This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft File: TD6do79ZOALMgz_l2UelJpb1jI0.mft (raw, json) Hash identifier: drON2gdOrPMQ5gh8PXzZmsxuQGqdR0vCWCZq2ZwXWfE= Subject key identifier: 06:1C:EE:8C:4D:9B:09:0B:3C:95:81:DA:E9:DA:0E:34:3E:A9:92:EC Authority key identifier: 4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D Certificate issuer: /CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d Certificate serial: 019B3C7E6119D8418BCD790F50CCCE7E11D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft Manifest number: 16C8 Signing time: Sat 20 Dec 2025 16:01:13 +0000 Manifest this update: Sat 20 Dec 2025 16:01:13 +0000 Manifest next update: Sun 21 Dec 2025 16:01:13 +0000 Files and hashes: 1: EWuOguv1P9Rw7Q-U1qAW9dBN2No.roa (hash: rN97euvDe5WCriK9EjJsNO5wn2cUGLmPhpQvNqo71q8=) 2: TD6do79ZOALMgz_l2UelJpb1jI0.crl (hash: SkzvrHkGIHpP3RXR/gkNos+K6X/g3BB6wXGxT6/+sO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:61:19:d8:41:8b:cd:79:0f:50:cc:ce:7e:11:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d Validity Not Before: Dec 20 16:01:13 2025 GMT Not After : Dec 21 16:01:13 2025 GMT Subject: CN=061cee8c4d9b090b3c9581dae9da0e343ea992ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:41:f3:c8:7d:da:39:58:af:46:44:37:2e:1d: 9a:b4:58:5d:cc:e0:4c:20:af:bb:be:52:1e:05:96: c3:74:27:c3:c4:9d:0c:c8:d8:47:54:4e:d4:39:fc: 5c:37:8c:b0:f0:d0:91:17:9d:ea:c8:94:bf:a8:9c: a6:d2:4b:d3:85:3b:76:03:d5:58:04:a2:05:f5:27: 7a:18:a9:42:02:87:35:7a:46:6e:60:c7:31:20:f5: c0:79:ce:dd:3d:55:5c:eb:22:43:5e:8f:4f:e9:a4: 36:c2:d8:d7:90:78:fa:b6:ff:ed:0a:b6:6d:b6:03: e4:d8:7d:f2:d9:36:76:3f:13:a1:f1:79:dd:8a:d8: 95:b2:90:5b:36:e9:9d:13:eb:0d:83:f5:90:a1:41: 74:e0:5b:a6:31:b4:72:36:a9:24:2d:b1:1d:71:76: 7f:ef:e6:78:99:08:a3:7b:d0:ec:9d:d9:a6:e7:4d: b0:8e:11:e6:2e:d9:d9:db:61:09:5a:66:9b:d0:33: 1c:d2:5c:fe:5c:ed:f7:7e:af:9f:76:36:30:b9:93: 1d:3a:e9:4a:f9:10:95:8b:9a:24:12:38:59:bc:83: 62:bf:ab:0b:83:7f:b1:dd:bd:0f:75:9f:58:92:97: 80:f6:28:e8:25:44:c8:29:1c:7a:f5:62:aa:e5:88: 69:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:1C:EE:8C:4D:9B:09:0B:3C:95:81:DA:E9:DA:0E:34:3E:A9:92:EC X509v3 Authority Key Identifier: keyid:4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:c3:ca:51:20:5e:2e:45:f1:96:fc:65:ce:30:8f:f4:e4:8b: 28:b0:5a:34:b4:be:c8:9b:b4:3e:7c:0c:9c:ea:ef:ab:ce:85: a0:65:28:c5:52:d1:a0:99:55:86:fb:9c:8b:1e:e5:60:ee:42: a7:af:08:65:b8:05:50:1d:f1:44:dd:ff:67:cf:db:59:a7:fc: b0:74:89:8e:5d:52:3a:a5:1a:d7:9d:50:49:3c:da:be:d1:a8: c6:56:d7:1f:0a:e8:0e:1d:33:b7:02:75:36:b1:42:bd:b1:74: 17:86:bd:ff:38:68:c2:8b:72:6d:df:73:6d:65:83:88:b5:a2: c8:2d:0a:4f:55:b3:8c:6d:74:43:61:f0:fd:8e:3a:e2:9f:5f: 4a:a7:df:4d:b3:3d:be:a6:3b:21:40:d6:c0:da:ca:dc:0b:f6: 2d:ee:81:00:94:39:b6:33:15:6f:81:67:85:96:80:c1:29:46: 1b:6d:6b:2a:4d:67:14:99:05:1c:12:ed:5d:dc:01:cc:a7:08: d4:02:53:91:ce:61:28:32:12:40:00:aa:e8:82:a4:3f:e2:ab: 2b:af:0c:5f:e7:1d:27:2a:e3:59:a9:9a:7a:9a:37:6a:20:30: 37:cb:69:bd:1a:59:8f:6a:83:df:92:8e:99:34:c1:85:9b:8d: b9:c0:31:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fmEZ2EGLzXkPUMzOfhHXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjM2U5ZGEzYmY1OTM4MDJjYzgzM2ZlNWQ5NDdhNTI2OTZm NThjOGQwHhcNMjUxMjIwMTYwMTEzWhcNMjUxMjIxMTYwMTEzWjAzMTEwLwYDVQQD EygwNjFjZWU4YzRkOWIwOTBiM2M5NTgxZGFlOWRhMGUzNDNlYTk5MmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kHzyH3aOVivRkQ3Lh2atFhdzOBM IK+7vlIeBZbDdCfDxJ0MyNhHVE7UOfxcN4yw8NCRF53qyJS/qJym0kvThTt2A9VY BKIF9Sd6GKlCAoc1ekZuYMcxIPXAec7dPVVc6yJDXo9P6aQ2wtjXkHj6tv/tCrZt tgPk2H3y2TZ2PxOh8XnditiVspBbNumdE+sNg/WQoUF04FumMbRyNqkkLbEdcXZ/ 7+Z4mQije9Dsndmm502wjhHmLtnZ22EJWmab0DMc0lz+XO33fq+fdjYwuZMdOulK +RCVi5okEjhZvINiv6sLg3+x3b0PdZ9YkpeA9ijoJUTIKRx69WKq5YhpdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYc7oxNmwkLPJWB2unaDjQ+qZLsMB8GA1UdIwQY MBaAFEw+naO/WTgCzIM/5dlHpSaW9YyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEQ2ZG83OVpPQUxNZ3pfbDJVZWxKcGIxakkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iOWE4MzAtNjk5Mi00OWM2LTg5NzMt ZWFjYjQ5NjVmZTM4LzEvVEQ2ZG83OVpPQUxNZ3pfbDJVZWxKcGIxakkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9iOWE4MzAtNjk5Mi00OWM2LTg5NzMtZWFjYjQ5NjVmZTM4 LzEvVEQ2ZG83OVpPQUxNZ3pfbDJVZWxKcGIxakkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvsPKUSBe LkXxlvxlzjCP9OSLKLBaNLS+yJu0PnwMnOrvq86FoGUoxVLRoJlVhvucix7lYO5C p68IZbgFUB3xRN3/Z8/bWaf8sHSJjl1SOqUa151QSTzavtGoxlbXHwroDh0ztwJ1 NrFCvbF0F4a9/zhowotybd9zbWWDiLWiyC0KT1WzjG10Q2Hw/Y464p9fSqffTbM9 vqY7IUDWwNrK3Av2Le6BAJQ5tjMVb4FnhZaAwSlGG21rKk1nFJkFHBLtXdwBzKcI 1AJTkc5hKDISQACq6IKkP+KrK68MX+cdJyrjWamaepo3aiAwN8tpvRpZj2qD35KO mTTBhZuNucAxuw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:41:16 2025 by rpki-client