This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft File: TdA6WGuXinCqqC4JWKkBUucmedk.mft (raw, json) Hash identifier: eHvGYOcfIawXpsJgZVniDtKNlMOKKeTLY85I/6Nf/m4= Subject key identifier: 50:2C:BE:F8:C4:CA:C6:EB:84:CB:22:17:33:EE:9A:76:D2:9A:01:98 Authority key identifier: 4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9 Certificate issuer: /CN=4dd03a586b978a70aaa82e0958a90152e72679d9 Certificate serial: 019B4437911266B8F16A02512F103E41C5D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft Manifest number: 09EC Signing time: Mon 22 Dec 2025 04:00:50 +0000 Manifest this update: Mon 22 Dec 2025 04:00:50 +0000 Manifest next update: Tue 23 Dec 2025 04:00:50 +0000 Files and hashes: 1: TdA6WGuXinCqqC4JWKkBUucmedk.crl (hash: XIbyZPPmZdkRtN9k2xkFNl1/J+6gi74fgNpUIenGr14=) 2: bMiFWbEVmjXACwoqhdLryOI7ecM.roa (hash: y4qa2SV/D4+dXjdntmc66BpYAvlL021xKDW12tsJ7Ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:91:12:66:b8:f1:6a:02:51:2f:10:3e:41:c5:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd03a586b978a70aaa82e0958a90152e72679d9 Validity Not Before: Dec 22 04:00:50 2025 GMT Not After : Dec 23 04:00:50 2025 GMT Subject: CN=502cbef8c4cac6eb84cb221733ee9a76d29a0198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fc:dd:47:1c:1e:90:c2:10:6d:49:5a:b4:d1: 0a:06:03:ef:55:6e:ca:dd:45:a3:b6:e9:c1:f7:79: 68:89:10:00:5f:ce:21:33:54:69:27:3c:25:ec:3b: d7:ac:cf:99:89:74:9b:9d:da:49:34:16:bd:45:cb: c5:19:2c:0a:9e:22:2d:36:79:86:64:f6:50:4d:c5: 65:34:b6:d9:17:9d:93:6b:3e:17:e7:a9:f8:b8:0d: 71:83:ae:dd:ab:5e:89:5c:fa:d5:0b:c9:dd:07:88: cc:cd:7a:a8:c7:cc:e7:74:18:70:c7:c1:11:7c:3b: f2:50:b6:65:f5:59:aa:cc:fa:10:5a:31:f7:7a:a7: 7c:6b:d0:2e:6d:32:5b:62:6f:5e:79:98:8b:1e:28: 43:ac:85:ba:27:79:1e:56:15:c9:5d:2a:3e:70:07: 27:a9:dd:ba:e5:aa:c6:19:aa:54:f6:2f:89:66:db: 57:63:14:4d:32:77:33:01:9d:fd:29:dd:8b:97:0f: bc:6e:92:2b:ed:06:04:14:a2:6d:d4:b9:7e:19:0e: 64:12:61:8e:a7:82:fc:65:af:e5:2d:eb:63:06:fa: 98:eb:a0:9f:a3:52:10:c1:00:15:08:45:72:52:a4: 4e:cd:6f:22:a8:d6:4d:7b:51:3d:8f:5b:3c:f3:72: b0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2C:BE:F8:C4:CA:C6:EB:84:CB:22:17:33:EE:9A:76:D2:9A:01:98 X509v3 Authority Key Identifier: keyid:4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:1c:98:44:3f:d1:31:f6:f4:88:cc:43:f6:41:e8:1e:a0:8c: 5c:72:5f:7c:5e:69:de:b3:98:fd:12:3a:35:05:b1:b1:ab:fd: f3:dd:e3:fd:79:be:2f:d2:f9:97:cd:34:30:60:5a:46:fc:cf: 71:9f:f7:2a:a0:83:34:ce:b8:f0:90:cb:1f:05:d0:59:9e:92: 91:25:42:f2:d4:f9:00:80:88:5c:cc:b9:c5:57:44:5a:3b:70: c6:47:03:14:85:b3:63:6d:3e:22:c8:95:c1:78:23:27:43:e6: 45:0f:94:f0:2e:67:63:43:77:4a:41:b9:2f:3a:fa:a9:3c:17: 1a:ee:38:ae:b9:a7:16:5b:60:03:f0:cf:58:fe:83:3f:ca:15: f7:ab:03:e7:8b:a6:1b:3a:b7:f4:91:26:67:f3:f7:da:c8:d3: 03:03:ac:ca:5c:3a:2f:7e:66:b9:29:28:06:1c:19:4a:d1:0e: 59:5c:da:d1:7c:d5:6d:73:6a:71:68:ae:f8:73:d9:ee:1c:7b: d9:61:ec:f2:a6:d9:3f:79:3f:32:3b:d6:79:17:73:ec:d6:e5: 4c:67:76:1a:bd:33:0c:c4:63:d7:fc:9d:f1:a5:e3:99:26:9d: b7:e6:09:a4:5a:47:0d:ed:f3:d4:12:1c:a0:c2:04:6f:3b:9f: dd:37:8d:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN5ESZrjxagJRLxA+QcXUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDAzYTU4NmI5NzhhNzBhYWE4MmUwOTU4YTkwMTUyZTcy Njc5ZDkwHhcNMjUxMjIyMDQwMDUwWhcNMjUxMjIzMDQwMDUwWjAzMTEwLwYDVQQD Eyg1MDJjYmVmOGM0Y2FjNmViODRjYjIyMTczM2VlOWE3NmQyOWEwMTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPzdRxwekMIQbUlatNEKBgPvVW7K 3UWjtunB93loiRAAX84hM1RpJzwl7DvXrM+ZiXSbndpJNBa9RcvFGSwKniItNnmG ZPZQTcVlNLbZF52Taz4X56n4uA1xg67dq16JXPrVC8ndB4jMzXqox8zndBhwx8ER fDvyULZl9VmqzPoQWjH3eqd8a9AubTJbYm9eeZiLHihDrIW6J3keVhXJXSo+cAcn qd265arGGapU9i+JZttXYxRNMnczAZ39Kd2Llw+8bpIr7QYEFKJt1Ll+GQ5kEmGO p4L8Za/lLetjBvqY66Cfo1IQwQAVCEVyUqROzW8iqNZNe1E9j1s883KwkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAsvvjEysbrhMsiFzPumnbSmgGYMB8GA1UdIwQY MBaAFE3QOlhrl4pwqqguCVipAVLnJnnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRBNldHdVhpbkNxcUM0SldLa0JVdWNtZWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jOWQ1MjMtMGJiOS00NTczLTk1OTUt NzZhM2ExMGEyNmYyLzEvVGRBNldHdVhpbkNxcUM0SldLa0JVdWNtZWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9jOWQ1MjMtMGJiOS00NTczLTk1OTUtNzZhM2ExMGEyNmYy LzEvVGRBNldHdVhpbkNxcUM0SldLa0JVdWNtZWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhyYRD/R Mfb0iMxD9kHoHqCMXHJffF5p3rOY/RI6NQWxsav9893j/Xm+L9L5l800MGBaRvzP cZ/3KqCDNM648JDLHwXQWZ6SkSVC8tT5AICIXMy5xVdEWjtwxkcDFIWzY20+IsiV wXgjJ0PmRQ+U8C5nY0N3SkG5Lzr6qTwXGu44rrmnFltgA/DPWP6DP8oV96sD54um Gzq39JEmZ/P32sjTAwOsylw6L35muSkoBhwZStEOWVza0XzVbXNqcWiu+HPZ7hx7 2WHs8qbZP3k/MjvWeRdz7NblTGd2Gr0zDMRj1/yd8aXjmSadt+YJpFpHDe3z1BIc oMIEbzuf3TeNog== -----END CERTIFICATE-----Generated at Mon Dec 22 14:29:47 2025 by rpki-client