This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json) Hash identifier: SG7Jv+A7DRW+AnRIucO5wG1/0mVyJUgKHuRLVxMvZ1Y= Subject key identifier: AE:28:0E:10:51:23:F5:14:20:77:AE:B4:76:09:9B:88:1C:45:AB:34 Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9 Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9 Certificate serial: 019B3CEC4E39B0F4DFE1144C01D6A0E793CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft Manifest number: 0BF4 Signing time: Sat 20 Dec 2025 18:01:18 +0000 Manifest this update: Sat 20 Dec 2025 18:01:18 +0000 Manifest next update: Sun 21 Dec 2025 18:01:18 +0000 Files and hashes: 1: BGPcLkk4F9FLxsMbGn-M_F2CXto.roa (hash: PqbiTHE+O2cRLL+2/Q85oltHntGJN/X4GOAuPJ95eug=) 2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: hJLgbLNXYX1YNKdDBTXCjHHQ2z7zaejIuuiIUZ7GkCo=) 3: nGObtVTwcFKea1knaujpvqhbims.roa (hash: l9jwJiOaQQcxbUJC1OWeTnOmsW+JZFElguXsrGzJSD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:4e:39:b0:f4:df:e1:14:4c:01:d6:a0:e7:93:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9 Validity Not Before: Dec 20 18:01:18 2025 GMT Not After : Dec 21 18:01:18 2025 GMT Subject: CN=ae280e105123f5142077aeb476099b881c45ab34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:12:cb:4f:bf:d7:6c:84:6f:ca:32:bc:22:bd: 00:07:7e:80:1b:b6:c2:8d:6f:83:1e:64:5a:c9:eb: ac:d7:c9:7c:8c:9a:85:6b:40:bf:e3:b5:2d:9a:80: 1e:5e:65:41:23:13:79:13:bc:7f:76:a5:16:a9:e0: dd:29:20:ae:a6:20:52:71:9c:b8:76:0c:b7:3a:68: 1e:2e:3c:90:a0:a2:f9:f3:85:2e:1d:c4:cf:e8:21: 50:64:61:28:5d:8c:b2:9d:ef:53:fe:97:78:c6:e2: 68:13:7b:88:ac:5a:03:4f:50:99:c1:e7:a4:ea:97: 19:83:17:5e:c7:9c:ee:c6:34:b9:d1:e2:89:9a:cb: f4:d8:f7:6e:14:a1:5e:78:7a:0b:40:6f:c0:bc:51: b0:63:80:74:a6:87:a1:cd:3b:8b:87:16:87:d6:ad: be:e1:d4:f7:6a:80:d9:6d:1f:0d:5a:75:f6:fa:50: db:69:b2:30:66:08:80:0a:90:9c:03:5e:ef:f9:3f: 03:28:62:90:c2:81:1f:61:f8:95:8d:38:b6:ee:78: 92:26:71:e9:9d:c3:54:76:a3:e8:be:54:b4:76:9b: 8f:78:02:37:f4:fb:81:69:b5:d2:b7:bc:4d:3f:bb: 1f:28:29:6a:9b:db:35:e9:3a:a6:22:6c:55:54:cb: 7f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:28:0E:10:51:23:F5:14:20:77:AE:B4:76:09:9B:88:1C:45:AB:34 X509v3 Authority Key Identifier: keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:8b:d1:b1:d3:bf:16:e5:bb:92:33:9c:fd:d2:0f:6d:71:12: 33:6d:fc:10:4e:08:f7:b2:16:e2:61:a0:ef:4f:87:7d:01:c9: f5:50:52:a6:0f:51:7e:50:60:c5:0f:43:92:1a:2e:1e:ff:79: 6b:64:74:36:cb:69:23:83:dd:24:9a:90:c9:fa:eb:22:da:4d: 5a:ba:a0:1f:e3:0f:cf:45:a8:19:d3:dd:c8:8f:57:39:81:46: 17:93:2c:45:cb:0a:d6:16:be:e3:51:54:0e:3a:88:f4:27:15: 44:b4:2f:19:5d:6f:c7:e3:7e:a2:72:17:5e:ea:8b:ef:17:0a: bf:7b:7d:b7:80:01:d2:e7:ed:26:57:25:93:80:06:36:cf:7d: e9:6a:5f:5f:4c:6b:75:75:d8:1c:9c:aa:07:ba:56:2f:93:99: 2a:70:f4:e2:6e:ef:97:8a:2f:bf:1e:5e:a6:08:8c:f9:74:4f: 6c:f4:4a:3c:a9:52:ee:35:7d:af:52:26:84:de:74:66:a1:d7: 51:49:f1:4e:9b:e7:14:9e:29:19:ad:45:cc:6d:37:bf:d5:64: 5f:94:92:42:3e:af:7c:e0:11:18:f5:bf:17:e9:83:c8:50:8d: 04:b5:9b:73:5d:ac:60:7b:10:6d:b0:38:0f:b6:cd:8b:66:0d: 24:b6:a2:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87E45sPTf4RRMAdag55PLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzlmOGI4ZmViYWI2ZDIwOWEyNDk4MWUzOTlmZDYwNDMy ZTFjYzkwHhcNMjUxMjIwMTgwMTE4WhcNMjUxMjIxMTgwMTE4WjAzMTEwLwYDVQQD EyhhZTI4MGUxMDUxMjNmNTE0MjA3N2FlYjQ3NjA5OWI4ODFjNDVhYjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RLLT7/XbIRvyjK8Ir0AB36AG7bC jW+DHmRayeus18l8jJqFa0C/47UtmoAeXmVBIxN5E7x/dqUWqeDdKSCupiBScZy4 dgy3OmgeLjyQoKL584UuHcTP6CFQZGEoXYyyne9T/pd4xuJoE3uIrFoDT1CZweek 6pcZgxdex5zuxjS50eKJmsv02PduFKFeeHoLQG/AvFGwY4B0poehzTuLhxaH1q2+ 4dT3aoDZbR8NWnX2+lDbabIwZgiACpCcA17v+T8DKGKQwoEfYfiVjTi27niSJnHp ncNUdqPovlS0dpuPeAI39PuBabXSt7xNP7sfKClqm9s16TqmImxVVMt/+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4oDhBRI/UUIHeutHYJm4gcRas0MB8GA1UdIwQY MBaAFEw5+Lj+urbSCaJJgeOZ/WBDLhzJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84NGJiZTMtNGM2MS00MDMzLWI5YWYt OTMyMGZlMTNlNWZlLzEvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi84NGJiZTMtNGM2MS00MDMzLWI5YWYtOTMyMGZlMTNlNWZl LzEvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIvRsdO/ FuW7kjOc/dIPbXESM238EE4I97IW4mGg70+HfQHJ9VBSpg9RflBgxQ9DkhouHv95 a2R0NstpI4PdJJqQyfrrItpNWrqgH+MPz0WoGdPdyI9XOYFGF5MsRcsK1ha+41FU DjqI9CcVRLQvGV1vx+N+onIXXuqL7xcKv3t9t4AB0uftJlclk4AGNs996WpfX0xr dXXYHJyqB7pWL5OZKnD04m7vl4ovvx5epgiM+XRPbPRKPKlS7jV9r1ImhN50ZqHX UUnxTpvnFJ4pGa1FzG03v9VkX5SSQj6vfOARGPW/F+mDyFCNBLWbc12sYHsQbbA4 D7bNi2YNJLai5A== -----END CERTIFICATE-----Generated at Sat Dec 20 20:47:48 2025 by rpki-client