This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft File: 1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft (raw, json) Hash identifier: 2quauc1ts8pKG5VSkiBXa8f0TVLQawHueiFtznlBrnQ= Subject key identifier: 2A:1C:1A:1B:74:71:B3:2C:15:BE:F3:E6:BA:71:22:3A:9B:FF:81:EC Authority key identifier: FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92 Certificate issuer: /CN=fad92323d22b44275dcecd4de295b44794623e92 Certificate serial: 019B4C5F6E01642036BF16B02D872ED0D34B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft Manifest number: 0E66 Signing time: Tue 23 Dec 2025 18:01:20 +0000 Manifest this update: Tue 23 Dec 2025 18:01:20 +0000 Manifest next update: Wed 24 Dec 2025 18:01:20 +0000 Files and hashes: 1: 1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl (hash: J8JkRlwxBYp6v/87RWxIGaA7OzD8pIzltKcKz2t5jvQ=) 2: abjDTRVBx93z2E7sN_HQNKnGE2A.roa (hash: yz4j9HyamSJCRl3OAqF2NjSGl0kugENBZv6tnB8JfMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5f:6e:01:64:20:36:bf:16:b0:2d:87:2e:d0:d3:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fad92323d22b44275dcecd4de295b44794623e92 Validity Not Before: Dec 23 18:01:20 2025 GMT Not After : Dec 24 18:01:20 2025 GMT Subject: CN=2a1c1a1b7471b32c15bef3e6ba71223a9bff81ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1b:95:e1:3a:5a:54:7a:4d:66:ad:8f:3e:2a: a8:83:4c:ad:35:c3:4c:26:39:e9:00:8d:60:36:fc: d5:7a:b7:2e:81:a8:e7:80:80:fb:f7:8b:42:dc:57: 95:bc:31:40:48:21:de:af:af:4f:79:27:bb:ee:77: 1a:30:bd:cd:51:d2:8b:14:85:26:39:d2:d7:f7:17: 47:25:6a:9d:1f:ca:66:7a:b0:44:07:f2:f2:00:33: 2b:91:f0:98:19:bd:f2:e5:75:6c:cd:07:3f:06:d8: 7e:47:02:83:88:fb:78:cd:4d:68:1e:df:50:ce:fd: 92:8d:f5:09:92:b8:57:28:70:98:63:1c:3e:23:7f: db:b1:9a:68:0a:2f:60:a3:26:c3:22:21:be:fd:10: e1:cd:7c:84:24:d4:aa:a3:8e:bb:a2:28:f6:84:8c: 48:58:0d:2f:11:06:c0:e6:34:a0:e6:ef:d5:3f:11: e8:70:f4:00:c7:f0:26:57:56:ca:7e:4a:e8:f8:2e: 72:1e:99:03:b2:3d:0b:52:68:d8:58:d2:43:f8:b9: 8b:34:0d:ec:45:d5:b2:2a:bd:ac:88:29:81:b6:d5: 59:3d:a9:88:96:d3:70:64:65:46:70:f4:34:13:a8: aa:4a:6b:ee:37:3f:a9:69:5e:1e:6d:88:56:0e:f9: 5b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1C:1A:1B:74:71:B3:2C:15:BE:F3:E6:BA:71:22:3A:9B:FF:81:EC X509v3 Authority Key Identifier: keyid:FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:be:db:be:c9:bb:f9:66:6d:c6:bd:a9:b5:3b:32:56:5b:3b: ac:62:40:36:69:4f:1d:36:1b:f7:11:18:67:03:dd:c6:50:74: 4f:f3:f2:d8:af:bb:8b:5d:68:fe:33:71:5b:62:20:b1:fe:28: 1c:6f:a3:80:d6:f7:f1:2a:46:06:dd:36:10:e3:c3:25:bf:3d: 87:b9:09:fd:b9:00:1b:d7:45:bf:02:57:20:cb:b9:39:5d:84: 89:bb:d4:01:53:d7:1a:09:30:d5:35:a2:57:11:98:eb:9f:29: c6:02:a6:97:71:2d:13:68:e3:e4:a5:58:93:20:30:d5:68:ce: 3a:e2:69:85:1f:61:4b:de:03:83:ab:7e:f7:e3:77:7e:57:42: da:6a:f4:85:4d:23:ba:c3:dc:3d:38:79:8f:30:06:46:1f:ae: 0d:1e:2c:62:49:03:01:3c:3e:36:b7:4c:88:b1:ca:84:50:60: a7:48:ae:6f:49:53:db:f5:34:9f:44:1b:c7:5b:55:f1:d0:45: df:38:8c:c5:8c:2d:34:cc:66:05:83:ed:36:97:c6:93:5b:b6: 1d:2c:eb:74:7d:80:e5:fe:40:82:c0:20:fe:2b:ce:c7:a0:6a: 27:b2:b6:33:09:8b:81:a7:87:ca:23:84:68:be:c9:45:b8:ea: 0e:f7:54:ba -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtMX24BZCA2vxawLYcu0NNLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZDkyMzIzZDIyYjQ0Mjc1ZGNlY2Q0ZGUyOTViNDQ3OTQ2 MjNlOTIwHhcNMjUxMjIzMTgwMTIwWhcNMjUxMjI0MTgwMTIwWjAzMTEwLwYDVQQD EygyYTFjMWExYjc0NzFiMzJjMTViZWYzZTZiYTcxMjIzYTliZmY4MWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1huV4TpaVHpNZq2PPiqog0ytNcNM JjnpAI1gNvzVercugajngID794tC3FeVvDFASCHer69PeSe77ncaML3NUdKLFIUm OdLX9xdHJWqdH8pmerBEB/LyADMrkfCYGb3y5XVszQc/Bth+RwKDiPt4zU1oHt9Q zv2SjfUJkrhXKHCYYxw+I3/bsZpoCi9goybDIiG+/RDhzXyEJNSqo467oij2hIxI WA0vEQbA5jSg5u/VPxHocPQAx/AmV1bKfkro+C5yHpkDsj0LUmjYWNJD+LmLNA3s RdWyKr2siCmBttVZPamIltNwZGVGcPQ0E6iqSmvuNz+paV4ebYhWDvlbjQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCocGht0cbMsFb7z5rpxIjqb/4HsMB8GA1UdIwQY MBaAFPrZIyPSK0QnXc7NTeKVtEeUYj6SMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS10a2pJOUlyUkNkZHpzMU40cFcwUjVSaVBwSS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvNDlmM2FkLWVmOWUtNGZjNC05NWM0 LTRmMzcwMTFlZTU4MS8xLzEtdGtqSTlJclJDZGR6czFONHBXMFI1UmlQcEkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzgzLzQ5ZjNhZC1lZjllLTRmYzQtOTVjNC00ZjM3MDExZWU1 ODEvMS8xLXRrakk5SXJSQ2RkenMxTjRwVzBSNVJpUHBJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUL7b vsm7+WZtxr2ptTsyVls7rGJANmlPHTYb9xEYZwPdxlB0T/Py2K+7i11o/jNxW2Ig sf4oHG+jgNb38SpGBt02EOPDJb89h7kJ/bkAG9dFvwJXIMu5OV2EibvUAVPXGgkw 1TWiVxGY658pxgKml3EtE2jj5KVYkyAw1WjOOuJphR9hS94Dg6t+9+N3fldC2mr0 hU0jusPcPTh5jzAGRh+uDR4sYkkDATw+NrdMiLHKhFBgp0iub0lT2/U0n0Qbx1tV 8dBF3ziMxYwtNMxmBYPtNpfGk1u2HSzrdH2A5f5AgsAg/ivOx6BqJ7K2MwmLgaeH yiOEaL7JRbjqDvdUug== -----END CERTIFICATE-----Generated at Tue Dec 23 22:40:46 2025 by rpki-client