This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft File: 1_T2S1EKQbB8nVAASzUlaUzEIjM.mft (raw, json) Hash identifier: AT/4mNZzJ5CrvGCvicIQegWd2zUn0sMTX7/+/QAJooM= Subject key identifier: 11:E7:66:95:6D:11:F3:0E:A7:87:75:E6:92:72:02:0E:9C:05:94:B6 Authority key identifier: D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33 Certificate issuer: /CN=d7f4f64b510a41b07c9d50004b3525694cc42233 Certificate serial: 019B3DFEB7FBE837DA8C93D97B372EFA970B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft Manifest number: 0123 Signing time: Sat 20 Dec 2025 23:01:01 +0000 Manifest this update: Sat 20 Dec 2025 23:01:01 +0000 Manifest next update: Sun 21 Dec 2025 23:01:01 +0000 Files and hashes: 1: 1_T2S1EKQbB8nVAASzUlaUzEIjM.crl (hash: GwYniEAeDOwSFD9naBXEwkkCB7EPlAXfVkgMjf5CwTk=) 2: FoUBO1CLvHv9IUZgMqlXSTP27UE.roa (hash: UWDESR9+S/CWXTmG2rrRD+fM1FniiIp0n2rFP03so88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:b7:fb:e8:37:da:8c:93:d9:7b:37:2e:fa:97:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7f4f64b510a41b07c9d50004b3525694cc42233 Validity Not Before: Dec 20 23:01:01 2025 GMT Not After : Dec 21 23:01:01 2025 GMT Subject: CN=11e766956d11f30ea78775e69272020e9c0594b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:51:e4:97:37:1e:48:a5:f6:e5:d3:76:fa:bd: a4:b5:63:da:01:41:12:0e:a4:7e:b4:d1:19:a1:e4: be:48:d8:24:3f:ee:ed:11:a2:35:27:a8:8b:56:c5: 49:1b:f8:73:39:85:d4:9b:48:13:96:87:dd:b6:97: 16:1b:5f:b7:96:56:7a:68:18:2c:35:17:cb:4e:44: 41:89:92:9c:3f:c5:8f:80:aa:38:2b:40:71:78:b7: c3:3c:9b:b7:f6:f2:5a:e0:4a:a6:7f:9d:03:9e:a3: 20:5d:a1:d2:b6:c5:90:d5:1c:65:c2:72:f9:68:13: b9:12:c4:11:51:e6:34:ed:af:24:d5:7d:d8:34:a6: 97:b2:31:ca:67:e3:49:dc:b4:df:a5:62:f6:9c:dc: 2f:66:c0:0a:e4:9b:04:0f:c8:a0:bb:0c:63:90:ae: c6:ed:68:79:ca:ca:cd:a0:07:9a:b5:16:9b:b7:1d: d5:bd:4e:25:4a:c0:9e:92:79:cf:00:bd:8e:d4:f4: 37:dc:4f:b2:ef:7c:e0:81:d9:d3:84:3f:8d:de:c0: ca:bc:0e:03:1e:9b:a8:45:c7:28:c9:af:9a:d2:16: df:d2:ed:40:e1:ad:9e:85:9c:ff:30:05:5b:75:a0: 0b:df:48:5a:14:83:f2:da:5f:fa:80:fb:58:eb:c0: 45:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E7:66:95:6D:11:F3:0E:A7:87:75:E6:92:72:02:0E:9C:05:94:B6 X509v3 Authority Key Identifier: keyid:D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:3d:04:22:3a:cd:75:f8:36:b6:28:94:a1:10:b3:04:4a:48: 29:e2:e4:24:fd:9a:29:f6:b1:d0:ed:4f:7a:36:a8:ac:63:6f: 46:39:d3:e0:3f:72:e8:73:9c:1d:57:cc:a6:2e:ad:70:02:2e: 54:55:86:1d:4f:82:88:7f:ff:c0:56:70:14:8a:63:97:b4:bf: 64:a7:5f:bf:8e:f6:35:40:db:72:26:e9:f7:8d:e1:6b:55:38: 87:b2:05:0b:18:4c:24:3a:54:1f:84:cf:ee:96:80:f8:b7:6e: 8e:28:08:65:8d:3c:24:ae:55:08:bb:06:56:d6:ab:2c:0d:70: 59:3c:79:20:f0:d7:6b:c8:0e:88:3b:e1:2f:61:96:df:fa:9d: ce:42:a1:ef:c3:fe:8d:8e:bd:49:77:27:74:dc:1b:aa:c5:b3: d9:e9:bc:e2:ef:f4:7e:2b:89:9e:a2:b1:2e:b5:a9:b7:ca:e5: 52:29:94:4c:a3:1e:ea:df:45:94:c1:0a:ee:b9:8c:4c:00:3b: fd:4f:4f:03:05:4a:3a:a2:bb:36:7a:92:e6:ae:d0:6a:cd:ca: 94:07:ce:c2:23:4f:83:56:93:36:98:47:ef:21:b2:46:05:ec: 7c:f3:1f:61:52:a2:d4:cc:b1:51:2b:06:00:fd:52:5f:68:ff: cf:24:df:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/rf76DfajJPZezcu+pcLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZjRmNjRiNTEwYTQxYjA3YzlkNTAwMDRiMzUyNTY5NGNj NDIyMzMwHhcNMjUxMjIwMjMwMTAxWhcNMjUxMjIxMjMwMTAxWjAzMTEwLwYDVQQD EygxMWU3NjY5NTZkMTFmMzBlYTc4Nzc1ZTY5MjcyMDIwZTljMDU5NGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1HklzceSKX25dN2+r2ktWPaAUES DqR+tNEZoeS+SNgkP+7tEaI1J6iLVsVJG/hzOYXUm0gTlofdtpcWG1+3llZ6aBgs NRfLTkRBiZKcP8WPgKo4K0BxeLfDPJu39vJa4Eqmf50DnqMgXaHStsWQ1RxlwnL5 aBO5EsQRUeY07a8k1X3YNKaXsjHKZ+NJ3LTfpWL2nNwvZsAK5JsED8iguwxjkK7G 7Wh5ysrNoAeatRabtx3VvU4lSsCeknnPAL2O1PQ33E+y73zggdnThD+N3sDKvA4D HpuoRccoya+a0hbf0u1A4a2ehZz/MAVbdaAL30haFIPy2l/6gPtY68BFhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHnZpVtEfMOp4d15pJyAg6cBZS2MB8GA1UdIwQY MBaAFNf09ktRCkGwfJ1QAEs1JWlMxCIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMV9UMlMxRUtRYkI4blZBQVN6VWxhVXpFSWpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85ZTNkY2QtZjFhMi00ZmI5LThjN2Ut ZDU0NTYyZjUyZTkzLzEvMV9UMlMxRUtRYkI4blZBQVN6VWxhVXpFSWpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy85ZTNkY2QtZjFhMi00ZmI5LThjN2UtZDU0NTYyZjUyZTkz LzEvMV9UMlMxRUtRYkI4blZBQVN6VWxhVXpFSWpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhz0EIjrN dfg2tiiUoRCzBEpIKeLkJP2aKfax0O1PejaorGNvRjnT4D9y6HOcHVfMpi6tcAIu VFWGHU+CiH//wFZwFIpjl7S/ZKdfv472NUDbcibp943ha1U4h7IFCxhMJDpUH4TP 7paA+LdujigIZY08JK5VCLsGVtarLA1wWTx5IPDXa8gOiDvhL2GW3/qdzkKh78P+ jY69SXcndNwbqsWz2em84u/0fiuJnqKxLrWpt8rlUimUTKMe6t9FlMEK7rmMTAA7 /U9PAwVKOqK7NnqS5q7Qas3KlAfOwiNPg1aTNphH7yGyRgXsfPMfYVKi1MyxUSsG AP1SX2j/zyTfUw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:56:48 2025 by rpki-client