This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft File: TRDp1PSvuKTRuRnshZP0a6O7p_c.mft (raw, json) Hash identifier: Azg0WHlPi2LYWEkias0xuTND278Q4Fsopz0aXdwjbeE= Subject key identifier: CD:10:1B:C9:93:81:9A:28:81:71:74:DA:C9:F1:D6:CD:E4:34:CB:F2 Authority key identifier: 4D:10:E9:D4:F4:AF:B8:A4:D1:B9:19:EC:85:93:F4:6B:A3:BB:A7:F7 Certificate issuer: /CN=4d10e9d4f4afb8a4d1b919ec8593f46ba3bba7f7 Certificate serial: 019B3F47E84A7828FD20100FD9E72D6F7D24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft Manifest number: 148B Signing time: Sun 21 Dec 2025 05:00:35 +0000 Manifest this update: Sun 21 Dec 2025 05:00:35 +0000 Manifest next update: Mon 22 Dec 2025 05:00:35 +0000 Files and hashes: 1: KbSVDODyeN3kHoikV78WDWGb18w.roa (hash: oRCPK1YwXowGG8GKKm2eZqlzH0XvN6BREuS7mGHYkgI=) 2: TRDp1PSvuKTRuRnshZP0a6O7p_c.crl (hash: +p9oUpjrdYKCQjbCkw5Q/86zaZuOcbQ8vlZvCwXbFIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 05:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:47:e8:4a:78:28:fd:20:10:0f:d9:e7:2d:6f:7d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d10e9d4f4afb8a4d1b919ec8593f46ba3bba7f7 Validity Not Before: Dec 21 05:00:35 2025 GMT Not After : Dec 22 05:00:35 2025 GMT Subject: CN=cd101bc993819a28817174dac9f1d6cde434cbf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b8:ed:a8:85:ff:f3:09:fe:e7:82:a3:c5:ad: bd:8f:eb:b6:0b:eb:b2:5f:16:22:60:0e:5e:06:0c: 67:3e:7e:bc:9a:83:60:28:7e:af:4d:7b:55:bd:ca: 7b:e7:ae:ba:9c:35:48:90:db:b4:ac:0f:4c:f0:8d: d2:13:f7:10:d2:c6:04:7d:53:af:58:51:81:0e:d6: b8:52:0d:40:8d:5f:02:5e:67:62:a8:67:dc:03:64: 5f:d9:2e:e2:ed:81:6d:fd:23:71:7d:fa:6b:cd:0a: c1:2c:23:b8:e5:ee:9e:6e:6b:8e:36:32:3a:77:15: 07:2e:ff:59:b5:05:54:a3:b9:fc:88:d1:13:8d:0e: 89:73:3a:63:49:33:72:84:8d:d0:40:cd:62:37:0c: a1:26:17:1a:e6:d9:1a:cb:f1:da:9b:ee:de:ff:d7: 40:71:3c:b1:ed:35:10:fa:8f:d4:71:12:99:a2:37: 9e:1f:f8:9f:91:d3:6f:c8:e5:2b:8e:34:27:14:c9: 51:d7:34:95:15:d1:b6:36:bd:98:59:30:4d:aa:6e: c4:da:8f:35:27:17:3e:c4:2e:a2:6c:d8:3c:6e:b0: e7:a3:a0:15:7d:a5:22:49:71:f7:e8:7a:40:a7:66: 44:31:c9:88:10:65:e9:1a:e3:60:76:1b:4e:b6:1c: d7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:10:1B:C9:93:81:9A:28:81:71:74:DA:C9:F1:D6:CD:E4:34:CB:F2 X509v3 Authority Key Identifier: keyid:4D:10:E9:D4:F4:AF:B8:A4:D1:B9:19:EC:85:93:F4:6B:A3:BB:A7:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:85:99:77:24:9c:45:e3:e5:83:09:a5:96:5b:a4:af:0d:f5: 70:2b:99:26:06:c8:18:10:2b:80:33:22:07:1f:27:c6:a4:f6: 7d:b5:8e:14:10:c4:34:4e:11:b6:2b:72:00:b0:a5:2c:8c:3e: 2a:78:49:24:3f:45:b8:a5:52:4a:1b:c1:4d:11:9f:7b:88:b0: db:30:80:93:38:8e:d9:74:2d:e5:11:3b:97:71:d8:21:f1:02: f9:91:de:b8:bd:19:ea:9d:de:7a:2e:3e:fa:8c:e6:a8:8d:36: 03:29:b5:ec:b9:28:23:00:c7:e1:48:63:39:b4:bb:10:37:20: 68:a5:57:46:51:04:7f:48:73:b6:81:5a:72:c0:ab:a2:da:47: a4:95:91:3f:43:6f:73:46:6c:33:78:b7:6d:1a:60:49:df:91: c2:8e:c4:9f:35:d6:40:d5:87:4d:1d:f8:c6:88:23:0a:10:55: cd:76:03:e0:63:f5:3f:28:08:35:0a:ca:e5:25:c0:08:f9:45: aa:cb:38:43:35:37:eb:90:d6:19:de:ff:f4:cd:6f:08:73:e2: 75:43:35:b3:bc:86:47:01:29:fe:ac:0e:cf:da:4e:1f:b6:c9: f4:1d:0f:74:38:e0:e2:1b:21:ac:87:cf:a4:0d:82:9a:cb:7a: e6:59:54:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/R+hKeCj9IBAP2ectb30kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMTBlOWQ0ZjRhZmI4YTRkMWI5MTllYzg1OTNmNDZiYTNi YmE3ZjcwHhcNMjUxMjIxMDUwMDM1WhcNMjUxMjIyMDUwMDM1WjAzMTEwLwYDVQQD EyhjZDEwMWJjOTkzODE5YTI4ODE3MTc0ZGFjOWYxZDZjZGU0MzRjYmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87jtqIX/8wn+54Kjxa29j+u2C+uy XxYiYA5eBgxnPn68moNgKH6vTXtVvcp75666nDVIkNu0rA9M8I3SE/cQ0sYEfVOv WFGBDta4Ug1AjV8CXmdiqGfcA2Rf2S7i7YFt/SNxffprzQrBLCO45e6ebmuONjI6 dxUHLv9ZtQVUo7n8iNETjQ6JczpjSTNyhI3QQM1iNwyhJhca5tkay/Ham+7e/9dA cTyx7TUQ+o/UcRKZojeeH/ifkdNvyOUrjjQnFMlR1zSVFdG2Nr2YWTBNqm7E2o81 Jxc+xC6ibNg8brDno6AVfaUiSXH36HpAp2ZEMcmIEGXpGuNgdhtOthzXTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM0QG8mTgZoogXF02snx1s3kNMvyMB8GA1UdIwQY MBaAFE0Q6dT0r7ik0bkZ7IWT9Guju6f3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFJEcDFQU3Z1S1RSdVJuc2haUDBhNk83cF9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9lM2Q4YjEtMTAxZi00MGU4LWJjZDMt MTU1YWY5ZDgzMDM2LzEvVFJEcDFQU3Z1S1RSdVJuc2haUDBhNk83cF9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9lM2Q4YjEtMTAxZi00MGU4LWJjZDMtMTU1YWY5ZDgzMDM2 LzEvVFJEcDFQU3Z1S1RSdVJuc2haUDBhNk83cF9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALoWZdySc RePlgwmlllukrw31cCuZJgbIGBArgDMiBx8nxqT2fbWOFBDENE4RtityALClLIw+ KnhJJD9FuKVSShvBTRGfe4iw2zCAkziO2XQt5RE7l3HYIfEC+ZHeuL0Z6p3eei4+ +ozmqI02Aym17LkoIwDH4UhjObS7EDcgaKVXRlEEf0hztoFacsCrotpHpJWRP0Nv c0ZsM3i3bRpgSd+Rwo7EnzXWQNWHTR34xogjChBVzXYD4GP1PygINQrK5SXACPlF qss4QzU365DWGd7/9M1vCHPidUM1s7yGRwEp/qwOz9pOH7bJ9B0PdDjg4hshrIfP pA2Cmst65llUDA== -----END CERTIFICATE-----Generated at Sun Dec 21 14:58:32 2025 by rpki-client