This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft File: tgdgRQHeNgl2jFunxMypxWth-dU.mft (raw, json) Hash identifier: /rCjwFtM81FqHmrntnz9r6Z9djVA2z2ZHrRGxr2cpw0= Subject key identifier: 60:B2:BC:D2:4F:F3:BC:FC:9E:AB:15:44:67:9D:30:3E:49:66:12:4B Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019B3A2233A87B71650F2C350A10C48D0E77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft Manifest number: 47 Signing time: Sat 20 Dec 2025 05:01:18 +0000 Manifest this update: Sat 20 Dec 2025 05:01:18 +0000 Manifest next update: Sun 21 Dec 2025 05:01:18 +0000 Files and hashes: 1: 3wmc1QYw4mfuocmEfGMfi1HHD8k.roa (hash: SS3zb4L+Y19yv16W1udbGaR8EWB9tuMbwSavNQhf5RQ=) 2: 5v-xs4SjsBX3F7o5sCHUUhLEVaI.roa (hash: F3y4xuefLk6xYOCwbOg7ZZSbHpsb0d0yzbiAbMyYOZw=) 3: AMTyl2NmOJzWYIdDioCqD2l3o74.roa (hash: KueLQl5N1mcezdycmNIiNC1iPrlf8pNhCrc2qwqwyuk=) 4: EN200_fHuS3Y54Exmp7fn74_RLI.roa (hash: BVm8C5g07MheS5G/dZUeBM8M5KiLFd4oRI2mTZ8pE+o=) 5: JUaIAOE5fe_2YaiS9GPWQlkWfWQ.roa (hash: 5LqXZ/2aP/lD77xdqIqJt/J4eorvdu4vfms+oGIuMQU=) 6: QiANL6hD31O5NTAaW1W-Nvlf9gY.roa (hash: uXLv0uniDn8Rar8jmxGxebjw15OBJXAN7sUxsLeh2Ro=) 7: TCmTK7NJX8puhN8to4156UZz-78.roa (hash: U1wNw1BCYDW5bA+bL2oNFTORSfPO4Pns6r2IGFi4l/I=) 8: ZXZDaDi-XBkpqP9YKXeGj84e004.roa (hash: qZqA5o0uL/9qLnfwxOSfBRMkrlBMmLZN/t7qia4F8sw=) 9: cMI9aaoe5XEx76TGXVunHrV4vwY.roa (hash: JDNCzzOpLYcvgpwGrkn4GpN69CUvTkONneBGxsB4W8o=) 10: kVUBj-jv3JPb-hlgSX4k_viNe9U.roa (hash: PEIXpoFZM+hlxNARLic2jW38vF6SQe4FptG7axrWOn0=) 11: oyDxBVtF1LjTnCQDciTh8zuFqYQ.roa (hash: pYXg+Vf94Nw+ugeuc3FGDfBMx7ld+TJ8OE/NCWTXTOo=) 12: tgdgRQHeNgl2jFunxMypxWth-dU.crl (hash: 92oBR5nmEPz1qEf/wYRyUuhZUEAuse3YAG4CKkdgwD0=) 13: usP-L7HqUJP4XiTEa53HsdKGiOc.roa (hash: yhPkLQS6WBCaRHO9lJJSPKGObPTt1MU1vHfLTLVpdn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:22:33:a8:7b:71:65:0f:2c:35:0a:10:c4:8d:0e:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Dec 20 05:01:18 2025 GMT Not After : Dec 21 05:01:18 2025 GMT Subject: CN=60b2bcd24ff3bcfc9eab1544679d303e4966124b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c2:6a:78:58:da:c3:a0:cd:2e:6d:6e:18:fd: 8b:bb:18:a9:73:ce:3d:45:49:e8:2e:f6:4e:03:42: ed:db:51:12:4c:fc:5f:1b:86:15:f4:52:86:72:3f: 5b:fd:a9:37:86:b2:95:2a:73:36:80:e2:9c:6c:06: 0b:87:6b:46:81:e2:cb:fe:59:b3:4f:40:5f:ad:69: 9e:93:bb:db:a6:af:8f:85:25:27:98:2b:08:bd:37: 46:cc:20:a7:02:63:5b:2c:f5:45:0d:b9:2b:fc:d6: d7:e1:94:b1:6d:8b:24:60:2b:90:4e:f9:2d:67:c7: 81:e8:bc:16:0f:55:bb:c1:40:ee:7d:8d:4f:c2:bb: 96:45:4e:6e:ce:b9:ab:f1:16:71:fe:52:0e:e8:c7: 55:6a:fe:ba:b5:6b:d3:81:29:b7:ec:29:db:ae:cd: d9:9f:e0:b8:f5:76:56:ba:ee:56:a7:2b:68:29:2f: b6:8e:50:d6:b7:d0:c8:f8:46:5f:38:c4:d3:19:87: 21:63:6e:4a:92:17:11:11:c3:bb:40:3d:e7:7f:ab: ef:8e:62:be:8e:23:ae:26:0e:ae:93:ac:a9:e2:8b: 0c:11:5a:ce:66:8f:e5:e9:3c:30:b7:38:9a:50:ed: 10:0d:a2:fc:ef:1e:33:43:ab:58:df:8c:dc:62:28: 6e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B2:BC:D2:4F:F3:BC:FC:9E:AB:15:44:67:9D:30:3E:49:66:12:4B X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:cd:0f:4b:4e:46:7c:eb:cb:21:83:7d:94:27:f9:49:af:af: 7e:10:ac:e7:4f:a9:42:2d:95:e7:dc:23:0f:56:74:5b:79:bc: 8a:0b:44:f9:86:66:fa:ca:06:ed:1d:dd:fb:66:c6:94:6c:ef: 14:ed:6a:4c:98:d1:18:62:71:86:b0:3d:35:18:a1:a1:4d:7e: 73:03:5f:41:4f:71:f5:b6:80:d8:6b:76:9c:b9:e5:73:79:5b: f1:c3:bf:b6:dd:69:ee:2b:d4:62:44:61:78:d7:e0:38:7c:70: 43:60:0d:46:8d:54:0a:29:16:69:29:03:3f:e5:86:31:4d:7f: 44:7e:11:fd:40:b5:71:dc:05:8f:44:4c:27:7f:e6:88:ad:9e: fa:bb:59:2f:4e:76:09:3e:93:72:5d:a1:93:c6:4b:ed:7a:db: 5b:3b:04:ae:81:91:45:5d:fe:ab:ce:b6:9b:be:37:cc:76:f1: a3:f1:3c:29:3a:41:26:24:76:06:65:0e:af:f1:84:d1:1f:99: 5a:34:ad:f9:0b:73:3d:81:ed:cf:7a:82:dc:26:a0:db:06:81: c5:ba:35:1e:b6:d5:b0:86:31:2f:83:f3:8d:18:2d:77:c6:55: c6:8e:43:e7:66:30:21:cd:30:00:82:1f:ac:a7:41:d5:63:68: ca:51:9e:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IjOoe3FlDyw1ChDEjQ53MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjUxMjIwMDUwMTE4WhcNMjUxMjIxMDUwMTE4WjAzMTEwLwYDVQQD Eyg2MGIyYmNkMjRmZjNiY2ZjOWVhYjE1NDQ2NzlkMzAzZTQ5NjYxMjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MJqeFjaw6DNLm1uGP2Luxipc849 RUnoLvZOA0Lt21ESTPxfG4YV9FKGcj9b/ak3hrKVKnM2gOKcbAYLh2tGgeLL/lmz T0BfrWmek7vbpq+PhSUnmCsIvTdGzCCnAmNbLPVFDbkr/NbX4ZSxbYskYCuQTvkt Z8eB6LwWD1W7wUDufY1PwruWRU5uzrmr8RZx/lIO6MdVav66tWvTgSm37Cnbrs3Z n+C49XZWuu5WpytoKS+2jlDWt9DI+EZfOMTTGYchY25KkhcREcO7QD3nf6vvjmK+ jiOuJg6uk6yp4osMEVrOZo/l6TwwtziaUO0QDaL87x4zQ6tY34zcYihu0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCyvNJP87z8nqsVRGedMD5JZhJLMB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqM0PS05G fOvLIYN9lCf5Sa+vfhCs50+pQi2V59wjD1Z0W3m8igtE+YZm+soG7R3d+2bGlGzv FO1qTJjRGGJxhrA9NRihoU1+cwNfQU9x9baA2Gt2nLnlc3lb8cO/tt1p7ivUYkRh eNfgOHxwQ2ANRo1UCikWaSkDP+WGMU1/RH4R/UC1cdwFj0RMJ3/miK2e+rtZL052 CT6Tcl2hk8ZL7XrbWzsEroGRRV3+q862m743zHbxo/E8KTpBJiR2BmUOr/GE0R+Z WjSt+QtzPYHtz3qC3Cag2waBxbo1HrbVsIYxL4PzjRgtd8ZVxo5D52YwIc0wAIIf rKdB1WNoylGe7A== -----END CERTIFICATE-----Generated at Sat Dec 20 14:06:31 2025 by rpki-client