This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft File: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft (raw, json) Hash identifier: c+/vYdNncQKdurBoYTxVRlXxpkXQymY5LNleHBUUhmE= Subject key identifier: E0:DF:F6:77:96:87:96:7C:AC:CB:06:6D:9D:37:B3:B3:D9:D1:07:50 Authority key identifier: D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79 Certificate issuer: /CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79 Certificate serial: 019B3E6C442FC7017E6B708A36379EB80712 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft Manifest number: 0B33 Signing time: Sun 21 Dec 2025 01:00:41 +0000 Manifest this update: Sun 21 Dec 2025 01:00:41 +0000 Manifest next update: Mon 22 Dec 2025 01:00:41 +0000 Files and hashes: 1: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl (hash: CXoS2DmaYoZood2gMv/H/h3n1PsRudh0rLqbSEKUs4U=) 2: nyuERDVJh6-PTXV2ajcksYw_55g.roa (hash: K7CKnx/jM/EuzQ/IpR2qcCsRtlnJ0y6qFH+bAbkXnGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:44:2f:c7:01:7e:6b:70:8a:36:37:9e:b8:07:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79 Validity Not Before: Dec 21 01:00:41 2025 GMT Not After : Dec 22 01:00:41 2025 GMT Subject: CN=e0dff6779687967caccb066d9d37b3b3d9d10750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:32:3f:c5:62:c5:a0:9e:e5:08:d7:98:c5:12: a1:15:7b:c3:2f:77:a1:43:f5:71:0a:e9:cc:b7:77: 7b:d2:49:b3:11:c8:d3:76:21:dc:c8:12:29:77:e1: 76:84:9c:35:0d:b7:2f:cd:dd:bb:49:3b:40:fd:03: eb:7a:4c:e6:91:86:ac:7d:c0:24:c7:67:54:3f:c3: 28:71:2e:50:c5:0c:88:b2:35:d2:e5:45:86:0b:b4: f5:9c:fa:ef:cb:39:f0:2c:60:ec:a6:84:b3:ab:2c: 6a:ab:aa:04:8d:78:ae:9d:9d:6e:56:fb:62:be:f8: 28:92:36:85:00:f8:f8:85:d8:6a:7d:80:40:6a:cf: 82:11:ec:df:7b:09:16:a8:a9:24:d0:41:ba:14:38: 53:c6:cd:fd:38:e2:32:20:17:d0:6b:7e:ec:b8:de: 77:bb:4b:9d:be:06:b2:02:61:78:a5:13:8a:3b:98: 38:54:17:6e:27:31:55:22:14:c8:56:34:d5:60:b0: 48:5c:9e:79:e5:b9:b1:1c:2e:f4:d8:be:18:a8:9e: 64:5c:33:c9:2a:3c:8d:a3:47:e8:ab:f6:0d:4b:d3: 6a:a8:ab:86:43:c4:65:2b:c8:09:72:ce:0f:f7:14: e3:d6:f0:75:23:09:cb:38:ea:49:b8:ba:e1:c9:e1: 28:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DF:F6:77:96:87:96:7C:AC:CB:06:6D:9D:37:B3:B3:D9:D1:07:50 X509v3 Authority Key Identifier: keyid:D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:dc:79:6d:ad:91:f2:e0:1d:13:ca:7a:ab:42:7e:db:d4:4e: 16:e0:6d:9a:e2:62:8c:55:1a:dc:9e:ae:e4:50:3d:e1:b8:c5: a1:c4:65:ae:6e:dd:4c:72:68:72:50:e3:ed:4c:e0:75:e5:3d: 3d:00:4b:72:ab:01:33:0e:b7:6d:37:1b:21:c0:ef:2a:54:1c: 35:27:9e:aa:28:1f:57:b8:24:d5:d8:8a:b7:34:ec:60:74:52: ae:01:09:69:7e:fa:c6:8e:2a:76:82:1e:93:61:96:6d:bb:b9: da:e2:f1:e1:62:01:f5:ec:41:9c:54:a7:d2:88:52:4c:29:1e: ed:3b:f6:0e:cb:6c:d0:ae:e7:d3:a3:6e:b6:92:47:60:f2:2c: 13:7e:c4:29:69:3a:8f:90:b1:18:1c:8b:33:61:c4:7c:66:16: 9a:b8:83:80:6d:e9:5c:22:ff:b4:ed:76:1e:dc:2c:b7:08:90: 2f:f5:68:0f:b4:f4:b4:ad:af:d0:af:22:b0:a7:d3:40:e0:5b: 19:9a:cc:37:66:52:37:89:35:e5:91:26:a7:0e:bb:aa:c2:96: f4:d3:70:ef:5c:5b:f4:84:9b:59:c0:63:de:7d:4f:26:7f:7f: fc:1a:8a:e6:2e:33:04:94:f8:93:0f:69:11:ac:95:ce:db:c1: 7c:95:8d:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bEQvxwF+a3CKNjeeuAcSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzRjNGUxYjAwY2U1YmZiMGQ5NmQ0YzIxZWZkMDU4ZDNi NWNhNzkwHhcNMjUxMjIxMDEwMDQxWhcNMjUxMjIyMDEwMDQxWjAzMTEwLwYDVQQD EyhlMGRmZjY3Nzk2ODc5NjdjYWNjYjA2NmQ5ZDM3YjNiM2Q5ZDEwNzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujI/xWLFoJ7lCNeYxRKhFXvDL3eh Q/VxCunMt3d70kmzEcjTdiHcyBIpd+F2hJw1Dbcvzd27STtA/QPrekzmkYasfcAk x2dUP8MocS5QxQyIsjXS5UWGC7T1nPrvyznwLGDspoSzqyxqq6oEjXiunZ1uVvti vvgokjaFAPj4hdhqfYBAas+CEezfewkWqKkk0EG6FDhTxs39OOIyIBfQa37suN53 u0udvgayAmF4pROKO5g4VBduJzFVIhTIVjTVYLBIXJ555bmxHC702L4YqJ5kXDPJ KjyNo0foq/YNS9NqqKuGQ8RlK8gJcs4P9xTj1vB1IwnLOOpJuLrhyeEoYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODf9neWh5Z8rMsGbZ03s7PZ0QdQMB8GA1UdIwQY MBaAFNZ0xOGwDOW/sNltTCHv0FjTtcp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5URTRiQU01Yi13MlcxTUllX1FXTk8xeW5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iYjIxZmMtYjI1Mi00YWIyLTk4Nzgt YmE1NTcyZTc3NGVkLzEvMW5URTRiQU01Yi13MlcxTUllX1FXTk8xeW5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9iYjIxZmMtYjI1Mi00YWIyLTk4NzgtYmE1NTcyZTc3NGVk LzEvMW5URTRiQU01Yi13MlcxTUllX1FXTk8xeW5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfNx5ba2R 8uAdE8p6q0J+29ROFuBtmuJijFUa3J6u5FA94bjFocRlrm7dTHJoclDj7UzgdeU9 PQBLcqsBMw63bTcbIcDvKlQcNSeeqigfV7gk1diKtzTsYHRSrgEJaX76xo4qdoIe k2GWbbu52uLx4WIB9exBnFSn0ohSTCke7Tv2Dsts0K7n06NutpJHYPIsE37EKWk6 j5CxGByLM2HEfGYWmriDgG3pXCL/tO12HtwstwiQL/VoD7T0tK2v0K8isKfTQOBb GZrMN2ZSN4k15ZEmpw67qsKW9NNw71xb9ISbWcBj3n1PJn9//BqK5i4zBJT4kw9p EayVztvBfJWNiA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:57:59 2025 by rpki-client