This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft File: 1-tzmN--ygZRxWsKnISniBXG5g68.mft (raw, json) Hash identifier: BZJB/R7MjvceJ+N8URmznTMAn2YGr5dg/Psj+pGIzZA= Subject key identifier: 4E:98:C1:A0:4B:4D:B2:A9:27:EA:9A:1B:AF:E7:6C:D2:C9:78:1D:1B Authority key identifier: FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF Certificate issuer: /CN=fadce637efb28194715ac2a72129e20571b983af Certificate serial: 019B755AC2C5983189B7C0623749A065B4D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft Manifest number: 17A4 Signing time: Wed 31 Dec 2025 17:00:40 +0000 Manifest this update: Wed 31 Dec 2025 17:00:40 +0000 Manifest next update: Thu 01 Jan 2026 17:00:40 +0000 Files and hashes: 1: 1-tzmN--ygZRxWsKnISniBXG5g68.crl (hash: kMiYiiEuZK/LMZ2OAJKovT2gVMBegfeT7DlgDzh1amA=) 2: 5E1ZOs6jBFxTFh2Cf5ZnFlkIOxc.roa (hash: pA+HTgzqmsnmbM9IncUhyb9kGpbMUOBHi5UiEoEtsy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 17:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:5a:c2:c5:98:31:89:b7:c0:62:37:49:a0:65:b4:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadce637efb28194715ac2a72129e20571b983af Validity Not Before: Dec 31 17:00:40 2025 GMT Not After : Jan 1 17:00:40 2026 GMT Subject: CN=4e98c1a04b4db2a927ea9a1bafe76cd2c9781d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f5:bb:1f:25:79:37:1f:a9:f9:53:16:f3:6b: 31:ae:54:2b:59:18:5a:1a:2d:95:45:17:7e:7e:29: 0b:05:fd:73:f8:2e:be:f8:85:57:e5:62:f5:6e:d7: 1a:54:03:86:b3:11:07:66:9d:c7:2f:a0:3d:27:1d: cd:e8:d5:d0:e9:76:11:8a:bb:6b:75:d6:2f:4c:fb: 02:14:99:02:70:60:51:28:9d:f4:8f:f4:2e:fd:1b: cd:a8:a7:d3:65:cf:91:46:9e:b0:61:b6:e9:b7:78: c9:bb:46:03:2f:12:a6:43:ac:26:a3:e5:5d:29:e7: 72:ef:5e:05:95:20:08:68:39:b2:d0:1f:ab:b9:86: 1d:82:ed:09:fc:af:be:ee:4c:e5:88:56:01:91:4d: 9b:f5:5c:30:b2:f6:1d:3e:58:e9:c6:7c:47:d6:4f: e2:61:a5:c1:60:15:0b:b8:a5:64:a9:fd:74:9a:30: 48:b5:0c:64:bd:1c:ab:03:db:7c:5e:9b:41:14:80: 90:e3:a7:fd:f7:50:d1:22:55:74:1a:16:4e:af:2f: e0:da:f9:fe:1f:99:91:98:cf:59:bc:ed:9d:e0:b5: 13:a2:32:b3:69:6c:a8:fb:9a:f0:eb:18:be:48:12: d3:bd:94:08:38:72:ef:3f:19:c1:8d:fa:e5:e7:a7: 33:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:98:C1:A0:4B:4D:B2:A9:27:EA:9A:1B:AF:E7:6C:D2:C9:78:1D:1B X509v3 Authority Key Identifier: keyid:FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:8d:08:34:21:58:0e:23:1e:b4:6a:8b:45:f5:d0:f6:d9:ba: b2:20:e4:51:54:5b:63:a3:97:1b:99:e5:c8:d4:ff:2d:15:e9: ea:8e:8c:b9:53:c6:c7:0c:0e:81:63:5a:1c:e1:cb:43:e4:e8: e3:b0:d9:9e:c7:32:2f:28:ca:e9:42:42:2d:c8:90:54:a3:74: 72:2b:2a:a9:7e:b4:bc:d7:ba:fb:38:69:18:32:79:15:9c:8c: 47:63:b3:b2:39:2d:5e:20:52:67:4b:b7:9c:94:7a:f6:24:2d: 6c:4c:e2:61:e4:26:00:19:97:e2:03:04:fe:7b:4b:9f:d6:f0: 8c:a4:c9:6a:be:89:ce:66:09:40:ec:cf:a7:15:3a:ef:4b:12: 5b:03:5a:a8:ff:2a:c4:7c:01:77:3c:ad:18:03:fb:a7:7c:61: e9:37:e9:b0:7e:71:f9:3c:84:aa:d1:3f:6d:ad:4c:67:d7:60: 37:6a:8d:c6:89:a6:94:a8:82:e5:22:a4:7c:4a:bf:21:68:d5: f2:ab:7f:26:5b:a6:2f:54:b5:fe:12:cd:2f:0f:78:45:0d:1e: b0:df:ca:f5:c6:b1:bf:be:73:af:07:3d:e2:8c:a7:7d:a0:c5: 97:e2:ad:c0:d5:26:33:76:60:5b:47:d0:20:b4:bc:92:30:21: 88:f8:ab:71 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt1WsLFmDGJt8BiN0mgZbTXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZGNlNjM3ZWZiMjgxOTQ3MTVhYzJhNzIxMjllMjA1NzFi OTgzYWYwHhcNMjUxMjMxMTcwMDQwWhcNMjYwMTAxMTcwMDQwWjAzMTEwLwYDVQQD Eyg0ZTk4YzFhMDRiNGRiMmE5MjdlYTlhMWJhZmU3NmNkMmM5NzgxZDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfW7HyV5Nx+p+VMW82sxrlQrWRha Gi2VRRd+fikLBf1z+C6++IVX5WL1btcaVAOGsxEHZp3HL6A9Jx3N6NXQ6XYRirtr ddYvTPsCFJkCcGBRKJ30j/Qu/RvNqKfTZc+RRp6wYbbpt3jJu0YDLxKmQ6wmo+Vd Kedy714FlSAIaDmy0B+ruYYdgu0J/K++7kzliFYBkU2b9VwwsvYdPljpxnxH1k/i YaXBYBULuKVkqf10mjBItQxkvRyrA9t8XptBFICQ46f991DRIlV0GhZOry/g2vn+ H5mRmM9ZvO2d4LUTojKzaWyo+5rw6xi+SBLTvZQIOHLvPxnBjfrl56czZwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFE6YwaBLTbKpJ+qaG6/nbNLJeB0bMB8GA1UdIwQY MBaAFPrc5jfvsoGUcVrCpyEp4gVxuYOvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS10em1OLS15Z1pSeFdzS25JU25pQlhHNWc2OC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvNTVmYmM1LWIyZGMtNDYzOS05YTNh LTY0MTE3ZGIyYzRlMS8xLzEtdHptTi0teWdaUnhXc0tuSVNuaUJYRzVnNjgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2M0LzU1ZmJjNS1iMmRjLTQ2MzktOWEzYS02NDExN2RiMmM0 ZTEvMS8xLXR6bU4tLXlnWlJ4V3NLbklTbmlCWEc1ZzY4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkI0I NCFYDiMetGqLRfXQ9tm6siDkUVRbY6OXG5nlyNT/LRXp6o6MuVPGxwwOgWNaHOHL Q+To47DZnscyLyjK6UJCLciQVKN0cisqqX60vNe6+zhpGDJ5FZyMR2OzsjktXiBS Z0u3nJR69iQtbEziYeQmABmX4gME/ntLn9bwjKTJar6JzmYJQOzPpxU670sSWwNa qP8qxHwBdzytGAP7p3xh6TfpsH5x+TyEqtE/ba1MZ9dgN2qNxommlKiC5SKkfEq/ IWjV8qt/JlumL1S1/hLNLw94RQ0esN/K9caxv75zrwc94oynfaDFl+KtwNUmM3Zg W0fQILS8kjAhiPircQ== -----END CERTIFICATE-----Generated at Thu Jan 1 02:36:50 2026 by rpki-client