This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft File: TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft (raw, json) Hash identifier: IU4YIeQ9+WxrnObEx1A8o7Cu5Q0fQomyXgrPi8fVHeM= Subject key identifier: 8C:ED:18:B7:BD:B1:98:33:44:48:F7:FB:8F:07:C7:8A:67:5A:1A:44 Authority key identifier: 4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E Certificate issuer: /CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e Certificate serial: 019B386A091DBC7033E55712DAA5C1EF31DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft Manifest number: 0ECB Signing time: Fri 19 Dec 2025 21:00:31 +0000 Manifest this update: Fri 19 Dec 2025 21:00:31 +0000 Manifest next update: Sat 20 Dec 2025 21:00:31 +0000 Files and hashes: 1: NgIKF8jcDLCHN3aJD8aULMWPG30.roa (hash: 9imCN3WetXg8Q1ELNvwqDIt+zXYLct6tp7egk/4AdG8=) 2: TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl (hash: 1FPyEC5tF+LNWRr2MYwLkVFthRGizbSuRo3wRZ/2JQ4=) 3: k_nIf6wVx1Xdxat4zYtnBqTL13Y.roa (hash: HaoM7rJ6dUREUsX3C7dLkVUY9dcgJCaHV1PnH/ISMtE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 21:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:6a:09:1d:bc:70:33:e5:57:12:da:a5:c1:ef:31:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e Validity Not Before: Dec 19 21:00:31 2025 GMT Not After : Dec 20 21:00:31 2025 GMT Subject: CN=8ced18b7bdb198334448f7fb8f07c78a675a1a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:61:6f:c1:b2:16:1a:1b:04:a7:52:24:e9:11: 56:2c:da:38:3a:d4:47:d4:86:e1:f5:a4:d6:b0:37: 4f:22:81:cb:63:c8:40:ec:80:61:61:d0:22:74:45: 94:19:ed:bc:58:57:17:90:21:40:99:75:3a:66:6b: 00:23:e7:66:b9:0b:10:47:17:93:36:eb:46:99:a6: b1:fe:97:53:d2:10:2e:e7:22:90:1b:46:65:4f:8f: c8:69:80:f2:dd:07:cd:a5:09:67:ad:e8:ba:ab:ab: 65:5e:0f:bb:a8:2a:f9:f0:89:dd:f6:bc:26:a0:ab: 59:34:84:c3:bf:a0:c5:c1:03:ab:13:70:b4:43:23: 81:34:ae:98:79:db:b4:9d:db:9a:bd:b5:76:45:1b: 56:f3:44:3c:4c:0e:94:73:b6:69:5d:51:30:0b:bc: 72:01:4e:46:9a:bc:9e:9f:64:98:80:27:bb:b9:30: 5a:61:6c:79:10:25:ca:ab:04:8e:68:93:48:15:85: 32:69:da:54:76:be:22:a9:0b:ee:9d:f6:c7:f8:96: b2:fb:ba:3f:8f:ee:3a:b5:6e:87:5f:25:e0:61:ba: 5d:44:2d:e2:fb:e6:ac:9e:56:4a:1a:92:b9:95:42: de:72:e3:67:1b:55:f4:b1:3c:6c:bd:24:f0:65:d3: 27:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:ED:18:B7:BD:B1:98:33:44:48:F7:FB:8F:07:C7:8A:67:5A:1A:44 X509v3 Authority Key Identifier: keyid:4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:d8:32:26:9a:7a:45:6a:c1:67:fd:b4:0d:3a:1e:3c:a9:1d: 4a:0b:7a:85:c8:b9:7d:f7:b6:f8:84:d2:1c:91:44:70:dc:e8: da:56:c9:d2:1e:11:75:eb:e0:d6:6a:2e:2c:a5:99:39:6b:19: 4e:66:93:5f:d1:03:7b:9f:45:a2:b6:6e:4d:ee:6d:45:a5:69: 7b:44:36:f8:6a:5e:5c:2d:9a:e2:59:82:1e:6d:f9:54:a1:a4: 5d:e6:1c:59:64:88:3e:f9:70:bf:28:ba:87:d8:e3:cd:a8:5a: 7c:bd:54:3e:3a:34:08:63:0e:cb:e8:86:84:1d:71:55:bc:c9: 1e:02:14:dd:fd:e4:54:8f:0b:fd:fc:22:4d:d2:77:8f:71:ee: 2f:2d:7d:90:95:da:a9:59:14:1a:b8:06:64:c9:49:b7:a2:ff: f5:73:fe:d4:01:cc:82:d1:42:61:1d:36:60:21:7a:25:e8:d1: ac:cc:bf:cc:ff:9a:f8:9e:30:95:05:60:e7:17:b2:f7:e9:1c: 0f:bc:85:15:77:d3:75:1d:67:f1:fe:1e:6d:fa:39:e7:33:91: 03:92:e2:e7:39:49:7d:32:b5:5d:d6:e9:6f:33:f7:0a:ca:80: 00:7b:44:e6:d4:ba:c9:20:b3:cb:c9:23:c9:1b:c7:ff:1a:4e: f3:88:6d:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4agkdvHAz5VcS2qXB7zHcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzNjMGUxNGQ1N2VhYmMzYjY1ZTM4YTc3MzZiZWJlNDkw OTJlOWUwHhcNMjUxMjE5MjEwMDMxWhcNMjUxMjIwMjEwMDMxWjAzMTEwLwYDVQQD Eyg4Y2VkMThiN2JkYjE5ODMzNDQ0OGY3ZmI4ZjA3Yzc4YTY3NWExYTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWFvwbIWGhsEp1Ik6RFWLNo4OtRH 1Ibh9aTWsDdPIoHLY8hA7IBhYdAidEWUGe28WFcXkCFAmXU6ZmsAI+dmuQsQRxeT NutGmaax/pdT0hAu5yKQG0ZlT4/IaYDy3QfNpQlnrei6q6tlXg+7qCr58Ind9rwm oKtZNITDv6DFwQOrE3C0QyOBNK6Yedu0nduavbV2RRtW80Q8TA6Uc7ZpXVEwC7xy AU5Gmryen2SYgCe7uTBaYWx5ECXKqwSOaJNIFYUyadpUdr4iqQvunfbH+Jay+7o/ j+46tW6HXyXgYbpdRC3i++asnlZKGpK5lULecuNnG1X0sTxsvSTwZdMnXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIztGLe9sZgzREj3+48Hx4pnWhpEMB8GA1UdIwQY MBaAFEwzwOFNV+q8O2Xjinc2vr5JCS6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERQQTRVMVg2cnc3WmVPS2R6YS12a2tKTHA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9jNzJhYmUtMzJkYy00ZjE4LTkwNWYt YzFmZjA1NmZjNzZmLzEvVERQQTRVMVg2cnc3WmVPS2R6YS12a2tKTHA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9jNzJhYmUtMzJkYy00ZjE4LTkwNWYtYzFmZjA1NmZjNzZm LzEvVERQQTRVMVg2cnc3WmVPS2R6YS12a2tKTHA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwNgyJpp6 RWrBZ/20DToePKkdSgt6hci5ffe2+ITSHJFEcNzo2lbJ0h4Rdevg1mouLKWZOWsZ TmaTX9EDe59ForZuTe5tRaVpe0Q2+GpeXC2a4lmCHm35VKGkXeYcWWSIPvlwvyi6 h9jjzahafL1UPjo0CGMOy+iGhB1xVbzJHgIU3f3kVI8L/fwiTdJ3j3HuLy19kJXa qVkUGrgGZMlJt6L/9XP+1AHMgtFCYR02YCF6JejRrMy/zP+a+J4wlQVg5xey9+kc D7yFFXfTdR1n8f4ebfo55zORA5Li5zlJfTK1XdbpbzP3CsqAAHtE5tS6ySCzy8kj yRvH/xpO84htwg== -----END CERTIFICATE-----Generated at Sat Dec 20 06:11:12 2025 by rpki-client