This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft File: t1RlKp6YkUWgWfeIg9U26SxDtT8.mft (raw, json) Hash identifier: 2aGOk/r+YbYa8xkVUD+7t3pUVxeL0F1idmgZ5QQ6VPA= Subject key identifier: C1:40:5C:55:14:3D:50:8D:B9:3F:A3:2C:5F:49:A7:3A:67:BF:C7:B0 Authority key identifier: B7:54:65:2A:9E:98:91:45:A0:59:F7:88:83:D5:36:E9:2C:43:B5:3F Certificate issuer: /CN=b754652a9e989145a059f78883d536e92c43b53f Certificate serial: 019B51BCEF8ACB78F01C0207EEC7D4242C17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft Manifest number: 0227 Signing time: Wed 24 Dec 2025 19:01:35 +0000 Manifest this update: Wed 24 Dec 2025 19:01:35 +0000 Manifest next update: Thu 25 Dec 2025 19:01:35 +0000 Files and hashes: 1: 4xwaWRub9ONEDx1qZtSfGSWgm_U.roa (hash: DQtqDfCJ+g5/1BpTJ+JbAARxia0+c3cSAM/MeNxPjZQ=) 2: t1RlKp6YkUWgWfeIg9U26SxDtT8.crl (hash: 7jkuv5fRYrKKlfeCvGaxq1AXZipm0cSTyXt4HXehDis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:ef:8a:cb:78:f0:1c:02:07:ee:c7:d4:24:2c:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b754652a9e989145a059f78883d536e92c43b53f Validity Not Before: Dec 24 19:01:35 2025 GMT Not After : Dec 25 19:01:35 2025 GMT Subject: CN=c1405c55143d508db93fa32c5f49a73a67bfc7b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9e:86:e3:ea:00:11:9b:fc:2a:dc:13:cf:59: fc:1d:30:ed:a0:12:f7:0d:45:44:29:08:b8:40:6a: ac:09:4a:1b:14:a1:1a:56:10:b4:eb:4c:38:db:e6: 89:3c:e7:71:0d:2b:ba:31:3f:6c:11:80:7c:94:c0: 78:63:a9:97:c7:49:5e:ff:87:cc:00:1f:bd:b1:23: fb:23:5c:3f:d0:e5:85:f6:f5:9f:dd:3d:b3:8b:3e: cc:e3:65:51:9f:86:4b:43:2a:de:85:aa:f0:69:45: 84:53:28:e2:e3:6f:b9:c4:60:84:b4:04:17:03:be: 83:18:aa:c0:a1:46:89:72:ce:20:4e:bc:6f:b0:9d: 73:37:57:c8:af:e7:a9:0c:f0:37:d4:fb:d3:fb:90: e7:bc:e0:b1:17:92:ff:be:92:17:43:45:75:55:86: 05:2d:4f:4f:d6:87:b3:96:14:40:a2:da:d5:3e:bc: f9:7e:94:bf:54:19:1f:a4:99:cb:81:45:de:76:68: 30:db:c3:f7:01:c4:fa:83:ca:bc:8c:a8:4e:be:d4: ef:c4:cb:24:9d:db:60:d6:21:fb:6b:b5:0b:10:c1: a4:af:88:b7:24:f0:69:67:6c:4d:8d:26:f7:9d:7a: db:af:34:cd:40:45:28:00:57:9f:c1:7b:55:a1:19: 26:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:40:5C:55:14:3D:50:8D:B9:3F:A3:2C:5F:49:A7:3A:67:BF:C7:B0 X509v3 Authority Key Identifier: keyid:B7:54:65:2A:9E:98:91:45:A0:59:F7:88:83:D5:36:E9:2C:43:B5:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:f4:6e:2c:86:dd:58:1c:13:6e:db:f9:8d:03:4d:f5:05:e4: cc:3d:42:68:5c:6b:51:4a:01:5f:5e:bf:a2:5d:b7:48:68:5c: bf:50:d1:47:ae:aa:84:66:69:33:c2:5c:1c:e5:b8:9f:62:44: fe:0a:ca:a0:0b:04:81:15:d0:94:92:51:b0:7d:a1:68:16:1e: 06:1f:a9:58:6d:e7:85:13:eb:c4:37:9d:66:9f:6a:dc:c7:2f: d3:11:79:39:82:6c:8d:80:f3:61:8d:76:28:94:b4:70:36:37: b7:a2:84:62:f8:4b:78:84:f0:db:ac:cb:0d:de:d7:e4:37:d1: 3c:4c:8c:85:83:79:34:b7:0c:3d:85:c6:0e:a1:89:ef:e0:41: 66:8e:1b:4c:48:15:b4:a1:9e:f8:fc:ce:29:51:78:09:2c:ab: 56:46:51:f6:e6:e7:d9:c8:b1:dd:aa:35:dc:88:d0:04:0c:5f: 03:9b:01:19:bc:01:05:93:ad:1c:27:be:47:09:91:c5:a7:f9: dd:9b:83:04:ab:8c:3a:e6:31:b5:d5:ed:05:15:35:18:92:95: cd:98:90:12:e8:c2:5e:32:7e:f0:74:f8:08:13:41:a3:64:9b: 60:90:44:90:77:82:50:e0:dc:07:33:44:c8:11:d2:3c:ed:29: 2b:5f:e1:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvO+Ky3jwHAIH7sfUJCwXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NTQ2NTJhOWU5ODkxNDVhMDU5Zjc4ODgzZDUzNmU5MmM0 M2I1M2YwHhcNMjUxMjI0MTkwMTM1WhcNMjUxMjI1MTkwMTM1WjAzMTEwLwYDVQQD EyhjMTQwNWM1NTE0M2Q1MDhkYjkzZmEzMmM1ZjQ5YTczYTY3YmZjN2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp6G4+oAEZv8KtwTz1n8HTDtoBL3 DUVEKQi4QGqsCUobFKEaVhC060w42+aJPOdxDSu6MT9sEYB8lMB4Y6mXx0le/4fM AB+9sSP7I1w/0OWF9vWf3T2ziz7M42VRn4ZLQyreharwaUWEUyji42+5xGCEtAQX A76DGKrAoUaJcs4gTrxvsJ1zN1fIr+epDPA31PvT+5DnvOCxF5L/vpIXQ0V1VYYF LU9P1oezlhRAotrVPrz5fpS/VBkfpJnLgUXedmgw28P3AcT6g8q8jKhOvtTvxMsk ndtg1iH7a7ULEMGkr4i3JPBpZ2xNjSb3nXrbrzTNQEUoAFefwXtVoRkmdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFAXFUUPVCNuT+jLF9Jpzpnv8ewMB8GA1UdIwQY MBaAFLdUZSqemJFFoFn3iIPVNuksQ7U/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDFSbEtwNllrVVdnV2ZlSWc5VTI2U3hEdFQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hZmQ2YjktNmM0ZS00MGUwLWFlOTYt YjRkYTIwYTc1N2NmLzEvdDFSbEtwNllrVVdnV2ZlSWc5VTI2U3hEdFQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9hZmQ2YjktNmM0ZS00MGUwLWFlOTYtYjRkYTIwYTc1N2Nm LzEvdDFSbEtwNllrVVdnV2ZlSWc5VTI2U3hEdFQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAefRuLIbd WBwTbtv5jQNN9QXkzD1CaFxrUUoBX16/ol23SGhcv1DRR66qhGZpM8JcHOW4n2JE /grKoAsEgRXQlJJRsH2haBYeBh+pWG3nhRPrxDedZp9q3Mcv0xF5OYJsjYDzYY12 KJS0cDY3t6KEYvhLeITw26zLDd7X5DfRPEyMhYN5NLcMPYXGDqGJ7+BBZo4bTEgV tKGe+PzOKVF4CSyrVkZR9ubn2cix3ao13IjQBAxfA5sBGbwBBZOtHCe+RwmRxaf5 3ZuDBKuMOuYxtdXtBRU1GJKVzZiQEujCXjJ+8HT4CBNBo2SbYJBEkHeCUODcBzNE yBHSPO0pK1/hcQ== -----END CERTIFICATE-----Generated at Thu Dec 25 03:27:21 2025 by rpki-client