This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft File: TDJWN81N6a_lO9TxIav2IkX2cU8.mft (raw, json) Hash identifier: d0h7wPD65BP1fxjC5b7z/JZTNTCucrThGBy7tEYJX2k= Subject key identifier: 2E:42:80:7D:F5:C0:EE:BB:DE:CB:7A:E4:44:9B:05:77:81:2B:0D:4F Authority key identifier: 4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F Certificate issuer: /CN=4c325637cd4de9afe53bd4f121abf62245f6714f Certificate serial: 019B3AFD7A5CD61D43E705379470211126EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft Manifest number: 087C Signing time: Sat 20 Dec 2025 09:00:48 +0000 Manifest this update: Sat 20 Dec 2025 09:00:48 +0000 Manifest next update: Sun 21 Dec 2025 09:00:48 +0000 Files and hashes: 1: LYDDQOnitFMTtAyGKwDs2TyB_cA.roa (hash: sjSPKMVEsY4HYjeMnDvZAekbl4IrY01T9jduMhK7Jbc=) 2: TDJWN81N6a_lO9TxIav2IkX2cU8.crl (hash: dGsnypX7VWiPcBxM44LFnvLCtT9kFToMkZ+ngTNl2gI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:7a:5c:d6:1d:43:e7:05:37:94:70:21:11:26:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c325637cd4de9afe53bd4f121abf62245f6714f Validity Not Before: Dec 20 09:00:48 2025 GMT Not After : Dec 21 09:00:48 2025 GMT Subject: CN=2e42807df5c0eebbdecb7ae4449b0577812b0d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c8:79:9a:d7:09:2e:4a:c3:4d:a1:a6:28:72: 56:38:b3:53:f1:4f:3d:ab:d2:75:ef:4b:93:cb:64: 52:4e:83:ee:44:da:09:c9:78:b1:5a:8a:16:49:42: 72:1b:ca:7e:0f:68:21:85:a6:b7:cb:22:f4:6c:09: 25:99:d1:d9:03:16:81:88:88:2c:ce:78:9f:1b:c7: 1d:29:cd:55:f8:10:33:16:e3:60:d3:87:88:76:92: 4a:0a:15:fc:40:d5:61:eb:c4:ac:41:8b:67:02:76: 0f:e9:9f:53:75:fb:91:2e:72:d3:f2:d9:5c:84:f4: 02:41:55:1e:33:b6:00:f5:7c:d2:04:d0:8f:2f:f5: 09:38:93:1b:ec:c9:b1:44:13:72:cd:68:c5:4c:8f: 47:5c:5a:ca:ac:db:03:c8:e4:fa:56:3b:13:f7:d6: e5:d0:7c:7d:41:4e:21:61:fc:8b:b4:83:02:a3:69: 00:df:53:cf:d8:92:83:7a:6a:4c:41:c5:06:9c:29: 2b:d5:03:6c:a9:91:46:34:ce:2b:22:b2:20:9f:40: 96:3e:4c:4c:61:8c:03:e4:ba:77:9b:cc:62:2f:c9: 62:fd:4e:32:c2:d7:a0:f5:fc:26:3c:2c:48:a2:52: d8:fd:ac:c1:42:83:71:09:31:f2:46:72:ff:a6:51: 4c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:42:80:7D:F5:C0:EE:BB:DE:CB:7A:E4:44:9B:05:77:81:2B:0D:4F X509v3 Authority Key Identifier: keyid:4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:42:a7:43:69:35:51:8a:b4:f1:30:98:76:6d:e3:df:3c:26: e3:f3:a8:82:69:37:b6:14:68:ab:6d:df:0c:0c:47:79:c4:ca: 46:08:11:4c:77:57:95:c3:2f:e2:46:4d:8f:6b:e0:ea:c8:6b: e9:d5:44:97:85:ea:85:c1:a4:de:56:2a:b0:6e:b1:b6:b2:29: 8b:1e:57:cc:12:54:50:96:00:f2:b1:7c:be:72:20:e0:58:78: 91:73:a9:62:af:2c:aa:e7:29:18:63:38:6a:bb:dd:da:ea:d1: 67:26:1d:c2:ff:ba:0d:e6:80:4d:c1:a6:3b:28:e5:bd:7f:51: 33:c7:45:87:12:78:a0:ec:b5:bc:d9:ad:f8:85:c8:ba:c9:d2: 6d:8d:b0:b6:eb:a9:19:95:97:81:1f:27:a2:1f:44:12:1e:ad: ed:31:3c:d9:67:45:26:01:9c:ce:5c:0c:31:80:f5:6b:a8:da: 7b:bd:6f:b3:8f:34:61:dc:fb:d7:85:68:5b:f0:8f:00:f5:4a: 37:65:83:92:89:c5:7b:25:5e:5e:e0:b9:04:b9:72:97:05:ae: 1c:f3:b7:3f:5e:7c:48:24:b0:14:f4:7b:04:c4:e5:53:00:23: b5:5d:8e:78:b1:59:46:74:f0:cc:70:d8:0b:04:35:45:63:26: 5b:6b:be:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/Xpc1h1D5wU3lHAhESbrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzI1NjM3Y2Q0ZGU5YWZlNTNiZDRmMTIxYWJmNjIyNDVm NjcxNGYwHhcNMjUxMjIwMDkwMDQ4WhcNMjUxMjIxMDkwMDQ4WjAzMTEwLwYDVQQD EygyZTQyODA3ZGY1YzBlZWJiZGVjYjdhZTQ0NDliMDU3NzgxMmIwZDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApch5mtcJLkrDTaGmKHJWOLNT8U89 q9J170uTy2RSToPuRNoJyXixWooWSUJyG8p+D2ghhaa3yyL0bAklmdHZAxaBiIgs znifG8cdKc1V+BAzFuNg04eIdpJKChX8QNVh68SsQYtnAnYP6Z9TdfuRLnLT8tlc hPQCQVUeM7YA9XzSBNCPL/UJOJMb7MmxRBNyzWjFTI9HXFrKrNsDyOT6VjsT99bl 0Hx9QU4hYfyLtIMCo2kA31PP2JKDempMQcUGnCkr1QNsqZFGNM4rIrIgn0CWPkxM YYwD5Lp3m8xiL8li/U4ywteg9fwmPCxIolLY/azBQoNxCTHyRnL/plFMKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5CgH31wO673st65ESbBXeBKw1PMB8GA1UdIwQY MBaAFEwyVjfNTemv5TvU8SGr9iJF9nFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERKV044MU42YV9sTzlUeElhdjJJa1gyY1U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OTg0MTUtNDQ1ZS00NjhkLTlmOGUt ZDE5ODM5MjA2Y2U2LzEvVERKV044MU42YV9sTzlUeElhdjJJa1gyY1U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81OTg0MTUtNDQ1ZS00NjhkLTlmOGUtZDE5ODM5MjA2Y2U2 LzEvVERKV044MU42YV9sTzlUeElhdjJJa1gyY1U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWkKnQ2k1 UYq08TCYdm3j3zwm4/Oogmk3thRoq23fDAxHecTKRggRTHdXlcMv4kZNj2vg6shr 6dVEl4XqhcGk3lYqsG6xtrIpix5XzBJUUJYA8rF8vnIg4Fh4kXOpYq8squcpGGM4 arvd2urRZyYdwv+6DeaATcGmOyjlvX9RM8dFhxJ4oOy1vNmt+IXIusnSbY2wtuup GZWXgR8noh9EEh6t7TE82WdFJgGczlwMMYD1a6jae71vs480Ydz714VoW/CPAPVK N2WDkonFeyVeXuC5BLlylwWuHPO3P158SCSwFPR7BMTlUwAjtV2OeLFZRnTwzHDY CwQ1RWMmW2u+Ow== -----END CERTIFICATE-----Generated at Sat Dec 20 18:26:33 2025 by rpki-client