This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft File: TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft (raw, json) Hash identifier: ID3VYaGc9TW9MvuKZtmZDGWq/slZ4jTUzZsseDSotXs= Subject key identifier: ED:05:C4:1F:D3:DD:A3:DD:99:C6:DF:B6:4B:B2:4F:CB:7F:6D:94:95 Authority key identifier: 4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8 Certificate issuer: /CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8 Certificate serial: 019B2B1C677E5FB9170E39FFFB952DF1BF83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft Manifest number: 177E Signing time: Wed 17 Dec 2025 07:00:40 +0000 Manifest this update: Wed 17 Dec 2025 07:00:40 +0000 Manifest next update: Thu 18 Dec 2025 07:00:40 +0000 Files and hashes: 1: B9-Xs7dhnKZZ3y2oqYpIdAWmlNw.roa (hash: TgNafOFIPNxSy2OvvIzhsdKUEZp12L7C7S2Pd52eKm0=) 2: QNGb0gtG4GRClc-idD7pOZ3NKu4.roa (hash: RBMmyAJB99vMalTNtIMZJrCnoBdNekiveW7iLd5Zyt4=) 3: TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl (hash: k5zvjCMkXYcQqRJ8aiXwQBQbw5jSJWjD+gttMUlsk2k=) 4: uL8wQ5suTSJs6R1LegMqq0w_KnA.roa (hash: q1cpaZXwQ8FTgzr+1V+AjkI0yfC5jTYIkOuwUOw+jNs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:67:7e:5f:b9:17:0e:39:ff:fb:95:2d:f1:bf:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8 Validity Not Before: Dec 17 07:00:40 2025 GMT Not After : Dec 18 07:00:40 2025 GMT Subject: CN=ed05c41fd3dda3dd99c6dfb64bb24fcb7f6d9495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6b:a9:92:2b:b5:19:7c:c4:ee:e8:74:55:bf: 55:5e:b4:0e:32:a6:61:8f:ea:5c:7d:50:64:d4:85: 09:fc:50:27:32:1c:7f:b8:02:68:01:50:6a:c8:6b: 4c:9b:1a:9c:0e:e8:e7:7e:3c:b1:39:c4:f5:1c:ab: e5:c8:52:4b:b3:80:e9:ca:9d:39:6b:31:da:49:97: a2:0b:a8:32:28:1a:72:12:b9:d0:0e:05:e6:68:e6: c1:56:fb:e1:dc:4b:c1:10:82:cd:5e:d9:0b:c3:e9: 49:98:87:44:5a:3e:23:0c:52:fa:b2:de:a0:81:f3: 6f:ec:89:36:66:5d:e6:70:d4:52:99:95:d5:41:bb: 7b:e1:f5:50:25:70:ac:f0:98:a5:4b:4b:c4:12:a9: 3a:39:01:10:07:de:3a:b7:89:96:26:3a:5c:32:66: b9:ea:12:74:0e:f1:56:09:0a:32:0d:8d:41:16:1e: bb:72:27:02:d2:29:4a:34:0d:31:ab:d2:1f:44:91: 71:6c:7b:2a:0f:9b:81:e0:ac:ae:72:8d:be:be:3b: 8c:5d:b7:b6:ca:39:8b:70:97:c4:00:bb:6b:18:89: 8f:29:c5:3c:6c:88:f9:e6:ae:d8:17:f2:0c:b7:e4: 59:13:32:54:ff:b7:76:26:3f:b0:51:33:e6:51:7f: dd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:05:C4:1F:D3:DD:A3:DD:99:C6:DF:B6:4B:B2:4F:CB:7F:6D:94:95 X509v3 Authority Key Identifier: keyid:4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:94:e5:6f:64:81:96:d8:0b:89:e8:8d:bf:03:67:82:8b:f1: b1:ca:fd:bf:e7:1b:15:45:d3:35:e6:fb:4b:8c:08:89:fb:39: 7d:e9:c5:be:6c:e0:41:43:72:7d:4c:ae:5d:bf:95:9f:53:54: 59:a9:33:ad:7b:76:f6:0a:7f:ad:d1:64:6b:92:8f:d9:e9:47: 0a:5a:70:e3:8e:29:66:4f:9b:ff:6c:73:68:6b:dd:2e:e7:a3: b3:17:42:23:fc:2f:13:47:c7:6a:09:0e:54:5c:24:ae:8a:36: 17:7c:e2:e4:e7:4c:79:d0:bf:e2:e8:21:90:7d:de:74:36:44: 5d:57:c4:37:68:53:e9:8f:55:76:eb:ad:ee:03:8f:9f:31:d0: 5f:62:5a:58:cf:79:ff:0d:10:f0:ed:63:d4:1b:33:10:b2:e0: e4:d0:66:8c:33:4f:88:3c:31:b4:07:ed:e7:d2:33:ea:3c:db: 9d:66:39:27:17:f0:7e:32:a2:28:78:7a:3e:5c:56:d6:7c:bc: ce:00:1e:ff:9f:74:f7:30:4f:ed:83:37:f9:f4:54:f1:84:96: 61:46:74:75:c8:aa:3c:e1:6f:ce:b0:75:4b:a4:a3:a4:43:0f: d1:0e:74:10:5f:b1:7b:1e:f0:f0:fa:87:04:0b:39:78:3c:78: c7:f7:f6:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHGd+X7kXDjn/+5Ut8b+DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYzM5MWRjNjE1ZmQ0YTNhZDEwYzBmMmFiOGIwYTUwNmQw MzllZDgwHhcNMjUxMjE3MDcwMDQwWhcNMjUxMjE4MDcwMDQwWjAzMTEwLwYDVQQD EyhlZDA1YzQxZmQzZGRhM2RkOTljNmRmYjY0YmIyNGZjYjdmNmQ5NDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGupkiu1GXzE7uh0Vb9VXrQOMqZh j+pcfVBk1IUJ/FAnMhx/uAJoAVBqyGtMmxqcDujnfjyxOcT1HKvlyFJLs4Dpyp05 azHaSZeiC6gyKBpyErnQDgXmaObBVvvh3EvBEILNXtkLw+lJmIdEWj4jDFL6st6g gfNv7Ik2Zl3mcNRSmZXVQbt74fVQJXCs8JilS0vEEqk6OQEQB946t4mWJjpcMma5 6hJ0DvFWCQoyDY1BFh67cicC0ilKNA0xq9IfRJFxbHsqD5uB4Kyuco2+vjuMXbe2 yjmLcJfEALtrGImPKcU8bIj55q7YF/IMt+RZEzJU/7d2Jj+wUTPmUX/dRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0FxB/T3aPdmcbftkuyT8t/bZSVMB8GA1UdIwQY MBaAFE3DkdxhX9SjrRDA8quLClBtA57YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGNPUjNHRmYxS090RU1EeXE0c0tVRzBEbnRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kNjZhNTgtZmRmNS00OTFlLWI1MTEt ZmQyOTE1ZDRjZDVhLzEvVGNPUjNHRmYxS090RU1EeXE0c0tVRzBEbnRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9kNjZhNTgtZmRmNS00OTFlLWI1MTEtZmQyOTE1ZDRjZDVh LzEvVGNPUjNHRmYxS090RU1EeXE0c0tVRzBEbnRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpTlb2SB ltgLieiNvwNngovxscr9v+cbFUXTNeb7S4wIifs5fenFvmzgQUNyfUyuXb+Vn1NU WakzrXt29gp/rdFka5KP2elHClpw444pZk+b/2xzaGvdLuejsxdCI/wvE0fHagkO VFwkroo2F3zi5OdMedC/4ughkH3edDZEXVfEN2hT6Y9Vduut7gOPnzHQX2JaWM95 /w0Q8O1j1BszELLg5NBmjDNPiDwxtAft59Iz6jzbnWY5JxfwfjKiKHh6PlxW1ny8 zgAe/5909zBP7YM3+fRU8YSWYUZ0dciqPOFvzrB1S6SjpEMP0Q50EF+xex7w8PqH BAs5eDx4x/f2Qg== -----END CERTIFICATE-----Generated at Wed Dec 17 16:47:18 2025 by rpki-client