This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft File: nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json) Hash identifier: uAJqZgDAlzZgMIFF6+hQsy0H1IJBOUmBpKIPilrpHGk= Subject key identifier: 10:43:E7:CC:E2:63:62:D2:1E:02:79:BC:14:49:DD:8C:04:C2:85:21 Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81 Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81 Certificate serial: 019B4738D93EF6DEE8081309F2A374764ECA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft Manifest number: 1790 Signing time: Mon 22 Dec 2025 18:01:06 +0000 Manifest this update: Mon 22 Dec 2025 18:01:06 +0000 Manifest next update: Tue 23 Dec 2025 18:01:06 +0000 Files and hashes: 1: LAf6z2y7d_FvHWa2exDFEGsDUYk.roa (hash: yLu10ItcbqMAqor4DiKoo4ryX77evtxiM9mUG5P0yVc=) 2: kgdBEe32jL4o_RNVND7NTLfwJwI.roa (hash: PZIGs+YorN99DtOYFOROjFtihI/jC535mZ5OqGnLcRA=) 3: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: qOUGf0f+09MYX9JpSolgavdQeCwNF3zjua4K0T70cnQ=) 4: qO2F63snosgQCd-tQ25OAd4civA.roa (hash: KELhV9b4nDo2k2LkjCvA0ufUmi/5QZ+HPUiWXl9d83Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 18:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:38:d9:3e:f6:de:e8:08:13:09:f2:a3:74:76:4e:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81 Validity Not Before: Dec 22 18:01:06 2025 GMT Not After : Dec 23 18:01:06 2025 GMT Subject: CN=1043e7cce26362d21e0279bc1449dd8c04c28521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7f:f8:a1:f8:26:47:c0:6f:6b:a4:b3:61:3b: f0:12:70:8f:ad:e2:66:28:41:20:05:e9:05:7a:3d: 1b:f5:45:06:80:4c:58:7c:40:eb:d5:03:6e:50:97: 64:25:be:47:31:97:d8:77:ca:fc:e7:08:71:de:e9: 43:17:54:35:ff:5b:7f:af:7a:7c:ce:86:d6:80:a0: 8b:ef:61:39:ac:71:6d:69:cc:70:41:9d:59:28:cf: 91:42:ee:fb:12:73:fd:fc:55:83:c8:3d:8b:b3:e8: ea:04:a3:cc:73:28:8f:ff:b4:22:45:c6:bc:6b:19: 06:3f:fe:4c:25:58:53:58:81:bb:48:14:ca:67:30: a8:96:a0:32:2d:6d:0d:4f:0c:3d:12:f6:fa:ac:91: 8b:90:9a:54:c8:6e:88:d8:59:bc:0b:19:8d:15:c8: e7:ce:0b:26:5c:65:08:91:5c:97:e1:e6:bb:56:8b: 65:aa:7f:9d:9f:79:c8:37:f0:73:e5:a7:08:b3:71: ec:89:33:bd:e4:31:d6:76:7c:e6:0b:8b:fd:d5:69: 08:5d:84:12:4c:e4:34:8a:48:89:bb:14:9c:1a:8f: 30:d8:76:93:73:bb:48:51:90:da:05:ba:82:0e:46: 4d:0a:29:b8:37:31:bc:5b:7f:61:f6:82:43:c5:2a: c0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:43:E7:CC:E2:63:62:D2:1E:02:79:BC:14:49:DD:8C:04:C2:85:21 X509v3 Authority Key Identifier: keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c3:0b:e4:79:b9:f9:d7:2e:09:6c:ac:bb:e3:d0:28:60:27: 72:1b:6b:73:59:7a:ff:95:0a:5d:bf:dd:19:d8:d9:47:ba:58: b1:2c:32:72:39:d4:d3:d0:5d:0d:31:f4:14:01:e4:0f:e7:50: 17:f3:32:2b:85:ce:7a:95:8a:3b:2d:71:9c:ce:91:0c:a6:ae: de:95:58:dd:8e:84:2b:41:93:c7:8b:b0:10:00:51:d4:64:b9: 11:2b:3f:00:02:28:d2:1b:1c:5c:6b:ad:13:91:a4:87:f0:51: 07:07:94:94:1c:1e:2d:e7:d3:97:24:23:70:31:5f:d1:f4:37: 80:07:8a:c6:00:9c:a8:43:d6:f0:27:16:78:57:2d:c4:62:1a: eb:e6:20:a5:0b:a1:a2:88:6c:97:10:72:67:5c:e8:6e:6c:71: 3a:3b:f9:d4:de:1d:63:d7:56:2d:63:55:0b:d5:23:98:73:67: b9:ec:e0:31:04:a0:48:b9:1b:29:43:4e:5b:95:57:09:0e:07: 12:4c:61:70:5d:6a:75:84:c9:ed:8e:44:b5:4a:84:06:8e:f1: 48:9e:38:f0:f4:87:30:f7:1c:2d:f9:a5:f9:3a:c7:a3:82:eb: df:57:d0:d8:16:56:bf:5d:3f:38:ea:f8:63:93:7d:36:b4:4b: 50:f9:a8:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHONk+9t7oCBMJ8qN0dk7KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkM2Q2MjdjMjk3ZmU1NDJkODM1OWE4NmQ4ZTJmOWViZDk1 NjVhODEwHhcNMjUxMjIyMTgwMTA2WhcNMjUxMjIzMTgwMTA2WjAzMTEwLwYDVQQD EygxMDQzZTdjY2UyNjM2MmQyMWUwMjc5YmMxNDQ5ZGQ4YzA0YzI4NTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX/4ofgmR8Bva6SzYTvwEnCPreJm KEEgBekFej0b9UUGgExYfEDr1QNuUJdkJb5HMZfYd8r85whx3ulDF1Q1/1t/r3p8 zobWgKCL72E5rHFtacxwQZ1ZKM+RQu77EnP9/FWDyD2Ls+jqBKPMcyiP/7QiRca8 axkGP/5MJVhTWIG7SBTKZzColqAyLW0NTww9Evb6rJGLkJpUyG6I2Fm8CxmNFcjn zgsmXGUIkVyX4ea7Votlqn+dn3nIN/Bz5acIs3HsiTO95DHWdnzmC4v91WkIXYQS TOQ0ikiJuxScGo8w2HaTc7tIUZDaBbqCDkZNCim4NzG8W39h9oJDxSrALwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBD58ziY2LSHgJ5vBRJ3YwEwoUhMB8GA1UdIwQY MBaAFJ09Ynwpf+VC2DWahtji+evZVlqBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kZGMxYWEtNWEzYS00MTYzLWI1ZTgt MTVlYTMzN2E3ODQwLzEvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9kZGMxYWEtNWEzYS00MTYzLWI1ZTgtMTVlYTMzN2E3ODQw LzEvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMML5Hm5 +dcuCWysu+PQKGAnchtrc1l6/5UKXb/dGdjZR7pYsSwycjnU09BdDTH0FAHkD+dQ F/MyK4XOepWKOy1xnM6RDKau3pVY3Y6EK0GTx4uwEABR1GS5ESs/AAIo0hscXGut E5Gkh/BRBweUlBweLefTlyQjcDFf0fQ3gAeKxgCcqEPW8CcWeFctxGIa6+YgpQuh oohslxByZ1zobmxxOjv51N4dY9dWLWNVC9UjmHNnuezgMQSgSLkbKUNOW5VXCQ4H EkxhcF1qdYTJ7Y5EtUqEBo7xSJ448PSHMPccLfml+TrHo4Lr31fQ2BZWv10/OOr4 Y5N9NrRLUPmoIg== -----END CERTIFICATE-----Generated at Tue Dec 23 02:00:31 2025 by rpki-client