This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft File: 1TX4-scGL3fyS5jNXDtUqJutSDg.mft (raw, json) Hash identifier: iXiyMP0VDvCYPwmp7ax7pxCoZ9L0MTeFjWRRpoUrJz0= Subject key identifier: 51:5A:36:71:97:A1:49:0E:BE:76:0B:CC:9C:25:6A:41:E7:9F:DA:52 Authority key identifier: D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38 Certificate issuer: /CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838 Certificate serial: 019B30E9664318BB59C68E331027FD193816 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft Manifest number: 1715 Signing time: Thu 18 Dec 2025 10:02:40 +0000 Manifest this update: Thu 18 Dec 2025 10:02:40 +0000 Manifest next update: Fri 19 Dec 2025 10:02:40 +0000 Files and hashes: 1: 1TX4-scGL3fyS5jNXDtUqJutSDg.crl (hash: ZKHPHE7BzWQAmatFV+Xk0ChtQW2B8Qyc6SLj99P37wM=) 2: N3-917WPyl7E_IHoSS2FMLc18wo.roa (hash: VHNMzSlgwcYRKlzGy0Nb6X63KDdiRRNUd0w6+PH3+3w=) 3: oJEvXpEBpuYbcFfcZPDBTEehGY8.roa (hash: b0SdOLZ2AbPJ+0i7CwF2Gja+/00y5/FVMUIAvNs5h1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e9:66:43:18:bb:59:c6:8e:33:10:27:fd:19:38:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838 Validity Not Before: Dec 18 10:02:40 2025 GMT Not After : Dec 19 10:02:40 2025 GMT Subject: CN=515a367197a1490ebe760bcc9c256a41e79fda52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:80:b6:79:f1:b8:57:31:74:d2:fb:af:e3:30: f8:3c:22:7e:62:75:87:01:32:53:68:5d:fb:88:7f: 52:14:e5:24:31:17:23:4b:38:36:8f:ab:ec:43:61: a8:ec:2f:cc:7e:4b:29:ea:61:83:88:23:d0:40:74: ff:ea:03:51:29:7a:85:35:c4:18:52:81:45:75:db: 47:ce:33:0d:52:35:f5:79:52:ea:35:90:be:b3:77: fb:72:46:dd:9b:85:c6:4e:cc:81:7a:63:fe:a4:a8: 93:6e:51:bf:0a:c4:e3:88:52:70:fc:b6:97:10:7e: 4a:8c:79:f7:1c:af:cc:95:d8:1b:1e:99:d1:c4:fa: c9:4d:19:99:ed:76:fd:73:16:78:e4:9f:83:6c:8a: 71:e5:a1:7f:e6:7a:f3:c4:d0:21:71:24:16:17:4b: ee:81:80:40:f6:e2:b3:1b:ef:19:21:37:c5:a4:df: 3f:8b:f9:f6:88:f9:4f:e3:3f:bd:ac:69:3b:cc:8c: ec:31:2b:12:d1:9a:93:a3:a2:fc:90:0f:33:f8:a0: bf:04:39:fb:b5:fd:0e:f3:b2:4c:a9:b4:46:92:bd: 92:62:e6:9b:ba:7c:08:5b:20:00:39:b5:e3:0c:6a: 53:68:bb:96:ab:2f:26:df:88:be:0b:98:a0:30:97: 1f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:5A:36:71:97:A1:49:0E:BE:76:0B:CC:9C:25:6A:41:E7:9F:DA:52 X509v3 Authority Key Identifier: keyid:D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:86:85:e3:22:05:da:3e:45:50:a6:d1:38:26:8c:73:3f:5c: 27:50:ea:1f:29:2f:0e:43:3a:69:34:4f:ac:60:1a:ba:78:ed: b7:22:42:52:96:ba:5d:1d:61:ae:71:69:7e:d8:f7:e4:cc:07: 2e:3c:89:b2:ec:7f:26:d5:ec:36:b5:a3:8e:72:29:09:c4:b0: 83:1a:fe:15:96:ac:d3:64:59:7f:bd:ac:fe:f0:5a:26:a8:57: d4:4d:61:60:ca:fd:b0:2e:45:1f:c4:31:40:16:18:64:11:8a: 5f:95:6c:ad:16:b9:cd:16:9b:40:cc:c0:c0:c9:5f:15:2a:f3: 0a:23:b9:2e:1a:05:d5:f6:0e:a6:bd:03:e1:78:18:ed:ea:fe: 96:55:b1:83:22:31:7a:88:90:5c:4d:d2:e2:f5:17:47:62:a4: 18:3c:d0:c9:d2:32:a6:23:83:62:24:41:79:8c:92:b0:f1:ca: 6f:40:94:23:fe:0a:1b:dc:9b:5b:92:dc:7b:c7:93:82:ca:7e: 96:aa:92:44:bb:8a:fc:a7:12:bd:45:31:63:87:44:51:3c:c3: 5e:26:00:35:12:78:f8:f3:2d:40:1f:4a:58:bb:f6:55:49:19: ed:d9:b0:86:be:e8:c3:49:bd:66:57:21:48:89:1c:62:ac:13: 66:5a:51:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6WZDGLtZxo4zECf9GTgWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MzVmOGZhYzcwNjJmNzdmMjRiOThjZDVjM2I1NGE4OWJh ZDQ4MzgwHhcNMjUxMjE4MTAwMjQwWhcNMjUxMjE5MTAwMjQwWjAzMTEwLwYDVQQD Eyg1MTVhMzY3MTk3YTE0OTBlYmU3NjBiY2M5YzI1NmE0MWU3OWZkYTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIC2efG4VzF00vuv4zD4PCJ+YnWH ATJTaF37iH9SFOUkMRcjSzg2j6vsQ2Go7C/Mfksp6mGDiCPQQHT/6gNRKXqFNcQY UoFFddtHzjMNUjX1eVLqNZC+s3f7ckbdm4XGTsyBemP+pKiTblG/CsTjiFJw/LaX EH5KjHn3HK/MldgbHpnRxPrJTRmZ7Xb9cxZ45J+DbIpx5aF/5nrzxNAhcSQWF0vu gYBA9uKzG+8ZITfFpN8/i/n2iPlP4z+9rGk7zIzsMSsS0ZqTo6L8kA8z+KC/BDn7 tf0O87JMqbRGkr2SYuabunwIWyAAObXjDGpTaLuWqy8m34i+C5igMJcf3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFaNnGXoUkOvnYLzJwlakHnn9pSMB8GA1UdIwQY MBaAFNU1+PrHBi938kuYzVw7VKibrUg4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVRYNC1zY0dMM2Z5UzVqTlhEdFVxSnV0U0RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wOTdkYTEtN2NjOS00MzQzLTgwMjQt YjMxMGQ3MWMyY2FkLzEvMVRYNC1zY0dMM2Z5UzVqTlhEdFVxSnV0U0RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8wOTdkYTEtN2NjOS00MzQzLTgwMjQtYjMxMGQ3MWMyY2Fk LzEvMVRYNC1zY0dMM2Z5UzVqTlhEdFVxSnV0U0RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4aF4yIF 2j5FUKbROCaMcz9cJ1DqHykvDkM6aTRPrGAaunjttyJCUpa6XR1hrnFpftj35MwH LjyJsux/JtXsNrWjjnIpCcSwgxr+FZas02RZf72s/vBaJqhX1E1hYMr9sC5FH8Qx QBYYZBGKX5VsrRa5zRabQMzAwMlfFSrzCiO5LhoF1fYOpr0D4XgY7er+llWxgyIx eoiQXE3S4vUXR2KkGDzQydIypiODYiRBeYySsPHKb0CUI/4KG9ybW5Lce8eTgsp+ lqqSRLuK/KcSvUUxY4dEUTzDXiYANRJ4+PMtQB9KWLv2VUkZ7dmwhr7ow0m9Zlch SIkcYqwTZlpRzA== -----END CERTIFICATE-----Generated at Thu Dec 18 11:54:34 2025 by rpki-client