This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft File: tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft (raw, json) Hash identifier: dvMPpQ0jmOPayziTYDqHrTIuF1TkpQtemiiS3o896bc= Subject key identifier: DD:74:DA:1F:B3:EB:4E:3E:A6:C5:66:E9:CA:B9:5C:C1:BF:13:F6:7F Authority key identifier: B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88 Certificate issuer: /CN=b4bdde78415b69c31277c0aac7fca6607d635d88 Certificate serial: 019B3EA3BA43103A2C567921E3E1B8E34356 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 02:01:16 +0000 Manifest this update: Sun 21 Dec 2025 02:01:16 +0000 Manifest next update: Mon 22 Dec 2025 02:01:16 +0000 Files and hashes: 1: 9zCWH-Ac1Rhc3_vCx_Ixlkh16vw.asa (hash: 1GzmLCaUmzKWkWm0Xkaj4ZmWi88kwnMLhp1nR2/73XM=) 2: ag-uYpovt5JPQ3cFAXtXn4zz86A.roa (hash: 2LKnP2sHY9S5jGwYqiGKID4jG+yM+87plZe5I7Vq4ns=) 3: tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl (hash: PQidWCuoGx8P0SBAg0iW4AaMhJon+wUgFag22Ppke9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 02:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:ba:43:10:3a:2c:56:79:21:e3:e1:b8:e3:43:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4bdde78415b69c31277c0aac7fca6607d635d88 Validity Not Before: Dec 21 02:01:16 2025 GMT Not After : Dec 22 02:01:16 2025 GMT Subject: CN=dd74da1fb3eb4e3ea6c566e9cab95cc1bf13f67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:90:81:94:82:0c:12:99:94:75:d8:11:05:89: 40:33:c0:a3:c5:2f:4b:3c:ff:27:7b:71:d7:7f:d6: 0f:01:ad:64:52:e0:17:c4:98:10:4f:0b:38:20:25: 6b:36:03:22:93:5b:30:b5:71:7f:29:92:cf:91:b1: e3:26:f2:17:e1:ed:ab:e2:69:28:b0:53:64:3e:85: cb:7f:85:4a:79:5f:21:e4:54:fe:42:9a:96:5c:cb: 81:50:8c:4d:f9:b3:3b:7d:a3:8b:9f:13:3f:7a:03: 4f:3c:d4:71:1a:f4:ec:35:22:b1:b6:f9:00:07:ec: 59:c9:b6:4d:ca:88:d5:fe:4f:32:7e:75:39:79:cc: e4:00:62:79:94:7e:55:cc:61:86:75:27:1a:22:7f: 18:37:c5:43:bf:db:c3:f5:40:8d:69:13:7a:92:3e: 81:2f:c3:72:59:c0:54:47:a0:bc:13:09:a3:cb:ea: 6c:de:c2:95:c1:17:72:fd:03:a1:7d:5a:78:fe:8c: ca:e1:26:a5:9c:06:bc:2b:14:86:ed:74:6c:bb:ff: dd:5d:b8:3d:52:34:ac:36:ad:1e:ba:23:f9:3a:a7: 5e:a7:2f:c6:6b:04:8d:e8:42:e9:d2:71:80:74:d7: 58:d8:44:80:e1:33:c8:6d:97:11:44:0b:a7:0a:ed: db:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:74:DA:1F:B3:EB:4E:3E:A6:C5:66:E9:CA:B9:5C:C1:BF:13:F6:7F X509v3 Authority Key Identifier: keyid:B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f1:b6:64:6c:f0:c7:ed:5f:ef:d4:50:a5:bb:40:16:d6:ca: 78:de:c2:6b:9d:74:37:6e:14:d0:49:9d:29:9f:cd:6c:b0:22: 4a:2b:97:63:33:95:ab:fc:00:19:27:1d:00:74:c1:3e:39:58: 4b:b2:c2:6a:1a:e5:18:8e:d4:d7:8f:c7:fe:a7:19:3d:e6:78: 49:bb:4b:fa:13:58:11:74:81:7b:23:fe:20:9f:98:f3:9e:9a: 4c:93:4e:a6:eb:15:f6:f8:c6:fe:84:c0:7e:f8:67:71:80:f1: e2:fd:a1:df:8b:86:e4:60:77:95:57:e2:78:0c:9a:3c:10:34: e6:c6:bf:5a:a0:20:d7:3e:c8:bc:af:a9:51:8a:49:cc:c1:e2: a7:b4:4f:18:7e:f0:71:9d:55:05:d4:85:65:fc:01:93:fe:f4: 83:43:cd:e9:43:c4:3b:31:88:77:6d:74:f3:3a:60:f3:2d:db: 39:80:96:41:5a:ce:3a:52:79:ea:8a:45:81:8d:79:55:f9:dd: 64:55:2a:02:3e:34:df:e9:1a:34:78:b2:f9:1e:0e:9f:96:e7: a1:c4:3d:f9:b1:27:53:1f:27:73:6c:04:3c:41:b7:13:ad:b3: dc:28:fa:5c:ca:24:51:64:40:61:50:45:95:ad:00:3a:d7:bb: 32:5d:d5:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o7pDEDosVnkh4+G440NWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YmRkZTc4NDE1YjY5YzMxMjc3YzBhYWM3ZmNhNjYwN2Q2 MzVkODgwHhcNMjUxMjIxMDIwMTE2WhcNMjUxMjIyMDIwMTE2WjAzMTEwLwYDVQQD EyhkZDc0ZGExZmIzZWI0ZTNlYTZjNTY2ZTljYWI5NWNjMWJmMTNmNjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZCBlIIMEpmUddgRBYlAM8CjxS9L PP8ne3HXf9YPAa1kUuAXxJgQTws4ICVrNgMik1swtXF/KZLPkbHjJvIX4e2r4mko sFNkPoXLf4VKeV8h5FT+QpqWXMuBUIxN+bM7faOLnxM/egNPPNRxGvTsNSKxtvkA B+xZybZNyojV/k8yfnU5eczkAGJ5lH5VzGGGdScaIn8YN8VDv9vD9UCNaRN6kj6B L8NyWcBUR6C8Ewmjy+ps3sKVwRdy/QOhfVp4/ozK4SalnAa8KxSG7XRsu//dXbg9 UjSsNq0euiP5Oqdepy/GawSN6ELp0nGAdNdY2ESA4TPIbZcRRAunCu3bUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN102h+z604+psVm6cq5XMG/E/Z/MB8GA1UdIwQY MBaAFLS93nhBW2nDEnfAqsf8pmB9Y12IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEwzZWVFRmJhY01TZDhDcXhfeW1ZSDFqWFlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8zNGQ0NzAtNDlmNy00YWUwLWI2MWEt MDk0NGJlZDBlZDI2LzEvdEwzZWVFRmJhY01TZDhDcXhfeW1ZSDFqWFlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8zNGQ0NzAtNDlmNy00YWUwLWI2MWEtMDk0NGJlZDBlZDI2 LzEvdEwzZWVFRmJhY01TZDhDcXhfeW1ZSDFqWFlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPG2ZGzw x+1f79RQpbtAFtbKeN7Ca510N24U0EmdKZ/NbLAiSiuXYzOVq/wAGScdAHTBPjlY S7LCahrlGI7U14/H/qcZPeZ4SbtL+hNYEXSBeyP+IJ+Y856aTJNOpusV9vjG/oTA fvhncYDx4v2h34uG5GB3lVfieAyaPBA05sa/WqAg1z7IvK+pUYpJzMHip7RPGH7w cZ1VBdSFZfwBk/70g0PN6UPEOzGId2108zpg8y3bOYCWQVrOOlJ56opFgY15Vfnd ZFUqAj403+kaNHiy+R4On5bnocQ9+bEnUx8nc2wEPEG3E62z3Cj6XMokUWRAYVBF la0AOte7Ml3VUA== -----END CERTIFICATE-----Generated at Sun Dec 21 11:05:17 2025 by rpki-client