This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft File: 1_T2S1EKQbB8nVAASzUlaUzEIjM.mft (raw, json) Hash identifier: TkWm+NcUiwt51XqwqiHa+3jtDqtUO9/gZLC8pqrpQMQ= Subject key identifier: 32:37:64:87:5E:69:9C:8D:0D:DF:2B:B0:61:02:F3:9F:39:BF:55:09 Authority key identifier: D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33 Certificate issuer: /CN=d7f4f64b510a41b07c9d50004b3525694cc42233 Certificate serial: 019B590801A6D2E13382906E44514E11A8E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft Manifest number: 0131 Signing time: Fri 26 Dec 2025 05:00:55 +0000 Manifest this update: Fri 26 Dec 2025 05:00:55 +0000 Manifest next update: Sat 27 Dec 2025 05:00:55 +0000 Files and hashes: 1: 1_T2S1EKQbB8nVAASzUlaUzEIjM.crl (hash: To8AhhVaZRtGnQkcR3bWkoNogwoNz7PJyJ1jr3EW0fA=) 2: FoUBO1CLvHv9IUZgMqlXSTP27UE.roa (hash: UWDESR9+S/CWXTmG2rrRD+fM1FniiIp0n2rFP03so88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:08:01:a6:d2:e1:33:82:90:6e:44:51:4e:11:a8:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7f4f64b510a41b07c9d50004b3525694cc42233 Validity Not Before: Dec 26 05:00:55 2025 GMT Not After : Dec 27 05:00:55 2025 GMT Subject: CN=323764875e699c8d0ddf2bb06102f39f39bf5509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c6:a4:c6:ac:49:24:4b:64:74:d2:85:1c:06: 90:3d:15:3c:ff:ed:71:cf:8b:33:a6:42:00:fb:6a: cb:3f:e2:e2:a1:89:02:2d:c5:ea:7e:c4:be:0c:91: bd:ec:ef:0b:b2:47:c3:a0:af:9a:88:bb:ce:67:3b: 55:e4:5f:a9:40:42:2e:d7:3f:a0:17:a4:d2:d5:4d: b0:58:9b:a3:00:fc:ce:90:d8:89:ff:ae:38:54:8d: 76:c8:0e:71:67:e1:24:2b:f8:de:74:44:18:7e:07: 67:b1:06:fe:89:0d:77:71:7b:95:3e:a4:b0:dc:a0: a0:ae:3e:e8:ce:9b:56:83:88:1f:31:63:8a:5c:c1: 31:4a:6b:5b:b9:96:47:57:3f:04:56:8f:25:e5:c7: e5:6d:f3:ea:98:0a:5a:eb:c6:19:58:a1:84:b0:68: 85:ff:5f:1a:0f:ca:f0:24:70:79:77:2a:b8:a7:0d: de:dd:cb:1e:06:e1:44:6b:2e:f4:74:b9:0d:51:5e: ea:af:82:8a:60:d5:05:bb:59:7e:4c:02:ae:f1:16: 8d:8f:b9:0e:c7:23:70:6c:2d:61:bf:5b:ba:6e:96: 99:23:fb:91:e4:f6:73:d6:3f:b0:df:fb:df:fd:8f: 50:42:1a:c1:2f:5e:b1:48:db:0a:18:59:7d:3a:46: 21:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:37:64:87:5E:69:9C:8D:0D:DF:2B:B0:61:02:F3:9F:39:BF:55:09 X509v3 Authority Key Identifier: keyid:D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:18:31:fb:e1:f5:52:84:92:7c:7e:bd:92:a1:12:fa:5e:d0: 2b:b0:5b:07:12:4f:fb:6c:6e:11:5e:17:84:e2:6a:a5:ce:50: 19:f6:0b:58:5e:65:13:72:2d:2c:32:35:ca:35:c3:fa:59:e1: 8d:bc:5a:02:ac:6a:b0:7a:23:b6:2f:f8:ff:b2:89:84:be:2f: 66:2f:b4:4c:a1:0e:fe:c2:b3:32:c5:07:2f:0e:bd:21:7c:07: 5d:fe:d0:d6:60:32:3f:0b:0c:6c:29:a5:e5:7f:7d:f0:17:5d: 10:97:9b:90:5b:80:fb:b6:2e:b8:01:11:fd:0a:3c:ea:a6:c6: 1b:13:49:60:75:be:3b:41:ce:9f:7c:3f:9a:8a:ee:2b:b1:7b: b5:89:90:b9:a1:93:f1:8f:65:0f:cf:c4:f9:84:df:db:52:3f: 47:c7:54:51:37:29:b9:16:78:21:ce:10:f4:ac:4b:47:4f:9b: b0:75:2c:c7:67:df:d8:a8:a2:e6:d3:2d:f2:4d:71:27:1d:7f: b9:a9:85:01:a1:66:f0:57:4d:35:26:6e:ad:f0:f7:ca:fa:a1: 43:10:f2:5b:d5:78:82:c1:53:47:d2:56:bd:98:8a:df:de:13: 58:08:4d:79:15:9e:d2:b0:15:af:e4:5b:14:2a:3b:b9:bc:b3: e6:25:00:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZCAGm0uEzgpBuRFFOEajoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZjRmNjRiNTEwYTQxYjA3YzlkNTAwMDRiMzUyNTY5NGNj NDIyMzMwHhcNMjUxMjI2MDUwMDU1WhcNMjUxMjI3MDUwMDU1WjAzMTEwLwYDVQQD EygzMjM3NjQ4NzVlNjk5YzhkMGRkZjJiYjA2MTAyZjM5ZjM5YmY1NTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMakxqxJJEtkdNKFHAaQPRU8/+1x z4szpkIA+2rLP+LioYkCLcXqfsS+DJG97O8LskfDoK+aiLvOZztV5F+pQEIu1z+g F6TS1U2wWJujAPzOkNiJ/644VI12yA5xZ+EkK/jedEQYfgdnsQb+iQ13cXuVPqSw 3KCgrj7ozptWg4gfMWOKXMExSmtbuZZHVz8EVo8l5cflbfPqmApa68YZWKGEsGiF /18aD8rwJHB5dyq4pw3e3cseBuFEay70dLkNUV7qr4KKYNUFu1l+TAKu8RaNj7kO xyNwbC1hv1u6bpaZI/uR5PZz1j+w3/vf/Y9QQhrBL16xSNsKGFl9OkYhFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDI3ZIdeaZyNDd8rsGEC8585v1UJMB8GA1UdIwQY MBaAFNf09ktRCkGwfJ1QAEs1JWlMxCIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMV9UMlMxRUtRYkI4blZBQVN6VWxhVXpFSWpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85ZTNkY2QtZjFhMi00ZmI5LThjN2Ut ZDU0NTYyZjUyZTkzLzEvMV9UMlMxRUtRYkI4blZBQVN6VWxhVXpFSWpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy85ZTNkY2QtZjFhMi00ZmI5LThjN2UtZDU0NTYyZjUyZTkz LzEvMV9UMlMxRUtRYkI4blZBQVN6VWxhVXpFSWpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxgx++H1 UoSSfH69kqES+l7QK7BbBxJP+2xuEV4XhOJqpc5QGfYLWF5lE3ItLDI1yjXD+lnh jbxaAqxqsHojti/4/7KJhL4vZi+0TKEO/sKzMsUHLw69IXwHXf7Q1mAyPwsMbCml 5X998BddEJebkFuA+7YuuAER/Qo86qbGGxNJYHW+O0HOn3w/moruK7F7tYmQuaGT 8Y9lD8/E+YTf21I/R8dUUTcpuRZ4Ic4Q9KxLR0+bsHUsx2ff2Kii5tMt8k1xJx1/ uamFAaFm8FdNNSZurfD3yvqhQxDyW9V4gsFTR9JWvZiK394TWAhNeRWe0rAVr+Rb FCo7ubyz5iUAhA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:20 2025 by rpki-client