This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft File: TEDHERwpFqX1ra8eUFCpQMJrI3g.mft (raw, json) Hash identifier: KiRYNLLl5JjfuFz1lyC91YNot0uUarulRtGGKH94oYY= Subject key identifier: 7F:69:77:AD:24:8A:BB:FE:69:23:83:45:3C:83:1E:41:E7:6B:0E:0A Authority key identifier: 4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78 Certificate issuer: /CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378 Certificate serial: 019B4280508F4F237B8AC69CF1C5AE20D138 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 20:01:04 +0000 Manifest this update: Sun 21 Dec 2025 20:01:04 +0000 Manifest next update: Mon 22 Dec 2025 20:01:04 +0000 Files and hashes: 1: TEDHERwpFqX1ra8eUFCpQMJrI3g.crl (hash: 1VY8lCOtjAO6+QZyDrg9OVL619Qx8WcSvEOBPgsNlo4=) 2: j2IAXuDDxL9R5htveS2h7u2YZbk.roa (hash: znjWCCItAdjYTrrA4TwcAum8T33INI1kjoCAB+b3jbk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:50:8f:4f:23:7b:8a:c6:9c:f1:c5:ae:20:d1:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378 Validity Not Before: Dec 21 20:01:04 2025 GMT Not After : Dec 22 20:01:04 2025 GMT Subject: CN=7f6977ad248abbfe692383453c831e41e76b0e0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6e:f0:de:59:4a:06:cb:cc:8d:b8:bc:01:90: 0b:3b:49:f7:d8:08:9e:2a:54:ae:37:8b:33:9d:dd: d6:03:1d:1b:20:2b:ff:6d:78:96:63:5c:6f:96:9c: 95:97:02:e7:03:c7:cd:2a:30:d0:0b:5b:09:b9:1c: 27:ba:0b:4a:53:da:cc:13:37:6d:11:f1:4b:51:5b: 72:c2:87:74:42:a4:22:1b:71:59:cc:bf:5a:dd:83: d2:83:f2:9d:60:6c:aa:d1:64:32:b4:af:95:3c:a1: 01:4b:f9:7b:d9:ff:31:4a:9b:fb:ec:af:a9:75:39: 7b:ff:f9:ac:6d:74:5d:e7:34:59:88:87:ff:66:46: 17:a8:8a:d3:93:bf:8a:5e:82:b7:d6:cc:27:2f:a1: f1:20:46:b9:f4:36:f1:e5:73:c6:b1:8a:cf:c3:ed: 4b:9e:e5:c6:98:f5:1f:89:c1:67:21:87:ea:86:b1: 7c:c5:70:f9:99:ac:4a:c1:a9:43:16:db:58:b0:c3: 9d:46:8e:24:df:ae:80:60:f6:38:8e:22:62:d7:2d: 21:07:1d:3e:1d:0d:3a:20:bb:7c:82:06:5d:ce:81: 5d:dd:17:51:67:c5:93:9d:9f:de:94:7c:35:87:e8: c0:66:eb:0a:47:e0:6d:9f:7f:d8:73:29:9b:be:c3: d9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:69:77:AD:24:8A:BB:FE:69:23:83:45:3C:83:1E:41:E7:6B:0E:0A X509v3 Authority Key Identifier: keyid:4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:b1:d5:8f:c0:2c:de:be:21:6e:87:0a:e8:6a:24:7e:bb:67: 5c:66:42:eb:4a:f7:c7:f5:80:ed:7b:d2:c9:0e:23:f5:4c:6f: 20:90:f9:5c:2a:d9:fb:43:36:bd:04:7b:10:ad:1d:f6:f4:91: 8b:0e:db:3a:c5:1b:9c:51:7b:fb:57:0a:c4:54:4b:79:5c:25: 8d:3c:fe:2e:b9:b8:e4:97:e8:7b:ed:34:d3:9c:91:88:8f:40: a9:d6:00:c6:63:e3:dc:3c:55:ee:36:15:17:c6:6e:c8:c0:f1: 32:c3:ca:9f:df:6a:b5:39:d9:a2:ff:fc:97:5b:76:d2:c2:6b: 9a:4c:67:80:89:ec:d2:fe:6d:6c:36:e1:c4:0f:10:40:d1:d4: 75:de:c6:64:95:f5:66:41:57:30:72:58:27:85:77:cd:84:ae: d5:0d:f0:0f:f3:07:4d:1d:6f:4b:e9:9b:fb:c5:e1:39:17:6e: 27:e2:d9:39:76:79:59:c7:7b:8d:84:1a:f3:d0:6e:e0:8f:fb: 42:ab:e8:3f:d2:f1:eb:f2:93:0d:fc:08:b9:96:c7:8f:e5:30: c9:bd:ea:64:29:0d:49:c5:0f:c3:b7:5f:34:40:7a:2b:57:18: 52:d1:30:1a:1f:94:09:c1:9b:03:16:ef:8f:e5:10:f9:10:cc: 49:d7:67:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgFCPTyN7isac8cWuINE4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNDBjNzExMWMyOTE2YTVmNWFkYWYxZTUwNTBhOTQwYzI2 YjIzNzgwHhcNMjUxMjIxMjAwMTA0WhcNMjUxMjIyMjAwMTA0WjAzMTEwLwYDVQQD Eyg3ZjY5NzdhZDI0OGFiYmZlNjkyMzgzNDUzYzgzMWU0MWU3NmIwZTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum7w3llKBsvMjbi8AZALO0n32Aie KlSuN4sznd3WAx0bICv/bXiWY1xvlpyVlwLnA8fNKjDQC1sJuRwnugtKU9rMEzdt EfFLUVtywod0QqQiG3FZzL9a3YPSg/KdYGyq0WQytK+VPKEBS/l72f8xSpv77K+p dTl7//msbXRd5zRZiIf/ZkYXqIrTk7+KXoK31swnL6HxIEa59Dbx5XPGsYrPw+1L nuXGmPUficFnIYfqhrF8xXD5maxKwalDFttYsMOdRo4k366AYPY4jiJi1y0hBx0+ HQ06ILt8ggZdzoFd3RdRZ8WTnZ/elHw1h+jAZusKR+Btn3/YcymbvsPZ5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9pd60kirv+aSODRTyDHkHnaw4KMB8GA1UdIwQY MBaAFExAxxEcKRal9a2vHlBQqUDCayN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEVESEVSd3BGcVgxcmE4ZVVGQ3BRTUpySTNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hZDRlODctNWIyOC00MmQ3LTk3NDgt NGFiNDk4YjU5NmEzLzEvVEVESEVSd3BGcVgxcmE4ZVVGQ3BRTUpySTNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9hZDRlODctNWIyOC00MmQ3LTk3NDgtNGFiNDk4YjU5NmEz LzEvVEVESEVSd3BGcVgxcmE4ZVVGQ3BRTUpySTNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObHVj8As 3r4hbocK6GokfrtnXGZC60r3x/WA7XvSyQ4j9UxvIJD5XCrZ+0M2vQR7EK0d9vSR iw7bOsUbnFF7+1cKxFRLeVwljTz+Lrm45Jfoe+0005yRiI9AqdYAxmPj3DxV7jYV F8ZuyMDxMsPKn99qtTnZov/8l1t20sJrmkxngIns0v5tbDbhxA8QQNHUdd7GZJX1 ZkFXMHJYJ4V3zYSu1Q3wD/MHTR1vS+mb+8XhORduJ+LZOXZ5Wcd7jYQa89Bu4I/7 QqvoP9Lx6/KTDfwIuZbHj+Uwyb3qZCkNScUPw7dfNEB6K1cYUtEwGh+UCcGbAxbv j+UQ+RDMSddn5g== -----END CERTIFICATE-----Generated at Mon Dec 22 05:16:26 2025 by rpki-client