This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft File: TDOTsqG9eRmFmAeDirHjsAN7i08.mft (raw, json) Hash identifier: 0zYFcNMYtOPhA1Q5Yw6IcuNQkSwQ117EriMiivqvJj8= Subject key identifier: D5:C5:0B:98:B6:B3:DC:C8:14:F4:84:40:CE:23:02:09:8B:43:88:5F Authority key identifier: 4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F Certificate issuer: /CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f Certificate serial: 019AF19B0E6252AF869C6C80DE2DA3CFD716 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft Manifest number: 0E5D Signing time: Sat 06 Dec 2025 03:01:01 +0000 Manifest this update: Sat 06 Dec 2025 03:01:01 +0000 Manifest next update: Sun 07 Dec 2025 03:01:01 +0000 Files and hashes: 1: TDOTsqG9eRmFmAeDirHjsAN7i08.crl (hash: NJKqjDHWqD552vTZsmgCQtxxpkiV9n/5J54D45fk8DQ=) 2: y6xk5yyaeCIuQcfJUMGsvyLuakI.roa (hash: 5cTQO7InxQ4ef2VY7Tlc4nQ2LkIPqai+B4whSvQRHdc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:0e:62:52:af:86:9c:6c:80:de:2d:a3:cf:d7:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f Validity Not Before: Dec 6 03:01:01 2025 GMT Not After : Dec 7 03:01:01 2025 GMT Subject: CN=d5c50b98b6b3dcc814f48440ce2302098b43885f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d9:29:4d:14:d5:1f:e2:af:fd:f1:36:92:4f: d3:94:cd:49:ff:1c:b2:50:69:c9:64:7a:87:cb:61: d7:2f:fe:15:0b:58:cd:34:c5:99:05:ee:30:5e:08: e4:d2:e4:65:04:55:f8:48:99:68:ff:ba:aa:1a:98: a7:df:14:ba:d1:1c:6b:ed:6d:d9:2f:3d:d7:b5:0a: bb:38:cb:c5:91:fe:2d:49:e0:76:c9:1e:cd:b4:be: 10:79:ed:52:d8:28:e2:c7:dd:ce:05:36:bd:7c:dd: 4c:9c:bd:13:79:13:3f:29:82:e7:b7:b7:64:c9:1d: 79:ea:c0:44:ba:3f:b4:bc:2a:af:be:c5:8f:51:dc: 35:08:c1:55:dd:03:f7:65:90:0f:a1:43:ad:67:d0: 36:e3:73:59:45:bf:a0:18:36:9c:a4:f6:00:09:6a: d1:3b:ce:df:8f:1f:7b:0c:03:bf:d4:f2:02:7c:00: 7e:f0:d8:12:3c:17:bd:3e:be:ed:e8:e6:84:af:fa: 29:75:55:b2:59:ae:56:66:2f:af:72:43:e4:02:37: 7e:4d:37:be:c5:a0:f3:40:92:0c:58:68:c3:63:4d: 38:5d:42:26:2d:56:68:f8:a9:e4:19:43:6a:a7:a5: 17:b5:8b:f4:bc:81:fb:33:90:85:0f:90:9d:f6:ab: c3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C5:0B:98:B6:B3:DC:C8:14:F4:84:40:CE:23:02:09:8B:43:88:5F X509v3 Authority Key Identifier: keyid:4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:30:28:24:bf:e2:a7:01:83:2b:96:46:34:7e:44:92:3f:68: c2:44:f4:b4:99:a5:36:32:94:17:6b:a3:44:fe:65:4f:03:34: 9f:0e:76:5c:b5:07:68:7a:5b:30:82:af:96:65:a7:a7:e7:5c: a5:4f:1c:00:3f:c8:52:bc:02:b9:eb:c1:80:1c:c5:93:48:ac: e8:70:f3:f0:04:bf:ed:e8:2f:3f:54:f0:aa:8d:ad:37:46:2b: 64:53:fc:94:3f:d0:8a:0e:a2:55:6f:e5:c4:14:cb:82:51:86: 92:03:5b:6c:93:fd:8e:48:06:41:2d:48:bb:cf:b3:76:ab:5d: 8b:3f:5a:34:c6:0b:6c:fc:72:f4:ad:f6:4d:53:16:6d:13:76: 13:19:97:33:72:89:f6:54:8e:6e:f2:84:50:0e:33:75:9f:0d: d1:99:28:d6:3f:76:c8:ab:40:bd:85:4e:70:2d:05:3d:3d:79: d9:19:b0:9d:59:ab:ec:a8:d6:17:64:bf:53:94:39:0a:ca:15: ee:c6:bb:cc:4d:52:da:5a:0c:de:90:ae:ef:6b:5c:fe:35:f7: 37:78:c1:1b:9f:2e:c8:76:71:8d:af:7e:0b:d9:70:80:40:76: a6:a2:5b:02:31:b2:56:11:ff:b5:f0:f6:45:e0:8a:4e:6f:7b: ed:81:65:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmw5iUq+GnGyA3i2jz9cWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzM5M2IyYTFiZDc5MTk4NTk4MDc4MzhhYjFlM2IwMDM3 YjhiNGYwHhcNMjUxMjA2MDMwMTAxWhcNMjUxMjA3MDMwMTAxWjAzMTEwLwYDVQQD EyhkNWM1MGI5OGI2YjNkY2M4MTRmNDg0NDBjZTIzMDIwOThiNDM4ODVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdkpTRTVH+Kv/fE2kk/TlM1J/xyy UGnJZHqHy2HXL/4VC1jNNMWZBe4wXgjk0uRlBFX4SJlo/7qqGpin3xS60Rxr7W3Z Lz3XtQq7OMvFkf4tSeB2yR7NtL4Qee1S2Cjix93OBTa9fN1MnL0TeRM/KYLnt7dk yR156sBEuj+0vCqvvsWPUdw1CMFV3QP3ZZAPoUOtZ9A243NZRb+gGDacpPYACWrR O87fjx97DAO/1PICfAB+8NgSPBe9Pr7t6OaEr/opdVWyWa5WZi+vckPkAjd+TTe+ xaDzQJIMWGjDY004XUImLVZo+KnkGUNqp6UXtYv0vIH7M5CFD5Cd9qvDMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXFC5i2s9zIFPSEQM4jAgmLQ4hfMB8GA1UdIwQY MBaAFEwzk7KhvXkZhZgHg4qx47ADe4tPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERPVHNxRzllUm1GbUFlRGlySGpzQU43aTA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82MDk0YWYtNzJjNS00ZWI1LTk4ZWEt MGUyZWE2YTAyMTgyLzEvVERPVHNxRzllUm1GbUFlRGlySGpzQU43aTA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi82MDk0YWYtNzJjNS00ZWI1LTk4ZWEtMGUyZWE2YTAyMTgy LzEvVERPVHNxRzllUm1GbUFlRGlySGpzQU43aTA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazAoJL/i pwGDK5ZGNH5Ekj9owkT0tJmlNjKUF2ujRP5lTwM0nw52XLUHaHpbMIKvlmWnp+dc pU8cAD/IUrwCuevBgBzFk0is6HDz8AS/7egvP1Twqo2tN0YrZFP8lD/Qig6iVW/l xBTLglGGkgNbbJP9jkgGQS1Iu8+zdqtdiz9aNMYLbPxy9K32TVMWbRN2ExmXM3KJ 9lSObvKEUA4zdZ8N0Zko1j92yKtAvYVOcC0FPT152RmwnVmr7KjWF2S/U5Q5CsoV 7sa7zE1S2loM3pCu72tc/jX3N3jBG58uyHZxja9+C9lwgEB2pqJbAjGyVhH/tfD2 ReCKTm977YFlyg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:26:28 2025 by rpki-client