This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft File: _tdzOdk4vvCHWZKTwgGzufgiNiM.mft (raw, json) Hash identifier: DccRjt8BGPW27gUMeLSblbQRM2zSkt+4BMt+jRYuzt0= Subject key identifier: DC:59:CE:F7:B9:08:FB:F6:EB:E2:E6:C1:BB:DD:EE:0E:9D:39:16:D4 Authority key identifier: FE:D7:73:39:D9:38:BE:F0:87:59:92:93:C2:01:B3:B9:F8:22:36:23 Certificate issuer: /CN=fed77339d938bef087599293c201b3b9f8223623 Certificate serial: 019AF464D501FBF25B472ABEBC0C33FDF603 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 16:00:40 +0000 Manifest this update: Sat 06 Dec 2025 16:00:40 +0000 Manifest next update: Sun 07 Dec 2025 16:00:40 +0000 Files and hashes: 1: JiqQ-b59vNl0MF5eVXzf0TfeO3c.roa (hash: OKAd29RpT9wnjVFO/8cLOZm/b/ev+jNX/rx5kLKiews=) 2: _tdzOdk4vvCHWZKTwgGzufgiNiM.crl (hash: bLfEotUuZoPsd5FWMbdgSy18s8Huf08fG5k97gLMtoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.crl rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:d5:01:fb:f2:5b:47:2a:be:bc:0c:33:fd:f6:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fed77339d938bef087599293c201b3b9f8223623 Validity Not Before: Dec 6 16:00:40 2025 GMT Not After : Dec 7 16:00:40 2025 GMT Subject: CN=dc59cef7b908fbf6ebe2e6c1bbddee0e9d3916d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b4:6c:34:52:25:53:64:9c:3e:f0:2f:6d:19: ef:7a:77:61:02:e3:c4:7a:bd:a6:36:e7:c4:6d:6b: 79:33:dd:8d:1c:6b:b5:2a:00:42:01:80:ad:ec:93: 9d:fc:13:c6:48:03:c6:11:f6:a0:e8:aa:a4:bf:54: f5:b3:3f:4b:ec:25:d9:41:d7:41:59:78:29:3b:57: 1b:fa:7b:69:b7:95:f9:35:be:52:5d:86:42:4d:59: 42:e6:02:69:81:4d:f8:c6:78:c5:5c:ba:ce:1d:60: 08:b8:50:50:68:88:76:f6:41:e5:30:59:7a:37:46: 51:a1:a8:d9:33:21:86:9d:6b:10:b1:90:29:bf:c3: 14:60:e7:b9:18:45:ed:cf:5f:ce:d6:49:1b:c7:ba: 73:98:bc:66:7a:c0:ff:ce:95:36:7d:59:8b:b5:76: 86:cf:15:06:34:c2:06:89:77:81:54:f5:3e:c9:f7: 55:0e:9b:d6:32:a0:1a:29:dc:bc:85:a9:8b:90:95: 0b:23:f3:99:9b:f0:4e:9a:96:40:c3:8d:65:ab:c0: 97:1d:e7:d2:44:e7:29:ea:bb:3c:b0:9a:a2:d0:d0: d4:c3:00:e0:20:28:d1:de:bb:65:85:d9:11:f5:8e: 5e:00:88:5a:38:f0:c3:d2:dd:5a:78:30:99:43:f6: 8a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:59:CE:F7:B9:08:FB:F6:EB:E2:E6:C1:BB:DD:EE:0E:9D:39:16:D4 X509v3 Authority Key Identifier: keyid:FE:D7:73:39:D9:38:BE:F0:87:59:92:93:C2:01:B3:B9:F8:22:36:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:09:c7:00:b8:10:14:e9:91:eb:c2:8a:d4:dd:6a:05:9a:b7: 59:2d:d6:a8:05:bc:fe:56:90:a4:44:34:21:3c:dc:4c:40:49: c2:fc:9c:4c:6b:7c:8c:ae:17:6e:ac:d0:ad:01:3b:e7:a3:03: fd:49:e5:16:81:63:5b:ee:ee:f1:93:87:67:1a:f5:1c:bf:7b: 3e:17:9b:83:1d:f2:8a:0a:49:54:ba:ed:6c:ec:1d:b3:bb:3a: a2:e7:dc:f4:56:ad:36:8e:52:91:b9:a3:29:2f:2a:18:2a:f9: 18:29:aa:bd:ce:da:e0:e6:46:fb:fb:d3:3e:f5:d2:0a:15:03: ba:62:72:3c:98:ca:c0:88:e6:a5:b8:40:fd:0a:f1:7b:b9:84: 93:eb:5d:03:f1:d0:88:6a:4f:d6:aa:a0:02:47:6e:47:8a:61: 0e:2d:9c:3a:b0:3e:7d:55:a8:ef:ab:f2:68:df:73:a8:9f:17: 1e:42:cd:99:e5:8b:08:6c:d8:74:f3:ab:7e:21:d9:2a:fe:bf: e8:f2:8e:57:99:b6:b6:3a:af:f2:a1:ef:64:b3:d3:e7:6b:76: 24:74:42:d8:79:a9:55:a9:6c:07:e8:ff:ba:a2:61:b8:0d:2b: 79:b6:55:4d:d4:c4:60:50:44:7d:57:46:65:02:71:ed:5d:42: 22:cf:18:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZNUB+/JbRyq+vAwz/fYDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlZDc3MzM5ZDkzOGJlZjA4NzU5OTI5M2MyMDFiM2I5Zjgy MjM2MjMwHhcNMjUxMjA2MTYwMDQwWhcNMjUxMjA3MTYwMDQwWjAzMTEwLwYDVQQD EyhkYzU5Y2VmN2I5MDhmYmY2ZWJlMmU2YzFiYmRkZWUwZTlkMzkxNmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbRsNFIlU2ScPvAvbRnvendhAuPE er2mNufEbWt5M92NHGu1KgBCAYCt7JOd/BPGSAPGEfag6Kqkv1T1sz9L7CXZQddB WXgpO1cb+ntpt5X5Nb5SXYZCTVlC5gJpgU34xnjFXLrOHWAIuFBQaIh29kHlMFl6 N0ZRoajZMyGGnWsQsZApv8MUYOe5GEXtz1/O1kkbx7pzmLxmesD/zpU2fVmLtXaG zxUGNMIGiXeBVPU+yfdVDpvWMqAaKdy8hamLkJULI/OZm/BOmpZAw41lq8CXHefS ROcp6rs8sJqi0NDUwwDgICjR3rtlhdkR9Y5eAIhaOPDD0t1aeDCZQ/aKSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxZzve5CPv26+Lmwbvd7g6dORbUMB8GA1UdIwQY MBaAFP7XcznZOL7wh1mSk8IBs7n4IjYjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3Rkek9kazR2dkNIV1pLVHdnR3p1ZmdpTmlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9iZmI4MTctN2UyZC00NDU4LWJhYjEt ZDE3NTAwMjBjYWY1LzEvX3Rkek9kazR2dkNIV1pLVHdnR3p1ZmdpTmlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9iZmI4MTctN2UyZC00NDU4LWJhYjEtZDE3NTAwMjBjYWY1 LzEvX3Rkek9kazR2dkNIV1pLVHdnR3p1ZmdpTmlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAnHALgQ FOmR68KK1N1qBZq3WS3WqAW8/laQpEQ0ITzcTEBJwvycTGt8jK4XbqzQrQE756MD /UnlFoFjW+7u8ZOHZxr1HL97Phebgx3yigpJVLrtbOwds7s6oufc9FatNo5Skbmj KS8qGCr5GCmqvc7a4OZG+/vTPvXSChUDumJyPJjKwIjmpbhA/Qrxe7mEk+tdA/HQ iGpP1qqgAkduR4phDi2cOrA+fVWo76vyaN9zqJ8XHkLNmeWLCGzYdPOrfiHZKv6/ 6PKOV5m2tjqv8qHvZLPT52t2JHRC2HmpValsB+j/uqJhuA0rebZVTdTEYFBEfVdG ZQJx7V1CIs8Yvg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:28:08 2025 by rpki-client