This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json) Hash identifier: DX4/mvTTunEaym4UAj2znxiRTMKqYNUGtJkPhcIsf+8= Subject key identifier: 5C:A2:67:70:4D:8C:7B:72:2D:C3:17:CD:9E:91:D3:19:C9:CB:9B:3C Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21 Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21 Certificate serial: 019B4E16BBE0474FB9687A36413D8442BBA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft Manifest number: 1795 Signing time: Wed 24 Dec 2025 02:01:11 +0000 Manifest this update: Wed 24 Dec 2025 02:01:11 +0000 Manifest next update: Thu 25 Dec 2025 02:01:11 +0000 Files and hashes: 1: 0qa8r-MxNMLt6tCXa-K5V6QBkro.roa (hash: oU+YFw1zeHKoa31/el8AmGzlkf3ldrnYHs0Qc542gzw=) 2: 2s9R-8NKLGYziws7CzdBBuI05qY.roa (hash: 8cPZV8bL1izy9SNqvDNd1+gha6xq2vYnb61KexJW8KE=) 3: 8trwTS6zWWIc2CXU2a9uB3EK1CE.roa (hash: cB6Sm/NTvhdg/vAHTGU6288+fVcpUIfblu8fCuXy72c=) 4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: LQQtH6LrtGK82uNLpyYtuFJsWB9quBRGWXvPQkV6Lpg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 02:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:bb:e0:47:4f:b9:68:7a:36:41:3d:84:42:bb:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21 Validity Not Before: Dec 24 02:01:11 2025 GMT Not After : Dec 25 02:01:11 2025 GMT Subject: CN=5ca267704d8c7b722dc317cd9e91d319c9cb9b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3b:48:d2:1d:f3:04:e9:27:03:c1:93:d4:05: 1e:66:77:83:c4:c4:e1:b0:e9:3c:aa:8c:a7:be:cf: 8c:01:61:80:93:9a:38:50:e2:55:0d:bf:09:d4:da: 4a:33:ea:bc:ce:6c:bc:5f:0a:b0:3b:e9:80:57:d7: 9b:57:24:96:16:2d:09:3a:ee:21:e7:74:9d:04:13: a7:78:80:c4:c7:ae:03:ab:39:7f:a5:ca:dd:32:00: c6:f4:ac:b8:1c:a9:24:bc:0b:48:b0:67:e9:f4:39: 12:ce:7b:79:71:1d:f8:a2:27:b0:a4:07:8b:19:80: a6:85:90:f1:e0:95:8a:57:05:9a:7f:b0:9e:bd:2f: 89:f1:c3:ed:f9:cc:37:eb:1a:14:20:36:b9:66:54: 1b:b1:34:e5:29:b3:63:c4:40:80:0b:82:13:41:49: c7:65:16:ed:70:27:68:17:f8:52:4e:7b:bf:83:a2: a3:7d:f3:8d:2b:d7:19:a9:a6:f8:ea:85:87:2a:7d: 52:d9:97:1f:19:75:c0:f4:90:61:f9:7d:b3:03:39: b1:44:63:33:9c:d1:a8:9c:30:9e:dc:67:79:35:22: 93:a2:46:e9:29:5b:70:15:ea:b8:69:ef:a5:8f:6a: 43:88:c0:87:46:97:bf:3a:66:9f:c4:6d:b8:11:76: 26:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A2:67:70:4D:8C:7B:72:2D:C3:17:CD:9E:91:D3:19:C9:CB:9B:3C X509v3 Authority Key Identifier: keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:75:2c:34:87:be:f5:1f:62:ee:63:9b:e5:f1:7d:43:aa:c3: 6e:a0:08:5c:1d:aa:ab:36:12:83:df:b3:b6:5c:35:88:27:e3: b4:8f:77:81:9e:e7:4b:4b:02:1a:5d:7c:19:70:37:c4:ed:51: 94:0e:9a:04:a1:89:f8:b2:b5:54:4f:c0:dd:1a:16:d0:72:81: 34:7e:2f:d0:3e:41:b4:6f:8f:c6:a8:d9:26:b7:9e:0a:c3:c4: 9e:c5:2e:9f:2c:c2:cc:cf:d6:22:16:3f:49:a4:2a:40:04:12: 9d:f6:2d:7e:dd:28:e9:eb:6b:65:01:55:e9:b0:9d:59:c6:43: a2:00:fa:7a:c4:8a:d5:8e:29:19:61:a0:15:dd:44:7f:6f:48: 9a:9e:44:cf:25:98:13:b8:68:c7:a3:20:49:48:30:68:61:a1: 88:96:6e:0d:dd:97:68:fc:3f:67:b0:e0:39:b4:da:4a:bf:32: cf:cd:18:e5:5e:da:4f:7a:78:de:07:1f:e4:4d:e9:3e:d4:78: f3:e2:13:d4:5f:97:79:8a:bf:da:a1:4e:1c:bd:fa:60:0c:45: d5:73:18:49:fa:70:05:72:1e:75:eb:29:cd:27:dc:2a:5f:b3: 42:e3:fb:68:6f:17:cf:e6:40:4d:13:6a:45:8f:9c:6d:ba:2e: 63:e2:af:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOFrvgR0+5aHo2QT2EQruhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NWEwNTY2ZDBiNjNhMWY4NjJkODM0NThlNGYyZWE2ZmQ4 ZjdkMjEwHhcNMjUxMjI0MDIwMTExWhcNMjUxMjI1MDIwMTExWjAzMTEwLwYDVQQD Eyg1Y2EyNjc3MDRkOGM3YjcyMmRjMzE3Y2Q5ZTkxZDMxOWM5Y2I5YjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDtI0h3zBOknA8GT1AUeZneDxMTh sOk8qoynvs+MAWGAk5o4UOJVDb8J1NpKM+q8zmy8XwqwO+mAV9ebVySWFi0JOu4h 53SdBBOneIDEx64Dqzl/pcrdMgDG9Ky4HKkkvAtIsGfp9DkSznt5cR34oiewpAeL GYCmhZDx4JWKVwWaf7CevS+J8cPt+cw36xoUIDa5ZlQbsTTlKbNjxECAC4ITQUnH ZRbtcCdoF/hSTnu/g6KjffONK9cZqab46oWHKn1S2ZcfGXXA9JBh+X2zAzmxRGMz nNGonDCe3Gd5NSKTokbpKVtwFeq4ae+lj2pDiMCHRpe/OmafxG24EXYmfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyiZ3BNjHtyLcMXzZ6R0xnJy5s8MB8GA1UdIwQY MBaAFLdaBWbQtjofhi2DRY5PLqb9j30hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQt ODNmNjAxYzNmYjU5LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQtODNmNjAxYzNmYjU5 LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfHUsNIe+ 9R9i7mOb5fF9Q6rDbqAIXB2qqzYSg9+ztlw1iCfjtI93gZ7nS0sCGl18GXA3xO1R lA6aBKGJ+LK1VE/A3RoW0HKBNH4v0D5BtG+PxqjZJreeCsPEnsUunyzCzM/WIhY/ SaQqQAQSnfYtft0o6etrZQFV6bCdWcZDogD6esSK1Y4pGWGgFd1Ef29Imp5EzyWY E7hox6MgSUgwaGGhiJZuDd2XaPw/Z7DgObTaSr8yz80Y5V7aT3p43gcf5E3pPtR4 8+IT1F+XeYq/2qFOHL36YAxF1XMYSfpwBXIedespzSfcKl+zQuP7aG8Xz+ZATRNq RY+cbbouY+KvVQ== -----END CERTIFICATE-----Generated at Wed Dec 24 10:04:34 2025 by rpki-client