This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft File: TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft (raw, json) Hash identifier: hz1y3pKn0wr2HH2vl76nB6pQSEsZM1inROnFjpWQX6o= Subject key identifier: 37:6A:EA:E2:ED:DB:7D:87:E0:4F:DC:99:B1:08:7E:09:F1:9A:42:32 Authority key identifier: 4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9 Certificate issuer: /CN=4c39055a6990b82408cf1abf29313780e249a4c9 Certificate serial: 019AF540F57231DD63C788961489F666C9BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft Manifest number: 12CC Signing time: Sat 06 Dec 2025 20:01:06 +0000 Manifest this update: Sat 06 Dec 2025 20:01:06 +0000 Manifest next update: Sun 07 Dec 2025 20:01:06 +0000 Files and hashes: 1: 0Y15xTEGHWqAVJeDnj84hoOI0tg.roa (hash: x9AqfYccJqcsHyWL4/sbLsYAD4D5JWU2OTOL9ya8Qzo=) 2: IYab2KOA6Rs-FvpcDRNq2DIlRwA.roa (hash: IVe8cPHTrjQPMjYgTeQH7fMCvrM38QVBDNRacJOqgtc=) 3: TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl (hash: brr6nP6dIeUxY/JpAfFDo8CepKM3C6cMH73iwQV9WDU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:f5:72:31:dd:63:c7:88:96:14:89:f6:66:c9:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c39055a6990b82408cf1abf29313780e249a4c9 Validity Not Before: Dec 6 20:01:06 2025 GMT Not After : Dec 7 20:01:06 2025 GMT Subject: CN=376aeae2eddb7d87e04fdc99b1087e09f19a4232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fc:ff:59:6e:28:42:50:2b:00:4d:73:ec:6f: 53:d3:f2:44:50:fc:c6:2f:a3:2e:60:d6:56:ae:d3: d7:90:2c:e9:39:15:37:69:4d:a4:39:36:cb:a6:e4: 49:85:4d:2c:e5:d9:71:f4:7b:a3:93:09:fc:5a:15: 7a:49:64:f5:fd:69:1f:a3:c7:30:1c:94:99:91:a6: 90:62:0e:15:fa:89:1e:8b:b1:b8:fa:64:5b:0b:be: ea:f0:49:08:35:99:f7:9e:3e:fb:73:45:98:9a:06: 08:fb:92:68:93:30:93:70:07:0c:d1:8c:17:e3:0b: f3:3e:15:19:96:68:5a:c6:c1:de:35:9b:fe:48:d1: d0:6a:39:b1:40:a2:c8:cc:3a:43:9c:d1:a1:71:27: 00:ce:24:76:63:db:01:3a:b6:14:2e:cb:1b:d1:4b: 2e:fe:f6:55:be:6d:e2:9d:e7:2c:9b:47:cc:1d:87: 42:70:55:c4:4f:ce:7a:c5:7e:52:5c:8d:eb:9b:03: 07:1d:57:17:d7:aa:3f:eb:4d:9d:c5:7c:4e:4e:a2: ef:74:a4:5d:31:66:1e:05:cb:8c:ef:f2:99:0f:28: 39:ae:26:d9:1c:2a:fa:89:fe:b5:f1:ac:13:08:8d: bc:ad:79:19:f6:0a:0c:e7:34:5e:60:cf:52:03:8b: ae:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6A:EA:E2:ED:DB:7D:87:E0:4F:DC:99:B1:08:7E:09:F1:9A:42:32 X509v3 Authority Key Identifier: keyid:4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:a1:35:d8:2a:ac:7b:50:ad:4c:80:d4:3a:42:39:d5:82:89: b3:f3:7b:4e:17:23:2f:ea:8a:96:4a:76:b1:6d:7e:d7:51:28: 75:aa:ae:56:27:44:77:8c:3c:58:0e:d4:09:9f:04:0e:77:cb: d3:76:5e:4d:6b:aa:87:b7:3a:04:d2:bc:71:60:5b:7e:f3:74: a5:e8:b5:73:6a:6c:46:67:ff:45:ce:53:7c:9f:53:d3:71:0e: d1:a5:b4:9f:72:21:cc:53:8e:a6:12:ce:b8:c9:f1:3d:5b:25: be:b0:ce:28:4c:b7:c6:ab:74:76:05:b2:e4:2a:88:a0:9d:c9: 47:3e:31:0c:b4:91:b6:bb:cd:9a:6c:32:f2:81:77:26:6d:9a: af:52:22:51:f1:f0:f8:05:4a:f4:c6:c0:db:b0:e7:63:ff:50: 17:2b:de:1d:57:83:5b:a0:f6:e4:5a:42:30:fe:25:e9:0b:2f: ae:43:49:57:e1:5f:f4:45:87:1f:e4:11:10:2c:59:0a:35:cb: 95:27:06:13:52:f3:1c:11:b6:12:8b:23:a3:e3:10:ed:8d:57: ef:76:8a:24:80:ac:53:5a:86:d2:ca:38:4c:10:cc:82:29:f6: 0e:04:e0:30:f9:67:31:35:df:5a:29:d4:13:71:ef:6b:17:a0: 3e:75:e3:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QPVyMd1jx4iWFIn2Zsm/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzkwNTVhNjk5MGI4MjQwOGNmMWFiZjI5MzEzNzgwZTI0 OWE0YzkwHhcNMjUxMjA2MjAwMTA2WhcNMjUxMjA3MjAwMTA2WjAzMTEwLwYDVQQD EygzNzZhZWFlMmVkZGI3ZDg3ZTA0ZmRjOTliMTA4N2UwOWYxOWE0MjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fz/WW4oQlArAE1z7G9T0/JEUPzG L6MuYNZWrtPXkCzpORU3aU2kOTbLpuRJhU0s5dlx9Hujkwn8WhV6SWT1/Wkfo8cw HJSZkaaQYg4V+okei7G4+mRbC77q8EkINZn3nj77c0WYmgYI+5JokzCTcAcM0YwX 4wvzPhUZlmhaxsHeNZv+SNHQajmxQKLIzDpDnNGhcScAziR2Y9sBOrYULssb0Usu /vZVvm3inecsm0fMHYdCcFXET856xX5SXI3rmwMHHVcX16o/602dxXxOTqLvdKRd MWYeBcuM7/KZDyg5ribZHCr6if618awTCI28rXkZ9goM5zReYM9SA4uu/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdq6uLt232H4E/cmbEIfgnxmkIyMB8GA1UdIwQY MBaAFEw5BVppkLgkCM8avykxN4DiSaTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERrRldtbVF1Q1FJenhxX0tURTNnT0pKcE1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kZjZlMjUtOTIzYy00ODM4LTg2NGYt ZDRiMzdlNDRhYjdjLzEvVERrRldtbVF1Q1FJenhxX0tURTNnT0pKcE1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9kZjZlMjUtOTIzYy00ODM4LTg2NGYtZDRiMzdlNDRhYjdj LzEvVERrRldtbVF1Q1FJenhxX0tURTNnT0pKcE1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqqE12Cqs e1CtTIDUOkI51YKJs/N7ThcjL+qKlkp2sW1+11EodaquVidEd4w8WA7UCZ8EDnfL 03ZeTWuqh7c6BNK8cWBbfvN0pei1c2psRmf/Rc5TfJ9T03EO0aW0n3IhzFOOphLO uMnxPVslvrDOKEy3xqt0dgWy5CqIoJ3JRz4xDLSRtrvNmmwy8oF3Jm2ar1IiUfHw +AVK9MbA27DnY/9QFyveHVeDW6D25FpCMP4l6QsvrkNJV+Ff9EWHH+QRECxZCjXL lScGE1LzHBG2Eosjo+MQ7Y1X73aKJICsU1qG0so4TBDMgin2DgTgMPlnMTXfWinU E3HvaxegPnXjEg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:50:41 2025 by rpki-client