This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft File: TEDHERwpFqX1ra8eUFCpQMJrI3g.mft (raw, json) Hash identifier: ZlSoS4eFJOvY80Fb1hmhnRnLUpJcpWOG9s+RP+f9TyM= Subject key identifier: C7:88:00:F9:6E:6F:FD:23:01:9B:93:4A:7D:9E:2F:BB:FE:3C:8A:C6 Authority key identifier: 4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78 Certificate issuer: /CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378 Certificate serial: 019AF72F4016A5E1654EB93688A00B1F1881 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft Manifest number: 1762 Signing time: Sun 07 Dec 2025 05:01:00 +0000 Manifest this update: Sun 07 Dec 2025 05:01:00 +0000 Manifest next update: Mon 08 Dec 2025 05:01:00 +0000 Files and hashes: 1: TEDHERwpFqX1ra8eUFCpQMJrI3g.crl (hash: lNY7BGPiYtdfU7EttsYglZ3GTxIU53lGydYeH8k1P60=) 2: j2IAXuDDxL9R5htveS2h7u2YZbk.roa (hash: znjWCCItAdjYTrrA4TwcAum8T33INI1kjoCAB+b3jbk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:2f:40:16:a5:e1:65:4e:b9:36:88:a0:0b:1f:18:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378 Validity Not Before: Dec 7 05:01:00 2025 GMT Not After : Dec 8 05:01:00 2025 GMT Subject: CN=c78800f96e6ffd23019b934a7d9e2fbbfe3c8ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:98:3a:21:bc:32:2d:4f:6f:2b:96:4b:3a:7c: 7f:f5:60:46:1c:f8:cc:ff:ca:c0:d2:f4:61:4a:ab: 4e:8c:ca:6e:88:dd:20:63:55:92:73:8d:99:89:4f: 32:86:58:b5:87:8e:9e:16:5d:b2:80:09:60:1d:b5: b8:c0:51:b9:49:6d:5e:3f:1f:3f:ba:ed:cc:97:85: 3f:f2:80:ed:af:4f:c8:47:97:03:ca:ac:24:f7:7e: ab:18:cc:9a:4e:b9:86:b5:06:ff:4a:14:25:da:0f: 44:a4:3d:a0:44:ab:64:44:c3:ea:ef:37:a4:83:3d: 30:6e:70:c6:2b:98:40:03:d3:f0:4b:28:1c:c2:73: 39:cb:67:ad:7b:2a:49:7e:b0:2f:95:e5:95:52:d0: d4:d8:50:48:e2:24:7b:1f:51:ce:20:f8:75:01:4e: 4f:36:7d:78:b8:90:fc:73:ed:8f:d4:80:1d:81:49: c6:dd:07:88:f9:33:3b:88:2a:32:3e:63:fb:05:09: 1c:3b:b4:11:23:56:a7:02:e9:2c:c2:13:e9:b2:ce: 63:fb:68:3a:3d:37:9b:65:63:b5:14:38:ee:59:82: 67:e7:c8:2a:77:41:14:45:29:2b:47:9c:70:2e:3e: 98:9f:25:be:99:59:3e:e4:ca:61:6d:b1:e5:e8:54: dc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:88:00:F9:6E:6F:FD:23:01:9B:93:4A:7D:9E:2F:BB:FE:3C:8A:C6 X509v3 Authority Key Identifier: keyid:4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:31:90:50:78:57:07:36:56:22:e5:65:79:4d:94:5f:d2:bc: fa:f9:13:b1:ae:1f:ff:1f:eb:01:e3:b8:bd:4c:7b:15:52:99: aa:77:fd:82:5f:45:4d:f8:b8:03:2a:90:e0:8c:65:e0:c0:6d: 6a:de:c6:d7:80:cb:18:df:9e:ed:0a:8e:41:57:a1:c8:6e:c5: 65:ca:60:68:cb:67:37:a9:51:a1:ed:de:94:f8:c9:fd:6a:b4: fa:8a:35:4a:95:e8:ad:96:0c:99:f8:a6:6f:9e:3a:6f:1b:43: 30:1f:0e:55:7c:63:78:35:2a:61:0a:22:80:88:7e:f0:c3:da: 9c:16:52:1d:31:54:33:38:40:b9:1b:3b:8b:dd:5b:6b:2e:5e: 9c:39:3a:57:79:c0:be:3a:e6:62:3e:ba:32:04:ba:52:a2:72: 85:63:a1:0f:9c:5c:fc:fc:1a:f3:aa:0a:8a:2b:86:96:34:18: f7:1e:5d:ee:44:f5:e4:b7:4e:11:2a:66:f1:07:8a:e8:86:f4: 08:3c:9b:11:24:bf:8d:37:78:7d:d5:a0:ae:11:96:dd:d3:b1: 9b:98:5a:44:75:0b:71:f9:c6:59:b8:e9:ec:57:f5:3c:75:12: 84:a7:f4:a4:4d:f1:01:bb:e6:09:50:bc:20:d9:47:28:52:5c: 09:b0:66:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3L0AWpeFlTrk2iKALHxiBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNDBjNzExMWMyOTE2YTVmNWFkYWYxZTUwNTBhOTQwYzI2 YjIzNzgwHhcNMjUxMjA3MDUwMTAwWhcNMjUxMjA4MDUwMTAwWjAzMTEwLwYDVQQD EyhjNzg4MDBmOTZlNmZmZDIzMDE5YjkzNGE3ZDllMmZiYmZlM2M4YWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJg6IbwyLU9vK5ZLOnx/9WBGHPjM /8rA0vRhSqtOjMpuiN0gY1WSc42ZiU8yhli1h46eFl2ygAlgHbW4wFG5SW1ePx8/ uu3Ml4U/8oDtr0/IR5cDyqwk936rGMyaTrmGtQb/ShQl2g9EpD2gRKtkRMPq7zek gz0wbnDGK5hAA9PwSygcwnM5y2eteypJfrAvleWVUtDU2FBI4iR7H1HOIPh1AU5P Nn14uJD8c+2P1IAdgUnG3QeI+TM7iCoyPmP7BQkcO7QRI1anAukswhPpss5j+2g6 PTebZWO1FDjuWYJn58gqd0EURSkrR5xwLj6YnyW+mVk+5MphbbHl6FTcmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMeIAPlub/0jAZuTSn2eL7v+PIrGMB8GA1UdIwQY MBaAFExAxxEcKRal9a2vHlBQqUDCayN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEVESEVSd3BGcVgxcmE4ZVVGQ3BRTUpySTNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hZDRlODctNWIyOC00MmQ3LTk3NDgt NGFiNDk4YjU5NmEzLzEvVEVESEVSd3BGcVgxcmE4ZVVGQ3BRTUpySTNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9hZDRlODctNWIyOC00MmQ3LTk3NDgtNGFiNDk4YjU5NmEz LzEvVEVESEVSd3BGcVgxcmE4ZVVGQ3BRTUpySTNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDGQUHhX BzZWIuVleU2UX9K8+vkTsa4f/x/rAeO4vUx7FVKZqnf9gl9FTfi4AyqQ4Ixl4MBt at7G14DLGN+e7QqOQVehyG7FZcpgaMtnN6lRoe3elPjJ/Wq0+oo1SpXorZYMmfim b546bxtDMB8OVXxjeDUqYQoigIh+8MPanBZSHTFUMzhAuRs7i91bay5enDk6V3nA vjrmYj66MgS6UqJyhWOhD5xc/Pwa86oKiiuGljQY9x5d7kT15LdOESpm8QeK6Ib0 CDybESS/jTd4fdWgrhGW3dOxm5haRHULcfnGWbjp7Ff1PHUShKf0pE3xAbvmCVC8 INlHKFJcCbBmTg== -----END CERTIFICATE-----Generated at Sun Dec 7 07:34:37 2025 by rpki-client