This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft File: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft (raw, json) Hash identifier: klikyC6LgwilAYQZ8swHSZ9g9liggg6EIakFUzIYInc= Subject key identifier: CB:40:0D:42:24:A6:C7:29:35:D7:61:B7:C6:AD:61:F2:A1:B8:C1:CC Authority key identifier: FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56 Certificate issuer: /CN=fad1863cbdec1b596daceeb901a0853d6c87e756 Certificate serial: 019B5AF650978CA4FF2D9DD757A783CB49D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 14:00:50 +0000 Manifest this update: Fri 26 Dec 2025 14:00:50 +0000 Manifest next update: Sat 27 Dec 2025 14:00:50 +0000 Files and hashes: 1: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl (hash: /EiEILZDgKAzUf48mzviiyM8yxINcMX3azacHIzGas4=) 2: 5QzI9Kx0_zx8sVl6RSClMEylLsI.roa (hash: ouFHr10qAXIAq0kULKbopJbnAAixS5hvvnbbv6zQ1js=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:50:97:8c:a4:ff:2d:9d:d7:57:a7:83:cb:49:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fad1863cbdec1b596daceeb901a0853d6c87e756 Validity Not Before: Dec 26 14:00:50 2025 GMT Not After : Dec 27 14:00:50 2025 GMT Subject: CN=cb400d4224a6c72935d761b7c6ad61f2a1b8c1cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b6:af:35:61:5b:b6:86:07:58:5a:89:09:e4: 38:59:80:0c:3b:79:74:07:f2:ce:44:f0:88:77:d1: b7:fb:75:1c:71:79:76:33:be:cf:7b:e5:7d:fa:b2: c5:a0:f3:39:0b:56:df:09:2a:c4:3a:84:b6:7f:97: 4f:03:dd:f8:80:80:7a:b0:c3:09:74:96:39:30:71: 0f:e7:f3:fd:ad:5d:68:0c:18:e2:4b:b4:10:f8:9d: 2c:84:38:d7:f7:02:00:86:b0:3e:1e:aa:c5:e8:64: 42:9c:00:cf:ce:1d:ef:95:1c:d6:6c:50:3a:81:99: 84:90:c5:a0:3c:0b:2f:53:fd:46:ee:77:dc:81:f7: 1f:1b:b9:58:06:89:65:02:ba:ba:19:c8:0a:c1:0e: eb:90:62:b3:f7:ce:14:6a:f2:68:4d:70:c4:95:0a: 0e:58:19:43:24:51:6b:b1:5c:77:36:61:27:db:64: 5f:aa:d4:10:16:dd:b3:f4:b8:f4:48:a2:59:d2:65: 1e:c4:62:e1:bc:74:55:d3:ff:5f:b3:ab:56:24:3c: 33:21:be:3d:b7:22:fa:fb:c5:29:55:1b:02:fd:08: 77:b8:d8:f3:f8:63:b3:5d:ef:f1:27:2a:ef:f6:84: e9:3e:e9:a8:9a:47:bb:21:3c:3e:a2:80:ee:e6:bd: 12:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:40:0D:42:24:A6:C7:29:35:D7:61:B7:C6:AD:61:F2:A1:B8:C1:CC X509v3 Authority Key Identifier: keyid:FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:6e:81:da:0e:3d:36:20:2c:2d:c8:f7:ff:df:14:d0:60:c4: 49:4f:1d:fc:dd:6d:20:5c:a3:da:0f:7c:ea:d6:e7:66:60:6a: 88:04:9b:b8:04:e0:da:3c:9e:65:ad:fe:9f:af:4d:db:a1:32: 80:d4:f3:59:44:60:89:9e:d0:c4:da:89:d4:25:70:04:5c:a8: d2:29:cf:96:e4:1d:6d:e3:1f:b5:33:bd:8d:16:0e:85:a0:d7: 7a:09:42:8a:9c:a4:8c:f1:19:26:b8:e4:1d:26:54:6c:1c:ae: 18:b1:a4:70:00:3c:35:c9:c5:c5:d4:22:e4:3a:ae:d6:0c:ec: a8:10:7e:f3:e0:28:59:07:68:50:ff:dc:fc:f9:a3:49:e0:17: 0b:5f:bf:d9:a0:90:30:05:c3:77:b9:e6:f4:37:e1:7c:c2:96: 48:b3:45:10:b4:d6:bd:4c:0f:25:7e:af:2d:33:37:33:d0:2b: ac:58:e0:ef:26:37:b0:d4:2f:18:1b:92:ab:6f:88:e7:0a:7a: fb:93:54:0a:e8:89:33:49:6b:e3:2f:fa:61:a2:89:ed:f9:ef: 94:3a:e0:9b:65:1b:04:ca:ed:28:9e:09:ba:07:9f:ef:d1:f2: c3:10:3b:a9:ff:69:12:a2:da:61:b5:ef:3d:1e:ef:85:0e:85: 96:3a:ad:63 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZta9lCXjKT/LZ3XV6eDy0nXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZDE4NjNjYmRlYzFiNTk2ZGFjZWViOTAxYTA4NTNkNmM4 N2U3NTYwHhcNMjUxMjI2MTQwMDUwWhcNMjUxMjI3MTQwMDUwWjAzMTEwLwYDVQQD EyhjYjQwMGQ0MjI0YTZjNzI5MzVkNzYxYjdjNmFkNjFmMmExYjhjMWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybavNWFbtoYHWFqJCeQ4WYAMO3l0 B/LORPCId9G3+3UccXl2M77Pe+V9+rLFoPM5C1bfCSrEOoS2f5dPA934gIB6sMMJ dJY5MHEP5/P9rV1oDBjiS7QQ+J0shDjX9wIAhrA+HqrF6GRCnADPzh3vlRzWbFA6 gZmEkMWgPAsvU/1G7nfcgfcfG7lYBollArq6GcgKwQ7rkGKz984UavJoTXDElQoO WBlDJFFrsVx3NmEn22RfqtQQFt2z9Lj0SKJZ0mUexGLhvHRV0/9fs6tWJDwzIb49 tyL6+8UpVRsC/Qh3uNjz+GOzXe/xJyrv9oTpPumomke7ITw+ooDu5r0SZQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMtADUIkpscpNddht8atYfKhuMHMMB8GA1UdIwQY MBaAFPrRhjy97BtZbazuuQGghT1sh+dWMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS10R0dQTDNzRzFsdHJPNjVBYUNGUFd5SDUxWS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvZGRkYTdlLWEwMzctNGQzOC05NTU1 LTBhMTEwYzQ5NzQ5Yy8xLzEtdEdHUEwzc0cxbHRyTzY1QWFDRlBXeUg1MVkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2RmL2RkZGE3ZS1hMDM3LTRkMzgtOTU1NS0wYTExMGM0OTc0 OWMvMS8xLXRHR1BMM3NHMWx0ck82NUFhQ0ZQV3lINTFZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUm6B 2g49NiAsLcj3/98U0GDESU8d/N1tIFyj2g986tbnZmBqiASbuATg2jyeZa3+n69N 26EygNTzWURgiZ7QxNqJ1CVwBFyo0inPluQdbeMftTO9jRYOhaDXeglCipykjPEZ JrjkHSZUbByuGLGkcAA8NcnFxdQi5Dqu1gzsqBB+8+AoWQdoUP/c/PmjSeAXC1+/ 2aCQMAXDd7nm9DfhfMKWSLNFELTWvUwPJX6vLTM3M9ArrFjg7yY3sNQvGBuSq2+I 5wp6+5NUCuiJM0lr4y/6YaKJ7fnvlDrgm2UbBMrtKJ4Jugef79HywxA7qf9pEqLa YbXvPR7vhQ6FljqtYw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:23 2025 by rpki-client