This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26c0d1-9473-4a0f-b4a9-ce47e5b06486/1/TdGNc77T2_iTqF8BD8cfd8KAecA.mft File: TdGNc77T2_iTqF8BD8cfd8KAecA.mft (raw, json) Hash identifier: dn0MQdLhGGGxHx6rqFuUbqi4+IkJHsNxwvyS9MEbxyI= Subject key identifier: 46:81:6D:2B:7F:FC:4D:C8:60:A3:66:44:43:EC:68:5F:FD:0B:D9:7A Authority key identifier: 4D:D1:8D:73:BE:D3:DB:F8:93:A8:5F:01:0F:C7:1F:77:C2:80:79:C0 Certificate issuer: /CN=4dd18d73bed3dbf893a85f010fc71f77c28079c0 Certificate serial: 019AF1641C47002F8017BADB4733F6674A97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGNc77T2_iTqF8BD8cfd8KAecA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0d1-9473-4a0f-b4a9-ce47e5b06486/1/TdGNc77T2_iTqF8BD8cfd8KAecA.mft Manifest number: EB Signing time: Sat 06 Dec 2025 02:01:01 +0000 Manifest this update: Sat 06 Dec 2025 02:01:01 +0000 Manifest next update: Sun 07 Dec 2025 02:01:01 +0000 Files and hashes: 1: TdGNc77T2_iTqF8BD8cfd8KAecA.crl (hash: 5RRqfDZClBMDYJgLtDq0qZg31KAVFywqYJ6LlMsQ/2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0d1-9473-4a0f-b4a9-ce47e5b06486/1/TdGNc77T2_iTqF8BD8cfd8KAecA.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0d1-9473-4a0f-b4a9-ce47e5b06486/1/TdGNc77T2_iTqF8BD8cfd8KAecA.mft rsync://rpki.ripe.net/repository/DEFAULT/TdGNc77T2_iTqF8BD8cfd8KAecA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:1c:47:00:2f:80:17:ba:db:47:33:f6:67:4a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd18d73bed3dbf893a85f010fc71f77c28079c0 Validity Not Before: Dec 6 02:01:01 2025 GMT Not After : Dec 7 02:01:01 2025 GMT Subject: CN=46816d2b7ffc4dc860a3664443ec685ffd0bd97a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2b:78:d3:b5:8c:e4:10:33:ad:0d:a7:7d:19: 79:d4:c2:2f:1a:0c:40:77:19:c1:92:53:53:e9:27: f8:1d:5b:20:4a:85:38:db:e1:96:53:69:cd:17:84: ab:d1:51:54:f8:42:73:a3:d7:9d:c2:e9:f4:65:51: a9:50:11:63:2e:c3:da:d8:6b:da:78:be:a7:24:e1: d8:d8:0c:47:b2:39:0a:5a:98:b1:d4:b9:c7:ad:f7: 88:9d:03:9c:e5:6b:3a:60:37:01:ca:00:f6:15:ec: 3e:5a:60:e4:d4:ef:00:28:4a:cb:fc:0b:70:a0:2d: 20:b8:7c:3e:96:5a:a0:b6:90:5a:46:c0:55:5b:40: a1:72:68:ac:e7:aa:dd:bf:ed:6f:7b:6a:a5:be:2c: cc:dd:03:82:b7:7d:97:24:c2:72:44:bf:31:48:b3: 44:87:af:82:d1:ca:cc:2d:18:7b:dd:d5:b2:65:d0: f3:31:fe:97:16:db:47:64:aa:31:a0:ef:cc:3e:da: 7f:6e:65:4b:c3:ae:27:48:f0:5c:39:20:43:db:97: 67:a0:c1:0b:d9:c2:19:6a:a5:12:29:9f:36:b5:f6: 70:0d:3a:ab:86:a0:18:79:b2:ae:1b:3c:1c:f3:66: 4d:8a:01:cd:a2:52:c5:9e:3a:6b:16:7a:31:9f:52: 66:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:81:6D:2B:7F:FC:4D:C8:60:A3:66:44:43:EC:68:5F:FD:0B:D9:7A X509v3 Authority Key Identifier: keyid:4D:D1:8D:73:BE:D3:DB:F8:93:A8:5F:01:0F:C7:1F:77:C2:80:79:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGNc77T2_iTqF8BD8cfd8KAecA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0d1-9473-4a0f-b4a9-ce47e5b06486/1/TdGNc77T2_iTqF8BD8cfd8KAecA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0d1-9473-4a0f-b4a9-ce47e5b06486/1/TdGNc77T2_iTqF8BD8cfd8KAecA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ee:1a:8a:fe:29:11:b0:72:87:f4:52:e8:a1:55:c2:8b:ed: 59:35:18:83:0c:be:9f:e7:46:02:53:44:fa:ce:e7:87:cb:6f: 10:c9:51:28:a0:f2:45:64:0a:09:7a:0c:62:24:53:56:fd:97: 39:c8:0e:a6:a5:61:7f:50:68:01:8a:cc:f2:7c:57:f0:b0:15: 68:b6:e8:47:b0:52:84:29:f8:ac:27:fd:bb:3f:5e:58:e0:92: 6b:e0:4f:f1:a4:18:0f:13:ac:83:b4:2d:ab:a7:e6:9c:82:8f: 68:ae:38:35:77:c1:55:ef:be:f7:c6:1c:53:5a:b2:22:f6:c4: f5:09:36:60:70:e6:85:b8:c8:05:35:b1:b0:eb:02:41:d6:2d: fe:6e:aa:fd:39:71:6c:0f:eb:37:ae:3b:fd:6f:13:48:e3:20: b0:cf:be:4b:32:a6:72:50:32:eb:97:ae:2d:c0:ce:2c:7e:54: 1f:c6:d7:5d:3b:a4:21:a9:bd:e1:fd:1b:74:65:5c:ba:49:ee: 2f:fd:02:a6:b9:0b:c4:4e:9d:5f:87:2b:d4:ad:17:5f:f8:59: 2d:e2:9f:a7:14:1a:f1:61:7c:8e:ee:2a:b6:6c:42:52:ab:75: a0:0e:f0:fb:63:1b:7d:d4:12:63:3b:d6:83:aa:0c:63:b7:db: 6e:7e:78:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBxHAC+AF7rbRzP2Z0qXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDE4ZDczYmVkM2RiZjg5M2E4NWYwMTBmYzcxZjc3YzI4 MDc5YzAwHhcNMjUxMjA2MDIwMTAxWhcNMjUxMjA3MDIwMTAxWjAzMTEwLwYDVQQD Eyg0NjgxNmQyYjdmZmM0ZGM4NjBhMzY2NDQ0M2VjNjg1ZmZkMGJkOTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyt407WM5BAzrQ2nfRl51MIvGgxA dxnBklNT6Sf4HVsgSoU42+GWU2nNF4Sr0VFU+EJzo9edwun0ZVGpUBFjLsPa2Gva eL6nJOHY2AxHsjkKWpix1LnHrfeInQOc5Ws6YDcBygD2Few+WmDk1O8AKErL/Atw oC0guHw+llqgtpBaRsBVW0Chcmis56rdv+1ve2qlvizM3QOCt32XJMJyRL8xSLNE h6+C0crMLRh73dWyZdDzMf6XFttHZKoxoO/MPtp/bmVLw64nSPBcOSBD25dnoMEL 2cIZaqUSKZ82tfZwDTqrhqAYebKuGzwc82ZNigHNolLFnjprFnoxn1Jm/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEaBbSt//E3IYKNmREPsaF/9C9l6MB8GA1UdIwQY MBaAFE3RjXO+09v4k6hfAQ/HH3fCgHnAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRHTmM3N1QyX2lUcUY4QkQ4Y2ZkOEtBZWNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8yNmMwZDEtOTQ3My00YTBmLWI0YTkt Y2U0N2U1YjA2NDg2LzEvVGRHTmM3N1QyX2lUcUY4QkQ4Y2ZkOEtBZWNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8yNmMwZDEtOTQ3My00YTBmLWI0YTktY2U0N2U1YjA2NDg2 LzEvVGRHTmM3N1QyX2lUcUY4QkQ4Y2ZkOEtBZWNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHO4aiv4p EbByh/RS6KFVwovtWTUYgwy+n+dGAlNE+s7nh8tvEMlRKKDyRWQKCXoMYiRTVv2X OcgOpqVhf1BoAYrM8nxX8LAVaLboR7BShCn4rCf9uz9eWOCSa+BP8aQYDxOsg7Qt q6fmnIKPaK44NXfBVe++98YcU1qyIvbE9Qk2YHDmhbjIBTWxsOsCQdYt/m6q/Tlx bA/rN647/W8TSOMgsM++SzKmclAy65euLcDOLH5UH8bXXTukIam94f0bdGVcuknu L/0CprkLxE6dX4cr1K0XX/hZLeKfpxQa8WF8ju4qtmxCUqt1oA7w+2MbfdQSYzvW g6oMY7fbbn54+A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:38 2025 by rpki-client