This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft File: TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft (raw, json) Hash identifier: GMZYsweFTRo5wWaTL6TXrMFFIhF+cEk6a6RBvNRBeZo= Subject key identifier: F1:EA:41:B5:5A:78:CA:B6:E1:27:80:1E:5C:F1:3F:D6:3A:45:C6:69 Authority key identifier: 4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E Certificate issuer: /CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e Certificate serial: 019AF0F5D91A9B7B30D2A79A3E974EED3A5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft Manifest number: 0EA6 Signing time: Sat 06 Dec 2025 00:00:34 +0000 Manifest this update: Sat 06 Dec 2025 00:00:34 +0000 Manifest next update: Sun 07 Dec 2025 00:00:34 +0000 Files and hashes: 1: NgIKF8jcDLCHN3aJD8aULMWPG30.roa (hash: 9imCN3WetXg8Q1ELNvwqDIt+zXYLct6tp7egk/4AdG8=) 2: TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl (hash: qcGMIa2qBwKqT1NLRLBXzvsw5GebLtv9FufSEQLdxkA=) 3: k_nIf6wVx1Xdxat4zYtnBqTL13Y.roa (hash: HaoM7rJ6dUREUsX3C7dLkVUY9dcgJCaHV1PnH/ISMtE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:d9:1a:9b:7b:30:d2:a7:9a:3e:97:4e:ed:3a:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e Validity Not Before: Dec 6 00:00:34 2025 GMT Not After : Dec 7 00:00:34 2025 GMT Subject: CN=f1ea41b55a78cab6e127801e5cf13fd63a45c669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d5:50:38:f9:b7:d1:4a:49:71:d3:ad:8e:7e: ae:10:ca:83:8c:0f:ab:2d:7e:48:d2:0a:1b:9f:21: 02:da:fe:b7:93:db:9f:3e:90:95:da:ab:5f:97:44: ee:4c:2a:db:bb:32:d6:6c:62:5f:10:c0:69:4f:5f: 93:7f:7f:8a:5e:4f:f0:8f:59:41:14:2c:63:05:c4: 47:88:a5:c5:b1:c0:b7:e3:4d:f1:76:78:87:b4:0c: 3a:90:a7:2d:0e:59:9d:b1:03:60:82:a5:97:b9:55: 23:a7:01:ed:f0:a0:fe:5d:c4:27:9f:da:50:26:ae: 23:52:6b:73:5d:89:ac:46:8e:8f:ad:9d:3a:ac:d7: d9:40:e5:42:33:b6:15:83:ec:e7:08:6e:7a:6b:28: fa:9a:35:87:ef:14:73:f3:40:f4:6a:b0:33:88:07: 7a:2b:8b:00:94:9a:b8:bd:e2:52:a4:97:55:67:42: c5:30:3e:6a:5b:31:a3:fd:22:dc:ec:b5:e9:95:0f: 21:80:a3:29:ff:24:71:ff:e9:89:2f:a9:d5:5e:a3: b6:01:ff:92:63:1f:fc:c7:c5:d6:01:c5:d1:63:97: cc:04:c0:f6:e7:d3:d3:c5:e3:3e:28:b9:98:e1:6d: 00:ba:b9:55:79:d9:22:1b:3b:10:9f:d2:e2:58:df: e9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EA:41:B5:5A:78:CA:B6:E1:27:80:1E:5C:F1:3F:D6:3A:45:C6:69 X509v3 Authority Key Identifier: keyid:4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e0:97:49:f3:8d:1c:0a:9e:2b:47:66:96:6d:3a:5e:e9:fa: 93:56:4a:19:fa:e3:7e:9c:2a:13:1e:eb:0e:08:0e:5b:f4:e9: 7c:80:ce:c7:17:da:a5:e2:6f:08:ae:00:15:7f:95:bf:a3:1c: 1c:6a:c6:22:db:13:53:32:91:f4:a7:1a:c3:8f:fb:74:d8:33: bc:09:c0:58:85:29:0b:15:7d:ad:5b:66:e0:fe:a0:45:d2:fa: f8:e6:58:13:08:6e:23:40:da:30:34:9d:d0:42:38:ca:73:d8: b3:e2:c7:26:75:51:86:3b:28:c5:ee:32:84:5c:8b:ad:26:84: ed:c9:0f:09:25:5a:8c:1c:af:22:91:0b:b2:b2:f6:b5:68:9b: 60:05:23:53:43:81:ef:a1:8a:9d:41:ec:0b:63:29:c4:42:04: 45:d1:34:f8:97:1c:8d:f6:2a:1c:f8:b2:a9:ea:e3:eb:cf:2f: f6:82:4e:97:03:a7:3a:44:cd:46:a9:13:96:83:a6:5b:c3:ef: f6:97:3a:58:1d:9b:9f:40:5e:d2:20:ad:26:7f:e2:5a:69:44: da:78:6c:a5:36:57:70:c2:76:c5:1a:6c:04:ec:e2:1f:17:37: 6b:d9:cd:53:9e:98:88:ea:25:e4:72:53:c6:b8:f8:91:29:e3: e2:6b:98:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9dkam3sw0qeaPpdO7TpdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzNjMGUxNGQ1N2VhYmMzYjY1ZTM4YTc3MzZiZWJlNDkw OTJlOWUwHhcNMjUxMjA2MDAwMDM0WhcNMjUxMjA3MDAwMDM0WjAzMTEwLwYDVQQD EyhmMWVhNDFiNTVhNzhjYWI2ZTEyNzgwMWU1Y2YxM2ZkNjNhNDVjNjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNVQOPm30UpJcdOtjn6uEMqDjA+r LX5I0gobnyEC2v63k9ufPpCV2qtfl0TuTCrbuzLWbGJfEMBpT1+Tf3+KXk/wj1lB FCxjBcRHiKXFscC3403xdniHtAw6kKctDlmdsQNggqWXuVUjpwHt8KD+XcQnn9pQ Jq4jUmtzXYmsRo6PrZ06rNfZQOVCM7YVg+znCG56ayj6mjWH7xRz80D0arAziAd6 K4sAlJq4veJSpJdVZ0LFMD5qWzGj/SLc7LXplQ8hgKMp/yRx/+mJL6nVXqO2Af+S Yx/8x8XWAcXRY5fMBMD259PTxeM+KLmY4W0AurlVedkiGzsQn9LiWN/pAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHqQbVaeMq24SeAHlzxP9Y6RcZpMB8GA1UdIwQY MBaAFEwzwOFNV+q8O2Xjinc2vr5JCS6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERQQTRVMVg2cnc3WmVPS2R6YS12a2tKTHA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9jNzJhYmUtMzJkYy00ZjE4LTkwNWYt YzFmZjA1NmZjNzZmLzEvVERQQTRVMVg2cnc3WmVPS2R6YS12a2tKTHA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9jNzJhYmUtMzJkYy00ZjE4LTkwNWYtYzFmZjA1NmZjNzZm LzEvVERQQTRVMVg2cnc3WmVPS2R6YS12a2tKTHA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOuCXSfON HAqeK0dmlm06Xun6k1ZKGfrjfpwqEx7rDggOW/TpfIDOxxfapeJvCK4AFX+Vv6Mc HGrGItsTUzKR9Kcaw4/7dNgzvAnAWIUpCxV9rVtm4P6gRdL6+OZYEwhuI0DaMDSd 0EI4ynPYs+LHJnVRhjsoxe4yhFyLrSaE7ckPCSVajByvIpELsrL2tWibYAUjU0OB 76GKnUHsC2MpxEIERdE0+JccjfYqHPiyqerj688v9oJOlwOnOkTNRqkTloOmW8Pv 9pc6WB2bn0Be0iCtJn/iWmlE2nhspTZXcMJ2xRpsBOziHxc3a9nNU56YiOol5HJT xrj4kSnj4muYSg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:23 2025 by rpki-client