:06:75:E5:3F:86:B9:AD:21:01:A6 Authority key identifier: 4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F Certificate issuer: /CN=4c325637cd4de9afe53bd4f121abf62245f6714f Certificate serial: 019AF3890F3FBD2B4F9EBEE0ECC41A39B30A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft Manifest number: 0857 Signing time: Sat 06 Dec 2025 12:00:36 +0000 Manifest this update: Sat 06 Dec 2025 12:00:36 +0000 Manifest next update: Sun 07 Dec 2025 12:00:36 +0000 Files and hashes: 1: LYDDQOnitFMTtAyGKwDs2TyB_cA.roa (hash: sjSPKMVEsY4HYjeMnDvZAekbl4IrY01T9jduMhK7Jbc=) 2: TDJWN81N6a_lO9TxIav2IkX2cU8.crl (hash: u8nIdrLz7dvwtcTXpi3Bf+J7r+Y6WgAy2cuoi0wK1yg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:0f:3f:bd:2b:4f:9e:be:e0:ec:c4:1a:39:b3:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c325637cd4de9afe53bd4f121abf62245f6714f Validity Not Before: Dec 6 12:00:36 2025 GMT Not After : Dec 7 12:00:36 2025 GMT Subject: CN=db7b21fc5984d4f3e3750675e53f86b9ad2101a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e6:1e:89:11:fb:fe:ff:6a:3a:e5:d8:b3:7f: 81:84:26:d9:13:d4:99:b3:c8:86:e2:60:73:c3:58: 72:de:12:2e:fb:1d:55:ba:4e:d2:02:57:b4:7a:4f: 7b:56:54:4e:4f:57:3c:2e:35:2b:25:22:8a:57:d7: bc:b8:5c:9e:84:12:92:8f:02:b3:f5:45:d0:98:98: e3:78:f1:d2:a6:a9:10:f5:98:e5:b4:34:af:a1:b2: a2:0f:2f:c3:33:e7:b0:80:d1:e9:ba:1b:ff:7f:e7: 5b:29:26:fb:f6:98:49:b4:b7:3c:d3:ba:e7:77:27: 48:c9:f1:ec:29:31:9f:69:95:dd:62:1e:08:80:23: cb:2d:85:28:96:c4:9c:ec:bf:49:a0:d3:a5:33:ac: 6f:7e:71:f4:1a:19:79:d9:89:d1:c2:de:df:52:55: af:7a:ec:f0:c9:c4:ab:37:6a:cf:3f:65:1f:f4:a5: 42:39:3d:fe:b6:fa:01:a1:48:d2:c7:3b:29:93:46: be:00:0f:f9:5b:17:fe:0e:1f:4e:c5:01:09:36:6a: 98:28:f2:cd:85:89:af:76:3f:b8:29:24:d1:71:56: 98:1c:8a:0c:70:91:75:51:f8:3a:7c:35:d5:36:85: e6:94:f0:77:bc:2f:7d:47:b2:99:6a:25:f4:3b:34: 5a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7B:21:FC:59:84:D4:F3:E3:75:06:75:E5:3F:86:B9:AD:21:01:A6 X509v3 Authority Key Identifier: keyid:4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:68:68:57:57:df:ec:2c:b9:e7:87:53:c1:ea:22:35:42:3a: 5b:b8:95:36:10:69:8d:05:c8:15:22:3d:7f:3d:c5:d7:11:34: 57:af:8a:4c:ba:ed:aa:f3:d6:ee:44:55:fe:93:0c:b6:5f:5a: b6:ee:82:50:7b:72:e4:1a:8a:f0:8e:1a:6b:44:a4:c9:78:c5: 10:92:30:dc:a7:7b:b8:30:f8:7b:ac:da:36:2b:d8:46:8a:4b: fc:4e:b8:8c:ab:07:5c:0e:1e:20:78:02:c7:3c:8b:c1:c3:07: 78:2d:c8:3c:8d:5b:4c:42:f9:b6:13:07:21:0c:f9:23:6c:e7: 76:06:82:e9:04:90:64:56:68:75:d9:2f:ea:f8:0b:18:eb:9b: 96:82:e2:e7:c0:71:3e:cd:23:1a:d7:69:34:dc:ec:b7:61:23: 49:27:49:15:a5:f6:c3:e1:45:24:cb:ab:21:1a:98:7f:25:02: ff:7d:15:f8:75:3b:35:05:fc:0b:29:90:23:78:8c:f2:c0:34: e9:78:7b:b0:d4:aa:79:4d:01:94:2f:62:fe:11:93:7e:3c:15: fc:3d:e8:a9:cf:34:64:99:ec:d1:d4:ca:ab:c5:84:7e:e8:3c: 7a:eb:c2:fa:2f:c1:41:0e:96:f2:6d:61:6e:b6:09:7d:44:05: 02:20:43:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziQ8/vStPnr7g7MQaObMKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzI1NjM3Y2Q0ZGU5YWZlNTNiZDRmMTIxYWJmNjIyNDVm NjcxNGYwHhcNMjUxMjA2MTIwMDM2WhcNMjUxMjA3MTIwMDM2WjAzMTEwLwYDVQQD EyhkYjdiMjFmYzU5ODRkNGYzZTM3NTA2NzVlNTNmODZiOWFkMjEwMWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleYeiRH7/v9qOuXYs3+BhCbZE9SZ s8iG4mBzw1hy3hIu+x1Vuk7SAle0ek97VlROT1c8LjUrJSKKV9e8uFyehBKSjwKz 9UXQmJjjePHSpqkQ9ZjltDSvobKiDy/DM+ewgNHpuhv/f+dbKSb79phJtLc807rn dydIyfHsKTGfaZXdYh4IgCPLLYUolsSc7L9JoNOlM6xvfnH0Ghl52YnRwt7fUlWv euzwycSrN2rPP2Uf9KVCOT3+tvoBoUjSxzspk0a+AA/5Wxf+Dh9OxQEJNmqYKPLN hYmvdj+4KSTRcVaYHIoMcJF1Ufg6fDXVNoXmlPB3vC99R7KZaiX0OzRagwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNt7IfxZhNTz43UGdeU/hrmtIQGmMB8GA1UdIwQY MBaAFEwyVjfNTemv5TvU8SGr9iJF9nFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERKV044MU42YV9sTzlUeElhdjJJa1gyY1U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OTg0MTUtNDQ1ZS00NjhkLTlmOGUt ZDE5ODM5MjA2Y2U2LzEvVERKV044MU42YV9sTzlUeElhdjJJa1gyY1U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81OTg0MTUtNDQ1ZS00NjhkLTlmOGUtZDE5ODM5MjA2Y2U2 LzEvVERKV044MU42YV9sTzlUeElhdjJJa1gyY1U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWhoV1ff 7Cy554dTweoiNUI6W7iVNhBpjQXIFSI9fz3F1xE0V6+KTLrtqvPW7kRV/pMMtl9a tu6CUHty5BqK8I4aa0SkyXjFEJIw3Kd7uDD4e6zaNivYRopL/E64jKsHXA4eIHgC xzyLwcMHeC3IPI1bTEL5thMHIQz5I2zndgaC6QSQZFZoddkv6vgLGOubloLi58Bx Ps0jGtdpNNzst2EjSSdJFaX2w+FFJMurIRqYfyUC/30V+HU7NQX8CymQI3iM8sA0 6Xh7sNSqeU0BlC9i/hGTfjwV/D3oqc80ZJns0dTKq8WEfug8euvC+i/BQQ6W8m1h brYJfUQFAiBDMA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:50:27 2025 by rpki-client