This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft File: tDJYoYz00SKOXHkHDfpjMRaDIMU.mft (raw, json) Hash identifier: 7K1TNFsP/0ZKNny5RvG+E8RFzZqNR8Q/9GVVoYDIt8s= Subject key identifier: F1:C4:21:B5:8F:B7:AE:22:9D:00:94:E3:FF:12:6B:7B:F7:83:BE:DE Authority key identifier: B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5 Certificate issuer: /CN=b43258a18cf4d1228e5c79070dfa6331168320c5 Certificate serial: 019B71477449138021A65A3DCEB8870FD4DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft Manifest number: 15E6 Signing time: Tue 30 Dec 2025 22:01:06 +0000 Manifest this update: Tue 30 Dec 2025 22:01:06 +0000 Manifest next update: Wed 31 Dec 2025 22:01:06 +0000 Files and hashes: 1: 28g4Blr7nuSyJeVmwy4cGLK9eb8.roa (hash: Q3uRjW4ymMVkt8l5TduM8mGnhXb4GzyvEHZ5j93is8c=) 2: psNnDsOb3MJQFpyT8HfsVNSnwog.roa (hash: KJkUgz1VxvV5lZj00xJ9seKTuebHbMbR6MJlSYq/h5Q=) 3: tDJYoYz00SKOXHkHDfpjMRaDIMU.crl (hash: 0DqiA/KjbY9g+BrolhaG6LW6CiQja2JOU/lE/6DbxsY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 22:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:47:74:49:13:80:21:a6:5a:3d:ce:b8:87:0f:d4:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b43258a18cf4d1228e5c79070dfa6331168320c5 Validity Not Before: Dec 30 22:01:06 2025 GMT Not After : Dec 31 22:01:06 2025 GMT Subject: CN=f1c421b58fb7ae229d0094e3ff126b7bf783bede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1b:8a:47:f6:74:aa:23:9b:3d:44:1f:d0:ec: 5f:ab:08:b2:bf:21:c6:e5:50:19:a1:1b:e7:0f:c3: 9a:a3:e4:9e:70:5c:e5:5a:63:44:c1:62:e6:d6:e8: 0a:c3:d9:75:45:c6:3a:2b:34:05:39:51:63:d5:61: c6:2b:8c:24:16:b2:2e:21:9a:82:3f:c7:82:d4:9b: 1e:01:c9:db:9a:b5:b0:64:8b:a6:11:42:68:b3:9f: d9:7b:49:9a:a1:4d:11:bd:ef:b6:4c:68:b4:62:14: c1:31:b3:b7:ec:3b:04:0b:fd:c1:c3:92:f3:3a:7c: ab:06:9f:6f:c6:1d:b9:2a:43:57:5e:bd:8d:b5:15: 86:ff:13:ac:fc:e7:a0:b1:9c:a7:21:c9:4b:7b:5c: 6a:0c:37:8b:5f:70:ea:87:0f:1b:37:7e:7e:6d:50: 35:aa:73:f5:7c:7f:7b:cc:f5:c1:8a:da:95:7c:57: cd:c4:ba:bc:3e:a4:74:ed:46:fb:49:2a:f6:8f:a0: 85:ff:07:35:6e:94:3b:2f:8f:dc:1e:8e:e6:f9:61: 5f:6f:7b:f2:87:1e:45:93:3a:66:12:18:0f:92:8f: f7:b0:39:2a:4c:c6:64:b5:25:14:f2:7e:ed:c7:12: 94:1d:6b:d4:6b:67:9d:38:72:59:c6:7b:da:1b:20: 1f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C4:21:B5:8F:B7:AE:22:9D:00:94:E3:FF:12:6B:7B:F7:83:BE:DE X509v3 Authority Key Identifier: keyid:B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:36:2f:21:05:b7:36:c2:7b:94:8b:f4:69:b6:12:67:f9:cf: f3:4f:92:96:a1:a0:bf:56:54:b9:da:83:a6:1e:c2:ca:62:44: 56:97:eb:28:c2:28:64:87:17:94:72:ae:28:40:a1:16:96:57: 00:8e:4b:95:ca:03:8e:02:cc:94:aa:74:15:ae:7b:05:0e:f3: ef:71:97:7a:ad:eb:63:95:66:76:59:20:b7:b3:b9:c6:da:3b: 15:eb:40:d7:da:bc:3e:0e:73:3e:da:c5:e6:6c:7c:0c:da:ed: 27:45:e1:54:9f:01:bf:2e:d7:94:9e:cd:db:fa:9d:47:b2:6c: 12:db:ab:3b:8e:66:cb:fe:26:aa:05:d7:9b:c0:f4:6d:ed:1b: 92:09:29:d7:60:c0:04:fc:97:e1:c5:3f:9d:58:9a:e0:53:52: cb:b3:1a:07:02:44:36:30:3e:8d:49:60:1e:53:f5:bf:7b:3b: 97:d4:65:5a:da:7c:d0:b7:b4:f9:38:73:22:ff:41:49:0e:5a: 59:af:10:6d:75:7f:f4:5e:ff:c5:fa:93:33:d6:95:80:d5:cb: 9d:9c:1d:52:f8:5d:c1:87:ac:78:ed:49:6d:d7:41:58:d8:23: 2b:d7:80:f1:b1:5d:13:b2:91:9b:5f:49:7d:00:04:1b:ba:16: da:e1:38:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxR3RJE4Ahplo9zriHD9TdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzI1OGExOGNmNGQxMjI4ZTVjNzkwNzBkZmE2MzMxMTY4 MzIwYzUwHhcNMjUxMjMwMjIwMTA2WhcNMjUxMjMxMjIwMTA2WjAzMTEwLwYDVQQD EyhmMWM0MjFiNThmYjdhZTIyOWQwMDk0ZTNmZjEyNmI3YmY3ODNiZWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihuKR/Z0qiObPUQf0OxfqwiyvyHG 5VAZoRvnD8Oao+SecFzlWmNEwWLm1ugKw9l1RcY6KzQFOVFj1WHGK4wkFrIuIZqC P8eC1JseAcnbmrWwZIumEUJos5/Ze0maoU0Rve+2TGi0YhTBMbO37DsEC/3Bw5Lz OnyrBp9vxh25KkNXXr2NtRWG/xOs/OegsZynIclLe1xqDDeLX3Dqhw8bN35+bVA1 qnP1fH97zPXBitqVfFfNxLq8PqR07Ub7SSr2j6CF/wc1bpQ7L4/cHo7m+WFfb3vy hx5FkzpmEhgPko/3sDkqTMZktSUU8n7txxKUHWvUa2edOHJZxnvaGyAfyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHEIbWPt64inQCU4/8Sa3v3g77eMB8GA1UdIwQY MBaAFLQyWKGM9NEijlx5Bw36YzEWgyDFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERKWW9ZejAwU0tPWEhrSERmcGpNUmFESU1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wM2EzMjUtYTE2OS00NGNlLTg0ZWMt NTcyOGZiMjRiZjBlLzEvdERKWW9ZejAwU0tPWEhrSERmcGpNUmFESU1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8wM2EzMjUtYTE2OS00NGNlLTg0ZWMtNTcyOGZiMjRiZjBl LzEvdERKWW9ZejAwU0tPWEhrSERmcGpNUmFESU1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTYvIQW3 NsJ7lIv0abYSZ/nP80+SlqGgv1ZUudqDph7CymJEVpfrKMIoZIcXlHKuKEChFpZX AI5LlcoDjgLMlKp0Fa57BQ7z73GXeq3rY5Vmdlkgt7O5xto7FetA19q8Pg5zPtrF 5mx8DNrtJ0XhVJ8Bvy7XlJ7N2/qdR7JsEturO45my/4mqgXXm8D0be0bkgkp12DA BPyX4cU/nVia4FNSy7MaBwJENjA+jUlgHlP1v3s7l9RlWtp80Le0+ThzIv9BSQ5a Wa8QbXV/9F7/xfqTM9aVgNXLnZwdUvhdwYeseO1JbddBWNgjK9eA8bFdE7KRm19J fQAEG7oW2uE4rA== -----END CERTIFICATE-----Generated at Wed Dec 31 03:59:43 2025 by rpki-client