This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft File: TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json) Hash identifier: 7+yWDHx5QAUWD1qwmyVMu2x7d2t0mIXJhIDClGoRUJc= Subject key identifier: 47:5C:F1:5F:DA:6D:35:07:A7:63:D8:D1:26:B2:BA:9C:96:A8:23:40 Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 019B3A5878E9FF788E2A2443199F2E9C26AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft Manifest number: 16CD Signing time: Sat 20 Dec 2025 06:00:35 +0000 Manifest this update: Sat 20 Dec 2025 06:00:35 +0000 Manifest next update: Sun 21 Dec 2025 06:00:35 +0000 Files and hashes: 1: 2yubxXoUeTneba4EBY4P8MPWw2Y.roa (hash: O7PLjKUrCeqBSHAuExg3VBC739eTqlxIT5c864VI68U=) 2: 4KBWrJSRLSTWgJmrtXh24O8ptm0.roa (hash: YEBy8eNEfToaA32gL8iYc9FiTV97Xzm5KfvwgQ0Wt0w=) 3: GqC3ZO1y9oc4vznv7EbpMYcfENc.roa (hash: Q4sGgT5nLBJ6T1APzes4amjNpmeLdQJEi2Te5mDw21c=) 4: HJEOMkcua2U0CXM_DgKdhgOVJuQ.roa (hash: aaUs28R4Qe5et2iRbl0aLBcKjuiS/pTOpAssm1pVNS4=) 5: QxU1oUg0L71x8I3OUGU7EffxOtQ.roa (hash: x4WguF8OrW9WYJ2uUgagYn93WyWPPdlfvjM3+EJeaQQ=) 6: R27Ys4tdk1dsua9Wj3x9dydBecY.roa (hash: UIHAnpmWiQo69KuTG5bm0hSlODVuPvHPX466b96XgAY=) 7: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: ZHLaqdMpS0I1lUFy32WMTPcN0qFq1qALGYfvH5fonFM=) 8: agt3GX3KTzTTaDa4N2bW6FVEPMI.roa (hash: fqDcb6/bbW1xMS84DKiItjbvr35FGCf0jB399be63bg=) 9: hh7Gdh6zfaFogwbFBRa2NVcPr_I.roa (hash: ssBuLOF5j4levhxPJMBnrdwY3/mZUCOBNj16h6KB1U0=) 10: iOPUBhC5tZj2oWAWQvj5PYOPiG4.roa (hash: rupFkWf6CUCaUIdYtY3ZUAkY0dS8bO7d3Kt0O/ec6M8=) 11: mR3Zi8TN-_ArEouFy2dh0k1QmN0.roa (hash: UhEAthq0aKU0HlKv/Jp93RRXMjt0oM6SOsTJA0u5R4o=) 12: sguRLoeWyytYSUNdSCQfoHPwkL0.roa (hash: ipjLZOjUQ4BQnvEOPVMsWMd4gWLlK5VE02q72xwD6zI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:78:e9:ff:78:8e:2a:24:43:19:9f:2e:9c:26:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Dec 20 06:00:35 2025 GMT Not After : Dec 21 06:00:35 2025 GMT Subject: CN=475cf15fda6d3507a763d8d126b2ba9c96a82340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8f:06:9a:38:10:3a:ed:23:03:12:c5:6e:d8: 19:11:92:d0:2d:7c:f2:ae:60:ce:6c:8c:e0:43:43: 8f:1a:a9:68:81:ae:a6:7c:46:dc:5b:f3:8e:ac:da: af:e2:f0:94:13:18:6d:3e:b9:83:a2:95:86:25:6c: f7:fe:1c:b5:ed:8f:02:cc:8f:67:89:19:b5:f9:3d: 75:3c:a8:ac:d3:fb:ea:e3:9d:13:58:5f:53:51:1b: d4:c3:cc:ab:09:96:b1:00:e0:6b:89:6f:92:46:4c: 74:b4:30:8f:23:53:80:15:20:8c:3d:03:c6:57:0c: 92:c8:33:0f:20:b3:d8:42:da:8a:02:f6:c0:52:fa: 5f:41:35:3c:46:fe:7f:90:c1:6f:2c:88:8b:a7:79: b2:4a:1a:88:a8:86:6f:5b:1b:8c:81:28:d3:ff:47: c0:26:85:3f:57:6e:53:87:6f:e1:4c:e8:f4:ff:17: 0f:39:42:b2:48:01:f5:13:cd:4c:e6:9e:22:ab:47: 17:bb:53:55:61:3d:69:53:1e:c8:61:a5:ca:94:ab: 58:a2:57:7b:80:0c:0c:45:8f:b0:96:8d:6d:8f:fa: f0:e1:c6:0b:fc:d9:65:b7:82:df:0d:29:f2:a6:47: f6:c2:48:11:a7:d9:4a:f4:52:d2:ec:ce:2c:1d:f5: 53:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:5C:F1:5F:DA:6D:35:07:A7:63:D8:D1:26:B2:BA:9C:96:A8:23:40 X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:58:25:0d:64:ed:98:c1:c5:a1:7b:db:85:9f:0e:96:bc:ad: 8e:02:a3:c7:85:57:93:3f:aa:3c:c7:5f:95:fd:d9:21:d8:ee: 0d:7a:1b:cb:f4:07:8f:b5:79:e3:3e:b1:a4:e6:91:91:37:64: dd:5c:51:ca:c4:b9:9a:e2:9a:33:9e:8c:ff:40:ed:68:87:90: dc:b6:49:e0:8e:2b:89:88:84:57:db:12:55:bf:bf:9d:1b:3d: 01:c6:96:97:1a:88:75:03:80:82:5b:2b:53:4c:a2:ad:aa:ce: b8:76:60:f0:53:2c:4d:fb:a6:79:34:d9:2d:1a:00:87:e2:cd: 2f:b5:6f:62:68:b2:14:09:b7:72:69:a3:2c:07:2b:be:82:7f: 3c:a2:4f:1c:55:d1:fd:59:88:6f:81:d5:ee:0a:50:75:19:29: 70:fa:5d:95:40:47:0f:bc:af:62:4e:f6:04:06:30:d4:ae:02: 78:b3:3d:40:63:17:6a:5f:26:50:db:da:3d:4a:13:94:07:91: 8e:9f:06:e9:05:a1:4b:39:f5:2c:12:b7:a3:92:ea:3a:db:63: 1f:13:07:7d:ee:c1:30:7d:fa:39:8e:f3:e5:54:29:89:60:ab: 4e:c3:96:25:dc:b7:a0:25:b3:df:79:96:4d:00:ae:72:bd:f6: 51:1d:7f:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WHjp/3iOKiRDGZ8unCasMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjUxMjIwMDYwMDM1WhcNMjUxMjIxMDYwMDM1WjAzMTEwLwYDVQQD Eyg0NzVjZjE1ZmRhNmQzNTA3YTc2M2Q4ZDEyNmIyYmE5Yzk2YTgyMzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o8GmjgQOu0jAxLFbtgZEZLQLXzy rmDObIzgQ0OPGqloga6mfEbcW/OOrNqv4vCUExhtPrmDopWGJWz3/hy17Y8CzI9n iRm1+T11PKis0/vq450TWF9TURvUw8yrCZaxAOBriW+SRkx0tDCPI1OAFSCMPQPG VwySyDMPILPYQtqKAvbAUvpfQTU8Rv5/kMFvLIiLp3myShqIqIZvWxuMgSjT/0fA JoU/V25Th2/hTOj0/xcPOUKySAH1E81M5p4iq0cXu1NVYT1pUx7IYaXKlKtYold7 gAwMRY+wlo1tj/rw4cYL/Nllt4LfDSnypkf2wkgRp9lK9FLS7M4sHfVTDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdc8V/abTUHp2PY0SayupyWqCNAMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFglDWTt mMHFoXvbhZ8OlrytjgKjx4VXkz+qPMdflf3ZIdjuDXoby/QHj7V54z6xpOaRkTdk 3VxRysS5muKaM56M/0DtaIeQ3LZJ4I4riYiEV9sSVb+/nRs9AcaWlxqIdQOAglsr U0yirarOuHZg8FMsTfumeTTZLRoAh+LNL7VvYmiyFAm3cmmjLAcrvoJ/PKJPHFXR /VmIb4HV7gpQdRkpcPpdlUBHD7yvYk72BAYw1K4CeLM9QGMXal8mUNvaPUoTlAeR jp8G6QWhSzn1LBK3o5LqOttjHxMHfe7BMH36OY7z5VQpiWCrTsOWJdy3oCWz33mW TQCucr32UR1/mA== -----END CERTIFICATE-----Generated at Sat Dec 20 08:06:08 2025 by rpki-client