This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json) Hash identifier: jfIdqsE3EsjUOiVO/COEOFbHTkiiVA/l2OTf2a4z8DI= Subject key identifier: 82:3B:BA:BF:84:29:9E:35:75:8A:48:50:3C:59:3C:59:6A:E7:F2:C0 Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18 Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318 Certificate serial: 019B6EB459686583112482D27E539CDE3AE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft Manifest number: 1734 Signing time: Tue 30 Dec 2025 10:01:11 +0000 Manifest this update: Tue 30 Dec 2025 10:01:11 +0000 Manifest next update: Wed 31 Dec 2025 10:01:11 +0000 Files and hashes: 1: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: 9fWmQVLO6bf1BLltA+PFq8g6o/bN2RpCpf6kwSu6L74=) 2: gjoyy0FPdmf2zrdNnLaoUXfqkA8.roa (hash: RTgHJsDHudCpwL05o4vGq9BVppolqh2KaIXjwJZDWfA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:b4:59:68:65:83:11:24:82:d2:7e:53:9c:de:3a:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318 Validity Not Before: Dec 30 10:01:11 2025 GMT Not After : Dec 31 10:01:11 2025 GMT Subject: CN=823bbabf84299e35758a48503c593c596ae7f2c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c9:7b:4f:dd:df:5f:43:ab:95:66:4f:36:41: f0:e7:c1:d7:4c:00:93:1b:28:8f:95:98:c6:d6:6b: 0a:e7:5e:ba:fb:31:08:2c:b5:f5:e2:69:d8:6b:ae: ed:99:26:b1:17:6f:29:38:33:71:da:fd:f9:41:ec: af:9f:d2:0f:3a:25:e5:aa:e8:91:44:53:58:de:2e: 84:07:3d:2d:60:5b:fb:08:a9:b9:54:c4:3f:fc:3f: f2:70:a6:5d:a2:80:27:10:5c:29:ea:3d:5b:78:04: 22:0a:e4:11:52:87:45:7d:47:77:03:cc:18:1d:06: 0c:ef:43:aa:fe:61:61:b3:ef:c3:91:11:71:c5:27: 71:fd:df:53:74:de:af:c4:cc:05:87:4b:a7:7f:0b: 34:1c:2d:b9:db:6a:96:49:a9:f5:6a:79:55:12:ad: b4:be:57:13:72:ac:2e:e5:9d:70:fc:72:9e:b1:b4: 28:ec:a5:dc:27:aa:b0:0d:78:df:f2:db:be:85:76: 21:10:8d:ce:37:14:b5:35:13:e5:84:c2:2c:df:85: 9a:e2:61:7f:42:2a:d5:02:7e:44:21:e3:af:ed:9f: 59:31:f3:cc:33:45:8c:3e:1b:b6:ab:0c:5a:b2:80: f5:20:44:ff:86:9f:84:29:ba:04:a0:89:45:6a:3b: c7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:3B:BA:BF:84:29:9E:35:75:8A:48:50:3C:59:3C:59:6A:E7:F2:C0 X509v3 Authority Key Identifier: keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:d5:70:eb:e3:35:46:46:6f:ac:98:91:c6:99:08:e6:b8:16: c0:3f:17:9a:ce:c4:48:37:37:b5:86:3a:39:35:45:ed:03:85: 2b:27:2d:21:b1:2a:5a:50:3b:bf:f4:e0:d6:a0:90:f8:90:9f: 25:cf:98:38:86:5d:af:df:fd:58:64:46:1b:de:26:14:e1:27: 6e:2c:40:98:8f:d6:28:34:c9:39:41:7d:64:ee:b0:3b:65:1e: d9:d9:12:79:56:eb:25:5d:a0:f8:1f:e2:bd:d3:fd:b3:c9:93: c1:b3:ca:5c:e4:68:2d:84:5b:1c:59:e3:4d:69:30:6d:e3:6a: a5:c0:b6:b4:00:f6:4c:61:96:4a:69:a0:78:77:3e:28:44:b8: 4f:96:7d:0f:02:c1:49:6b:8d:57:d6:82:2c:a2:c2:f4:c8:5c: cc:a7:1d:8f:ae:be:2e:8d:ae:b8:89:22:3c:fa:d5:63:59:5a: 86:c8:0e:ac:e8:bf:8a:54:ff:d2:b7:6b:6b:95:dc:27:3e:72: 99:81:ff:9f:ec:a7:95:f3:90:05:55:01:ee:fc:1a:79:ab:d6: 32:d3:47:d2:f4:4c:0e:fe:34:a1:94:79:c1:14:4d:c3:6d:64: 92:75:c7:40:53:c5:75:a2:f3:76:15:90:05:e1:4d:08:cd:4a: 57:d6:a1:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtutFloZYMRJILSflOc3jrlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDZlNzc5YTZjMGYwYjA5MjE2NjIyMzgwNDY3ZGNlMmQx MWEzMTgwHhcNMjUxMjMwMTAwMTExWhcNMjUxMjMxMTAwMTExWjAzMTEwLwYDVQQD Eyg4MjNiYmFiZjg0Mjk5ZTM1NzU4YTQ4NTAzYzU5M2M1OTZhZTdmMmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMl7T93fX0OrlWZPNkHw58HXTACT GyiPlZjG1msK5166+zEILLX14mnYa67tmSaxF28pODNx2v35Qeyvn9IPOiXlquiR RFNY3i6EBz0tYFv7CKm5VMQ//D/ycKZdooAnEFwp6j1beAQiCuQRUodFfUd3A8wY HQYM70Oq/mFhs+/DkRFxxSdx/d9TdN6vxMwFh0unfws0HC2522qWSan1anlVEq20 vlcTcqwu5Z1w/HKesbQo7KXcJ6qwDXjf8tu+hXYhEI3ONxS1NRPlhMIs34Wa4mF/ QirVAn5EIeOv7Z9ZMfPMM0WMPhu2qwxasoD1IET/hp+EKboEoIlFajvHOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFII7ur+EKZ41dYpIUDxZPFlq5/LAMB8GA1UdIwQY MBaAFE3W53mmwPCwkhZiI4BGfc4tEaMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mMGIyODUtZDAzOC00ZGU2LTkzNzQt YzQ3MmU2MmViZWE4LzEvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9mMGIyODUtZDAzOC00ZGU2LTkzNzQtYzQ3MmU2MmViZWE4 LzEvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN9Vw6+M1 RkZvrJiRxpkI5rgWwD8Xms7ESDc3tYY6OTVF7QOFKyctIbEqWlA7v/Tg1qCQ+JCf Jc+YOIZdr9/9WGRGG94mFOEnbixAmI/WKDTJOUF9ZO6wO2Ue2dkSeVbrJV2g+B/i vdP9s8mTwbPKXORoLYRbHFnjTWkwbeNqpcC2tAD2TGGWSmmgeHc+KES4T5Z9DwLB SWuNV9aCLKLC9MhczKcdj66+Lo2uuIkiPPrVY1lahsgOrOi/ilT/0rdra5XcJz5y mYH/n+ynlfOQBVUB7vwaeavWMtNH0vRMDv40oZR5wRRNw21kknXHQFPFdaLzdhWQ BeFNCM1KV9ahHQ== -----END CERTIFICATE-----Generated at Tue Dec 30 12:29:25 2025 by rpki-client