This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft File: nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json) Hash identifier: ovos2SeVRSXmDrF0QgzbUJIZO5+hdbaKdcmdggHqud0= Subject key identifier: FE:E9:AB:84:5F:9E:7F:DE:5B:D2:C3:18:77:4E:7E:5A:03:54:27:DA Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81 Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81 Certificate serial: 019B37C5C27F128AD55379F152ACB1D036D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 18:01:05 +0000 Manifest this update: Fri 19 Dec 2025 18:01:05 +0000 Manifest next update: Sat 20 Dec 2025 18:01:05 +0000 Files and hashes: 1: LAf6z2y7d_FvHWa2exDFEGsDUYk.roa (hash: yLu10ItcbqMAqor4DiKoo4ryX77evtxiM9mUG5P0yVc=) 2: kgdBEe32jL4o_RNVND7NTLfwJwI.roa (hash: PZIGs+YorN99DtOYFOROjFtihI/jC535mZ5OqGnLcRA=) 3: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: MyK5Tf8BsnW+92+WwriBfgT3nI3bpP6kjkH+e5L/ZyI=) 4: qO2F63snosgQCd-tQ25OAd4civA.roa (hash: KELhV9b4nDo2k2LkjCvA0ufUmi/5QZ+HPUiWXl9d83Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:c2:7f:12:8a:d5:53:79:f1:52:ac:b1:d0:36:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81 Validity Not Before: Dec 19 18:01:05 2025 GMT Not After : Dec 20 18:01:05 2025 GMT Subject: CN=fee9ab845f9e7fde5bd2c318774e7e5a035427da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fe:80:3e:1b:15:da:b7:dc:c7:4f:c1:72:3c: f3:df:77:36:c5:ab:6d:d0:2b:4c:e8:41:36:f8:91: c1:09:49:42:9a:6c:c1:37:18:d9:23:3e:b1:a9:05: 85:53:c8:0f:ff:14:d8:3f:e4:7e:f4:59:2b:0e:3c: 3c:8e:dc:60:06:f3:e8:9c:46:dc:40:7d:55:bc:64: a2:d2:b3:46:43:fc:14:dc:37:75:ce:56:3b:b1:4c: b4:9f:cc:11:e4:85:ba:ed:e6:c0:90:98:92:95:fc: 5a:1e:1f:56:da:0b:98:bc:0b:d4:0f:97:83:53:16: cb:bd:f1:b2:e0:2d:e8:dd:31:ff:96:01:63:78:19: 5f:00:ef:6a:60:50:ec:1b:d1:48:96:87:93:ef:3a: e7:c6:0a:5d:25:83:d3:03:42:6e:21:cd:3c:8f:22: 41:50:d0:43:09:b3:5d:d8:90:18:9f:5f:7c:ad:51: 03:a6:d3:eb:80:6a:19:8d:8c:5b:88:d2:d5:c2:0c: be:25:3a:e1:1c:92:cd:94:d1:a8:5f:ea:61:6e:a0: 19:89:b3:d7:91:d5:a3:14:f2:5a:ea:71:c3:19:7e: 4e:96:79:d1:ca:a2:b5:fe:a2:38:05:3c:ae:ef:2f: 05:98:f8:2b:d1:d6:c3:a6:95:92:22:d9:8c:92:20: 90:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E9:AB:84:5F:9E:7F:DE:5B:D2:C3:18:77:4E:7E:5A:03:54:27:DA X509v3 Authority Key Identifier: keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:d3:43:fd:5f:00:2d:2e:a4:ba:bf:f8:e0:a2:fb:ca:4c:a9: d2:67:6e:ea:eb:a7:5f:51:98:25:f1:9c:f0:95:97:4f:0e:a7: d0:5a:08:39:b1:c7:5c:ef:f3:98:25:66:f3:4c:62:b9:dd:60: d1:af:22:48:c9:00:b0:12:2c:dc:fd:14:42:84:ec:9e:35:6d: 71:e9:de:4a:cf:ee:8b:3e:47:39:6d:31:d7:55:5e:83:fe:34: 30:43:d4:93:75:b3:a0:44:33:05:26:a4:e3:70:e0:8e:88:89: 9e:9c:09:d2:c3:76:35:25:47:9d:23:b5:c8:86:dc:3d:2b:56: 51:5d:3e:09:26:40:16:48:22:7d:7b:30:7e:b1:15:ee:0c:44: b9:07:64:26:1c:40:52:11:26:6d:a5:90:32:be:3e:f7:45:ef: 28:9c:8b:8b:47:08:cf:de:75:b8:85:b1:a1:14:ad:1e:3a:45: 9b:c3:28:37:54:32:d3:fa:92:03:7e:09:5f:42:a4:5b:17:c5: 95:e9:aa:5c:7f:2a:73:c3:3d:d4:8d:4e:d3:c3:63:b2:96:e8: 17:2a:27:83:66:54:73:44:7f:5f:63:32:70:2e:45:89:89:42: 64:7e:29:39:7f:5a:ab:b1:5a:9b:b5:dc:2a:41:2b:4a:af:c4: d9:96:bd:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xcJ/EorVU3nxUqyx0DbUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkM2Q2MjdjMjk3ZmU1NDJkODM1OWE4NmQ4ZTJmOWViZDk1 NjVhODEwHhcNMjUxMjE5MTgwMTA1WhcNMjUxMjIwMTgwMTA1WjAzMTEwLwYDVQQD EyhmZWU5YWI4NDVmOWU3ZmRlNWJkMmMzMTg3NzRlN2U1YTAzNTQyN2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/6APhsV2rfcx0/Bcjzz33c2xatt 0CtM6EE2+JHBCUlCmmzBNxjZIz6xqQWFU8gP/xTYP+R+9FkrDjw8jtxgBvPonEbc QH1VvGSi0rNGQ/wU3Dd1zlY7sUy0n8wR5IW67ebAkJiSlfxaHh9W2guYvAvUD5eD UxbLvfGy4C3o3TH/lgFjeBlfAO9qYFDsG9FIloeT7zrnxgpdJYPTA0JuIc08jyJB UNBDCbNd2JAYn198rVEDptPrgGoZjYxbiNLVwgy+JTrhHJLNlNGoX+phbqAZibPX kdWjFPJa6nHDGX5OlnnRyqK1/qI4BTyu7y8FmPgr0dbDppWSItmMkiCQeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7pq4Rfnn/eW9LDGHdOfloDVCfaMB8GA1UdIwQY MBaAFJ09Ynwpf+VC2DWahtji+evZVlqBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kZGMxYWEtNWEzYS00MTYzLWI1ZTgt MTVlYTMzN2E3ODQwLzEvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9kZGMxYWEtNWEzYS00MTYzLWI1ZTgtMTVlYTMzN2E3ODQw LzEvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASNND/V8A LS6kur/44KL7ykyp0mdu6uunX1GYJfGc8JWXTw6n0FoIObHHXO/zmCVm80xiud1g 0a8iSMkAsBIs3P0UQoTsnjVtceneSs/uiz5HOW0x11Veg/40MEPUk3WzoEQzBSak 43DgjoiJnpwJ0sN2NSVHnSO1yIbcPStWUV0+CSZAFkgifXswfrEV7gxEuQdkJhxA UhEmbaWQMr4+90XvKJyLi0cIz951uIWxoRStHjpFm8MoN1Qy0/qSA34JX0KkWxfF lemqXH8qc8M91I1O08NjspboFyong2ZUc0R/X2MycC5FiYlCZH4pOX9aq7Fam7Xc KkErSq/E2Za9jw== -----END CERTIFICATE-----Generated at Fri Dec 19 22:01:46 2025 by rpki-client