This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft File: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft (raw, json) Hash identifier: nEJDTj28EQcnxNxPNeaPXgbD6+ouLv9kPVn3bGvXZcg= Subject key identifier: D6:8C:F2:47:CC:51:05:C4:15:88:72:A7:42:51:90:76:44:CC:7E:21 Authority key identifier: B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6 Certificate issuer: /CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6 Certificate serial: 019B44DCAFA95E134DA36636571CAC4D2A1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft Manifest number: 0CE7 Signing time: Mon 22 Dec 2025 07:01:12 +0000 Manifest this update: Mon 22 Dec 2025 07:01:12 +0000 Manifest next update: Tue 23 Dec 2025 07:01:12 +0000 Files and hashes: 1: DWyS6ktuYXD1HWtRdim_tw6aAHw.roa (hash: ZpPs8QmClGInLrYdfgabA/tiTnRpT7Agrz+vwk6fAyc=) 2: ebklZqmx0-dRJX-3stcdCCjPSZQ.roa (hash: oxCqtL4IdqqluHjcszErTou8uGJlC2MCnMVsPPzgZCM=) 3: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl (hash: fWFl/IEDg0FVudffq5lA88jCREUO8BHi8uUurgJUtIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:af:a9:5e:13:4d:a3:66:36:57:1c:ac:4d:2a:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6 Validity Not Before: Dec 22 07:01:12 2025 GMT Not After : Dec 23 07:01:12 2025 GMT Subject: CN=d68cf247cc5105c4158872a74251907644cc7e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ef:32:0f:16:51:0e:5f:8c:9d:eb:48:1c:c9: 6c:fd:e4:d9:d1:4a:0b:76:f3:ef:c1:23:92:b6:0a: 98:0e:2c:4b:f1:d1:2c:b8:77:a5:75:9c:78:83:e9: 17:78:b5:93:3b:9c:6f:51:c6:bb:09:6c:93:c6:78: 78:b2:b0:b0:3d:ca:b9:05:1c:ca:b3:59:5f:6d:39: 34:ab:0d:fe:9b:46:cf:b4:af:e3:fd:97:a9:b0:09: 05:26:c5:14:6e:90:a8:79:90:08:5b:94:80:6b:c7: 84:6f:5a:01:42:4a:34:5b:e6:09:a7:15:7e:24:a5: 02:53:3e:ad:b7:f5:c6:44:66:4d:c0:d2:66:25:96: 9e:fa:47:d6:3e:8e:b0:e1:b7:df:66:64:31:af:dd: 6a:26:c2:75:28:c0:9d:6a:5a:de:18:75:c3:71:62: 0d:97:97:4d:44:85:f4:5b:b3:96:01:af:25:10:0b: b6:25:48:4d:c5:67:c8:fc:ec:63:dd:78:3a:a9:38: f4:0e:92:61:53:6c:f1:c8:4a:aa:f4:70:40:1a:e7: 26:4b:5f:c8:1a:32:39:e7:d1:9c:38:01:10:4e:d2: b1:a1:be:e2:cc:1f:4f:d5:f4:94:0f:38:b5:c4:be: f2:f0:92:f9:d5:83:c0:f9:69:e5:86:0f:5b:5e:5b: 58:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:8C:F2:47:CC:51:05:C4:15:88:72:A7:42:51:90:76:44:CC:7E:21 X509v3 Authority Key Identifier: keyid:B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:2d:67:c8:19:f9:e1:ff:5e:99:04:80:41:1a:bd:a4:02:8d: 64:8a:89:08:ae:57:9d:21:7e:17:e1:bd:fe:e5:78:75:e5:43: 92:c2:53:fd:87:d4:63:19:8f:ad:24:77:88:fd:35:38:82:9c: d7:4b:c7:d4:fd:bc:f6:2e:10:f3:1a:5b:27:a7:a7:92:8f:05: b4:0b:01:fc:9a:c1:e5:04:9c:1c:e2:f5:14:3c:e2:9c:b6:ac: 3b:01:3b:49:99:f7:d8:15:f9:02:f3:21:15:f1:09:75:9c:34: a1:fa:4e:50:bb:1c:87:1e:52:28:b6:23:d3:af:81:6d:2f:f4: 9c:ae:5f:3e:b2:db:3e:55:6a:54:a4:9c:15:49:94:f2:ff:5a: df:f7:7e:cf:50:b3:92:21:a7:66:35:94:04:cc:28:3a:7c:83: 77:7c:a6:25:1f:14:87:54:d0:17:b4:a9:fd:54:f4:38:27:a6: 11:ff:da:14:e2:73:4e:b1:7e:f4:48:55:a9:e8:a1:2f:8c:40: a4:6b:2f:60:80:a9:2c:0b:d7:ab:16:00:4a:72:01:62:7e:96: b7:6c:ee:85:6c:dc:e8:b6:ad:e9:ee:1d:3b:55:d9:c7:a2:42: 5c:aa:58:0f:b8:29:f5:e8:14:9a:5b:7f:0a:57:64:7a:50:c3: 7e:a3:9f:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3K+pXhNNo2Y2VxysTSocMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2Njc3OWYyMDU1YjI1NGY1ZDViMzI5MmVlYWYwZGQ1Nzk3 NzM3YTYwHhcNMjUxMjIyMDcwMTEyWhcNMjUxMjIzMDcwMTEyWjAzMTEwLwYDVQQD EyhkNjhjZjI0N2NjNTEwNWM0MTU4ODcyYTc0MjUxOTA3NjQ0Y2M3ZTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe8yDxZRDl+MnetIHMls/eTZ0UoL dvPvwSOStgqYDixL8dEsuHeldZx4g+kXeLWTO5xvUca7CWyTxnh4srCwPcq5BRzK s1lfbTk0qw3+m0bPtK/j/ZepsAkFJsUUbpCoeZAIW5SAa8eEb1oBQko0W+YJpxV+ JKUCUz6tt/XGRGZNwNJmJZae+kfWPo6w4bffZmQxr91qJsJ1KMCdalreGHXDcWIN l5dNRIX0W7OWAa8lEAu2JUhNxWfI/Oxj3Xg6qTj0DpJhU2zxyEqq9HBAGucmS1/I GjI559GcOAEQTtKxob7izB9P1fSUDzi1xL7y8JL51YPA+Wnlhg9bXltYawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNaM8kfMUQXEFYhyp0JRkHZEzH4hMB8GA1UdIwQY MBaAFLZnefIFWyVPXVsyku6vDdV5dzemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG1kNThnVmJKVTlkV3pLUzdxOE4xWGwzTjZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xZjgyZTUtMzA5OC00NTNhLWFmNjQt Y2FiNzE3YTgwOWU3LzEvdG1kNThnVmJKVTlkV3pLUzdxOE4xWGwzTjZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8xZjgyZTUtMzA5OC00NTNhLWFmNjQtY2FiNzE3YTgwOWU3 LzEvdG1kNThnVmJKVTlkV3pLUzdxOE4xWGwzTjZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoC1nyBn5 4f9emQSAQRq9pAKNZIqJCK5XnSF+F+G9/uV4deVDksJT/YfUYxmPrSR3iP01OIKc 10vH1P289i4Q8xpbJ6enko8FtAsB/JrB5QScHOL1FDzinLasOwE7SZn32BX5AvMh FfEJdZw0ofpOULschx5SKLYj06+BbS/0nK5fPrLbPlVqVKScFUmU8v9a3/d+z1Cz kiGnZjWUBMwoOnyDd3ymJR8Uh1TQF7Sp/VT0OCemEf/aFOJzTrF+9EhVqeihL4xA pGsvYICpLAvXqxYASnIBYn6Wt2zuhWzc6Lat6e4dO1XZx6JCXKpYD7gp9egUmlt/ CldkelDDfqOfnw== -----END CERTIFICATE-----Generated at Mon Dec 22 09:42:27 2025 by rpki-client