This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft File: 1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft (raw, json) Hash identifier: XyJ9Ohz+vDTXx6TgCmXD2WXQqCFXPnlNT1kj3O+1b8Q= Subject key identifier: 1D:23:73:9C:82:53:42:D4:1F:ED:49:4F:28:86:DE:60:8A:C2:58:E7 Authority key identifier: D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F Certificate issuer: /CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f Certificate serial: 019B3AFD50758FEFC59549C3F376DC8A8BB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 09:00:38 +0000 Manifest this update: Sat 20 Dec 2025 09:00:38 +0000 Manifest next update: Sun 21 Dec 2025 09:00:38 +0000 Files and hashes: 1: 1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl (hash: GDCgXGI5/6eFFGozl7pGRGHKHc8XoAaLKBYF+q+Fflo=) 2: DEgfILmdqt9WOK0Ss2u9swrxwIQ.roa (hash: CPWB4WNXgBrN2XbsNeobPvgMpGNxH4sIm1wHWj5pBrM=) 3: Ow9-1popY8awsgXf2GNA95SUDT0.roa (hash: VV75kE6L9UJcAH7/vX99k0BbRR6uwoTqG3wp/AEMXlA=) 4: qFWMItDWl1Jum13M8uyWAtZgPxI.roa (hash: ulclJf7s+eMnTN7KGqSCmRwy1emYo05IB8k/ir7oKts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:50:75:8f:ef:c5:95:49:c3:f3:76:dc:8a:8b:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f Validity Not Before: Dec 20 09:00:38 2025 GMT Not After : Dec 21 09:00:38 2025 GMT Subject: CN=1d23739c825342d41fed494f2886de608ac258e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:79:3c:28:6e:c8:db:0b:dc:92:9e:d2:e8:3d: 5d:e1:6c:eb:98:3c:d6:3a:81:12:7e:48:e7:e4:11: 0a:86:6d:32:90:b5:f4:db:de:f5:c0:35:61:b7:fa: 55:38:09:4a:d4:81:bc:c1:e3:47:af:c9:7e:c1:70: 25:fb:1d:c1:fe:cc:ee:d8:10:ba:7c:7e:63:61:86: 1a:29:93:40:0c:63:1b:de:6d:06:08:d4:e9:4c:3d: 54:1f:d1:4f:ad:9e:bf:54:c6:df:9e:66:d0:24:51: a2:fa:b4:bd:43:ff:5c:83:dc:98:8e:5d:af:0a:b9: df:e9:ee:3c:7d:22:3b:1e:e5:bb:f6:72:4d:56:a9: 7b:f7:49:ef:3b:b5:70:6c:e6:31:31:24:38:ff:77: c7:15:72:57:f1:25:68:e5:8e:fa:09:f8:74:aa:cd: 25:73:74:50:20:6d:ec:f4:7a:a1:c8:86:a7:90:59: b3:ca:3e:22:ca:72:5d:b1:79:b4:dc:62:a6:61:d4: 6a:73:41:7f:b0:76:5c:33:cc:70:61:30:5f:bf:9d: a8:4a:cd:80:1e:34:2a:9d:87:d6:4e:24:e2:84:9d: 4e:1b:c3:f5:0c:6a:90:2d:50:02:6a:8e:9c:f6:0f: cd:04:19:74:aa:d9:c2:b2:92:c0:fb:0f:c9:f6:69: 5e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:23:73:9C:82:53:42:D4:1F:ED:49:4F:28:86:DE:60:8A:C2:58:E7 X509v3 Authority Key Identifier: keyid:D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:04:e8:da:cd:a1:83:96:59:72:83:3b:52:63:3c:a5:ff:13: ab:cc:fb:97:f9:a1:61:d0:da:26:4c:27:00:51:df:92:73:1d: ef:a0:af:de:15:ae:45:e2:97:7b:1d:14:d6:02:00:cd:f4:2e: ef:0e:c3:03:ab:28:fb:17:ab:9e:a4:b5:06:c6:58:73:13:4c: ca:bf:e5:4b:1a:6e:5d:d6:99:e1:ea:75:6a:15:48:c3:04:d2: 61:78:0a:5e:ac:4f:54:cb:5a:3f:62:bd:0f:c8:f6:4b:b1:d8: de:2e:c2:b1:1d:17:f9:c4:80:b6:a3:99:c9:10:00:f7:31:12: 44:12:82:98:31:c4:4c:e4:d0:22:81:d8:77:5a:2c:ef:27:3c: 5b:30:e1:b3:09:58:87:18:e5:5c:47:ad:a3:02:37:53:76:c8: 94:88:71:00:6e:7f:86:be:7b:e1:32:9f:9e:5c:0e:2b:38:99: 68:fa:c5:f7:76:8d:2c:06:82:d4:63:07:e0:8e:f2:80:9c:5b: f9:b6:1c:75:40:40:df:12:e4:39:a3:8b:ee:8f:56:e8:6c:2a: 0f:2f:0a:6d:75:6d:4e:ff:ef:09:5d:ff:5e:d2:59:57:99:7e: 3a:aa:c6:83:75:66:0f:a2:73:1d:f8:00:41:a3:e3:5d:8e:fc: a7:63:96:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/VB1j+/FlUnD83bciouzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZGJhYTFiNTJmM2E3MzI4OWZmNzY4YWNiN2JhYTdmMzg3 Zjk1NWYwHhcNMjUxMjIwMDkwMDM4WhcNMjUxMjIxMDkwMDM4WjAzMTEwLwYDVQQD EygxZDIzNzM5YzgyNTM0MmQ0MWZlZDQ5NGYyODg2ZGU2MDhhYzI1OGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXk8KG7I2wvckp7S6D1d4WzrmDzW OoESfkjn5BEKhm0ykLX02971wDVht/pVOAlK1IG8weNHr8l+wXAl+x3B/szu2BC6 fH5jYYYaKZNADGMb3m0GCNTpTD1UH9FPrZ6/VMbfnmbQJFGi+rS9Q/9cg9yYjl2v Crnf6e48fSI7HuW79nJNVql790nvO7VwbOYxMSQ4/3fHFXJX8SVo5Y76Cfh0qs0l c3RQIG3s9HqhyIankFmzyj4iynJdsXm03GKmYdRqc0F/sHZcM8xwYTBfv52oSs2A HjQqnYfWTiTihJ1OG8P1DGqQLVACao6c9g/NBBl0qtnCspLA+w/J9mleKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0jc5yCU0LUH+1JTyiG3mCKwljnMB8GA1UdIwQY MBaAFNbbqhtS86cyif92ist7qn84f5VfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXR1cUcxTHpwektKXzNhS3kzdXFmemhfbFY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iMGI2ZTctM2UyMy00NDI2LThjODQt ZmFiODNkNDAzNTU4LzEvMXR1cUcxTHpwektKXzNhS3kzdXFmemhfbFY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9iMGI2ZTctM2UyMy00NDI2LThjODQtZmFiODNkNDAzNTU4 LzEvMXR1cUcxTHpwektKXzNhS3kzdXFmemhfbFY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQTo2s2h g5ZZcoM7UmM8pf8Tq8z7l/mhYdDaJkwnAFHfknMd76Cv3hWuReKXex0U1gIAzfQu 7w7DA6so+xernqS1BsZYcxNMyr/lSxpuXdaZ4ep1ahVIwwTSYXgKXqxPVMtaP2K9 D8j2S7HY3i7CsR0X+cSAtqOZyRAA9zESRBKCmDHETOTQIoHYd1os7yc8WzDhswlY hxjlXEetowI3U3bIlIhxAG5/hr574TKfnlwOKziZaPrF93aNLAaC1GMH4I7ygJxb +bYcdUBA3xLkOaOL7o9W6GwqDy8KbXVtTv/vCV3/XtJZV5l+OqrGg3VmD6JzHfgA QaPjXY78p2OWuQ== -----END CERTIFICATE-----Generated at Sat Dec 20 11:35:32 2025 by rpki-client