This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json) Hash identifier: 1clPz/kp4uh2WfhSGpYAadZSCoKFnm10OEIztFtha9I= Subject key identifier: A3:9F:ED:51:BF:1C:F8:89:10:CC:78:D6:17:F7:41:70:3F:FC:B7:FB Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21 Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21 Certificate serial: 019B3CB555B24695CBE7866F478B6B9FCF91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 17:01:15 +0000 Manifest this update: Sat 20 Dec 2025 17:01:15 +0000 Manifest next update: Sun 21 Dec 2025 17:01:15 +0000 Files and hashes: 1: 0qa8r-MxNMLt6tCXa-K5V6QBkro.roa (hash: oU+YFw1zeHKoa31/el8AmGzlkf3ldrnYHs0Qc542gzw=) 2: 2s9R-8NKLGYziws7CzdBBuI05qY.roa (hash: 8cPZV8bL1izy9SNqvDNd1+gha6xq2vYnb61KexJW8KE=) 3: 8trwTS6zWWIc2CXU2a9uB3EK1CE.roa (hash: cB6Sm/NTvhdg/vAHTGU6288+fVcpUIfblu8fCuXy72c=) 4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: ypsFdXjYAnkcEbJyozxx/yrMXrUW57nChqijbcpoxdQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:55:b2:46:95:cb:e7:86:6f:47:8b:6b:9f:cf:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21 Validity Not Before: Dec 20 17:01:15 2025 GMT Not After : Dec 21 17:01:15 2025 GMT Subject: CN=a39fed51bf1cf88910cc78d617f741703ffcb7fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0f:94:41:bc:13:a6:7e:e1:b1:cc:11:02:ec: 1e:96:31:d2:c2:48:40:fe:a1:47:6d:93:6d:7c:5a: 2b:88:81:34:ad:a6:04:6c:d9:e5:ac:69:5e:95:a7: 92:c5:68:39:a7:45:c6:ec:71:5d:86:8d:75:06:c6: 23:1d:69:6b:58:e2:6e:07:57:a0:77:60:9f:87:04: 59:c9:c0:99:7e:1e:74:cd:ba:f7:1e:fa:df:e1:ae: 3e:21:78:31:0d:5c:fb:20:cb:42:c5:89:34:93:34: bd:7a:eb:52:ab:32:84:2f:3e:15:9c:b7:fb:c7:f3: 6e:ca:16:cf:46:db:f3:53:51:e0:7d:e9:6a:ae:90: 87:ec:35:02:6c:39:ad:55:33:1a:ee:af:d3:23:bc: 99:9a:45:5c:a1:dd:12:43:90:b2:02:ad:8a:e6:63: e9:9b:6c:48:f8:77:29:b0:79:9a:78:26:ee:f2:e7: 4e:29:bc:d7:22:40:49:97:23:fd:58:e4:93:37:83: c7:d6:85:2a:2a:15:29:93:b2:69:0b:64:0e:87:d4: 3c:3b:ed:2d:88:74:ea:e1:db:ca:5f:de:26:14:fb: 48:71:86:80:79:14:33:29:7b:e4:83:d1:f2:50:75: 74:6e:f1:80:bd:6c:9f:3f:02:62:67:55:7e:ed:40: 8d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9F:ED:51:BF:1C:F8:89:10:CC:78:D6:17:F7:41:70:3F:FC:B7:FB X509v3 Authority Key Identifier: keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:4a:e3:6d:80:e3:27:82:74:a8:60:f4:94:f2:68:10:c8:40: 66:17:bd:7c:43:30:c7:6c:97:5b:87:31:1c:31:1b:ce:b8:fb: 47:43:54:e7:0d:02:0d:d4:1e:05:00:8b:22:7e:65:8b:b9:3c: 26:79:5c:aa:92:17:92:59:23:bf:c6:25:9b:db:e6:f6:76:83: d9:d2:8f:13:84:77:81:52:6e:16:4c:b1:ea:a5:ea:61:46:ae: 1f:51:63:bf:0f:75:cc:bc:ad:42:b7:3f:13:38:97:cc:35:48: cd:1f:9b:14:6f:ff:4a:f0:f0:29:92:3f:20:43:39:f4:8a:cf: a0:7e:ec:7d:ee:b6:b0:cf:9d:89:bf:17:03:52:3b:84:57:a6: 1a:54:78:a1:66:d3:ca:d4:ec:f9:17:60:d1:b3:e3:cb:ff:0d: f5:56:b9:79:92:42:f1:3f:3e:18:fb:92:b5:81:bb:38:39:a5: cb:91:03:48:9f:d7:92:0f:79:17:85:21:eb:8a:c7:48:ea:95: 4a:bf:e0:c6:a3:68:f4:0c:a1:49:fa:75:57:98:f5:7f:b8:0f: 3b:aa:ff:a9:d1:bb:6c:09:4a:d5:1c:6e:7f:6c:e5:c6:5a:e6: 51:e1:6d:6c:3d:e5:fd:30:db:9e:f5:0d:94:8d:24:26:a6:43: 4d:9d:a2:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tVWyRpXL54ZvR4trn8+RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NWEwNTY2ZDBiNjNhMWY4NjJkODM0NThlNGYyZWE2ZmQ4 ZjdkMjEwHhcNMjUxMjIwMTcwMTE1WhcNMjUxMjIxMTcwMTE1WjAzMTEwLwYDVQQD EyhhMzlmZWQ1MWJmMWNmODg5MTBjYzc4ZDYxN2Y3NDE3MDNmZmNiN2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA+UQbwTpn7hscwRAuweljHSwkhA /qFHbZNtfForiIE0raYEbNnlrGlelaeSxWg5p0XG7HFdho11BsYjHWlrWOJuB1eg d2CfhwRZycCZfh50zbr3Hvrf4a4+IXgxDVz7IMtCxYk0kzS9eutSqzKELz4VnLf7 x/NuyhbPRtvzU1HgfelqrpCH7DUCbDmtVTMa7q/TI7yZmkVcod0SQ5CyAq2K5mPp m2xI+HcpsHmaeCbu8udOKbzXIkBJlyP9WOSTN4PH1oUqKhUpk7JpC2QOh9Q8O+0t iHTq4dvKX94mFPtIcYaAeRQzKXvkg9HyUHV0bvGAvWyfPwJiZ1V+7UCNTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOf7VG/HPiJEMx41hf3QXA//Lf7MB8GA1UdIwQY MBaAFLdaBWbQtjofhi2DRY5PLqb9j30hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQt ODNmNjAxYzNmYjU5LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQtODNmNjAxYzNmYjU5 LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUrjbYDj J4J0qGD0lPJoEMhAZhe9fEMwx2yXW4cxHDEbzrj7R0NU5w0CDdQeBQCLIn5li7k8 JnlcqpIXklkjv8Ylm9vm9naD2dKPE4R3gVJuFkyx6qXqYUauH1Fjvw91zLytQrc/ EziXzDVIzR+bFG//SvDwKZI/IEM59IrPoH7sfe62sM+dib8XA1I7hFemGlR4oWbT ytTs+Rdg0bPjy/8N9Va5eZJC8T8+GPuStYG7ODmly5EDSJ/Xkg95F4Uh64rHSOqV Sr/gxqNo9AyhSfp1V5j1f7gPO6r/qdG7bAlK1Rxuf2zlxlrmUeFtbD3l/TDbnvUN lI0kJqZDTZ2ifg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:04:13 2025 by rpki-client