This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft File: TRDp1PSvuKTRuRnshZP0a6O7p_c.mft (raw, json) Hash identifier: RWkKxIlIe9kI0iORfiIeJMMrLrIGFTuZmt4XljvPwiY= Subject key identifier: 2B:AC:B0:64:88:C0:6C:2C:85:E8:17:9C:E1:D7:52:46:1F:D4:CF:31 Authority key identifier: 4D:10:E9:D4:F4:AF:B8:A4:D1:B9:19:EC:85:93:F4:6B:A3:BB:A7:F7 Certificate issuer: /CN=4d10e9d4f4afb8a4d1b919ec8593f46ba3bba7f7 Certificate serial: 019AF3F80219D422686912539212EBD26CF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft Manifest number: 1464 Signing time: Sat 06 Dec 2025 14:01:48 +0000 Manifest this update: Sat 06 Dec 2025 14:01:48 +0000 Manifest next update: Sun 07 Dec 2025 14:01:48 +0000 Files and hashes: 1: KbSVDODyeN3kHoikV78WDWGb18w.roa (hash: oRCPK1YwXowGG8GKKm2eZqlzH0XvN6BREuS7mGHYkgI=) 2: TRDp1PSvuKTRuRnshZP0a6O7p_c.crl (hash: RIJHBVuwTTqijckFqm/uih34OOwtrAyuvbCbwuJuyPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f8:02:19:d4:22:68:69:12:53:92:12:eb:d2:6c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d10e9d4f4afb8a4d1b919ec8593f46ba3bba7f7 Validity Not Before: Dec 6 14:01:48 2025 GMT Not After : Dec 7 14:01:48 2025 GMT Subject: CN=2bacb06488c06c2c85e8179ce1d752461fd4cf31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:31:16:52:02:7d:fb:4a:dd:3d:28:3f:0f:1e: 38:af:28:8d:65:ef:b2:a0:47:7a:9c:28:71:89:ce: 76:2b:82:7c:d2:10:c3:b5:26:59:a1:dc:c8:01:0c: c3:52:b3:7d:16:92:66:97:05:b4:1f:41:3d:e4:19: 1f:a1:86:49:71:1e:98:8f:a1:7d:b3:e4:36:d3:e1: fd:97:ec:5f:a2:1c:a2:bc:6a:1f:36:99:3f:f2:30: 72:06:84:f7:cc:30:07:5b:6e:f4:ec:83:58:5a:a7: aa:f7:2b:74:e6:00:c0:23:f9:e3:91:5b:9f:b7:0b: cc:36:90:7a:21:13:d1:0c:08:c7:b6:9c:0f:bb:a4: 91:18:69:1a:3f:32:26:3a:5f:ab:0d:4c:46:96:41: a5:fc:1c:42:78:10:fb:d4:f2:58:69:a6:e9:c0:0a: 52:54:29:6c:88:0e:ad:99:bd:db:ef:31:0d:c1:94: 3d:cd:78:92:d2:68:9b:ed:19:1b:d8:da:68:b3:3c: 45:17:45:db:a0:4e:41:63:7f:67:db:61:cc:9e:f8: 0e:b0:5f:4f:d5:f9:9e:76:a2:db:88:51:7c:8c:be: 7a:45:50:8a:58:5d:3c:6e:15:5f:2d:eb:16:92:cc: f7:ab:33:88:c5:63:8b:98:05:2a:d5:34:34:e1:29: 13:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AC:B0:64:88:C0:6C:2C:85:E8:17:9C:E1:D7:52:46:1F:D4:CF:31 X509v3 Authority Key Identifier: keyid:4D:10:E9:D4:F4:AF:B8:A4:D1:B9:19:EC:85:93:F4:6B:A3:BB:A7:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:89:c1:41:d6:b2:3c:f4:a1:74:87:f9:26:16:d2:9d:4d:6f: 74:a0:6f:8d:df:c7:1b:16:f7:2e:e1:a1:5c:86:eb:a9:10:bd: f4:b5:81:22:ce:2f:17:84:b1:20:c3:1f:fe:15:b3:7d:39:09: f4:c3:fe:64:6c:45:ef:d8:89:60:88:46:97:a5:64:09:ae:44: 86:95:4d:f4:87:78:9b:f2:29:a1:d2:fe:d0:ca:d0:27:8b:88: c7:6d:9c:7b:a6:21:37:db:ac:76:88:6d:d7:08:e1:90:3f:d7: 17:e3:42:c7:14:44:40:e8:47:a4:4b:91:e1:08:ba:5e:45:57: be:f4:f7:22:86:d2:70:7d:db:1e:1b:f8:5e:fe:96:f2:9f:04: 34:c6:e1:26:2e:4d:97:18:47:41:ab:97:b9:1f:21:fd:09:90: a6:13:d0:10:7b:fb:3e:a4:aa:b0:fb:25:06:36:33:dd:67:8d: de:f2:b6:ff:7a:ba:6e:91:55:a8:b4:a9:ff:92:be:fb:78:5a: 4e:81:17:6f:1d:20:01:25:b8:b6:9e:5f:80:3b:4b:dc:b0:7a: 18:a0:b7:db:4f:fd:17:cf:13:a4:14:3d:4a:dd:78:0f:05:25: b6:70:ef:07:45:9f:8a:24:21:5e:5e:b6:cc:7e:c2:e1:73:92: c8:06:34:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz+AIZ1CJoaRJTkhLr0mz1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMTBlOWQ0ZjRhZmI4YTRkMWI5MTllYzg1OTNmNDZiYTNi YmE3ZjcwHhcNMjUxMjA2MTQwMTQ4WhcNMjUxMjA3MTQwMTQ4WjAzMTEwLwYDVQQD EygyYmFjYjA2NDg4YzA2YzJjODVlODE3OWNlMWQ3NTI0NjFmZDRjZjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TEWUgJ9+0rdPSg/Dx44ryiNZe+y oEd6nChxic52K4J80hDDtSZZodzIAQzDUrN9FpJmlwW0H0E95BkfoYZJcR6Yj6F9 s+Q20+H9l+xfohyivGofNpk/8jByBoT3zDAHW2707INYWqeq9yt05gDAI/njkVuf twvMNpB6IRPRDAjHtpwPu6SRGGkaPzImOl+rDUxGlkGl/BxCeBD71PJYaabpwApS VClsiA6tmb3b7zENwZQ9zXiS0mib7Rkb2NposzxFF0XboE5BY39n22HMnvgOsF9P 1fmedqLbiFF8jL56RVCKWF08bhVfLesWksz3qzOIxWOLmAUq1TQ04SkTkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCussGSIwGwshegXnOHXUkYf1M8xMB8GA1UdIwQY MBaAFE0Q6dT0r7ik0bkZ7IWT9Guju6f3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFJEcDFQU3Z1S1RSdVJuc2haUDBhNk83cF9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9lM2Q4YjEtMTAxZi00MGU4LWJjZDMt MTU1YWY5ZDgzMDM2LzEvVFJEcDFQU3Z1S1RSdVJuc2haUDBhNk83cF9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9lM2Q4YjEtMTAxZi00MGU4LWJjZDMtMTU1YWY5ZDgzMDM2 LzEvVFJEcDFQU3Z1S1RSdVJuc2haUDBhNk83cF9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmonBQday PPShdIf5JhbSnU1vdKBvjd/HGxb3LuGhXIbrqRC99LWBIs4vF4SxIMMf/hWzfTkJ 9MP+ZGxF79iJYIhGl6VkCa5EhpVN9Id4m/IpodL+0MrQJ4uIx22ce6YhN9usdoht 1wjhkD/XF+NCxxREQOhHpEuR4Qi6XkVXvvT3IobScH3bHhv4Xv6W8p8ENMbhJi5N lxhHQauXuR8h/QmQphPQEHv7PqSqsPslBjYz3WeN3vK2/3q6bpFVqLSp/5K++3ha ToEXbx0gASW4tp5fgDtL3LB6GKC320/9F88TpBQ9St14DwUltnDvB0WfiiQhXl62 zH7C4XOSyAY0FQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:35:37 2025 by rpki-client