This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft File: TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft (raw, json) Hash identifier: rfnZAW++sRbG/otm9Sqxb6ZEt7vgh2TIJO0FjXBVBSk= Subject key identifier: 2F:35:1E:3D:FA:8A:1E:65:BB:BF:DB:B7:B1:56:A5:6D:28:19:BD:4B Authority key identifier: 4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A Certificate issuer: /CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a Certificate serial: 019B4F291DDD68FC78FBAC30586E06260826 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft Manifest number: 092B Signing time: Wed 24 Dec 2025 07:00:52 +0000 Manifest this update: Wed 24 Dec 2025 07:00:52 +0000 Manifest next update: Thu 25 Dec 2025 07:00:52 +0000 Files and hashes: 1: ABn8P8ur6kX7bClq82flMqvErqM.asa (hash: RFlfK21yrghS19JPEbu5rJ0FdRlXS6JFOq5iELrrCi0=) 2: TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl (hash: hJ+boRXDk7Pmozde8FkVJ9ovzNqcTZb3QMmg3hLZ6FY=) 3: eaPs4hBLMn8_uYbwGtb-aHFlTMw.roa (hash: J6ydyveQsR9vsUeW4Dd9AR32+AJgGbJK7r7hogwsc4Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 07:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:1d:dd:68:fc:78:fb:ac:30:58:6e:06:26:08:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a Validity Not Before: Dec 24 07:00:52 2025 GMT Not After : Dec 25 07:00:52 2025 GMT Subject: CN=2f351e3dfa8a1e65bbbfdbb7b156a56d2819bd4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:1c:b3:7e:fc:f0:b0:f7:f9:0d:5b:49:bd:98: 49:a0:17:56:98:7f:18:de:5b:4a:18:9f:05:f4:34: ef:0f:eb:33:07:0b:68:cf:6e:95:2b:3b:20:41:7c: d9:30:fa:69:e1:3d:b8:fa:ef:4e:ab:6d:83:ee:a9: 3f:27:40:d4:5d:50:dd:bd:f0:09:3c:7f:56:1b:64: ca:1f:3f:cb:c0:bf:e9:31:14:c4:b5:03:db:63:9b: 46:28:8a:8d:68:8d:62:27:6f:51:01:59:ea:b2:35: 89:65:c1:b4:3c:cc:88:95:bf:d9:6c:e3:48:49:e5: 92:0c:bd:4a:71:3d:19:ba:5c:10:d2:9f:79:ba:fb: 8c:67:02:dc:c7:a1:c0:2d:1c:81:84:90:f4:a7:ec: 98:c9:cd:33:3d:c1:18:c5:ad:ea:51:21:09:14:9c: 19:1b:18:38:55:73:d8:32:4c:49:b6:49:7e:c5:fe: c1:4a:ce:9a:d8:50:f8:27:77:de:d8:7a:8b:6c:96: 89:0c:85:4f:12:31:ba:09:93:86:0b:3b:ea:7d:2c: 6a:57:67:14:f4:61:21:d3:3e:09:b5:d7:a8:56:37: b2:11:a6:a9:8b:e8:91:1f:ab:be:f4:27:6f:67:03: f0:85:87:f9:44:3b:5c:fd:df:58:78:c9:0f:99:f3: a6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:35:1E:3D:FA:8A:1E:65:BB:BF:DB:B7:B1:56:A5:6D:28:19:BD:4B X509v3 Authority Key Identifier: keyid:4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:6d:6a:86:27:8d:9a:86:26:d0:94:6a:cc:e9:53:03:66:12: ec:06:5f:d5:c3:72:b3:3a:ac:45:89:c3:fa:35:5b:82:f0:a2: 01:b9:43:f5:b7:da:5b:02:d2:bb:b7:1f:73:c8:13:92:98:0c: 35:97:08:dd:28:de:8e:b2:57:0f:16:8b:5c:e9:67:ac:48:e6: fb:d1:49:15:8e:02:ff:31:3d:db:91:14:e3:cc:8e:ec:25:5b: 39:94:e7:97:66:3a:3e:5a:d5:b2:c7:16:78:41:f6:bd:a6:22: 9b:6f:ea:a0:e7:d2:a9:23:1d:a1:50:bf:42:3c:07:b8:34:d0: 78:e2:1f:2b:e6:2f:db:b1:73:f1:c0:8d:cf:5b:16:f0:0b:66: d1:9a:8f:bd:66:79:34:7f:3a:1e:ac:ea:eb:19:03:78:e0:9d: bd:bb:7c:7e:9e:a4:e8:4e:e6:be:31:d4:01:87:63:07:ab:bd: f2:53:e0:17:16:c9:d5:3f:33:cc:91:94:42:1d:7c:85:aa:bf: 2f:11:44:1a:05:9c:f2:cb:ee:c8:82:d6:62:ae:e0:66:18:7f: 50:ad:e2:f1:f8:a1:83:04:84:21:ec:34:6d:66:6e:88:fa:a5: ac:b9:7c:e1:f7:ce:13:90:fa:32:25:7e:fc:ac:ab:67:d7:95: e3:c8:f6:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKR3daPx4+6wwWG4GJggmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjM2I4OGNkYjEzZjNlYjEyYTliZTU0YWIxOWJhYTkwNTU5 YjM5NmEwHhcNMjUxMjI0MDcwMDUyWhcNMjUxMjI1MDcwMDUyWjAzMTEwLwYDVQQD EygyZjM1MWUzZGZhOGExZTY1YmJiZmRiYjdiMTU2YTU2ZDI4MTliZDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9RyzfvzwsPf5DVtJvZhJoBdWmH8Y 3ltKGJ8F9DTvD+szBwtoz26VKzsgQXzZMPpp4T24+u9Oq22D7qk/J0DUXVDdvfAJ PH9WG2TKHz/LwL/pMRTEtQPbY5tGKIqNaI1iJ29RAVnqsjWJZcG0PMyIlb/ZbONI SeWSDL1KcT0ZulwQ0p95uvuMZwLcx6HALRyBhJD0p+yYyc0zPcEYxa3qUSEJFJwZ Gxg4VXPYMkxJtkl+xf7BSs6a2FD4J3fe2HqLbJaJDIVPEjG6CZOGCzvqfSxqV2cU 9GEh0z4JtdeoVjeyEaapi+iRH6u+9CdvZwPwhYf5RDtc/d9YeMkPmfOm/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC81Hj36ih5lu7/bt7FWpW0oGb1LMB8GA1UdIwQY MBaAFEw7iM2xPz6xKpvlSrGbqpBVmzlqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVER1SXpiRV9QckVxbS1WS3NadXFrRldiT1dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lYzU1ODQtNjYxOC00YjEyLWExMWMt MzA1NWNiNzI5YmNmLzEvVER1SXpiRV9QckVxbS1WS3NadXFrRldiT1dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9lYzU1ODQtNjYxOC00YjEyLWExMWMtMzA1NWNiNzI5YmNm LzEvVER1SXpiRV9QckVxbS1WS3NadXFrRldiT1dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcG1qhieN moYm0JRqzOlTA2YS7AZf1cNyszqsRYnD+jVbgvCiAblD9bfaWwLSu7cfc8gTkpgM NZcI3SjejrJXDxaLXOlnrEjm+9FJFY4C/zE925EU48yO7CVbOZTnl2Y6PlrVsscW eEH2vaYim2/qoOfSqSMdoVC/QjwHuDTQeOIfK+Yv27Fz8cCNz1sW8Atm0ZqPvWZ5 NH86Hqzq6xkDeOCdvbt8fp6k6E7mvjHUAYdjB6u98lPgFxbJ1T8zzJGUQh18haq/ LxFEGgWc8svuyILWYq7gZhh/UK3i8fihgwSEIew0bWZuiPqlrLl84ffOE5D6MiV+ /KyrZ9eV48j2wQ== -----END CERTIFICATE-----Generated at Wed Dec 24 10:37:47 2025 by rpki-client