This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft File: nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json) Hash identifier: b5ylx+A0g641aS6V2ChipB4nEKHVw2wh/S1oXIxyvRU= Subject key identifier: 61:0D:A2:E1:1B:E0:F5:71:12:E9:A2:96:79:03:96:73:01:C7:E5:F1 Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81 Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81 Certificate serial: 019B4927371DEC38AFD195E152470FAB20C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft Manifest number: 1791 Signing time: Tue 23 Dec 2025 03:01:05 +0000 Manifest this update: Tue 23 Dec 2025 03:01:05 +0000 Manifest next update: Wed 24 Dec 2025 03:01:05 +0000 Files and hashes: 1: LAf6z2y7d_FvHWa2exDFEGsDUYk.roa (hash: yLu10ItcbqMAqor4DiKoo4ryX77evtxiM9mUG5P0yVc=) 2: kgdBEe32jL4o_RNVND7NTLfwJwI.roa (hash: PZIGs+YorN99DtOYFOROjFtihI/jC535mZ5OqGnLcRA=) 3: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: MRAEBtSLr1bbP4OHWk6ZORMVxrYlAyL5sUcYTKWtliw=) 4: qO2F63snosgQCd-tQ25OAd4civA.roa (hash: KELhV9b4nDo2k2LkjCvA0ufUmi/5QZ+HPUiWXl9d83Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:27:37:1d:ec:38:af:d1:95:e1:52:47:0f:ab:20:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81 Validity Not Before: Dec 23 03:01:05 2025 GMT Not After : Dec 24 03:01:05 2025 GMT Subject: CN=610da2e11be0f57112e9a2967903967301c7e5f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d8:b8:31:c3:b6:ce:c4:50:fa:bf:ad:23:4b: 2b:d7:45:6e:45:58:cf:88:5e:52:94:c0:8b:3c:c7: ed:1e:ed:87:c7:4c:4d:79:cf:99:6f:b8:42:c0:d2: 5b:50:8b:2c:5d:c7:81:6d:7f:1f:75:de:8e:9a:f5: 93:ba:8d:ff:7f:7c:af:ed:61:76:05:16:be:b4:c5: 97:5a:d5:ee:8f:44:7e:54:ae:b7:a4:56:f8:32:d3: 2e:f2:87:27:cb:f6:e4:1e:47:5b:98:35:14:af:8e: 03:c4:9f:e2:8e:14:eb:ea:58:a3:c0:77:0e:fe:4a: 62:a6:79:92:28:30:6e:6f:c8:17:2b:eb:48:0f:94: a7:63:74:cb:64:01:e3:60:fc:a8:2f:f0:c0:81:41: cf:e0:86:ce:3e:7f:5b:0d:f6:38:49:fe:16:02:6e: 2f:f9:cd:cb:f8:fd:4f:da:27:2f:b8:24:24:6f:ab: b9:79:3f:ef:19:9e:33:9d:93:d6:af:89:a3:fa:dc: 14:cd:89:5c:d6:99:74:cb:40:95:a5:d5:15:30:0c: 21:39:37:65:6c:c4:53:83:eb:67:91:63:40:d3:30: c0:d7:7c:75:be:a9:22:c8:a7:93:20:e0:8a:73:2e: 63:bc:7d:d9:b3:a0:95:06:7b:ab:53:c0:83:38:ca: e1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:0D:A2:E1:1B:E0:F5:71:12:E9:A2:96:79:03:96:73:01:C7:E5:F1 X509v3 Authority Key Identifier: keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b6:0d:16:f5:e4:5f:c3:6e:4d:d8:34:d9:19:99:a2:dc:f9: d6:55:2f:b1:c4:f4:e6:38:5a:87:8b:c6:23:31:a1:43:11:9d: 31:e5:d3:2f:68:cb:07:4b:a9:f5:bd:3c:36:34:eb:9b:dd:c4: 20:18:f4:24:06:eb:74:9c:cd:71:94:63:43:ea:ae:8d:c2:d5: ee:8c:e9:67:12:5b:e9:59:5a:00:2d:bd:9d:7a:fc:5e:4a:7c: 53:73:d4:c8:44:50:95:d6:80:26:c9:b2:f5:fd:f2:d5:c6:f1: cc:0a:f9:4d:c0:4e:75:64:68:04:b5:dd:4b:53:2a:65:83:93: 9d:14:98:e5:9b:43:6a:d6:02:df:e0:9a:9a:cb:3b:ca:a9:9a: 68:2e:28:cf:51:0e:47:51:86:45:5e:a3:02:e6:46:2d:c6:63: ba:00:5b:6f:b9:2b:03:4b:ba:e7:9a:d9:d2:9f:56:aa:16:9b: 11:c5:5b:67:31:81:09:0a:cc:8c:26:12:c5:5d:e8:38:a2:c8: fd:34:cc:c5:90:6b:2a:ea:aa:c8:97:20:d4:58:a8:66:49:be: 4e:58:24:1f:a7:bc:2d:bf:23:ce:bf:0a:bb:a9:73:4d:f3:39: 67:96:2b:93:b2:0f:2e:31:21:47:3d:91:eb:42:88:52:ab:a1: 08:af:ab:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJzcd7Div0ZXhUkcPqyDHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkM2Q2MjdjMjk3ZmU1NDJkODM1OWE4NmQ4ZTJmOWViZDk1 NjVhODEwHhcNMjUxMjIzMDMwMTA1WhcNMjUxMjI0MDMwMTA1WjAzMTEwLwYDVQQD Eyg2MTBkYTJlMTFiZTBmNTcxMTJlOWEyOTY3OTAzOTY3MzAxYzdlNWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9i4McO2zsRQ+r+tI0sr10VuRVjP iF5SlMCLPMftHu2Hx0xNec+Zb7hCwNJbUIssXceBbX8fdd6OmvWTuo3/f3yv7WF2 BRa+tMWXWtXuj0R+VK63pFb4MtMu8ocny/bkHkdbmDUUr44DxJ/ijhTr6lijwHcO /kpipnmSKDBub8gXK+tID5SnY3TLZAHjYPyoL/DAgUHP4IbOPn9bDfY4Sf4WAm4v +c3L+P1P2icvuCQkb6u5eT/vGZ4znZPWr4mj+twUzYlc1pl0y0CVpdUVMAwhOTdl bMRTg+tnkWNA0zDA13x1vqkiyKeTIOCKcy5jvH3Zs6CVBnurU8CDOMrhYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGENouEb4PVxEumilnkDlnMBx+XxMB8GA1UdIwQY MBaAFJ09Ynwpf+VC2DWahtji+evZVlqBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kZGMxYWEtNWEzYS00MTYzLWI1ZTgt MTVlYTMzN2E3ODQwLzEvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9kZGMxYWEtNWEzYS00MTYzLWI1ZTgtMTVlYTMzN2E3ODQw LzEvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7YNFvXk X8NuTdg02RmZotz51lUvscT05jhah4vGIzGhQxGdMeXTL2jLB0up9b08NjTrm93E IBj0JAbrdJzNcZRjQ+qujcLV7ozpZxJb6VlaAC29nXr8Xkp8U3PUyERQldaAJsmy 9f3y1cbxzAr5TcBOdWRoBLXdS1MqZYOTnRSY5ZtDatYC3+Camss7yqmaaC4oz1EO R1GGRV6jAuZGLcZjugBbb7krA0u655rZ0p9WqhabEcVbZzGBCQrMjCYSxV3oOKLI /TTMxZBrKuqqyJcg1FioZkm+TlgkH6e8Lb8jzr8Ku6lzTfM5Z5Yrk7IPLjEhRz2R 60KIUquhCK+rSQ== -----END CERTIFICATE-----Generated at Tue Dec 23 06:40:26 2025 by rpki-client