This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft File: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json) Hash identifier: hO4ZZVbvJT3wqp/DCNms+x5p13m0ZHblXJ/4XyFObGM= Subject key identifier: F4:8C:19:1B:38:D0:F0:58:D9:31:37:DC:5B:CB:1D:8B:34:A5:6E:E3 Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf Certificate serial: 019B397D184A7028A66513E59198C6F7CC14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft Manifest number: 0F68 Signing time: Sat 20 Dec 2025 02:00:58 +0000 Manifest this update: Sat 20 Dec 2025 02:00:58 +0000 Manifest next update: Sun 21 Dec 2025 02:00:58 +0000 Files and hashes: 1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: qRisIftg6RdwYLmV4uBHoNPQDILQRJv0VTvNlSVPXhU=) 2: ZrVj2s197OVZslr8l0eL6BOnr3w.roa (hash: MfbdU/hx9JIBrv7/G68X/y0zTkmoV59GNKmYnsQV+5o=) 3: mwni58KyYHbpUQER4Pt8qtMcan4.roa (hash: 1zAR9iZ3h0/evzy5xE5e6DnfwvHvR1HUWm8sNJWcti0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:18:4a:70:28:a6:65:13:e5:91:98:c6:f7:cc:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf Validity Not Before: Dec 20 02:00:58 2025 GMT Not After : Dec 21 02:00:58 2025 GMT Subject: CN=f48c191b38d0f058d93137dc5bcb1d8b34a56ee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d8:93:d1:d7:63:d0:96:94:a9:e7:fa:9d:d3: 75:80:ae:1a:00:9f:64:e2:35:e3:c5:3d:ba:3a:6b: e5:6a:32:eb:48:ea:45:45:3b:c8:e8:38:ac:62:5c: f3:90:c8:0a:83:4b:5d:dd:c1:9d:f3:33:cd:b3:8a: 1e:a5:4e:e3:79:0b:c6:5d:e8:33:ff:b7:c3:bf:5c: c8:60:13:06:7d:2a:5a:e5:f4:af:24:8f:42:70:ea: 54:54:b0:26:ce:d6:d4:7b:c0:a9:4a:f7:de:97:b7: 66:3e:f6:48:99:39:87:34:29:2f:b5:28:7c:0c:43: b0:8a:e0:26:8e:99:f8:cf:ef:f4:a0:3f:c8:0b:5f: 59:95:b0:d6:b0:ef:cb:9d:35:0b:42:fb:4e:32:c5: 3f:07:e9:0b:45:d0:a4:71:e0:2e:62:e0:03:e9:97: 09:f7:99:f9:7b:e8:31:24:47:ab:d2:da:4e:bc:81: 29:1c:08:1d:e1:0b:2f:83:db:b2:c8:97:1c:e3:33: 96:54:dc:fa:23:22:c3:91:1a:23:d5:8a:ea:c5:0c: 8d:0f:b6:c8:1a:41:45:8e:e4:77:11:96:44:be:3b: 0a:85:15:06:33:33:7a:97:be:20:6c:59:06:09:b1: 68:4f:4b:82:b0:62:d9:de:71:03:6d:44:09:27:c7: d0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8C:19:1B:38:D0:F0:58:D9:31:37:DC:5B:CB:1D:8B:34:A5:6E:E3 X509v3 Authority Key Identifier: keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:17:c6:92:58:67:c9:35:97:4f:d8:b3:0b:ee:c4:76:49:1e: aa:98:6b:30:e1:45:5d:d6:90:53:3b:b7:da:c4:19:ec:69:aa: 98:ae:5e:b5:1d:d5:59:04:d6:7c:27:40:b4:4c:5a:ec:5a:50: b6:55:62:2f:36:6f:a1:c1:7f:8d:f8:d7:5b:c6:2f:c0:1a:2e: 61:49:e2:ec:a6:12:ea:f2:e1:8a:b8:7d:71:9b:f5:8a:53:c3: 30:29:21:02:7d:79:fe:3b:4b:50:91:e3:b5:6f:bf:8c:d6:41: 0c:68:35:99:eb:5e:f3:c5:1f:88:d8:c1:a6:0a:ba:b6:a2:50: a4:33:14:42:b6:b0:fc:82:39:4d:22:22:7f:86:f2:c0:fd:ae: 17:94:a7:6b:43:8a:59:cf:7e:a5:97:eb:d6:22:e3:76:e7:5d: 79:7e:8d:03:4f:50:30:d0:11:23:e5:6d:d5:f8:df:e9:40:5d: 9e:51:83:31:f3:74:88:88:d9:fb:06:0c:bc:b2:39:8f:c7:58: 74:22:58:ab:01:1d:99:7c:e3:16:c9:d0:39:ca:c7:49:70:ea: e2:6b:c9:f6:38:24:0a:9b:21:51:8e:dc:5a:b0:61:63:5a:8d: 6f:a9:6b:44:22:33:a3:17:5f:dd:9d:d8:fb:23:46:95:32:c2: 9c:d9:7c:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fRhKcCimZRPlkZjG98wUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MzhkNzcyNmE1ZjFmMzNkYTE1ZDg3ZTVjOGIwZTQ4ZjUw MjgxYmYwHhcNMjUxMjIwMDIwMDU4WhcNMjUxMjIxMDIwMDU4WjAzMTEwLwYDVQQD EyhmNDhjMTkxYjM4ZDBmMDU4ZDkzMTM3ZGM1YmNiMWQ4YjM0YTU2ZWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtiT0ddj0JaUqef6ndN1gK4aAJ9k 4jXjxT26OmvlajLrSOpFRTvI6DisYlzzkMgKg0td3cGd8zPNs4oepU7jeQvGXegz /7fDv1zIYBMGfSpa5fSvJI9CcOpUVLAmztbUe8CpSvfel7dmPvZImTmHNCkvtSh8 DEOwiuAmjpn4z+/0oD/IC19ZlbDWsO/LnTULQvtOMsU/B+kLRdCkceAuYuAD6ZcJ 95n5e+gxJEer0tpOvIEpHAgd4Qsvg9uyyJcc4zOWVNz6IyLDkRoj1YrqxQyND7bI GkFFjuR3EZZEvjsKhRUGMzN6l74gbFkGCbFoT0uCsGLZ3nEDbUQJJ8fQ5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSMGRs40PBY2TE33FvLHYs0pW7jMB8GA1UdIwQY MBaAFNU413JqXx8z2hXYflyLDkj1AoG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVRqWGNtcGZIelBhRmRoLVhJc09TUFVDZ2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80M2M0NTEtZTRlOS00ODU5LWI5ODUt MmQ5ZGY0ZWY1ZjUwLzEvMVRqWGNtcGZIelBhRmRoLVhJc09TUFVDZ2I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC80M2M0NTEtZTRlOS00ODU5LWI5ODUtMmQ5ZGY0ZWY1ZjUw LzEvMVRqWGNtcGZIelBhRmRoLVhJc09TUFVDZ2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBfGklhn yTWXT9izC+7EdkkeqphrMOFFXdaQUzu32sQZ7GmqmK5etR3VWQTWfCdAtExa7FpQ tlViLzZvocF/jfjXW8YvwBouYUni7KYS6vLhirh9cZv1ilPDMCkhAn15/jtLUJHj tW+/jNZBDGg1mete88UfiNjBpgq6tqJQpDMUQraw/II5TSIif4bywP2uF5Sna0OK Wc9+pZfr1iLjduddeX6NA09QMNARI+Vt1fjf6UBdnlGDMfN0iIjZ+wYMvLI5j8dY dCJYqwEdmXzjFsnQOcrHSXDq4mvJ9jgkCpshUY7cWrBhY1qNb6lrRCIzoxdf3Z3Y +yNGlTLCnNl8SQ== -----END CERTIFICATE-----Generated at Sat Dec 20 04:24:30 2025 by rpki-client