This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft File: nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json) Hash identifier: Ews7y5UP+z3STLUh6nfk63zhAuXBC3DQGbxdtyW7gHg= Subject key identifier: C8:E9:25:C6:86:8A:2B:0E:FA:42:A4:4E:8F:05:2D:8A:8C:6C:C6:34 Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81 Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81 Certificate serial: 019B13146527996218218312C9632988855F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft Manifest number: 1775 Signing time: Fri 12 Dec 2025 15:01:02 +0000 Manifest this update: Fri 12 Dec 2025 15:01:02 +0000 Manifest next update: Sat 13 Dec 2025 15:01:02 +0000 Files and hashes: 1: LAf6z2y7d_FvHWa2exDFEGsDUYk.roa (hash: yLu10ItcbqMAqor4DiKoo4ryX77evtxiM9mUG5P0yVc=) 2: kgdBEe32jL4o_RNVND7NTLfwJwI.roa (hash: PZIGs+YorN99DtOYFOROjFtihI/jC535mZ5OqGnLcRA=) 3: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: 9nD72+m7kyjaWTDCR/5yODWQh0HTW9uDJ249UPfGhfk=) 4: qO2F63snosgQCd-tQ25OAd4civA.roa (hash: KELhV9b4nDo2k2LkjCvA0ufUmi/5QZ+HPUiWXl9d83Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:14:65:27:99:62:18:21:83:12:c9:63:29:88:85:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81 Validity Not Before: Dec 12 15:01:02 2025 GMT Not After : Dec 13 15:01:02 2025 GMT Subject: CN=c8e925c6868a2b0efa42a44e8f052d8a8c6cc634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:60:05:af:e2:ff:7b:c1:13:32:ce:55:d2:8c: 39:c7:9a:9a:f1:06:1e:2f:53:71:19:4d:0f:c5:91: b3:16:b3:13:15:3b:7c:c1:56:d4:2e:52:6d:d5:00: bc:24:6b:13:42:36:0a:b3:3d:8e:f1:31:37:5c:7f: 9a:2b:4a:93:85:ab:6a:34:c9:d7:ae:02:f4:f3:6d: fd:bf:3b:57:c2:d2:ee:42:b9:7d:73:e3:56:a6:c7: bf:45:ed:7b:d5:04:eb:28:45:a3:ee:28:46:19:4d: ec:3f:61:22:64:0d:33:3a:0d:e8:73:20:1d:f5:b7: e8:14:eb:8e:11:90:d7:bd:af:1f:7c:8e:b2:aa:9e: aa:93:e4:b8:e5:e4:3c:23:cf:47:3c:e9:cd:62:2e: 49:7c:04:89:86:62:ce:ab:41:ec:22:fe:22:f2:9a: 0f:2c:fe:2c:8d:95:1a:ee:ec:e7:ac:08:bb:30:e2: 66:22:c8:61:85:e6:64:2b:06:75:f5:55:0f:49:a1: 08:7d:d2:b3:10:42:f1:d0:29:ef:c2:e4:9e:18:89: f9:32:ee:02:a5:55:ce:73:0f:3e:8b:3e:58:20:18: a2:8e:bb:de:bb:c7:34:0f:81:62:74:9a:37:e0:33: a2:a1:c8:ac:a9:02:4f:d2:23:ff:68:17:86:04:5d: 1b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E9:25:C6:86:8A:2B:0E:FA:42:A4:4E:8F:05:2D:8A:8C:6C:C6:34 X509v3 Authority Key Identifier: keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:72:35:b8:e0:74:45:20:0e:8b:e4:49:1c:c1:e3:07:4d:86: 09:7b:3f:af:1f:a4:a1:97:f8:eb:68:d4:3a:c4:d6:57:87:ba: ab:52:6b:1e:e5:be:7b:c1:f9:1f:95:65:26:a7:f6:02:a6:43: 85:06:4f:9e:ca:8c:aa:7d:e7:09:9b:a4:bf:c3:e7:a2:3d:1e: 31:94:60:f7:4d:cc:34:19:6c:d5:e9:ff:de:ed:8d:ed:c1:71: 82:79:02:14:e6:71:d4:7a:e3:46:bd:f8:c3:bf:31:9e:6e:f3: be:6b:ae:0d:4b:15:ac:5a:0a:4a:c5:c6:52:97:8b:34:39:f1: 61:66:4e:c0:6c:6a:f9:50:22:15:fc:ce:ed:18:41:40:e0:53: 82:3d:14:44:3d:d3:ea:da:e0:e2:cb:41:80:3f:7b:ab:13:8b: 8c:fb:6c:6a:ca:33:30:67:95:38:a6:0b:0b:f7:c3:57:8e:e9: d2:82:e9:c0:d5:35:fd:e2:97:eb:a7:c3:c3:e4:f1:90:f5:49: f4:82:33:a5:2e:83:55:46:92:e3:55:69:e7:95:2d:74:de:b5: e7:0b:0f:13:47:20:3c:3e:ec:de:57:18:f1:1a:01:5c:35:aa: 51:e6:3a:ed:6f:f1:4f:62:cf:70:81:06:10:e9:8b:26:a4:55: d2:12:2c:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsTFGUnmWIYIYMSyWMpiIVfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkM2Q2MjdjMjk3ZmU1NDJkODM1OWE4NmQ4ZTJmOWViZDk1 NjVhODEwHhcNMjUxMjEyMTUwMTAyWhcNMjUxMjEzMTUwMTAyWjAzMTEwLwYDVQQD EyhjOGU5MjVjNjg2OGEyYjBlZmE0MmE0NGU4ZjA1MmQ4YThjNmNjNjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmAFr+L/e8ETMs5V0ow5x5qa8QYe L1NxGU0PxZGzFrMTFTt8wVbULlJt1QC8JGsTQjYKsz2O8TE3XH+aK0qThatqNMnX rgL08239vztXwtLuQrl9c+NWpse/Re171QTrKEWj7ihGGU3sP2EiZA0zOg3ocyAd 9bfoFOuOEZDXva8ffI6yqp6qk+S45eQ8I89HPOnNYi5JfASJhmLOq0HsIv4i8poP LP4sjZUa7uznrAi7MOJmIshhheZkKwZ19VUPSaEIfdKzEELx0CnvwuSeGIn5Mu4C pVXOcw8+iz5YIBiijrveu8c0D4FidJo34DOiocisqQJP0iP/aBeGBF0bnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjpJcaGiisO+kKkTo8FLYqMbMY0MB8GA1UdIwQY MBaAFJ09Ynwpf+VC2DWahtji+evZVlqBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kZGMxYWEtNWEzYS00MTYzLWI1ZTgt MTVlYTMzN2E3ODQwLzEvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9kZGMxYWEtNWEzYS00MTYzLWI1ZTgtMTVlYTMzN2E3ODQw LzEvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3I1uOB0 RSAOi+RJHMHjB02GCXs/rx+koZf462jUOsTWV4e6q1JrHuW+e8H5H5VlJqf2AqZD hQZPnsqMqn3nCZukv8Pnoj0eMZRg903MNBls1en/3u2N7cFxgnkCFOZx1HrjRr34 w78xnm7zvmuuDUsVrFoKSsXGUpeLNDnxYWZOwGxq+VAiFfzO7RhBQOBTgj0URD3T 6trg4stBgD97qxOLjPtsasozMGeVOKYLC/fDV47p0oLpwNU1/eKX66fDw+TxkPVJ 9IIzpS6DVUaS41Vp55UtdN615wsPE0cgPD7s3lcY8RoBXDWqUeY67W/xT2LPcIEG EOmLJqRV0hIsfA== -----END CERTIFICATE-----Generated at Fri Dec 12 17:11:44 2025 by rpki-client