This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft File: TQreVMJ-b83aziYsT995DzIP7Zw.mft (raw, json) Hash identifier: nFOv+HjhVsX5QYh2xNLmU08BeCnN6vV5H+jd4sfsiRE= Subject key identifier: 53:BC:5A:CF:51:13:07:D2:4C:52:2E:36:C7:F3:33:14:88:51:15:98 Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C Certificate issuer: /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c Certificate serial: 019B4E4DA68E51BD76081CD78D45D717FE92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft Manifest number: 1798 Signing time: Wed 24 Dec 2025 03:01:10 +0000 Manifest this update: Wed 24 Dec 2025 03:01:10 +0000 Manifest next update: Thu 25 Dec 2025 03:01:10 +0000 Files and hashes: 1: 93DmKZhPP6C3A8rfNYLNAOSD7nY.roa (hash: dt3s4SYU1dR+fLajxJTR3/3GKKVmv0f+WTIVOmO+2as=) 2: A1lFiDlkwzd2kuuHtwLxrVifjIM.roa (hash: bheq6y6BKOc+FBTnE7aA9p7E54SloHCzl+8cgE33f9o=) 3: TQreVMJ-b83aziYsT995DzIP7Zw.crl (hash: HihFFEUOLd1jDP/uxGDsDfPJnzz1lSyM+xCYHt/1558=) 4: UD9G2KurtNeaAxJdizQiQcSD0uc.roa (hash: Es9ToT28+rspmgTLqxqTlnHgsgNlKjrlO13bAnzcF2g=) 5: XDIQZzxZW5-uUuoXNVfYPGALZY8.roa (hash: xZyhu94HluR+zrM/qfXRNVxIfS3klNJwNP/Gh4p7kNE=) 6: cYs_upIMBFM1qTzwqySxwaPDCLc.roa (hash: xI0Q9MYkvDP8hv/SnI33zJTsy3M/0ZO4tON1nbaFCD4=) 7: jk-_IfFTaD-MzFizpWx0AA1TkH4.roa (hash: wezPiSGoo0rul4hPDHDdcRTaZb8xQPAVvKZ9GBZZNU8=) 8: luOuJQnFXQhNggwM6MUJDK19PDQ.roa (hash: yd7LbwhPMHWjUutNzr3ySSl/LTeLlprMji5U1R9GXsM=) 9: mmpsKeeO5JUD0kNNB4aUsbfsoEs.roa (hash: mRAg2xOUvTrNMtJyTqYFatxVEZidyGOVjXZ4XpUtMSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:a6:8e:51:bd:76:08:1c:d7:8d:45:d7:17:fe:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c Validity Not Before: Dec 24 03:01:10 2025 GMT Not After : Dec 25 03:01:10 2025 GMT Subject: CN=53bc5acf511307d24c522e36c7f3331488511598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:33:c1:46:37:2b:ae:aa:6a:0d:89:56:f2:c7: 54:df:af:89:3d:10:9f:32:38:38:e9:f7:68:72:61: 48:1b:b8:bd:68:49:22:a8:27:40:5f:87:22:e0:73: 1f:b3:8b:f1:16:95:98:72:61:7d:fc:1c:94:b9:bb: 04:e6:7e:c3:98:e2:2f:69:2c:0b:44:84:f3:e3:fe: 9d:48:1a:03:2b:26:2a:a2:f2:40:2c:16:51:d4:74: 08:47:d7:f4:c3:8c:1e:12:b1:d3:2a:0a:c6:62:a2: ba:56:58:c2:78:23:f7:f8:62:b3:bb:17:2b:22:47: 23:bd:dc:c9:30:f0:ab:37:02:56:ea:45:3e:77:49: 28:c1:2b:b8:ca:67:b5:bc:20:b1:76:35:41:84:ba: 8c:4b:82:61:a7:d1:fb:87:fc:db:b1:62:e7:79:14: f7:34:c2:c3:fa:4c:b5:ce:90:0c:5a:b2:82:ea:d5: 91:22:e6:b0:2d:19:41:02:23:b6:96:04:53:6a:8c: 39:87:08:e8:fd:95:69:b2:8e:62:82:d1:da:47:31: f2:d3:9c:37:ea:1e:5c:1c:23:7b:f6:9b:1c:9f:de: 21:45:02:6d:5a:a3:ba:7c:fc:19:8b:1e:04:8a:8a: 2d:91:9a:df:13:c5:48:db:bb:c1:0f:e2:ed:d9:98: 84:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BC:5A:CF:51:13:07:D2:4C:52:2E:36:C7:F3:33:14:88:51:15:98 X509v3 Authority Key Identifier: keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:2e:43:76:45:b9:eb:e8:bf:e5:6f:c3:a5:9c:31:51:6d:0b: d5:58:04:7d:3e:96:41:b6:b6:41:e6:9e:a6:10:f9:a3:72:d1: da:b2:07:2f:05:5c:b3:98:7c:8c:8c:d1:1d:7a:4a:14:66:34: 7a:4b:90:90:e9:df:f9:14:f6:5c:cd:99:f2:ec:3c:73:6b:11: 9e:54:ed:53:de:89:05:4f:b4:b6:80:42:31:c5:a6:c4:59:9c: 00:ea:67:d5:05:2c:5e:4d:e4:46:d8:92:4f:76:35:9c:59:c0: 44:98:7e:d0:4f:c6:d4:b9:0d:ea:65:56:21:a7:1b:ca:8d:36: 86:50:ae:3d:01:f1:2e:d9:d3:eb:58:44:12:ab:9b:ca:ef:b2: a4:a4:02:8b:de:96:7f:97:fc:88:00:c3:18:70:3f:f2:ed:30: 09:c4:91:7e:8c:db:b1:32:cd:7e:70:d2:25:d2:1d:81:04:72: 2f:47:ef:49:fb:0b:55:c9:61:b8:fb:14:a8:c7:d6:fe:8f:3c: 12:24:c7:d9:12:ed:d6:e7:07:dd:c8:97:50:9c:5f:16:1a:4e: d3:75:7b:69:51:d3:04:cf:fa:99:94:68:ca:47:17:eb:b5:4c: 89:2e:c9:0a:67:2b:ba:61:42:ed:1b:2f:43:57:0a:18:97:62: 74:18:71:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTaaOUb12CBzXjUXXF/6SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMGFkZTU0YzI3ZTZmY2RkYWNlMjYyYzRmZGY3OTBmMzIw ZmVkOWMwHhcNMjUxMjI0MDMwMTEwWhcNMjUxMjI1MDMwMTEwWjAzMTEwLwYDVQQD Eyg1M2JjNWFjZjUxMTMwN2QyNGM1MjJlMzZjN2YzMzMxNDg4NTExNTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jPBRjcrrqpqDYlW8sdU36+JPRCf Mjg46fdocmFIG7i9aEkiqCdAX4ci4HMfs4vxFpWYcmF9/ByUubsE5n7DmOIvaSwL RITz4/6dSBoDKyYqovJALBZR1HQIR9f0w4weErHTKgrGYqK6VljCeCP3+GKzuxcr IkcjvdzJMPCrNwJW6kU+d0kowSu4yme1vCCxdjVBhLqMS4Jhp9H7h/zbsWLneRT3 NMLD+ky1zpAMWrKC6tWRIuawLRlBAiO2lgRTaow5hwjo/ZVpso5igtHaRzHy05w3 6h5cHCN79pscn94hRQJtWqO6fPwZix4EiootkZrfE8VI27vBD+Lt2ZiEgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFO8Ws9REwfSTFIuNsfzMxSIURWYMB8GA1UdIwQY MBaAFE0K3lTCfm/N2s4mLE/feQ8yD+2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFFyZVZNSi1iODNhemlZc1Q5OTVEeklQN1p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84ZWZkOGItZTUxNi00YzQ5LTkyY2It ODkyOTZjY2IzNWY1LzEvVFFyZVZNSi1iODNhemlZc1Q5OTVEeklQN1p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC84ZWZkOGItZTUxNi00YzQ5LTkyY2ItODkyOTZjY2IzNWY1 LzEvVFFyZVZNSi1iODNhemlZc1Q5OTVEeklQN1p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZC5DdkW5 6+i/5W/DpZwxUW0L1VgEfT6WQba2QeaephD5o3LR2rIHLwVcs5h8jIzRHXpKFGY0 ekuQkOnf+RT2XM2Z8uw8c2sRnlTtU96JBU+0toBCMcWmxFmcAOpn1QUsXk3kRtiS T3Y1nFnARJh+0E/G1LkN6mVWIacbyo02hlCuPQHxLtnT61hEEqubyu+ypKQCi96W f5f8iADDGHA/8u0wCcSRfozbsTLNfnDSJdIdgQRyL0fvSfsLVclhuPsUqMfW/o88 EiTH2RLt1ucH3ciXUJxfFhpO03V7aVHTBM/6mZRoykcX67VMiS7JCmcrumFC7Rsv Q1cKGJdidBhxhg== -----END CERTIFICATE-----Generated at Wed Dec 24 10:03:09 2025 by rpki-client