This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft File: TOdM9jcjwCadUoOxBlghrzhKmiY.mft (raw, json) Hash identifier: fXKiAeNEiOEAC/zaeibXK/THsIL28/+rbLcjV7nPauc= Subject key identifier: CE:6A:79:60:F2:E4:69:34:7B:8F:5B:8A:E8:E9:B5:32:5E:83:65:20 Authority key identifier: 4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26 Certificate issuer: /CN=4ce74cf63723c0269d5283b1065821af384a9a26 Certificate serial: 019B57F57E58640804FD5451B2D5A5D690C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft Manifest number: 082D Signing time: Fri 26 Dec 2025 00:01:04 +0000 Manifest this update: Fri 26 Dec 2025 00:01:04 +0000 Manifest next update: Sat 27 Dec 2025 00:01:04 +0000 Files and hashes: 1: CEobCVyOq89vMXgU83DpMwfT0Wo.roa (hash: DcQa6f54mwH80zIkbXchOx9QQQsb0gD6KDYchnHbpMk=) 2: HmvWFjOJ5QNe_0VBD7eTmwN-1XQ.roa (hash: StcAstNQR/UIdmTZ6Q1iuGPLcyfmxWT20PZ/h6s9A5g=) 3: TOdM9jcjwCadUoOxBlghrzhKmiY.crl (hash: hiJ9NbrY9AlePxfNXNaNbAivKqU+n+oUqoCLxtj/RpM=) 4: ysuILm8GTM9rr0tx4VWy1ub_M3Y.roa (hash: wnzsKo97TxUOdXYRLd6GXvYrsFQQtPcVycGoHAT6hoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:f5:7e:58:64:08:04:fd:54:51:b2:d5:a5:d6:90:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ce74cf63723c0269d5283b1065821af384a9a26 Validity Not Before: Dec 26 00:01:04 2025 GMT Not After : Dec 27 00:01:04 2025 GMT Subject: CN=ce6a7960f2e469347b8f5b8ae8e9b5325e836520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ed:12:a4:a2:3a:69:41:bc:53:0e:4a:54:ac: 48:54:4c:ed:81:ca:54:6c:93:f8:c7:64:7b:91:d2: 94:c5:8f:03:c6:e4:c4:03:5d:fc:8c:7a:4b:10:63: 91:3f:5d:7f:bd:db:87:02:fd:76:1d:9e:5d:d5:fa: 08:e5:1d:47:28:cc:5a:2a:12:0f:b1:74:9a:ea:dd: 38:bd:9e:08:27:85:a8:30:fc:3b:2e:c4:b4:f1:96: 1b:1e:6a:8e:fd:f9:b2:2b:7b:0d:13:38:54:06:00: c7:46:7f:3f:21:40:c6:2b:04:0a:16:e4:8f:cb:26: 9f:ac:4c:b1:ba:97:a1:08:a2:7e:df:44:20:31:ba: b0:d6:79:b4:91:7a:fe:c6:4b:ff:20:31:0b:e9:e4: 62:ee:c0:0b:d2:4f:04:b2:87:a7:7a:f7:68:fc:2d: 33:ef:46:71:d7:1f:da:58:6a:fb:fe:ce:fa:e3:e8: da:8d:59:ef:35:78:56:9f:93:5c:3c:6e:95:e7:98: c4:55:c6:58:26:ff:73:1a:9e:55:63:e2:5e:a7:7b: 91:2c:2e:d7:67:4c:d4:77:f1:07:6f:98:28:ce:a3: 0b:37:a3:cd:c9:bc:6a:f0:dd:af:78:45:f8:f4:a9: 41:1e:e4:64:2a:81:e6:fd:d7:28:97:8c:c0:27:b6: ac:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6A:79:60:F2:E4:69:34:7B:8F:5B:8A:E8:E9:B5:32:5E:83:65:20 X509v3 Authority Key Identifier: keyid:4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:80:c0:52:4d:0c:e4:66:07:65:4e:cd:53:dc:90:24:c4:8b: 02:1d:e2:a2:10:13:19:58:64:18:6f:7c:e5:48:29:8c:6f:ef: 80:8c:8a:d4:cb:5d:bb:d0:cf:cf:27:ac:0c:e8:55:00:dc:5e: 7a:25:df:1f:7b:79:27:c4:be:6a:4f:7b:6e:75:ee:46:f3:ae: 89:28:22:5d:75:bf:67:25:46:17:b0:6a:cd:15:d1:92:38:c2: eb:e4:19:f1:71:e9:0a:04:92:58:4a:df:57:84:d0:f8:8a:62: 63:d5:41:2b:23:f2:79:d5:31:16:29:6b:2e:89:86:53:46:55: 15:6c:94:72:61:0b:2e:16:57:54:4b:a4:1b:1a:a1:e4:05:16: 72:77:f2:9e:c1:da:89:1d:ec:f4:c1:68:65:2c:c1:ec:48:d2: c8:90:96:8b:e5:3c:e2:aa:5d:89:2f:ef:67:99:90:6c:c4:ac: e0:0f:e2:24:06:8c:71:96:ad:0c:e9:67:7d:c1:6f:b7:8b:66: 2b:c0:1b:e6:cd:83:33:54:68:36:db:c7:b4:0b:f9:e9:7d:ad: cc:f7:21:44:4c:50:d5:b9:35:14:e6:8e:ef:47:ba:8a:77:b4: e5:14:43:1f:aa:c4:c9:3d:c0:d0:85:27:9c:18:9b:5f:30:8e: ac:c9:ec:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtX9X5YZAgE/VRRstWl1pDIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZTc0Y2Y2MzcyM2MwMjY5ZDUyODNiMTA2NTgyMWFmMzg0 YTlhMjYwHhcNMjUxMjI2MDAwMTA0WhcNMjUxMjI3MDAwMTA0WjAzMTEwLwYDVQQD EyhjZTZhNzk2MGYyZTQ2OTM0N2I4ZjViOGFlOGU5YjUzMjVlODM2NTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu0SpKI6aUG8Uw5KVKxIVEztgcpU bJP4x2R7kdKUxY8DxuTEA138jHpLEGORP11/vduHAv12HZ5d1foI5R1HKMxaKhIP sXSa6t04vZ4IJ4WoMPw7LsS08ZYbHmqO/fmyK3sNEzhUBgDHRn8/IUDGKwQKFuSP yyafrEyxupehCKJ+30QgMbqw1nm0kXr+xkv/IDEL6eRi7sAL0k8Esoenevdo/C0z 70Zx1x/aWGr7/s764+jajVnvNXhWn5NcPG6V55jEVcZYJv9zGp5VY+Jep3uRLC7X Z0zUd/EHb5gozqMLN6PNybxq8N2veEX49KlBHuRkKoHm/dcol4zAJ7aspQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5qeWDy5Gk0e49biujptTJeg2UgMB8GA1UdIwQY MBaAFEznTPY3I8AmnVKDsQZYIa84SpomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE9kTTlqY2p3Q2FkVW9PeEJsZ2hyemhLbWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81YTBmODEtMzFlMi00ZGIyLTgzMzkt OTI0MWZmNmVjM2JmLzEvVE9kTTlqY2p3Q2FkVW9PeEJsZ2hyemhLbWlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81YTBmODEtMzFlMi00ZGIyLTgzMzktOTI0MWZmNmVjM2Jm LzEvVE9kTTlqY2p3Q2FkVW9PeEJsZ2hyemhLbWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm4DAUk0M 5GYHZU7NU9yQJMSLAh3iohATGVhkGG985UgpjG/vgIyK1Mtdu9DPzyesDOhVANxe eiXfH3t5J8S+ak97bnXuRvOuiSgiXXW/ZyVGF7BqzRXRkjjC6+QZ8XHpCgSSWErf V4TQ+IpiY9VBKyPyedUxFilrLomGU0ZVFWyUcmELLhZXVEukGxqh5AUWcnfynsHa iR3s9MFoZSzB7EjSyJCWi+U84qpdiS/vZ5mQbMSs4A/iJAaMcZatDOlnfcFvt4tm K8Ab5s2DM1RoNtvHtAv56X2tzPchRExQ1bk1FOaO70e6ine05RRDH6rEyT3A0IUn nBibXzCOrMns7g== -----END CERTIFICATE-----Generated at Fri Dec 26 03:13:43 2025 by rpki-client