This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft File: 1tcoXpK3QC6V29onv773Go4ifNQ.mft (raw, json) Hash identifier: j89Z7WCTGcq8CiFZqRRhrye7w9MaqeSKmCrykrqxgFQ= Subject key identifier: 0A:25:69:62:1B:E0:80:DC:AD:8D:BD:6F:23:CF:66:2F:4C:2E:E9:35 Authority key identifier: D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4 Certificate issuer: /CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4 Certificate serial: 019AF80B361A28823676002F66E3618BD84E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft Manifest number: 17 Signing time: Sun 07 Dec 2025 09:01:15 +0000 Manifest this update: Sun 07 Dec 2025 09:01:15 +0000 Manifest next update: Mon 08 Dec 2025 09:01:15 +0000 Files and hashes: 1: 1tFNa9gPNZNVMrlGcDWrwlLRbUs.roa (hash: aX2NScMgKNwa1w41FjgEr7tmcFXuhM9FnOXMlARjYZI=) 2: 1tcoXpK3QC6V29onv773Go4ifNQ.crl (hash: ve7kYna1LdJ7rBb8Ce/D1+6FOSFdd6Riv4fQ6bbAExs=) 3: eBPauH_f7L7lyNNyaIKmiAXb8bo.asa (hash: +50s6vZyUuaOE9EfblewUd4uNZv49Tkafxsjq2+jTqU=) 4: xE1mwTKzQDbk79YJ7PIMthkjSqo.asa (hash: YyhspqR7mOuHCVepylY/A74k3bsEO/zYUAHhZJuP0qE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:0b:36:1a:28:82:36:76:00:2f:66:e3:61:8b:d8:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4 Validity Not Before: Dec 7 09:01:15 2025 GMT Not After : Dec 8 09:01:15 2025 GMT Subject: CN=0a2569621be080dcad8dbd6f23cf662f4c2ee935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:73:a7:58:19:62:75:a0:ee:e5:94:63:ef:33: 13:94:b8:fc:da:9e:96:31:ad:5b:0a:08:9b:4d:9d: d0:ef:a8:05:e3:1b:6e:2a:38:cd:e1:f0:df:79:3f: d0:e7:df:b6:8c:73:2c:22:44:46:18:a8:6e:4f:df: a3:76:89:55:b4:2e:43:eb:37:23:c4:3e:d7:bb:07: ea:51:b8:aa:9c:48:58:ff:51:29:f2:e8:e6:22:6e: fa:7e:22:82:be:bb:2e:3e:07:35:92:06:c3:53:da: 4d:e7:eb:17:f2:76:e3:94:ab:64:94:af:94:2f:1b: 44:54:98:c9:48:18:8c:e6:8c:b7:65:62:59:9a:66: 83:a1:90:64:d6:e9:e3:37:03:3b:57:94:0f:91:52: 94:ff:a2:e4:ab:89:8d:39:0e:38:2e:3f:4c:58:68: 4a:e5:9a:bf:ce:f3:da:83:4b:96:fb:e5:b5:c2:de: 35:84:b8:42:d1:79:10:8b:f4:be:27:2b:c0:2a:10: 6e:14:b1:0e:76:77:21:9e:34:dd:e0:d9:8e:e7:58: c7:60:d4:05:10:6b:d6:c6:7f:47:64:47:2d:b7:14: 38:5c:d4:fe:c2:9c:ae:2a:6d:f2:a4:ef:25:ab:e5: f3:be:de:c7:4e:d2:37:f2:b4:e5:ac:bd:61:04:55: 15:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:25:69:62:1B:E0:80:DC:AD:8D:BD:6F:23:CF:66:2F:4C:2E:E9:35 X509v3 Authority Key Identifier: keyid:D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:b8:36:c9:13:e4:42:6b:17:35:ce:91:b7:66:1d:ba:d9:08: 6b:47:d9:ec:b8:d0:7d:db:53:c5:e0:0a:77:02:27:f1:f1:f5: 19:d8:0f:bf:75:b7:69:9e:1a:86:2e:87:53:30:0e:6b:b1:52: 90:35:04:01:a7:6a:fe:8e:3a:86:e2:2b:94:d0:ad:e4:c0:7e: 97:38:bb:48:d3:6e:17:db:78:9f:40:79:ad:08:06:48:8c:6d: 1b:a8:a9:e9:f6:c6:09:9c:5c:db:f3:f4:68:e0:4a:45:ef:53: cc:78:9b:15:5c:b3:16:04:6b:01:2b:88:37:e6:2e:50:2f:b5: 1f:14:8c:78:7b:6b:30:87:3c:58:c0:54:75:49:ec:e9:a4:bf: 30:31:f3:c9:dd:66:3c:ed:f1:99:ea:6b:ed:74:76:9d:ff:3e: 05:6f:75:c4:a4:3e:cf:d5:5b:a8:75:92:a1:76:f8:9c:4e:34: 01:f9:19:43:a8:7c:10:17:68:ca:18:b7:a3:59:8b:7d:8d:8c: 99:de:40:64:07:5a:58:c1:72:b8:e5:dc:f8:aa:1f:cf:6e:0f: 63:c9:cf:a4:8f:f4:32:f6:0d:95:25:da:7c:5b:c5:8f:f5:fc: 0d:1d:42:61:da:8a:4a:c3:c7:b4:18:4f:93:9a:e8:2d:cc:9d: dd:27:76:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4CzYaKII2dgAvZuNhi9hOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZDcyODVlOTJiNzQwMmU5NWRiZGEyN2JmYmVmNzFhOGUy MjdjZDQwHhcNMjUxMjA3MDkwMTE1WhcNMjUxMjA4MDkwMTE1WjAzMTEwLwYDVQQD EygwYTI1Njk2MjFiZTA4MGRjYWQ4ZGJkNmYyM2NmNjYyZjRjMmVlOTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHOnWBlidaDu5ZRj7zMTlLj82p6W Ma1bCgibTZ3Q76gF4xtuKjjN4fDfeT/Q59+2jHMsIkRGGKhuT9+jdolVtC5D6zcj xD7XuwfqUbiqnEhY/1Ep8ujmIm76fiKCvrsuPgc1kgbDU9pN5+sX8nbjlKtklK+U LxtEVJjJSBiM5oy3ZWJZmmaDoZBk1unjNwM7V5QPkVKU/6Lkq4mNOQ44Lj9MWGhK 5Zq/zvPag0uW++W1wt41hLhC0XkQi/S+JyvAKhBuFLEOdnchnjTd4NmO51jHYNQF EGvWxn9HZEcttxQ4XNT+wpyuKm3ypO8lq+Xzvt7HTtI38rTlrL1hBFUVXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAolaWIb4IDcrY29byPPZi9MLuk1MB8GA1UdIwQY MBaAFNbXKF6St0AuldvaJ7++9xqOInzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXRjb1hwSzNRQzZWMjlvbnY3NzNHbzRpZk5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTk5M2QtYjkyZi00ZWMwLWIzMDAt ZDU1ZjVlMGZmNDNmLzEvMXRjb1hwSzNRQzZWMjlvbnY3NzNHbzRpZk5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTk5M2QtYjkyZi00ZWMwLWIzMDAtZDU1ZjVlMGZmNDNm LzEvMXRjb1hwSzNRQzZWMjlvbnY3NzNHbzRpZk5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLg2yRPk QmsXNc6Rt2YdutkIa0fZ7LjQfdtTxeAKdwIn8fH1GdgPv3W3aZ4ahi6HUzAOa7FS kDUEAadq/o46huIrlNCt5MB+lzi7SNNuF9t4n0B5rQgGSIxtG6ip6fbGCZxc2/P0 aOBKRe9TzHibFVyzFgRrASuIN+YuUC+1HxSMeHtrMIc8WMBUdUns6aS/MDHzyd1m PO3xmepr7XR2nf8+BW91xKQ+z9VbqHWSoXb4nE40AfkZQ6h8EBdoyhi3o1mLfY2M md5AZAdaWMFyuOXc+Kofz24PY8nPpI/0MvYNlSXafFvFj/X8DR1CYdqKSsPHtBhP k5roLcyd3Sd2HQ== -----END CERTIFICATE-----Generated at Sun Dec 7 16:56:08 2025 by rpki-client