This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft File: dT1Hbblt4eWGIxGacLnXsAtnbaA.mft (raw, json) Hash identifier: 9/OxqipxbgE6+urnpzSY245xFlK2K8ZykTznEz/JNIU= Subject key identifier: 1C:7E:96:AA:1C:08:E2:2C:04:BA:A7:67:33:E5:83:83:B2:11:F5:18 Authority key identifier: 75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0 Certificate issuer: /CN=753d476db96de1e58623119a70b9d7b00b676da0 Certificate serial: 019B4091F0B24125015AF5F748913F0E124F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 11:01:04 +0000 Manifest this update: Sun 21 Dec 2025 11:01:04 +0000 Manifest next update: Mon 22 Dec 2025 11:01:04 +0000 Files and hashes: 1: 46jADdHLKU7NIyeYvDkR9sakzHU.roa (hash: byWqvbSSzcE1Xc0qEaXyUWnOp7q2hSYPDvEBq1c3RLI=) 2: ZzBmvMdXYMiQ9bwVHMIzO7s9SmM.roa (hash: sLT+c6scYZ8+Q07xIyxSqYkUzEuyYwiK9vh89QW6tS8=) 3: dT1Hbblt4eWGIxGacLnXsAtnbaA.crl (hash: CT+M5RDH1ruhe4fXg5gOzy7o/Rov42bYaGLyNvVFGGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:f0:b2:41:25:01:5a:f5:f7:48:91:3f:0e:12:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=753d476db96de1e58623119a70b9d7b00b676da0 Validity Not Before: Dec 21 11:01:04 2025 GMT Not After : Dec 22 11:01:04 2025 GMT Subject: CN=1c7e96aa1c08e22c04baa76733e58383b211f518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b9:a1:68:bd:92:62:b8:a5:7b:8b:a6:f2:99: fd:a0:3a:6e:62:0d:85:de:14:49:b0:4a:7e:34:78: 6f:10:d6:37:98:07:ec:f7:28:9f:62:4e:87:f1:b3: 1d:54:1e:97:81:5b:80:ef:38:6e:3b:5c:ba:e4:3f: 5a:6e:cc:c2:b1:ea:5d:4b:2d:54:21:ef:99:45:16: 3a:04:60:0e:b8:fd:65:cc:b5:09:c6:d4:96:b9:dd: a3:6a:b8:61:38:b1:a9:e2:58:9c:ca:45:0b:43:58: fb:88:af:55:ae:99:95:2f:b4:6b:da:23:b8:2f:be: 70:18:c7:f7:89:7c:b3:3e:d0:80:7a:1d:70:38:9e: b9:77:dd:ff:f3:ef:c7:de:d9:d2:c7:0d:c3:41:e3: a3:1a:d2:23:71:15:49:73:eb:35:c4:96:02:8c:11: ad:bd:23:9f:50:e9:ab:a9:f4:35:0f:92:50:e7:a8: f4:4c:a4:c0:c4:81:6a:83:d2:58:96:0a:9d:78:27: 81:eb:c5:6b:33:8a:07:87:2f:87:25:d1:7b:9b:26: 0a:c6:2c:b7:87:06:28:34:7d:f5:b9:0b:f8:bd:3b: b0:9e:ac:4d:da:37:d7:2f:a9:49:8c:e4:f9:ba:6f: f6:89:c0:55:2b:d2:82:c1:fc:2d:5e:5c:fc:02:e9: c9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:7E:96:AA:1C:08:E2:2C:04:BA:A7:67:33:E5:83:83:B2:11:F5:18 X509v3 Authority Key Identifier: keyid:75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:9a:c0:98:d1:03:b9:28:61:12:76:b3:1a:cd:81:08:ec:05: d7:af:bd:7f:3e:ae:7c:19:0b:57:46:21:b6:2e:95:1a:d0:16: 7f:46:bf:e4:d7:0d:2f:3c:93:ab:01:eb:63:55:51:94:2a:55: 83:5b:87:65:20:db:ca:4e:f5:b9:4c:7b:a6:a9:59:77:fa:8c: 89:b2:92:c9:f4:07:73:64:ed:cc:b6:e6:aa:3c:3f:f8:d4:65: a6:8a:ba:be:fc:74:0c:4b:b5:61:f0:c4:47:07:11:a6:66:ee: 8b:23:98:f8:bc:b9:dd:a6:2c:c9:0c:1f:59:cf:46:59:91:a2: 4f:e4:35:e3:ad:cf:18:53:10:38:85:68:14:30:5d:11:a1:ab: 74:d6:41:35:74:5e:f8:44:a8:2b:6b:e4:2e:31:6a:41:e7:19: dc:9e:f6:d3:94:c5:f4:05:20:89:e7:85:eb:2e:94:73:f4:7d: 42:2e:67:bb:40:d0:27:cd:02:a9:6f:52:ef:6c:74:0e:25:f3: 90:e9:c6:f4:ec:c4:56:b3:31:3a:0b:51:f4:b9:8a:fd:a0:ae: 8d:39:0c:17:c0:d0:de:fa:fe:23:ed:8f:ea:ce:43:dc:21:a9: 72:c0:a8:5d:96:04:53:8f:7f:a1:de:92:c3:3d:f3:e5:e6:b6: 76:4d:57:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkfCyQSUBWvX3SJE/DhJPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1M2Q0NzZkYjk2ZGUxZTU4NjIzMTE5YTcwYjlkN2IwMGI2 NzZkYTAwHhcNMjUxMjIxMTEwMTA0WhcNMjUxMjIyMTEwMTA0WjAzMTEwLwYDVQQD EygxYzdlOTZhYTFjMDhlMjJjMDRiYWE3NjczM2U1ODM4M2IyMTFmNTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLmhaL2SYrile4um8pn9oDpuYg2F 3hRJsEp+NHhvENY3mAfs9yifYk6H8bMdVB6XgVuA7zhuO1y65D9abszCsepdSy1U Ie+ZRRY6BGAOuP1lzLUJxtSWud2jarhhOLGp4licykULQ1j7iK9VrpmVL7Rr2iO4 L75wGMf3iXyzPtCAeh1wOJ65d93/8+/H3tnSxw3DQeOjGtIjcRVJc+s1xJYCjBGt vSOfUOmrqfQ1D5JQ56j0TKTAxIFqg9JYlgqdeCeB68VrM4oHhy+HJdF7myYKxiy3 hwYoNH31uQv4vTuwnqxN2jfXL6lJjOT5um/2icBVK9KCwfwtXlz8AunJ/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBx+lqocCOIsBLqnZzPlg4OyEfUYMB8GA1UdIwQY MBaAFHU9R225beHlhiMRmnC517ALZ22gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82YTljZjktYzBjYy00MDExLTg2MGUt NDY4NTc4MmFjMmMzLzEvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi82YTljZjktYzBjYy00MDExLTg2MGUtNDY4NTc4MmFjMmMz LzEvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqJrAmNED uShhEnazGs2BCOwF16+9fz6ufBkLV0Yhti6VGtAWf0a/5NcNLzyTqwHrY1VRlCpV g1uHZSDbyk71uUx7pqlZd/qMibKSyfQHc2TtzLbmqjw/+NRlpoq6vvx0DEu1YfDE RwcRpmbuiyOY+Ly53aYsyQwfWc9GWZGiT+Q1463PGFMQOIVoFDBdEaGrdNZBNXRe +ESoK2vkLjFqQecZ3J7205TF9AUgieeF6y6Uc/R9Qi5nu0DQJ80CqW9S72x0DiXz kOnG9OzEVrMxOgtR9LmK/aCujTkMF8DQ3vr+I+2P6s5D3CGpcsCoXZYEU49/od6S wz3z5ea2dk1XuA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:39:04 2025 by rpki-client