This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft File: TdL8TSP9nCQgxASRhxgI7FQkpnA.mft (raw, json) Hash identifier: 5qxlTLtbID1kZfw6HLp6qKFgNAoTFGuEojosx6CAS7A= Subject key identifier: 28:BB:07:E9:C6:1B:8D:2A:9B:88:61:C9:76:BA:C0:DE:16:17:98:2C Authority key identifier: 4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70 Certificate issuer: /CN=4dd2fc4d23fd9c2420c40491871808ec5424a670 Certificate serial: 019AF208B99E1724C4774996E73E5F8E059E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 05:00:49 +0000 Manifest this update: Sat 06 Dec 2025 05:00:49 +0000 Manifest next update: Sun 07 Dec 2025 05:00:49 +0000 Files and hashes: 1: 6PYHTPLOKPA_a6iVYvGQByWG7yU.roa (hash: w5WzWtoII8U9oezorMTaJGrRrTvsQaItUP16lTCSY7s=) 2: TdL8TSP9nCQgxASRhxgI7FQkpnA.crl (hash: S4tRcR9PbRsC7AfaWH7Wvg5G0RSgOao0wny27M3MD6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b9:9e:17:24:c4:77:49:96:e7:3e:5f:8e:05:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd2fc4d23fd9c2420c40491871808ec5424a670 Validity Not Before: Dec 6 05:00:49 2025 GMT Not After : Dec 7 05:00:49 2025 GMT Subject: CN=28bb07e9c61b8d2a9b8861c976bac0de1617982c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:15:83:7f:d7:32:78:a7:a7:d7:ea:9f:3f:f1: 59:2f:31:df:6d:4c:3c:c0:8d:78:4d:03:0c:3d:c5: d8:94:7f:fd:8b:81:6f:0d:a4:57:c3:ca:5c:63:cd: b2:84:9f:f9:af:7f:aa:d2:25:ae:5c:4b:da:0b:fd: 3e:2a:0a:b5:d7:bb:9e:79:a8:50:3b:7c:2b:71:5d: 94:69:9e:d5:34:c7:74:46:52:43:7f:5e:d7:14:32: af:52:a1:43:12:76:5d:3b:e1:54:1c:f7:23:41:c4: 61:a8:ec:ce:90:63:2e:6c:47:a7:96:1a:c3:d0:50: 25:1b:47:a0:5d:b8:9d:c1:dd:e1:86:8b:ff:6d:2b: be:2d:33:88:e3:04:de:79:97:98:f5:35:bc:f2:a5: 97:32:ad:f0:f5:7c:55:74:46:32:a3:72:9a:b2:10: 88:69:3e:b5:60:36:c8:03:0a:3e:7c:f7:0f:e6:d7: d7:88:20:19:8d:bb:a6:1e:3f:ec:1e:c1:8e:39:90: e3:fc:a1:4a:aa:b5:1c:f5:23:b2:83:ac:d5:13:65: 9b:07:64:5b:87:ef:fe:bf:ec:40:db:46:10:3f:d4: 0b:51:ce:d9:90:56:9a:de:52:87:4d:93:89:70:fb: 89:80:16:ad:51:1a:38:c6:35:49:ba:ca:ca:bf:2e: 6c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BB:07:E9:C6:1B:8D:2A:9B:88:61:C9:76:BA:C0:DE:16:17:98:2C X509v3 Authority Key Identifier: keyid:4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:f0:1b:dc:b5:a6:70:ca:90:ee:d6:e9:d3:20:58:ff:d1:5d: 3a:d1:8c:f6:7a:4f:dd:db:fb:b8:64:0c:01:14:ee:5d:34:49: 53:95:10:bc:af:1d:8b:b8:1c:0e:8c:50:84:e8:c0:36:a5:51: 30:fe:8e:ed:6b:64:00:f3:49:76:ef:6b:3b:b3:36:08:56:89: 80:bf:3b:ab:08:d5:de:a0:0b:63:18:6f:09:9d:34:1a:6b:c2: 1d:5a:21:81:a7:3a:df:1f:84:e5:de:66:ca:cf:df:e8:ad:a6: 4d:d3:66:95:23:d4:8a:4a:fa:7d:1a:ad:42:c5:5b:87:33:72: 1c:86:d2:d7:c2:0c:35:bb:a2:a0:27:7d:42:3a:3f:84:4b:91: ce:35:c0:03:4f:80:03:e0:b4:59:69:e7:0b:bb:f7:2a:1f:87: 0d:78:ba:db:5f:a6:e3:5f:37:4f:6a:a2:86:48:91:a0:9b:ac: 9f:be:aa:e6:67:58:ed:02:dc:00:7f:6b:24:07:3a:8a:02:c0: cd:75:2b:58:16:53:63:46:27:5e:bd:d8:99:bf:1e:be:eb:84: 64:50:32:01:8f:30:d4:7e:b1:bf:de:bc:46:ba:c9:20:64:42: e7:f5:8f:eb:d5:b5:d5:c3:17:79:53:e6:74:eb:1c:2f:d1:be: 37:23:1d:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLmeFyTEd0mW5z5fjgWeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDJmYzRkMjNmZDljMjQyMGM0MDQ5MTg3MTgwOGVjNTQy NGE2NzAwHhcNMjUxMjA2MDUwMDQ5WhcNMjUxMjA3MDUwMDQ5WjAzMTEwLwYDVQQD EygyOGJiMDdlOWM2MWI4ZDJhOWI4ODYxYzk3NmJhYzBkZTE2MTc5ODJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhWDf9cyeKen1+qfP/FZLzHfbUw8 wI14TQMMPcXYlH/9i4FvDaRXw8pcY82yhJ/5r3+q0iWuXEvaC/0+Kgq117ueeahQ O3wrcV2UaZ7VNMd0RlJDf17XFDKvUqFDEnZdO+FUHPcjQcRhqOzOkGMubEenlhrD 0FAlG0egXbidwd3hhov/bSu+LTOI4wTeeZeY9TW88qWXMq3w9XxVdEYyo3KashCI aT61YDbIAwo+fPcP5tfXiCAZjbumHj/sHsGOOZDj/KFKqrUc9SOyg6zVE2WbB2Rb h+/+v+xA20YQP9QLUc7ZkFaa3lKHTZOJcPuJgBatURo4xjVJusrKvy5s6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCi7B+nGG40qm4hhyXa6wN4WF5gsMB8GA1UdIwQY MBaAFE3S/E0j/ZwkIMQEkYcYCOxUJKZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRMOFRTUDluQ1FneEFTUmh4Z0k3RlFrcG5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zZThlNDItZGZmYi00MzVkLWJkMmIt ZWI4YjFlY2M0NzQxLzEvVGRMOFRTUDluQ1FneEFTUmh4Z0k3RlFrcG5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8zZThlNDItZGZmYi00MzVkLWJkMmItZWI4YjFlY2M0NzQx LzEvVGRMOFRTUDluQ1FneEFTUmh4Z0k3RlFrcG5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfAb3LWm cMqQ7tbp0yBY/9FdOtGM9npP3dv7uGQMARTuXTRJU5UQvK8di7gcDoxQhOjANqVR MP6O7WtkAPNJdu9rO7M2CFaJgL87qwjV3qALYxhvCZ00GmvCHVohgac63x+E5d5m ys/f6K2mTdNmlSPUikr6fRqtQsVbhzNyHIbS18IMNbuioCd9Qjo/hEuRzjXAA0+A A+C0WWnnC7v3Kh+HDXi621+m4183T2qihkiRoJusn76q5mdY7QLcAH9rJAc6igLA zXUrWBZTY0YnXr3Ymb8evuuEZFAyAY8w1H6xv968RrrJIGRC5/WP69W11cMXeVPm dOscL9G+NyMd9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:30 2025 by rpki-client