This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft File: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft (raw, json) Hash identifier: CCBNNgi0a1rBH/dGLVEgtPS5fFfs4bhPfrJ+NrDQ0YQ= Subject key identifier: 2E:33:63:EB:09:B8:87:C5:97:25:77:2A:AD:6F:27:71:7F:F3:86:D3 Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b Certificate serial: 019B38D85A6D05B350144E902EDADE61C7BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft Manifest number: 1798 Signing time: Fri 19 Dec 2025 23:01:01 +0000 Manifest this update: Fri 19 Dec 2025 23:01:01 +0000 Manifest next update: Sat 20 Dec 2025 23:01:01 +0000 Files and hashes: 1: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl (hash: IWZJEWlPqzPGca6CnfrYmEYmwZ4wpY+x9VfHjTxCABk=) 2: LAbYOinZZOhTcyKiJf7ioNWaoRM.roa (hash: 6Goc3YnbiYxs3x4btVAtwsDJJBqkd3Y6gTGImQ5TWEw=) 3: Ml6MKIuGs5X6FYCoibWIrDM8sZw.roa (hash: sr8ii208yixvZe4Nt1vf4FirRpNYMo5v1lAxQmPyK4E=) 4: NeK3VE5xIVumcURQvZORGSezPug.roa (hash: Kyuhso1DU/JY4Cd8KqltzS/UkVVtl7rIX1KuhxLgmkQ=) 5: SAShV7Cx-3cRFcPWPoHPU7seh9k.roa (hash: lzRGc/kfVkESt27Rk5Rm2MTThTLX4bNiPJvrX6OzG4s=) 6: TWLMxWYadUOjpfWSoRjdz4gkQVQ.roa (hash: eJJWCwgtvt1cLj2rlNHb1YuUwHOAuKtSsp+SGbWPUGI=) 7: U2YIuXAyUCZOsR4Cw5PSPdwaU0s.roa (hash: gWdVxjtR19wt31Bo3G5JO46Z63mY8LolhR8kTQQgD5Q=) 8: WvZhz4-xli7Jg3AjUEb09s8yIcg.roa (hash: nyDmjCwaWeBGV6O57JlcDsH1rd4TtVrk7nDHN+GYZDc=) 9: kSLVwGt_NyDYhkUM69fkyKqLKhE.roa (hash: 4uQpl4b7ipDKF9oMjr4f401/xIMAMkUuha8dHxAMb/k=) 10: mNj5xv9nGXpe1PGynvCZZnjrBHA.roa (hash: TkkqknjW6haSUV3elF7SSi1mf8BrofgKNJO9r7Ncf54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:5a:6d:05:b3:50:14:4e:90:2e:da:de:61:c7:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b Validity Not Before: Dec 19 23:01:01 2025 GMT Not After : Dec 20 23:01:01 2025 GMT Subject: CN=2e3363eb09b887c59725772aad6f27717ff386d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ee:a4:69:fb:b3:70:6b:21:da:a8:94:f3:39: 8d:6e:58:de:ab:bb:b2:01:c2:8d:72:8c:31:56:0c: 93:6f:4c:cc:1d:87:f7:4d:39:c2:55:13:0e:d5:34: c9:f2:91:04:65:68:f5:6b:d7:39:40:60:e1:40:3b: 3d:2c:4e:6c:fc:1f:ec:25:42:99:9b:ad:12:41:34: b6:51:36:17:d8:7a:f9:bc:0f:0c:d1:2e:66:b7:e4: 84:01:c0:9e:be:bf:d3:d8:8d:1f:c8:08:d3:e7:b1: 15:64:64:04:a8:9f:78:15:ac:5e:88:6d:3d:9d:50: 82:9f:c1:c4:b9:93:73:a8:2f:63:ce:b4:b5:b7:d4: 61:48:84:02:8e:74:d5:e5:02:5c:2d:25:b2:78:e1: b5:04:8c:95:5f:c7:e7:e0:29:95:54:0c:fe:62:9c: 78:38:22:b4:25:14:fd:5c:e3:c4:03:5f:9e:ef:70: ec:66:46:c7:bc:e0:11:36:95:8c:99:14:9a:7b:bf: 7b:75:02:75:c5:74:fd:d3:31:ff:2b:48:34:56:7f: 12:e8:65:41:17:1d:f6:6c:f0:9f:9f:84:d8:c4:ec: 3b:29:65:ba:ae:ed:72:2a:d2:c3:a5:05:23:6b:63: cb:ed:aa:5d:18:cb:15:14:c3:61:f8:e4:36:0c:d9: 96:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:33:63:EB:09:B8:87:C5:97:25:77:2A:AD:6F:27:71:7F:F3:86:D3 X509v3 Authority Key Identifier: keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:61:9e:3d:d2:6f:83:2d:73:61:95:22:6e:7f:78:51:ff:65: d1:7e:61:14:45:55:04:38:86:7c:99:1e:0a:0d:03:c7:45:a2: 5e:60:fc:3d:84:72:eb:ba:37:84:74:c8:4b:3f:4f:7a:0b:b8: 9c:d6:a2:f7:30:4e:7b:f0:bc:8f:f5:dd:ec:67:e2:c2:be:22: cc:9f:12:cc:ed:0f:f5:30:74:42:40:41:a8:fe:02:2f:17:78: ad:ee:11:5c:cb:16:d8:d9:42:3c:8a:f3:fa:e3:b7:2c:b0:a0: b2:5b:d0:9d:05:05:1c:25:ea:0e:84:64:7d:04:6f:2e:d1:46: 09:01:ed:4c:b3:81:5d:e9:da:c0:c7:f6:17:3c:ee:1c:13:fe: 3b:5e:97:42:47:96:94:1a:66:f2:6d:24:32:3f:c0:21:73:60: 80:b5:ba:bb:cb:0f:f7:27:84:48:5a:8f:63:d9:3b:c4:f1:68: 09:cf:af:93:51:5d:27:ba:45:a5:2f:11:51:2a:a1:50:b6:51: ce:e6:fa:00:39:37:c0:1f:24:f9:61:97:3b:13:b0:01:6c:45: 68:ac:84:e7:4c:1f:48:53:87:58:a2:0f:6a:5b:fa:45:ac:27: b9:c4:07:ea:77:2e:7b:d9:63:e3:94:05:73:1a:27:08:ef:a3: c3:3a:59:56 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs42FptBbNQFE6QLtreYce+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZDcxMDBlNzdlZDkxMTlkNjZlMjMyMWJiNjcxMWQ3ZTc2 MDk4MmIwHhcNMjUxMjE5MjMwMTAxWhcNMjUxMjIwMjMwMTAxWjAzMTEwLwYDVQQD EygyZTMzNjNlYjA5Yjg4N2M1OTcyNTc3MmFhZDZmMjc3MTdmZjM4NmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru6kafuzcGsh2qiU8zmNbljeq7uy AcKNcowxVgyTb0zMHYf3TTnCVRMO1TTJ8pEEZWj1a9c5QGDhQDs9LE5s/B/sJUKZ m60SQTS2UTYX2Hr5vA8M0S5mt+SEAcCevr/T2I0fyAjT57EVZGQEqJ94FaxeiG09 nVCCn8HEuZNzqC9jzrS1t9RhSIQCjnTV5QJcLSWyeOG1BIyVX8fn4CmVVAz+Ypx4 OCK0JRT9XOPEA1+e73DsZkbHvOARNpWMmRSae797dQJ1xXT90zH/K0g0Vn8S6GVB Fx32bPCfn4TYxOw7KWW6ru1yKtLDpQUja2PL7apdGMsVFMNh+OQ2DNmWvwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFC4zY+sJuIfFlyV3Kq1vJ3F/84bTMB8GA1UdIwQY MBaAFPrXEA537ZEZ1m4jIbtnEdfnYJgrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS10Y1FEbmZ0a1JuV2JpTWh1MmNSMS1kZ21Dcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvMDFkNDExLWQ5MTUtNDI3Ny04ZmUy LTc2YjBkZGEyYmYzZS8xLzEtdGNRRG5mdGtSbldiaU1odTJjUjEtZGdtQ3MubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzNlLzAxZDQxMS1kOTE1LTQyNzctOGZlMi03NmIwZGRhMmJm M2UvMS8xLXRjUURuZnRrUm5XYmlNaHUyY1IxLWRnbUNzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemGe PdJvgy1zYZUibn94Uf9l0X5hFEVVBDiGfJkeCg0Dx0WiXmD8PYRy67o3hHTISz9P egu4nNai9zBOe/C8j/Xd7Gfiwr4izJ8SzO0P9TB0QkBBqP4CLxd4re4RXMsW2NlC PIrz+uO3LLCgslvQnQUFHCXqDoRkfQRvLtFGCQHtTLOBXenawMf2FzzuHBP+O16X QkeWlBpm8m0kMj/AIXNggLW6u8sP9yeESFqPY9k7xPFoCc+vk1FdJ7pFpS8RUSqh ULZRzub6ADk3wB8k+WGXOxOwAWxFaKyE50wfSFOHWKIPalv6RawnucQH6ncue9lj 45QFcxonCO+jwzpZVg== -----END CERTIFICATE-----Generated at Sat Dec 20 01:19:19 2025 by rpki-client