This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft File: 1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft (raw, json) Hash identifier: ye2XL1Bda3t+tVl21qX4hTlwi8Dfi6m1KssfZXvVZvo= Subject key identifier: AC:AA:AC:79:87:43:B0:05:14:9F:3C:04:16:A4:88:BA:9C:C5:B3:6A Authority key identifier: D6:D4:AB:4F:B4:C5:76:40:56:48:81:DC:77:B3:A6:61:FC:4C:C4:35 Certificate issuer: /CN=d6d4ab4fb4c57640564881dc77b3a661fc4cc435 Certificate serial: 019B5A886CEA8A374D931D565DA5115FEAE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tSrT7TFdkBWSIHcd7OmYfxMxDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft Manifest number: FE Signing time: Fri 26 Dec 2025 12:00:48 +0000 Manifest this update: Fri 26 Dec 2025 12:00:48 +0000 Manifest next update: Sat 27 Dec 2025 12:00:48 +0000 Files and hashes: 1: 1tSrT7TFdkBWSIHcd7OmYfxMxDU.crl (hash: Bll/1lwdw+3jr2RQ+88+apv3+5PR3ebqZ+7jzSKxqvA=) 2: qEIvOXeJOReZ450RqGjB6EOS1CI.roa (hash: Fk0yq1BlMLJDNsR0LsHKuSZEhch+26LuQGGBHUWFKpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.crl rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft rsync://rpki.ripe.net/repository/DEFAULT/1tSrT7TFdkBWSIHcd7OmYfxMxDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:6c:ea:8a:37:4d:93:1d:56:5d:a5:11:5f:ea:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d4ab4fb4c57640564881dc77b3a661fc4cc435 Validity Not Before: Dec 26 12:00:48 2025 GMT Not After : Dec 27 12:00:48 2025 GMT Subject: CN=acaaac798743b005149f3c0416a488ba9cc5b36a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:01:09:f0:2a:c5:2b:86:6f:12:24:02:41:eb: fb:3d:5b:e2:d0:03:0a:0e:49:6f:43:07:5c:8b:21: 61:17:cc:9c:b6:d0:94:ce:85:ce:91:56:03:77:47: ef:10:2c:37:fe:24:f1:46:a4:b4:53:84:ee:83:ed: 22:53:fe:44:ce:e2:b4:52:ef:ee:1c:da:ae:a6:cd: 84:be:cb:06:0f:52:e3:32:8c:c4:9a:27:f7:60:d7: 0d:df:12:54:74:25:27:42:9b:67:8c:82:1e:27:cb: 2d:2e:be:dc:86:c6:17:90:94:2d:ae:86:51:48:16: 67:58:54:44:2a:a5:89:70:15:51:fb:c4:7e:06:7a: 18:c7:77:cb:a3:16:9b:e1:c0:9a:d5:2d:25:9a:1f: d0:85:f1:aa:61:69:48:66:8a:69:39:ae:43:3d:97: e9:ed:19:b7:be:45:b0:74:09:e0:40:10:cf:54:20: e1:5f:e1:44:66:56:25:38:7e:96:0f:d7:b6:a0:f1: fe:70:e9:a4:7c:a2:a9:75:58:74:8d:3b:11:e7:a8: 34:2e:6a:26:73:cc:39:d8:e0:0e:a3:05:ed:94:85: 40:a0:bc:92:5f:2d:c4:d9:66:72:c0:04:fd:36:b4: 1d:d4:d9:0d:ba:28:b4:e7:97:94:0c:7a:6c:9b:1a: f2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AA:AC:79:87:43:B0:05:14:9F:3C:04:16:A4:88:BA:9C:C5:B3:6A X509v3 Authority Key Identifier: keyid:D6:D4:AB:4F:B4:C5:76:40:56:48:81:DC:77:B3:A6:61:FC:4C:C4:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tSrT7TFdkBWSIHcd7OmYfxMxDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:61:90:85:b0:80:8c:65:d6:68:58:05:18:61:7f:dd:d5:5c: 3d:ba:20:70:68:b3:fe:a2:70:51:10:e8:9b:e8:5f:c6:e7:13: 1f:71:98:e7:1b:41:a4:fe:7e:bf:8c:5e:95:5e:3c:26:fe:ba: c0:67:76:8c:b2:f5:29:d9:17:32:95:f6:c3:ca:53:89:9c:19: 31:ad:55:ab:30:a4:5c:70:7c:49:2e:04:9e:f8:8b:c1:72:63: 04:14:14:1c:9b:1e:98:a0:f7:d6:5d:c5:be:54:c2:1b:0b:9a: 22:a0:a8:b1:cf:ff:06:3e:e8:0c:fb:2a:dd:69:7b:c0:13:70: 41:3b:f7:28:53:e5:28:20:3d:d6:41:e1:42:36:73:f4:c7:f0: 57:08:51:a0:22:1d:bb:c1:c7:d1:fd:e6:ea:c9:9d:7a:a0:32: fc:6c:74:de:4f:25:8d:89:18:95:65:5c:c8:7e:4e:43:5b:a1: ac:a5:26:bf:4c:36:7e:bd:ce:f5:d8:6e:6b:ba:1b:1f:96:43: e1:6a:6b:4a:7e:63:33:b5:a4:a4:86:69:bb:29:ab:21:3c:d2: dd:09:ea:92:33:8c:75:ae:4d:59:91:86:bb:6f:25:d1:c1:8c: 09:c5:a2:5c:19:76:5e:68:62:30:c0:d3:68:74:6e:df:f7:6b: 75:69:43:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiGzqijdNkx1WXaURX+rjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZDRhYjRmYjRjNTc2NDA1NjQ4ODFkYzc3YjNhNjYxZmM0 Y2M0MzUwHhcNMjUxMjI2MTIwMDQ4WhcNMjUxMjI3MTIwMDQ4WjAzMTEwLwYDVQQD EyhhY2FhYWM3OTg3NDNiMDA1MTQ5ZjNjMDQxNmE0ODhiYTljYzViMzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QEJ8CrFK4ZvEiQCQev7PVvi0AMK DklvQwdciyFhF8ycttCUzoXOkVYDd0fvECw3/iTxRqS0U4Tug+0iU/5EzuK0Uu/u HNqups2EvssGD1LjMozEmif3YNcN3xJUdCUnQptnjIIeJ8stLr7chsYXkJQtroZR SBZnWFREKqWJcBVR+8R+BnoYx3fLoxab4cCa1S0lmh/QhfGqYWlIZoppOa5DPZfp 7Rm3vkWwdAngQBDPVCDhX+FEZlYlOH6WD9e2oPH+cOmkfKKpdVh0jTsR56g0Lmom c8w52OAOowXtlIVAoLySXy3E2WZywAT9NrQd1NkNuii055eUDHpsmxryowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyqrHmHQ7AFFJ88BBakiLqcxbNqMB8GA1UdIwQY MBaAFNbUq0+0xXZAVkiB3HezpmH8TMQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXRTclQ3VEZka0JXU0lIY2Q3T21ZZnhNeERVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny82OGU1M2YtNzBhOC00M2FlLTgzMGUt ZjlkNmY0YTMzMzA5LzEvMXRTclQ3VEZka0JXU0lIY2Q3T21ZZnhNeERVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny82OGU1M2YtNzBhOC00M2FlLTgzMGUtZjlkNmY0YTMzMzA5 LzEvMXRTclQ3VEZka0JXU0lIY2Q3T21ZZnhNeERVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemGQhbCA jGXWaFgFGGF/3dVcPbogcGiz/qJwURDom+hfxucTH3GY5xtBpP5+v4xelV48Jv66 wGd2jLL1KdkXMpX2w8pTiZwZMa1VqzCkXHB8SS4EnviLwXJjBBQUHJsemKD31l3F vlTCGwuaIqCosc//Bj7oDPsq3Wl7wBNwQTv3KFPlKCA91kHhQjZz9MfwVwhRoCId u8HH0f3m6smdeqAy/Gx03k8ljYkYlWVcyH5OQ1uhrKUmv0w2fr3O9dhua7obH5ZD 4WprSn5jM7WkpIZpuymrITzS3QnqkjOMda5NWZGGu28l0cGMCcWiXBl2XmhiMMDT aHRu3/drdWlDgw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:50 2025 by rpki-client