This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft File: TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft (raw, json) Hash identifier: cl9GVBk0wZieW4erHXi5emTfpWak9zCzM21aweTqbh8= Subject key identifier: C4:DC:A1:83:66:2D:56:DB:EC:2E:8A:99:EB:DF:3D:C3:17:8E:FC:57 Authority key identifier: 4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17 Certificate issuer: /CN=4c38a306a37ee87bebff7236553e0d3cb672cd17 Certificate serial: 019B3D90C3A06C0B29B592D0C4DDA6C90F9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft Manifest number: 025E Signing time: Sat 20 Dec 2025 21:00:56 +0000 Manifest this update: Sat 20 Dec 2025 21:00:56 +0000 Manifest next update: Sun 21 Dec 2025 21:00:56 +0000 Files and hashes: 1: 54qil-gtsg-VmWMUKBbSoP89Sh4.roa (hash: +lFuYFZIeWq9AFirWvNO/gLe0U+wLrmb+nny8MFDRhE=) 2: TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl (hash: m11Kh0y28q+batc1+v4jVJJSSkhN0F7RYmj3DnKUetY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:c3:a0:6c:0b:29:b5:92:d0:c4:dd:a6:c9:0f:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c38a306a37ee87bebff7236553e0d3cb672cd17 Validity Not Before: Dec 20 21:00:56 2025 GMT Not After : Dec 21 21:00:56 2025 GMT Subject: CN=c4dca183662d56dbec2e8a99ebdf3dc3178efc57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:dd:e8:4c:d1:f0:ee:37:12:49:3d:db:dc:84: 70:7c:b9:89:0b:20:2e:35:e8:d9:9c:8d:ac:6a:f2: ee:6b:99:3c:f3:d8:36:f0:ea:ee:28:5a:3f:af:34: 6f:72:9f:82:92:ab:ca:54:cf:e5:35:68:fa:dd:65: 1e:f2:bc:df:0f:ef:fe:60:9a:4a:ea:e1:79:f9:17: 34:48:32:a4:67:aa:83:92:28:4e:c7:80:d1:54:0b: 6a:da:20:33:63:fa:d5:26:48:64:41:bb:26:3a:7a: df:30:86:31:aa:e2:cf:db:c9:60:d1:55:4a:3f:15: 56:d9:82:1b:53:5d:3d:7a:0e:34:4a:0a:a2:0c:e0: ae:33:d8:b9:e7:da:fe:2c:29:17:d2:fa:28:4e:4c: d5:2f:49:8d:8e:8d:81:41:42:a3:bd:51:72:60:88: 58:d0:c2:09:c0:8c:70:86:cb:80:0f:0a:d6:e2:1c: 47:0b:e5:06:dd:18:f3:b7:fa:1e:b4:52:dd:d1:cc: 1e:ec:53:39:fa:cf:8a:da:f7:c4:83:94:3b:40:c1: d5:3c:49:6d:0b:4c:a5:49:36:31:ad:1a:31:eb:63: 15:45:21:48:aa:2a:d3:3e:96:40:c1:19:a5:6d:3a: e7:87:7c:1e:9a:44:1d:b2:57:e8:3d:a6:69:1c:b1: 41:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:DC:A1:83:66:2D:56:DB:EC:2E:8A:99:EB:DF:3D:C3:17:8E:FC:57 X509v3 Authority Key Identifier: keyid:4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:cc:3b:91:e6:ac:01:b1:28:fb:60:b1:01:9b:74:f6:7c:9e: d5:17:8b:81:be:9b:42:55:c8:7b:04:ce:a1:16:4c:1b:ce:84: 77:c6:a5:c1:9b:e9:b3:0b:5b:ff:77:2a:16:28:b6:be:34:06: cc:8f:ff:8f:e4:54:d1:5f:8d:23:4c:91:0f:10:8c:04:d7:d5: 1e:95:2d:fc:0d:0c:fd:8e:67:f0:57:09:54:9c:7c:79:ed:ac: f2:33:25:43:17:91:d9:bd:75:87:ea:c9:4f:24:d1:75:c9:d9: 3e:50:e9:c7:2a:74:71:bb:73:55:3b:ab:b1:f7:8b:b7:3c:a2: 55:aa:83:29:cc:2a:3e:44:59:ec:1f:94:0e:c7:0f:4f:df:e2: ee:36:7f:73:86:d4:46:91:08:0e:2e:6d:67:4a:51:f1:ca:74: c7:1d:78:1b:26:a6:cf:03:88:8f:8c:58:2c:18:e2:1d:2a:af: c8:f2:f8:8a:47:09:e5:ec:f6:ce:1b:c0:b0:c5:a7:b0:85:ef: 61:1c:05:a2:e8:a6:a1:93:85:40:97:bf:53:7d:5e:bb:d2:90: 3e:c4:de:68:7d:cd:5c:cb:fb:d3:39:c9:3d:3c:59:68:27:23: 40:79:56:62:7a:6a:43:9a:dd:dc:1a:7d:38:94:97:37:17:a6: b4:1c:e1:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kMOgbAsptZLQxN2myQ+bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzhhMzA2YTM3ZWU4N2JlYmZmNzIzNjU1M2UwZDNjYjY3 MmNkMTcwHhcNMjUxMjIwMjEwMDU2WhcNMjUxMjIxMjEwMDU2WjAzMTEwLwYDVQQD EyhjNGRjYTE4MzY2MmQ1NmRiZWMyZThhOTllYmRmM2RjMzE3OGVmYzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6t3oTNHw7jcSST3b3IRwfLmJCyAu NejZnI2savLua5k889g28OruKFo/rzRvcp+CkqvKVM/lNWj63WUe8rzfD+/+YJpK 6uF5+Rc0SDKkZ6qDkihOx4DRVAtq2iAzY/rVJkhkQbsmOnrfMIYxquLP28lg0VVK PxVW2YIbU109eg40SgqiDOCuM9i559r+LCkX0vooTkzVL0mNjo2BQUKjvVFyYIhY 0MIJwIxwhsuADwrW4hxHC+UG3Rjzt/oetFLd0cwe7FM5+s+K2vfEg5Q7QMHVPElt C0ylSTYxrRox62MVRSFIqirTPpZAwRmlbTrnh3wemkQdslfoPaZpHLFBzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTcoYNmLVbb7C6KmevfPcMXjvxXMB8GA1UdIwQY MBaAFEw4owajfuh76/9yNlU+DTy2cs0XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERpakJxTi02SHZyXzNJMlZUNE5QTFp5elJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8wOGNkOTMtMDg3Ni00M2ZkLTkyYzAt Yjg2M2MwYTk4YjJkLzEvVERpakJxTi02SHZyXzNJMlZUNE5QTFp5elJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8wOGNkOTMtMDg3Ni00M2ZkLTkyYzAtYjg2M2MwYTk4YjJk LzEvVERpakJxTi02SHZyXzNJMlZUNE5QTFp5elJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAasw7keas AbEo+2CxAZt09nye1ReLgb6bQlXIewTOoRZMG86Ed8alwZvpswtb/3cqFii2vjQG zI//j+RU0V+NI0yRDxCMBNfVHpUt/A0M/Y5n8FcJVJx8ee2s8jMlQxeR2b11h+rJ TyTRdcnZPlDpxyp0cbtzVTursfeLtzyiVaqDKcwqPkRZ7B+UDscPT9/i7jZ/c4bU RpEIDi5tZ0pR8cp0xx14GyamzwOIj4xYLBjiHSqvyPL4ikcJ5ez2zhvAsMWnsIXv YRwFouimoZOFQJe/U31eu9KQPsTeaH3NXMv70znJPTxZaCcjQHlWYnpqQ5rd3Bp9 OJSXNxemtBzhsw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:18:54 2025 by rpki-client