This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft File: 1TX4-scGL3fyS5jNXDtUqJutSDg.mft (raw, json) Hash identifier: yiMbSz5L30lQNI/sytrvmh0NPZknhQwU1bbaot5g0B0= Subject key identifier: 86:B5:A4:84:9E:AC:77:5B:E4:31:C4:62:E2:A0:8C:C1:BD:E3:32:BF Authority key identifier: D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38 Certificate issuer: /CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838 Certificate serial: 019B3E6DF72F89193E21B824E0FBE983E316 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft Manifest number: 171C Signing time: Sun 21 Dec 2025 01:02:32 +0000 Manifest this update: Sun 21 Dec 2025 01:02:32 +0000 Manifest next update: Mon 22 Dec 2025 01:02:32 +0000 Files and hashes: 1: 1TX4-scGL3fyS5jNXDtUqJutSDg.crl (hash: euNYjOWy+8wapdk5SSSkmV7uLk/jSpPwyWIBr5EQ3zU=) 2: N3-917WPyl7E_IHoSS2FMLc18wo.roa (hash: VHNMzSlgwcYRKlzGy0Nb6X63KDdiRRNUd0w6+PH3+3w=) 3: oJEvXpEBpuYbcFfcZPDBTEehGY8.roa (hash: b0SdOLZ2AbPJ+0i7CwF2Gja+/00y5/FVMUIAvNs5h1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:f7:2f:89:19:3e:21:b8:24:e0:fb:e9:83:e3:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838 Validity Not Before: Dec 21 01:02:32 2025 GMT Not After : Dec 22 01:02:32 2025 GMT Subject: CN=86b5a4849eac775be431c462e2a08cc1bde332bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:23:f3:b0:c5:58:2c:c9:2a:39:5b:41:c3:3a: 04:cd:ad:14:48:a3:b1:a0:f7:20:a4:3c:fb:65:30: 16:55:70:eb:4f:b7:60:32:74:1d:8c:21:26:d6:09: b3:b1:cc:e9:09:79:cd:40:16:f4:d8:3f:51:c6:8b: 1d:af:2f:7d:0e:35:ae:ff:d9:1f:68:97:96:20:1a: ad:a0:d4:95:e9:84:90:2f:e9:22:e2:e2:47:5c:82: d4:cc:62:81:4b:95:8a:ca:0c:43:c9:77:50:7f:2f: 4a:e5:1a:94:61:44:1a:76:b5:a6:a8:bb:c4:26:07: cf:55:1d:d3:e5:aa:e1:3b:6f:b8:e5:2f:12:2d:9d: 60:f9:41:a3:d4:70:0f:e7:3d:6e:c1:13:3b:1b:60: e5:64:9a:0d:14:b5:3c:0f:ff:0e:02:84:87:ab:84: d7:11:78:0e:65:a8:40:22:4a:96:7e:93:80:11:2c: ba:c0:d8:38:61:e6:e4:dc:ee:f9:40:9f:51:1c:05: b0:56:08:0b:b4:3a:b0:c1:50:b3:66:27:e3:6e:ca: b0:f1:05:4f:45:29:bc:5a:3a:ab:b0:c8:a2:b7:0e: f0:d0:bf:ee:83:cf:36:bf:0c:34:e4:96:e1:13:cf: c1:b5:0d:27:58:97:1f:19:3c:97:da:5c:40:50:60: 57:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B5:A4:84:9E:AC:77:5B:E4:31:C4:62:E2:A0:8C:C1:BD:E3:32:BF X509v3 Authority Key Identifier: keyid:D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:81:6b:3a:f3:0d:26:6d:83:41:bc:c5:6c:c9:73:2f:d1:55: 1f:f9:54:56:14:b6:88:9b:d4:0f:27:4c:46:a8:8b:34:99:95: 9b:fa:c8:1c:ac:aa:ac:1c:e1:61:91:bf:50:22:e5:dc:bc:db: fd:97:22:9b:a3:68:2e:a7:cd:bb:0d:20:77:d5:1f:5f:34:f1: db:53:7f:d6:52:bb:e7:ce:af:91:3c:8e:1f:0f:76:10:d2:88: 44:51:e9:b2:94:c4:17:30:86:95:25:9f:51:0c:d6:7b:92:c4: 5b:c8:58:5e:04:0d:70:a1:62:94:e1:d7:23:fd:81:4f:73:67: d7:ef:55:e8:79:f6:ca:96:7b:8e:d7:b7:89:0b:e2:42:f8:b8: fe:a3:e1:ca:47:49:e8:9f:d3:e4:e8:2e:21:78:80:8c:2e:0c: 3f:ff:89:94:cd:2f:80:2d:77:a3:dd:4f:8c:12:f5:85:ff:be: 4e:6c:16:39:0d:77:05:02:1d:7c:0c:ec:0f:c0:c7:6b:8c:b4: 6b:df:25:06:bd:d8:8a:c5:84:a7:d1:93:bd:7f:25:c2:fb:8b: d4:f6:02:a1:3a:c7:5a:af:5e:0b:51:48:a3:14:fc:d8:a8:a0: e3:1c:d4:55:5d:ea:d0:1a:cd:27:c2:95:6b:1c:35:55:23:5f: 4b:41:0c:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bfcviRk+Ibgk4Pvpg+MWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MzVmOGZhYzcwNjJmNzdmMjRiOThjZDVjM2I1NGE4OWJh ZDQ4MzgwHhcNMjUxMjIxMDEwMjMyWhcNMjUxMjIyMDEwMjMyWjAzMTEwLwYDVQQD Eyg4NmI1YTQ4NDllYWM3NzViZTQzMWM0NjJlMmEwOGNjMWJkZTMzMmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiPzsMVYLMkqOVtBwzoEza0USKOx oPcgpDz7ZTAWVXDrT7dgMnQdjCEm1gmzsczpCXnNQBb02D9Rxosdry99DjWu/9kf aJeWIBqtoNSV6YSQL+ki4uJHXILUzGKBS5WKygxDyXdQfy9K5RqUYUQadrWmqLvE JgfPVR3T5arhO2+45S8SLZ1g+UGj1HAP5z1uwRM7G2DlZJoNFLU8D/8OAoSHq4TX EXgOZahAIkqWfpOAESy6wNg4Yebk3O75QJ9RHAWwVggLtDqwwVCzZifjbsqw8QVP RSm8WjqrsMiitw7w0L/ug882vww05JbhE8/BtQ0nWJcfGTyX2lxAUGBXvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIa1pISerHdb5DHEYuKgjMG94zK/MB8GA1UdIwQY MBaAFNU1+PrHBi938kuYzVw7VKibrUg4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVRYNC1zY0dMM2Z5UzVqTlhEdFVxSnV0U0RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wOTdkYTEtN2NjOS00MzQzLTgwMjQt YjMxMGQ3MWMyY2FkLzEvMVRYNC1zY0dMM2Z5UzVqTlhEdFVxSnV0U0RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8wOTdkYTEtN2NjOS00MzQzLTgwMjQtYjMxMGQ3MWMyY2Fk LzEvMVRYNC1zY0dMM2Z5UzVqTlhEdFVxSnV0U0RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4FrOvMN Jm2DQbzFbMlzL9FVH/lUVhS2iJvUDydMRqiLNJmVm/rIHKyqrBzhYZG/UCLl3Lzb /Zcim6NoLqfNuw0gd9UfXzTx21N/1lK7586vkTyOHw92ENKIRFHpspTEFzCGlSWf UQzWe5LEW8hYXgQNcKFilOHXI/2BT3Nn1+9V6Hn2ypZ7jte3iQviQvi4/qPhykdJ 6J/T5OguIXiAjC4MP/+JlM0vgC13o91PjBL1hf++TmwWOQ13BQIdfAzsD8DHa4y0 a98lBr3YisWEp9GTvX8lwvuL1PYCoTrHWq9eC1FIoxT82Kig4xzUVV3q0BrNJ8KV axw1VSNfS0EMqA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:50:03 2025 by rpki-client