This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft File: TddPu7rljdCHbZnoDsgqEaRHf34.mft (raw, json) Hash identifier: z0LyQmZkfn9r7ONtZkL+0Z1QJImeUhRh+Ecvio9OG0s= Subject key identifier: D8:39:F4:7E:65:11:FC:17:57:9D:A4:73:67:28:70:A7:F9:B5:22:53 Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e Certificate serial: 019B39B3E74CC718AC865E7402E0E365793B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft Manifest number: 0F86 Signing time: Sat 20 Dec 2025 03:00:49 +0000 Manifest this update: Sat 20 Dec 2025 03:00:49 +0000 Manifest next update: Sun 21 Dec 2025 03:00:49 +0000 Files and hashes: 1: 4Jp18k3WgZxFLlIl31FziAZ_pyE.roa (hash: Rdy6GJGskKOgLLcQAYAa6TgfgY93QdTyE4LXA4WR8FE=) 2: J-mZDParjvz3ljIfTzlhasavsBo.roa (hash: X+bwHIE0wlCUwYusUU0uKi4Yc/Kz9/L2eOGJbsIOXJw=) 3: JbzhdefJbSbcMWzYg2HKOZi42yQ.roa (hash: Lr8qqBdkJKxtoR5S2Pga1jAiow0N/LgTqH30jZ9Ys0M=) 4: TddPu7rljdCHbZnoDsgqEaRHf34.crl (hash: z3kSc9pmktbOsh1zHU0oRsVNbeInndTJLmB38RoiZPQ=) 5: cxjVghHfKz7r8jK0ajPAm20QF-U.roa (hash: HPsMihI6S6ZtrZUoih477ooLtwdT/SYfO2io/vTyfY8=) 6: d852wo13D922O1kxvHO2L_8C0MU.roa (hash: HBCOzohfyjSX600EtZoiv9El3W7QzIDEos4plB6TxSI=) 7: hDkefyVIo6CtSmC9usLxfbXSHJo.roa (hash: 2L43qW8nvv7ZuypirwxJV5b95hzLgxd1pp/3t2CraNw=) 8: jIbMiSFlsQdlGZXR1HxPoO5c35o.roa (hash: QE4Ii8v6WxF41ed0I+H7egny9WwHZOU3Z66ypjFLn7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:e7:4c:c7:18:ac:86:5e:74:02:e0:e3:65:79:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e Validity Not Before: Dec 20 03:00:49 2025 GMT Not After : Dec 21 03:00:49 2025 GMT Subject: CN=d839f47e6511fc17579da473672870a7f9b52253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2d:8a:32:12:c9:61:47:bc:45:5c:bd:af:20: da:35:c0:23:2b:31:46:8f:63:e6:54:62:0c:55:74: 36:a0:79:51:d2:3a:dd:b4:ad:f5:23:2c:11:88:cf: d1:5d:ca:ff:f0:d2:99:a9:43:47:2d:95:97:59:ac: 1c:f7:0a:7d:1a:43:40:02:22:87:b2:b6:ea:4a:65: 68:32:4a:80:e2:b3:a2:7a:53:71:0e:d0:00:f1:d6: be:a6:0e:6e:9d:b8:2a:41:09:b6:1e:e9:33:d2:20: 69:d7:2d:e2:13:54:70:a3:de:52:a1:7c:b5:5b:ee: c4:6c:30:a8:74:42:90:41:06:72:8c:90:bd:2e:dd: f8:b3:57:e6:a0:a1:13:01:de:24:5a:e0:be:27:1f: b3:bd:c9:0c:d7:46:f8:c6:45:38:a3:e5:1c:ef:b4: fd:89:69:73:c9:d4:70:73:ff:8b:a3:24:80:e1:2a: 02:69:89:2f:89:81:18:b5:4d:19:73:55:19:45:36: de:01:78:f1:e2:23:24:7f:fc:7f:72:40:1b:ff:01: 5f:5b:13:b0:7a:79:dc:d9:4a:c9:12:f1:9f:86:9a: 32:13:f2:15:53:ef:e5:e2:e0:fb:0e:df:04:2d:a0: 67:73:ec:34:94:35:ff:87:a0:b2:3e:61:66:5c:ce: 37:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:39:F4:7E:65:11:FC:17:57:9D:A4:73:67:28:70:A7:F9:B5:22:53 X509v3 Authority Key Identifier: keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:bc:c5:b2:d5:bf:1d:6e:b3:8d:5e:ef:06:82:f7:d2:5b:59: 52:b7:67:9a:de:9e:11:f8:9d:7f:1d:71:99:76:64:6b:ba:6d: 36:91:dd:9f:06:38:c1:be:5e:56:34:7d:94:1a:ab:70:7e:15: 68:2e:e9:bc:3d:49:a3:6e:54:8e:8e:17:db:cb:09:1e:9c:4c: 50:d4:e8:da:55:b8:c6:0d:e1:95:af:e1:c2:20:5a:16:36:50: 14:a2:c7:6c:cb:af:24:24:de:b8:81:27:aa:c2:2c:ad:6c:90: c5:84:49:e7:b5:b2:41:ac:44:ba:d7:bb:8b:6c:35:f4:a1:93: 5c:bf:45:8d:1b:16:c8:f8:cc:41:95:13:2f:ef:29:83:44:44: ba:63:06:63:72:87:bd:56:aa:04:71:19:26:02:33:06:23:49: 0a:97:27:35:d7:25:ee:e6:d8:5a:b5:ed:34:fc:5c:4e:60:b6: 13:50:22:92:d5:7d:72:26:0e:d9:f2:8d:ae:b4:ae:c5:86:b6: 07:d5:5a:5f:78:85:2f:7b:3f:e6:c2:15:9c:97:d4:95:0f:fd: 90:76:a8:b3:f5:b7:11:e2:a6:35:eb:5f:40:67:2b:b0:c1:6b: 78:7a:ea:0a:7a:c1:fb:06:87:64:c6:28:c7:60:be:cb:31:56: 0d:33:0a:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s+dMxxishl50AuDjZXk7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDc0ZmJiYmFlNThkZDA4NzZkOTllODBlYzgyYTExYTQ0 NzdmN2UwHhcNMjUxMjIwMDMwMDQ5WhcNMjUxMjIxMDMwMDQ5WjAzMTEwLwYDVQQD EyhkODM5ZjQ3ZTY1MTFmYzE3NTc5ZGE0NzM2NzI4NzBhN2Y5YjUyMjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS2KMhLJYUe8RVy9ryDaNcAjKzFG j2PmVGIMVXQ2oHlR0jrdtK31IywRiM/RXcr/8NKZqUNHLZWXWawc9wp9GkNAAiKH srbqSmVoMkqA4rOielNxDtAA8da+pg5unbgqQQm2Hukz0iBp1y3iE1Rwo95SoXy1 W+7EbDCodEKQQQZyjJC9Lt34s1fmoKETAd4kWuC+Jx+zvckM10b4xkU4o+Uc77T9 iWlzydRwc/+LoySA4SoCaYkviYEYtU0Zc1UZRTbeAXjx4iMkf/x/ckAb/wFfWxOw ennc2UrJEvGfhpoyE/IVU+/l4uD7Dt8ELaBnc+w0lDX/h6CyPmFmXM43aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNg59H5lEfwXV52kc2cocKf5tSJTMB8GA1UdIwQY MBaAFE3XT7u65Y3Qh22Z6A7IKhGkR39+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmIt OGVhYjdmNGZlNzdlLzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmItOGVhYjdmNGZlNzdl LzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmrzFstW/ HW6zjV7vBoL30ltZUrdnmt6eEfidfx1xmXZka7ptNpHdnwY4wb5eVjR9lBqrcH4V aC7pvD1Jo25Ujo4X28sJHpxMUNTo2lW4xg3hla/hwiBaFjZQFKLHbMuvJCTeuIEn qsIsrWyQxYRJ57WyQaxEute7i2w19KGTXL9FjRsWyPjMQZUTL+8pg0REumMGY3KH vVaqBHEZJgIzBiNJCpcnNdcl7ubYWrXtNPxcTmC2E1AiktV9ciYO2fKNrrSuxYa2 B9VaX3iFL3s/5sIVnJfUlQ/9kHaos/W3EeKmNetfQGcrsMFreHrqCnrB+waHZMYo x2C+yzFWDTMKVw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:05:48 2025 by rpki-client