This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft File: TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft (raw, json) Hash identifier: 6yzvArMcYlmmHw/e4k040Jxb9Pk16kniV/pPhcKh0lQ= Subject key identifier: 4A:5F:0F:22:85:BC:C1:D4:04:CA:94:ED:59:CD:D2:4D:BD:1A:7F:E9 Authority key identifier: 4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9 Certificate issuer: /CN=4c39055a6990b82408cf1abf29313780e249a4c9 Certificate serial: 019B3EA3550F9AE9BEF56B5F993EAF08D9C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft Manifest number: 12F2 Signing time: Sun 21 Dec 2025 02:00:50 +0000 Manifest this update: Sun 21 Dec 2025 02:00:50 +0000 Manifest next update: Mon 22 Dec 2025 02:00:50 +0000 Files and hashes: 1: 0Y15xTEGHWqAVJeDnj84hoOI0tg.roa (hash: x9AqfYccJqcsHyWL4/sbLsYAD4D5JWU2OTOL9ya8Qzo=) 2: IYab2KOA6Rs-FvpcDRNq2DIlRwA.roa (hash: IVe8cPHTrjQPMjYgTeQH7fMCvrM38QVBDNRacJOqgtc=) 3: TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl (hash: bDwv9w68bohhR1C6l8oJK9eGQ2Xz5DbtV2/r0/neBoc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:55:0f:9a:e9:be:f5:6b:5f:99:3e:af:08:d9:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c39055a6990b82408cf1abf29313780e249a4c9 Validity Not Before: Dec 21 02:00:50 2025 GMT Not After : Dec 22 02:00:50 2025 GMT Subject: CN=4a5f0f2285bcc1d404ca94ed59cdd24dbd1a7fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:be:26:72:7f:74:29:05:c5:1c:2d:57:0e:a9: fb:8a:d0:02:8d:0d:36:23:e4:53:0e:20:ca:b6:6a: 2a:e6:fd:31:d1:e9:88:f8:58:d0:db:8d:97:33:c2: 93:27:89:4f:e7:44:3c:22:1b:b0:48:3a:5d:cf:de: f0:47:5e:f5:63:84:06:45:c8:e9:b5:05:3c:43:2b: 03:0a:fd:43:30:4e:80:59:d2:1a:e6:80:56:60:48: 9c:f2:a8:cf:85:ca:39:5b:10:9d:af:62:b4:14:eb: 46:64:a5:a8:df:3d:14:b0:67:0e:07:ba:49:2a:d7: ed:94:43:6b:2d:52:a6:fa:cf:c2:f2:99:54:51:26: 9c:ba:fa:de:4f:3e:c6:f0:25:d3:7f:3f:26:f3:ba: eb:3b:52:c4:0e:a2:5a:1a:f2:c6:50:11:8d:fe:be: 12:b1:7f:40:22:fa:e0:97:12:9a:0a:96:76:f6:49: 79:19:76:bb:97:35:1d:91:04:81:02:7e:08:22:be: 33:3a:46:87:5e:7b:ce:5c:71:5e:03:c8:2a:c7:dc: 61:44:86:98:e2:9a:06:d3:95:e9:5a:e0:ac:5f:1a: 71:9a:15:fe:3b:20:63:4a:ff:c8:13:7d:c0:e9:64: 74:5b:1d:eb:16:5a:8f:d2:8e:7b:f4:00:42:b6:11: 14:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:5F:0F:22:85:BC:C1:D4:04:CA:94:ED:59:CD:D2:4D:BD:1A:7F:E9 X509v3 Authority Key Identifier: keyid:4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:c2:0f:07:92:3d:95:94:56:10:08:ad:77:2c:56:28:0f:d2: ce:33:8e:3d:42:8a:f0:63:2a:93:2d:74:d6:f1:20:3e:c0:ae: d7:b3:8b:91:43:fb:43:e2:24:b2:b7:b4:b4:3c:b7:5c:6f:a4: de:05:1a:98:19:79:17:01:7d:e9:c7:f3:47:ce:08:07:cb:c8: 64:df:2d:70:a0:db:ee:75:c9:75:ea:80:9c:9d:90:4e:45:37: e4:51:af:21:ea:c8:7d:b4:28:29:67:ee:43:81:ee:0b:4d:9b: 40:25:ba:b6:09:a6:91:75:fa:23:e2:c2:b5:51:d0:7f:80:8b: 3b:16:e7:17:db:51:3a:f6:aa:19:68:fa:9b:a7:20:b2:13:aa: 84:6e:94:19:95:b3:96:c2:b4:48:a4:0b:64:6b:a6:04:70:9a: d9:de:e0:79:33:ca:04:43:c9:33:fb:b6:f9:21:b6:83:5b:97: 7e:ca:ca:01:fe:61:be:6f:bb:6f:86:12:c0:2c:01:29:db:fd: a7:16:40:e3:44:b5:2b:98:64:bc:57:9e:f4:63:4e:3b:b1:d9: e5:fb:de:55:16:e1:43:81:02:f3:f2:58:96:81:3b:52:9b:9e: a1:7c:e4:a2:9c:3c:5a:21:5a:e3:15:df:53:b0:18:73:ca:cd: e6:b9:70:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o1UPmum+9WtfmT6vCNnFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzkwNTVhNjk5MGI4MjQwOGNmMWFiZjI5MzEzNzgwZTI0 OWE0YzkwHhcNMjUxMjIxMDIwMDUwWhcNMjUxMjIyMDIwMDUwWjAzMTEwLwYDVQQD Eyg0YTVmMGYyMjg1YmNjMWQ0MDRjYTk0ZWQ1OWNkZDI0ZGJkMWE3ZmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb4mcn90KQXFHC1XDqn7itACjQ02 I+RTDiDKtmoq5v0x0emI+FjQ242XM8KTJ4lP50Q8IhuwSDpdz97wR171Y4QGRcjp tQU8QysDCv1DME6AWdIa5oBWYEic8qjPhco5WxCdr2K0FOtGZKWo3z0UsGcOB7pJ KtftlENrLVKm+s/C8plUUSacuvreTz7G8CXTfz8m87rrO1LEDqJaGvLGUBGN/r4S sX9AIvrglxKaCpZ29kl5GXa7lzUdkQSBAn4IIr4zOkaHXnvOXHFeA8gqx9xhRIaY 4poG05XpWuCsXxpxmhX+OyBjSv/IE33A6WR0Wx3rFlqP0o579ABCthEUdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpfDyKFvMHUBMqU7VnN0k29Gn/pMB8GA1UdIwQY MBaAFEw5BVppkLgkCM8avykxN4DiSaTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERrRldtbVF1Q1FJenhxX0tURTNnT0pKcE1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kZjZlMjUtOTIzYy00ODM4LTg2NGYt ZDRiMzdlNDRhYjdjLzEvVERrRldtbVF1Q1FJenhxX0tURTNnT0pKcE1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9kZjZlMjUtOTIzYy00ODM4LTg2NGYtZDRiMzdlNDRhYjdj LzEvVERrRldtbVF1Q1FJenhxX0tURTNnT0pKcE1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8IPB5I9 lZRWEAitdyxWKA/SzjOOPUKK8GMqky101vEgPsCu17OLkUP7Q+Iksre0tDy3XG+k 3gUamBl5FwF96cfzR84IB8vIZN8tcKDb7nXJdeqAnJ2QTkU35FGvIerIfbQoKWfu Q4HuC02bQCW6tgmmkXX6I+LCtVHQf4CLOxbnF9tROvaqGWj6m6cgshOqhG6UGZWz lsK0SKQLZGumBHCa2d7geTPKBEPJM/u2+SG2g1uXfsrKAf5hvm+7b4YSwCwBKdv9 pxZA40S1K5hkvFee9GNOO7HZ5fveVRbhQ4EC8/JYloE7UpueoXzkopw8WiFa4xXf U7AYc8rN5rlwww== -----END CERTIFICATE-----Generated at Sun Dec 21 04:57:52 2025 by rpki-client