This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft File: TDfyfrSZezvvnygmajlpQFD-dPk.mft (raw, json) Hash identifier: 4+B1jOmal0k4PS8krGqLmQD6gp3UsgYuaq93tNRUDvg= Subject key identifier: 92:2B:92:61:C1:75:D1:B0:54:5D:38:A9:B4:52:C8:A0:64:52:32:43 Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9 Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9 Certificate serial: 019B3CB4C790EF19615F83EC64D9F78E0111 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft Manifest number: 17E8 Signing time: Sat 20 Dec 2025 17:00:38 +0000 Manifest this update: Sat 20 Dec 2025 17:00:38 +0000 Manifest next update: Sun 21 Dec 2025 17:00:38 +0000 Files and hashes: 1: O9nHfOl2QVEFkw8z5PZAG-bDmQE.roa (hash: CmUudjBRBoLhGNB6o4EaSfh+UkgJVlz+52jeWbtrV5A=) 2: SzyIBUJURbOXMTDJ4Z_haTgvNpI.roa (hash: wJIDwOiFxDwrE3GURrkhai8iWOYh1f3lI6qeGAaNPyc=) 3: TDfyfrSZezvvnygmajlpQFD-dPk.crl (hash: WZya9zrLTic7HVhvmeqvc3yuFi9VYPxTZ3BaZToG1zc=) 4: UVW-IEFCCq7ahpPdj9WY7Kn8QqE.roa (hash: MZl++GgZA3uWjf7S8QTsOZZtzVITuzAAAAPegKRXupI=) 5: VIrZrIPn5JgwIWuerakwG37U7jA.roa (hash: +9EBlzR1H7BphSJTPeOlUDa4YDh16MokR5NsBCSFTMs=) 6: dQ4y2x688XsG8rEL7o8Sp4uIl8M.roa (hash: LuvxH8ju8nmShoj6OHN3o8s0V6hBxEddqrv3+BFDAgQ=) 7: gQDaBeXH0szJXrJTEvqe4lIGCV4.roa (hash: fhlImZ1nrh4i7H6LIP2R5ZbAmjbxd5MHcou/l4C25qU=) 8: lPoIPYo1ITlq-R71JXKfxiC_US0.roa (hash: 1ODRbC1wRix1ieOTK6Ku3fYNq0UfGPEvF5Esjd3aqDM=) 9: luug-CwXmvS54qQ88cgMGt-f5zU.roa (hash: HAfj14rHhfvfAv/i1MqUIJYZwmFczeoc01ZA/poLVk8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:c7:90:ef:19:61:5f:83:ec:64:d9:f7:8e:01:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9 Validity Not Before: Dec 20 17:00:38 2025 GMT Not After : Dec 21 17:00:38 2025 GMT Subject: CN=922b9261c175d1b0545d38a9b452c8a064523243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bd:47:c8:d5:12:14:ad:a5:0d:8a:e6:78:a2: d4:5e:ba:e2:c9:ce:20:c2:7b:10:5b:a2:1b:15:b2: 97:d1:11:51:da:1a:36:4c:31:2b:22:0b:93:23:e5: a2:63:e2:6e:1c:dc:e0:cc:fd:9c:a0:94:e8:5d:f7: a8:96:10:93:2f:f6:76:47:e9:a9:29:7d:0e:2d:40: 67:42:b6:0a:86:02:eb:06:f6:14:1c:29:89:ae:85: b0:a8:a6:16:de:c4:e7:0f:8d:a8:d5:64:b7:3f:fa: 74:7b:c6:96:0f:e5:69:21:88:a5:76:fe:82:1f:82: 83:c6:9c:65:3c:f0:7c:86:f5:dc:b1:fd:4a:57:17: f8:d2:00:ab:52:29:1b:ef:7e:b7:93:1f:91:98:cc: 52:3c:94:e8:86:d4:76:71:f4:6d:e9:39:b1:4d:aa: d0:d2:eb:6e:bb:6a:4a:36:fc:75:f7:55:b2:ae:91: 9a:4d:ae:9f:9d:86:7a:e7:35:3b:05:64:48:e3:8f: 75:8f:51:81:4e:d5:e2:ee:b3:28:95:b9:63:6c:1e: 6a:fc:09:83:26:eb:8c:86:50:c2:62:67:7f:79:c7: 4b:45:3c:35:34:ab:33:ac:aa:ae:1c:43:b7:9e:de: 45:7c:b8:4c:7d:74:db:d8:47:31:a1:0b:c6:d6:3a: 42:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2B:92:61:C1:75:D1:B0:54:5D:38:A9:B4:52:C8:A0:64:52:32:43 X509v3 Authority Key Identifier: keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:21:1b:0f:7d:4c:69:21:98:cb:83:ea:8f:f6:4f:99:4a:9e: 2a:27:9a:c4:e3:eb:46:2e:76:85:b0:07:10:88:d0:d5:94:02: f2:24:44:ff:1c:1a:e5:33:37:03:f6:29:ee:a6:1e:1d:3e:17: c9:56:35:8c:22:b3:cf:84:a7:c1:2e:c1:3c:a9:d2:22:ed:e0: fe:db:9c:87:84:69:8f:8e:e6:f0:77:88:1f:67:44:39:ee:c2: a5:95:c3:8a:db:f1:60:a1:ea:8a:e3:1c:45:e8:56:cf:dc:d1: 57:ce:71:cd:3b:69:dd:1a:9e:e5:69:5d:67:98:d6:e2:b7:1b: c5:05:f6:a7:bc:b7:59:87:d6:d3:47:8d:1d:d4:0c:52:57:6d: be:37:0f:bf:cd:14:89:59:1a:dc:b4:1f:32:6a:fc:bc:31:60: 3d:7b:f3:aa:2a:b8:ef:e9:97:b7:5f:87:01:de:11:be:da:a3: 23:b8:23:56:b1:4a:e5:73:bb:13:ef:53:13:f4:b5:33:e6:e7: 11:e9:d5:4d:8e:c0:57:86:0c:b8:06:89:44:a5:fb:cf:05:15: 2d:76:90:c1:70:b1:69:1e:68:6d:8c:75:5c:be:f3:9f:be:2c: ae:76:e3:05:91:bb:c5:42:84:5c:28:5e:d6:d6:7a:de:89:5b: ba:0e:0a:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tMeQ7xlhX4PsZNn3jgERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzdmMjdlYjQ5OTdiM2JlZjlmMjgyNjZhMzk2OTQwNTBm ZTc0ZjkwHhcNMjUxMjIwMTcwMDM4WhcNMjUxMjIxMTcwMDM4WjAzMTEwLwYDVQQD Eyg5MjJiOTI2MWMxNzVkMWIwNTQ1ZDM4YTliNDUyYzhhMDY0NTIzMjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur1HyNUSFK2lDYrmeKLUXrriyc4g wnsQW6IbFbKX0RFR2ho2TDErIguTI+WiY+JuHNzgzP2coJToXfeolhCTL/Z2R+mp KX0OLUBnQrYKhgLrBvYUHCmJroWwqKYW3sTnD42o1WS3P/p0e8aWD+VpIYildv6C H4KDxpxlPPB8hvXcsf1KVxf40gCrUikb7363kx+RmMxSPJTohtR2cfRt6TmxTarQ 0utuu2pKNvx191WyrpGaTa6fnYZ65zU7BWRI4491j1GBTtXi7rMolbljbB5q/AmD JuuMhlDCYmd/ecdLRTw1NKszrKquHEO3nt5FfLhMfXTb2EcxoQvG1jpCdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJIrkmHBddGwVF04qbRSyKBkUjJDMB8GA1UdIwQY MBaAFEw38n60mXs7758oJmo5aUBQ/nT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEt ZWI1YTYyN2U3NmEzLzEvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEtZWI1YTYyN2U3NmEz LzEvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmiEbD31M aSGYy4Pqj/ZPmUqeKieaxOPrRi52hbAHEIjQ1ZQC8iRE/xwa5TM3A/Yp7qYeHT4X yVY1jCKzz4SnwS7BPKnSIu3g/tuch4Rpj47m8HeIH2dEOe7CpZXDitvxYKHqiuMc RehWz9zRV85xzTtp3Rqe5WldZ5jW4rcbxQX2p7y3WYfW00eNHdQMUldtvjcPv80U iVka3LQfMmr8vDFgPXvzqiq47+mXt1+HAd4RvtqjI7gjVrFK5XO7E+9TE/S1M+bn EenVTY7AV4YMuAaJRKX7zwUVLXaQwXCxaR5obYx1XL7zn74srnbjBZG7xUKEXChe 1tZ63olbug4KZw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:12:50 2025 by rpki-client