This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft File: TRDp1PSvuKTRuRnshZP0a6O7p_c.mft (raw, json) Hash identifier: teQJH3lkqVuLjoYqwL2couprdwj4X+49DWIj+ERiMqA= Subject key identifier: 2B:B9:12:C9:51:8C:04:52:AA:F0:EC:DF:00:31:D0:EC:FD:6E:D6:A8 Authority key identifier: 4D:10:E9:D4:F4:AF:B8:A4:D1:B9:19:EC:85:93:F4:6B:A3:BB:A7:F7 Certificate issuer: /CN=4d10e9d4f4afb8a4d1b919ec8593f46ba3bba7f7 Certificate serial: 019B18A8406CEEBAD19110DFA05DFAA5A2F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft Manifest number: 1477 Signing time: Sat 13 Dec 2025 17:00:38 +0000 Manifest this update: Sat 13 Dec 2025 17:00:38 +0000 Manifest next update: Sun 14 Dec 2025 17:00:38 +0000 Files and hashes: 1: KbSVDODyeN3kHoikV78WDWGb18w.roa (hash: oRCPK1YwXowGG8GKKm2eZqlzH0XvN6BREuS7mGHYkgI=) 2: TRDp1PSvuKTRuRnshZP0a6O7p_c.crl (hash: yE/e0apkx4t1Q4+vYueFh7gUH1OOpibyxQ3IxjivkEE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:a8:40:6c:ee:ba:d1:91:10:df:a0:5d:fa:a5:a2:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d10e9d4f4afb8a4d1b919ec8593f46ba3bba7f7 Validity Not Before: Dec 13 17:00:38 2025 GMT Not After : Dec 14 17:00:38 2025 GMT Subject: CN=2bb912c9518c0452aaf0ecdf0031d0ecfd6ed6a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3e:d3:52:f1:66:a8:fa:77:c9:27:40:1b:ff: be:b3:6e:de:41:7b:10:c3:c7:50:8a:4d:2a:f4:cc: 35:a7:7e:f3:c2:98:61:a5:5d:33:cb:87:bb:4b:36: c5:83:a6:ff:59:4b:80:63:1f:4d:b2:8e:f8:3e:30: 7c:6d:fa:5d:57:02:0c:0e:c5:66:91:46:50:6e:92: 51:cf:c7:01:8e:cc:57:aa:02:40:67:7c:91:75:62: 42:52:8c:5e:fb:be:84:a8:a3:0b:f8:62:dc:7a:05: 9d:95:7d:ca:4f:aa:10:a6:25:40:19:1b:9c:61:b0: 6e:fe:4c:b1:10:d4:a4:f6:90:2a:e7:ba:90:08:1d: a3:39:cb:a7:15:2a:8a:31:2f:b1:22:4f:2a:0b:75: c1:04:bc:61:fb:91:1f:fe:16:68:ba:5a:5b:2a:b2: d6:9a:8c:0b:0c:f4:2c:1c:e3:08:92:66:1d:25:a4: 04:f4:e3:0d:08:59:93:1b:f5:5f:73:ec:87:95:8b: 29:51:f1:77:55:f7:bb:d8:5e:6b:6e:4f:90:a8:51: be:11:e8:87:e6:d2:53:87:ed:62:bc:d4:ee:a6:7d: 3c:49:59:a9:aa:89:83:dc:e0:4f:da:c0:52:4c:a6: 12:30:4e:f5:29:60:06:aa:4f:ad:80:19:0a:7f:94: a1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B9:12:C9:51:8C:04:52:AA:F0:EC:DF:00:31:D0:EC:FD:6E:D6:A8 X509v3 Authority Key Identifier: keyid:4D:10:E9:D4:F4:AF:B8:A4:D1:B9:19:EC:85:93:F4:6B:A3:BB:A7:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:72:88:e3:70:01:28:fd:6e:55:79:9f:84:ce:3f:cc:6a:95: 48:05:a0:67:49:49:d9:1f:24:81:32:13:4b:11:b7:8f:ae:4b: c8:76:e0:33:c5:29:66:b4:e4:42:dc:18:03:cf:6a:e4:e4:0f: 52:05:92:c5:b7:c0:e1:ba:5c:24:6d:a3:2b:e1:55:16:9e:47: f5:67:2d:d0:90:6a:43:e0:df:c5:10:34:e2:09:ff:64:be:cb: 3f:f7:f2:2a:b8:0e:16:71:20:b8:f0:1e:91:7a:e4:40:6b:bd: 7f:e3:16:66:4a:c7:cd:12:d7:06:c8:9f:3a:2e:fc:49:04:8e: ad:ad:f9:97:2b:74:7c:67:6a:33:6f:e4:2c:cb:41:4f:85:fb: b1:8a:71:e6:76:2e:46:a8:5c:2f:0e:60:ea:47:88:d8:40:da: f4:fc:7c:8d:0e:b9:01:78:05:09:5e:0d:1e:bf:44:c7:40:4a: b5:f6:92:86:a4:df:86:01:f9:fe:aa:65:80:15:33:53:af:28: e0:65:d9:97:fe:51:31:03:1f:8c:a9:21:0f:ff:31:21:a8:ee: 01:90:3a:64:7a:a5:dd:87:d5:4b:4f:e4:d3:0f:8b:fb:29:ae: 6b:34:cf:11:84:8f:c8:c1:30:e1:cd:49:48:db:d9:ab:70:e5: be:2c:23:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYqEBs7rrRkRDfoF36paL3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMTBlOWQ0ZjRhZmI4YTRkMWI5MTllYzg1OTNmNDZiYTNi YmE3ZjcwHhcNMjUxMjEzMTcwMDM4WhcNMjUxMjE0MTcwMDM4WjAzMTEwLwYDVQQD EygyYmI5MTJjOTUxOGMwNDUyYWFmMGVjZGYwMDMxZDBlY2ZkNmVkNmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3D7TUvFmqPp3ySdAG/++s27eQXsQ w8dQik0q9Mw1p37zwphhpV0zy4e7SzbFg6b/WUuAYx9Nso74PjB8bfpdVwIMDsVm kUZQbpJRz8cBjsxXqgJAZ3yRdWJCUoxe+76EqKML+GLcegWdlX3KT6oQpiVAGRuc YbBu/kyxENSk9pAq57qQCB2jOcunFSqKMS+xIk8qC3XBBLxh+5Ef/hZoulpbKrLW mowLDPQsHOMIkmYdJaQE9OMNCFmTG/Vfc+yHlYspUfF3Vfe72F5rbk+QqFG+EeiH 5tJTh+1ivNTupn08SVmpqomD3OBP2sBSTKYSME71KWAGqk+tgBkKf5ShmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCu5EslRjARSqvDs3wAx0Oz9btaoMB8GA1UdIwQY MBaAFE0Q6dT0r7ik0bkZ7IWT9Guju6f3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFJEcDFQU3Z1S1RSdVJuc2haUDBhNk83cF9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9lM2Q4YjEtMTAxZi00MGU4LWJjZDMt MTU1YWY5ZDgzMDM2LzEvVFJEcDFQU3Z1S1RSdVJuc2haUDBhNk83cF9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9lM2Q4YjEtMTAxZi00MGU4LWJjZDMtMTU1YWY5ZDgzMDM2 LzEvVFJEcDFQU3Z1S1RSdVJuc2haUDBhNk83cF9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXKI43AB KP1uVXmfhM4/zGqVSAWgZ0lJ2R8kgTITSxG3j65LyHbgM8UpZrTkQtwYA89q5OQP UgWSxbfA4bpcJG2jK+FVFp5H9Wct0JBqQ+DfxRA04gn/ZL7LP/fyKrgOFnEguPAe kXrkQGu9f+MWZkrHzRLXBsifOi78SQSOra35lyt0fGdqM2/kLMtBT4X7sYpx5nYu RqhcLw5g6keI2EDa9Px8jQ65AXgFCV4NHr9Ex0BKtfaShqTfhgH5/qplgBUzU68o 4GXZl/5RMQMfjKkhD/8xIajuAZA6ZHql3YfVS0/k0w+L+ymuazTPEYSPyMEw4c1J SNvZq3DlviwjDg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:50:46 2025 by rpki-client