This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26c0d1-9473-4a0f-b4a9-ce47e5b06486/1/TdGNc77T2_iTqF8BD8cfd8KAecA.mft File: TdGNc77T2_iTqF8BD8cfd8KAecA.mft (raw, json) Hash identifier: U+c8qVylHD9TuH3maMSdV67ysBe8FkBQh3OoTG8e2Oo= Subject key identifier: E3:05:D8:95:EE:44:3C:90:E9:E3:43:16:46:A9:00:26:E3:42:AE:CB Authority key identifier: 4D:D1:8D:73:BE:D3:DB:F8:93:A8:5F:01:0F:C7:1F:77:C2:80:79:C0 Certificate issuer: /CN=4dd18d73bed3dbf893a85f010fc71f77c28079c0 Certificate serial: 019B59AC96B08496D18DBBDE02BC9BEA9DF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGNc77T2_iTqF8BD8cfd8KAecA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0d1-9473-4a0f-b4a9-ce47e5b06486/1/TdGNc77T2_iTqF8BD8cfd8KAecA.mft Manifest number: 0121 Signing time: Fri 26 Dec 2025 08:00:41 +0000 Manifest this update: Fri 26 Dec 2025 08:00:41 +0000 Manifest next update: Sat 27 Dec 2025 08:00:41 +0000 Files and hashes: 1: TdGNc77T2_iTqF8BD8cfd8KAecA.crl (hash: mr00mkmLzAoDocA1WsKBLYrvAfnCtOOzMrwXZS5SSQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0d1-9473-4a0f-b4a9-ce47e5b06486/1/TdGNc77T2_iTqF8BD8cfd8KAecA.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0d1-9473-4a0f-b4a9-ce47e5b06486/1/TdGNc77T2_iTqF8BD8cfd8KAecA.mft rsync://rpki.ripe.net/repository/DEFAULT/TdGNc77T2_iTqF8BD8cfd8KAecA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:96:b0:84:96:d1:8d:bb:de:02:bc:9b:ea:9d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd18d73bed3dbf893a85f010fc71f77c28079c0 Validity Not Before: Dec 26 08:00:41 2025 GMT Not After : Dec 27 08:00:41 2025 GMT Subject: CN=e305d895ee443c90e9e3431646a90026e342aecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:0c:1e:b8:a3:cb:45:38:99:7e:4e:b4:c7:02: 4f:b4:e5:9a:00:db:75:e5:ac:75:c5:cc:cc:b0:ad: 5a:dc:0a:19:51:88:c4:26:dc:05:93:12:0e:11:20: cc:9c:f8:d1:14:fe:30:c7:2d:97:76:6d:dd:11:7a: 75:97:49:75:f2:b5:37:79:69:10:ea:f1:58:31:ea: 5f:3c:d3:d7:73:af:c4:b7:99:e6:68:d0:27:e6:71: 53:58:6c:0e:d5:4b:8a:1b:27:ea:2f:29:a9:86:8e: 86:65:f1:16:9b:ca:ff:48:62:9e:71:37:a2:d5:a2: ce:f5:bd:7e:83:fa:36:f6:8f:01:18:ff:9c:ba:18: aa:52:2f:71:81:98:09:69:dc:92:40:ee:11:66:9a: 7d:74:75:da:1d:70:18:53:75:66:56:b6:d5:20:9f: 57:f6:35:0b:0e:e4:b4:c2:79:5b:62:e0:86:b3:2c: 84:7c:60:55:b0:90:40:d0:c4:20:8f:15:4e:20:fd: 06:8f:8a:be:73:28:27:d0:de:c0:6c:eb:26:e2:bc: 36:85:dd:9f:1c:13:d4:b9:9e:4e:3a:ba:5f:3d:66: 2b:a1:47:6d:a3:53:8b:88:1d:b2:55:c0:3e:c2:58: 83:0b:3c:be:84:38:bd:07:dc:ce:55:ca:3f:01:f1: 4c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:05:D8:95:EE:44:3C:90:E9:E3:43:16:46:A9:00:26:E3:42:AE:CB X509v3 Authority Key Identifier: keyid:4D:D1:8D:73:BE:D3:DB:F8:93:A8:5F:01:0F:C7:1F:77:C2:80:79:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGNc77T2_iTqF8BD8cfd8KAecA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0d1-9473-4a0f-b4a9-ce47e5b06486/1/TdGNc77T2_iTqF8BD8cfd8KAecA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0d1-9473-4a0f-b4a9-ce47e5b06486/1/TdGNc77T2_iTqF8BD8cfd8KAecA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:d8:af:af:ee:1e:39:c1:d3:62:4b:96:d6:30:af:24:12:e7: ee:6a:18:31:bf:8f:35:5e:b1:cb:03:54:cf:d6:8f:8b:36:e8: c6:a3:9e:1d:9a:1b:92:25:a2:67:a1:dd:ac:0a:38:71:6b:4e: 7f:e5:ac:a5:45:74:b7:f9:c1:4f:70:25:8a:85:5c:22:b0:31: 32:19:0a:ff:c6:23:a1:18:b6:50:16:20:53:d4:e8:06:07:2d: 82:2c:3f:60:ea:fd:12:fa:ef:98:74:37:0e:3f:b5:fb:7c:39: 48:d2:fc:cf:20:d0:58:83:af:51:1e:8a:21:41:71:b4:17:4e: ce:29:39:b4:f4:47:d5:26:5a:71:79:71:66:ec:c6:75:e2:6f: 1d:a5:74:87:7c:93:eb:40:5a:2c:21:cb:64:ae:4f:26:4b:55: 5f:06:5f:df:5b:91:06:40:c5:e6:8a:a8:4d:56:62:41:72:6f: a0:fd:9a:bd:e4:aa:d3:99:02:d3:6d:2b:f0:45:ef:c7:13:df: 7e:fd:30:6c:ae:76:17:f7:59:61:1c:88:c0:a1:39:35:e4:6a: 9b:a3:b1:5d:cb:17:f8:5d:9f:47:81:60:02:79:b5:2e:45:0b: fa:17:ba:4d:5c:3d:7f:cc:4f:f9:a6:d6:56:d1:40:af:71:a6: dd:39:67:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrJawhJbRjbveAryb6p3wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDE4ZDczYmVkM2RiZjg5M2E4NWYwMTBmYzcxZjc3YzI4 MDc5YzAwHhcNMjUxMjI2MDgwMDQxWhcNMjUxMjI3MDgwMDQxWjAzMTEwLwYDVQQD EyhlMzA1ZDg5NWVlNDQzYzkwZTllMzQzMTY0NmE5MDAyNmUzNDJhZWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/QweuKPLRTiZfk60xwJPtOWaANt1 5ax1xczMsK1a3AoZUYjEJtwFkxIOESDMnPjRFP4wxy2Xdm3dEXp1l0l18rU3eWkQ 6vFYMepfPNPXc6/Et5nmaNAn5nFTWGwO1UuKGyfqLympho6GZfEWm8r/SGKecTei 1aLO9b1+g/o29o8BGP+cuhiqUi9xgZgJadySQO4RZpp9dHXaHXAYU3VmVrbVIJ9X 9jULDuS0wnlbYuCGsyyEfGBVsJBA0MQgjxVOIP0Gj4q+cygn0N7AbOsm4rw2hd2f HBPUuZ5OOrpfPWYroUdto1OLiB2yVcA+wliDCzy+hDi9B9zOVco/AfFMtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMF2JXuRDyQ6eNDFkapACbjQq7LMB8GA1UdIwQY MBaAFE3RjXO+09v4k6hfAQ/HH3fCgHnAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRHTmM3N1QyX2lUcUY4QkQ4Y2ZkOEtBZWNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8yNmMwZDEtOTQ3My00YTBmLWI0YTkt Y2U0N2U1YjA2NDg2LzEvVGRHTmM3N1QyX2lUcUY4QkQ4Y2ZkOEtBZWNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8yNmMwZDEtOTQ3My00YTBmLWI0YTktY2U0N2U1YjA2NDg2 LzEvVGRHTmM3N1QyX2lUcUY4QkQ4Y2ZkOEtBZWNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABdivr+4e OcHTYkuW1jCvJBLn7moYMb+PNV6xywNUz9aPizboxqOeHZobkiWiZ6HdrAo4cWtO f+WspUV0t/nBT3AlioVcIrAxMhkK/8YjoRi2UBYgU9ToBgctgiw/YOr9EvrvmHQ3 Dj+1+3w5SNL8zyDQWIOvUR6KIUFxtBdOzik5tPRH1SZacXlxZuzGdeJvHaV0h3yT 60BaLCHLZK5PJktVXwZf31uRBkDF5oqoTVZiQXJvoP2aveSq05kC020r8EXvxxPf fv0wbK52F/dZYRyIwKE5NeRqm6OxXcsX+F2fR4FgAnm1LkUL+he6TVw9f8xP+abW VtFAr3Gm3TlnMg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:02 2025 by rpki-client