This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft File: TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json) Hash identifier: s4OuWBcwaFqPDkoG+9V3JxrnGPr1TlMiEL7NV35POL0= Subject key identifier: 78:74:A4:6B:B6:96:25:7B:A6:21:E1:DD:21:79:CF:48:73:04:90:48 Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 019B386A14375A89438B20E5BD5F4E1BA23D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft Manifest number: 16CC Signing time: Fri 19 Dec 2025 21:00:34 +0000 Manifest this update: Fri 19 Dec 2025 21:00:34 +0000 Manifest next update: Sat 20 Dec 2025 21:00:34 +0000 Files and hashes: 1: 2yubxXoUeTneba4EBY4P8MPWw2Y.roa (hash: O7PLjKUrCeqBSHAuExg3VBC739eTqlxIT5c864VI68U=) 2: 4KBWrJSRLSTWgJmrtXh24O8ptm0.roa (hash: YEBy8eNEfToaA32gL8iYc9FiTV97Xzm5KfvwgQ0Wt0w=) 3: GqC3ZO1y9oc4vznv7EbpMYcfENc.roa (hash: Q4sGgT5nLBJ6T1APzes4amjNpmeLdQJEi2Te5mDw21c=) 4: HJEOMkcua2U0CXM_DgKdhgOVJuQ.roa (hash: aaUs28R4Qe5et2iRbl0aLBcKjuiS/pTOpAssm1pVNS4=) 5: QxU1oUg0L71x8I3OUGU7EffxOtQ.roa (hash: x4WguF8OrW9WYJ2uUgagYn93WyWPPdlfvjM3+EJeaQQ=) 6: R27Ys4tdk1dsua9Wj3x9dydBecY.roa (hash: UIHAnpmWiQo69KuTG5bm0hSlODVuPvHPX466b96XgAY=) 7: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: jumM9vvMylJsumJtL6zsEH5n8Bbvp2TypeVaoDwuZOs=) 8: agt3GX3KTzTTaDa4N2bW6FVEPMI.roa (hash: fqDcb6/bbW1xMS84DKiItjbvr35FGCf0jB399be63bg=) 9: hh7Gdh6zfaFogwbFBRa2NVcPr_I.roa (hash: ssBuLOF5j4levhxPJMBnrdwY3/mZUCOBNj16h6KB1U0=) 10: iOPUBhC5tZj2oWAWQvj5PYOPiG4.roa (hash: rupFkWf6CUCaUIdYtY3ZUAkY0dS8bO7d3Kt0O/ec6M8=) 11: mR3Zi8TN-_ArEouFy2dh0k1QmN0.roa (hash: UhEAthq0aKU0HlKv/Jp93RRXMjt0oM6SOsTJA0u5R4o=) 12: sguRLoeWyytYSUNdSCQfoHPwkL0.roa (hash: ipjLZOjUQ4BQnvEOPVMsWMd4gWLlK5VE02q72xwD6zI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:6a:14:37:5a:89:43:8b:20:e5:bd:5f:4e:1b:a2:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Dec 19 21:00:34 2025 GMT Not After : Dec 20 21:00:34 2025 GMT Subject: CN=7874a46bb696257ba621e1dd2179cf4873049048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f6:9e:98:05:0d:90:7f:50:c1:f1:83:0f:c8: ce:af:96:a9:35:f4:48:db:00:2a:1b:c7:66:e4:ea: 9b:57:d9:13:23:bf:95:cc:55:d5:85:92:20:a5:c2: 2d:af:1d:09:bf:8b:e7:5c:0b:9f:7e:1a:42:57:ed: 76:83:ef:b6:1d:45:0a:f5:d7:4d:1d:97:98:83:13: c9:0b:62:dd:17:52:1f:59:b2:72:a9:5f:b8:bd:2f: 74:3f:cd:fb:db:65:db:3b:19:3d:d2:e7:0c:c0:78: ea:2f:95:a2:25:83:5d:23:38:13:ae:d7:d0:98:2b: 3c:07:d0:92:03:4f:e2:ff:0e:00:d3:43:32:8b:24: 9c:5f:e6:fd:46:45:55:16:18:79:7d:13:5a:0d:bb: 19:8f:c9:fe:85:01:b8:39:1a:1b:ce:42:17:3f:4d: 8b:20:52:03:d6:89:c0:d4:63:33:ad:e6:ef:ef:ee: b7:37:36:0b:98:e2:47:98:c5:eb:78:69:89:02:ef: b2:c3:e3:c7:25:dd:e9:88:87:5a:f0:fc:74:97:a2: b6:98:99:89:56:f1:be:a1:49:8d:ae:ac:64:70:85: 22:44:52:fc:55:4a:ae:ef:27:35:64:7a:2e:07:e4: 7c:d2:53:a9:24:73:62:39:ce:74:61:37:9f:bc:14: 19:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:74:A4:6B:B6:96:25:7B:A6:21:E1:DD:21:79:CF:48:73:04:90:48 X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:32:13:b7:30:1c:01:08:b3:de:27:9b:f4:55:fa:51:e3:bd: aa:23:4a:61:5b:48:29:c4:11:6e:14:7d:5b:22:f2:9d:d3:64: 58:a9:1c:d4:6a:44:40:f3:45:24:71:05:d4:a3:e5:96:ed:77: 55:c9:44:39:74:b0:cb:b3:a0:7c:69:7a:d9:07:3f:4e:33:79: a0:2d:1a:38:e4:4b:04:b0:6b:d6:32:8a:05:b8:dd:4c:4d:26: 6f:56:36:a8:52:d2:f6:77:3e:80:39:1e:ea:be:9a:18:55:3b: 2e:3a:52:9a:4d:11:71:71:bc:c5:cc:ec:9f:0a:e9:7b:89:ef: 22:aa:ea:88:40:8d:ef:0a:8c:64:d2:2e:37:37:65:9e:a4:c6: bf:86:11:28:b4:19:95:53:75:a5:c7:a4:cd:0a:84:af:1a:fa: 66:e0:43:f3:d9:a1:92:aa:3b:d9:88:29:68:5a:5f:bd:da:5b: 69:86:2b:51:65:53:9d:cd:ee:cf:3a:c4:bf:5d:95:91:8c:53: f8:d9:af:37:59:19:24:11:a2:76:70:38:a4:e7:29:95:86:6f: 17:01:9c:ed:d2:63:b3:c5:f7:36:6c:e9:a9:7d:e3:4e:1d:72: a2:c6:ef:cd:a6:56:ff:b9:f2:59:70:fd:df:28:d5:49:4a:06: 0e:0d:b6:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ahQ3WolDiyDlvV9OG6I9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjUxMjE5MjEwMDM0WhcNMjUxMjIwMjEwMDM0WjAzMTEwLwYDVQQD Eyg3ODc0YTQ2YmI2OTYyNTdiYTYyMWUxZGQyMTc5Y2Y0ODczMDQ5MDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/aemAUNkH9QwfGDD8jOr5apNfRI 2wAqG8dm5OqbV9kTI7+VzFXVhZIgpcItrx0Jv4vnXAuffhpCV+12g++2HUUK9ddN HZeYgxPJC2LdF1IfWbJyqV+4vS90P83722XbOxk90ucMwHjqL5WiJYNdIzgTrtfQ mCs8B9CSA0/i/w4A00MyiyScX+b9RkVVFhh5fRNaDbsZj8n+hQG4ORobzkIXP02L IFID1onA1GMzrebv7+63NzYLmOJHmMXreGmJAu+yw+PHJd3piIda8Px0l6K2mJmJ VvG+oUmNrqxkcIUiRFL8VUqu7yc1ZHouB+R80lOpJHNiOc50YTefvBQZIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHh0pGu2liV7piHh3SF5z0hzBJBIMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDITtzAc AQiz3ieb9FX6UeO9qiNKYVtIKcQRbhR9WyLyndNkWKkc1GpEQPNFJHEF1KPllu13 VclEOXSwy7OgfGl62Qc/TjN5oC0aOORLBLBr1jKKBbjdTE0mb1Y2qFLS9nc+gDke 6r6aGFU7LjpSmk0RcXG8xczsnwrpe4nvIqrqiECN7wqMZNIuNzdlnqTGv4YRKLQZ lVN1pcekzQqErxr6ZuBD89mhkqo72YgpaFpfvdpbaYYrUWVTnc3uzzrEv12VkYxT +NmvN1kZJBGidnA4pOcplYZvFwGc7dJjs8X3NmzpqX3jTh1yosbvzaZW/7nyWXD9 3yjVSUoGDg22gA== -----END CERTIFICATE-----Generated at Sat Dec 20 03:43:26 2025 by rpki-client