This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft File: 1TX4-scGL3fyS5jNXDtUqJutSDg.mft (raw, json) Hash identifier: BnAdcHKUArKxaNzeYoTeHLs+BfAoZtH1v6Fuq/Ra+kA= Subject key identifier: A7:49:37:3A:E5:E3:C4:1E:89:42:CF:33:EB:6F:C3:BF:7D:17:CC:B5 Authority key identifier: D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38 Certificate issuer: /CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838 Certificate serial: 019B2D0B6912E47FA49688E54710C240F44D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft Manifest number: 1713 Signing time: Wed 17 Dec 2025 16:01:21 +0000 Manifest this update: Wed 17 Dec 2025 16:01:21 +0000 Manifest next update: Thu 18 Dec 2025 16:01:21 +0000 Files and hashes: 1: 1TX4-scGL3fyS5jNXDtUqJutSDg.crl (hash: HMJFuo7akeVQpjrC/qpoCGJwbZ/zp7mZ9f1unI/g3aY=) 2: N3-917WPyl7E_IHoSS2FMLc18wo.roa (hash: VHNMzSlgwcYRKlzGy0Nb6X63KDdiRRNUd0w6+PH3+3w=) 3: oJEvXpEBpuYbcFfcZPDBTEehGY8.roa (hash: b0SdOLZ2AbPJ+0i7CwF2Gja+/00y5/FVMUIAvNs5h1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:69:12:e4:7f:a4:96:88:e5:47:10:c2:40:f4:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838 Validity Not Before: Dec 17 16:01:21 2025 GMT Not After : Dec 18 16:01:21 2025 GMT Subject: CN=a749373ae5e3c41e8942cf33eb6fc3bf7d17ccb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:74:40:95:61:9d:53:08:72:1c:ab:4f:ba:f0: ae:ab:4d:4d:bb:d2:62:41:eb:6d:0d:0f:c1:fb:16: fd:2e:6c:31:74:fa:b9:cd:d2:92:2a:be:58:30:f7: 49:b2:e6:f3:1a:39:55:d3:ad:e8:e0:62:5c:0a:a8: 03:b1:2b:53:93:56:ee:4c:e4:a2:74:89:71:47:2a: 61:66:49:54:3f:3d:43:5d:7e:94:28:b5:6f:89:2d: bb:50:c0:aa:36:c0:89:da:0c:7e:40:e6:de:8a:11: cc:ef:ff:1f:23:9b:f0:c9:bc:b5:f8:54:bb:06:a9: 03:b3:cb:f9:a7:2f:af:ae:bd:bc:d1:6a:85:87:fd: e8:cd:74:e3:c2:74:01:65:c2:ab:15:0e:7b:4f:d5: 4b:1b:7d:6f:93:31:c1:86:2b:37:8a:ce:31:86:9d: 3d:59:75:51:0c:2a:fc:20:91:b1:83:6f:8d:a2:a6: 2a:47:22:06:d1:0a:c3:b0:b0:76:cb:68:c5:6f:92: a0:02:31:ea:06:6f:28:11:b2:cd:ef:cf:e9:33:d6: b3:2f:31:53:6d:09:e9:7b:69:6a:d8:38:4b:69:f4: d8:87:be:ec:b7:d9:05:11:a9:13:83:a4:e2:65:98: 7a:98:34:d8:d4:3a:eb:99:91:aa:68:48:be:59:bc: 17:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:49:37:3A:E5:E3:C4:1E:89:42:CF:33:EB:6F:C3:BF:7D:17:CC:B5 X509v3 Authority Key Identifier: keyid:D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:b5:04:a6:6d:3c:93:ab:cd:a9:59:b9:30:b1:32:9d:0d:34: d0:f3:b0:6b:a7:5d:c7:97:82:d0:34:31:15:ae:6f:ec:94:ed: 19:5e:d1:5e:f2:0c:b6:c2:d4:93:44:cb:79:1b:0b:d5:57:39: 1f:12:0c:b5:88:0b:b7:d3:41:ff:de:42:c5:9e:11:64:ed:82: 6b:9d:7a:c8:c3:13:23:30:d5:b8:89:04:03:bb:0f:36:cd:bc: 0c:9a:bf:2a:ed:1a:66:9b:5a:44:2f:c4:2a:98:87:f3:a4:bd: f2:b1:53:d5:5d:30:a3:93:be:49:de:b5:fd:7c:23:f2:5e:35: 8b:76:21:9a:82:6e:db:84:be:a9:e5:8f:82:72:f4:b8:14:a3: e7:c7:99:6a:d1:41:f7:0d:c9:90:13:3c:9e:02:a6:e1:70:2d: e2:4f:21:f9:5d:5f:8b:19:0d:13:ab:b8:7f:dd:ca:d4:17:c5: 90:a8:cd:29:63:10:1b:78:04:1e:cb:29:96:a6:8a:91:f4:d7: c3:c4:a3:2d:22:f9:29:ed:de:92:a1:1e:0a:6f:81:2f:f9:f9: 9b:e5:eb:04:e0:cc:f7:91:3c:8a:da:fc:f0:6b:70:fe:ee:3c: ad:7d:c4:75:58:bf:d5:84:68:c7:97:85:bc:c7:72:92:20:93: 69:06:f5:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC2kS5H+klojlRxDCQPRNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MzVmOGZhYzcwNjJmNzdmMjRiOThjZDVjM2I1NGE4OWJh ZDQ4MzgwHhcNMjUxMjE3MTYwMTIxWhcNMjUxMjE4MTYwMTIxWjAzMTEwLwYDVQQD EyhhNzQ5MzczYWU1ZTNjNDFlODk0MmNmMzNlYjZmYzNiZjdkMTdjY2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3RAlWGdUwhyHKtPuvCuq01Nu9Ji QettDQ/B+xb9LmwxdPq5zdKSKr5YMPdJsubzGjlV063o4GJcCqgDsStTk1buTOSi dIlxRyphZklUPz1DXX6UKLVviS27UMCqNsCJ2gx+QObeihHM7/8fI5vwyby1+FS7 BqkDs8v5py+vrr280WqFh/3ozXTjwnQBZcKrFQ57T9VLG31vkzHBhis3is4xhp09 WXVRDCr8IJGxg2+NoqYqRyIG0QrDsLB2y2jFb5KgAjHqBm8oEbLN78/pM9azLzFT bQnpe2lq2DhLafTYh77st9kFEakTg6TiZZh6mDTY1DrrmZGqaEi+WbwXcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdJNzrl48QeiULPM+tvw799F8y1MB8GA1UdIwQY MBaAFNU1+PrHBi938kuYzVw7VKibrUg4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVRYNC1zY0dMM2Z5UzVqTlhEdFVxSnV0U0RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wOTdkYTEtN2NjOS00MzQzLTgwMjQt YjMxMGQ3MWMyY2FkLzEvMVRYNC1zY0dMM2Z5UzVqTlhEdFVxSnV0U0RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8wOTdkYTEtN2NjOS00MzQzLTgwMjQtYjMxMGQ3MWMyY2Fk LzEvMVRYNC1zY0dMM2Z5UzVqTlhEdFVxSnV0U0RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLUEpm08 k6vNqVm5MLEynQ000POwa6ddx5eC0DQxFa5v7JTtGV7RXvIMtsLUk0TLeRsL1Vc5 HxIMtYgLt9NB/95CxZ4RZO2Ca516yMMTIzDVuIkEA7sPNs28DJq/Ku0aZptaRC/E KpiH86S98rFT1V0wo5O+Sd61/Xwj8l41i3YhmoJu24S+qeWPgnL0uBSj58eZatFB 9w3JkBM8ngKm4XAt4k8h+V1fixkNE6u4f93K1BfFkKjNKWMQG3gEHssplqaKkfTX w8SjLSL5Ke3ekqEeCm+BL/n5m+XrBODM95E8itr88Gtw/u48rX3EdVi/1YRox5eF vMdykiCTaQb1MQ== -----END CERTIFICATE-----Generated at Wed Dec 17 20:49:56 2025 by rpki-client