This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft File: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json) Hash identifier: C+q9PWrmbLEJn/8ve53s7zd5uBr/Uo5doba1PQUEmt4= Subject key identifier: 7E:20:12:0F:70:48:99:2A:0E:1A:A7:AA:65:79:A4:D3:54:8B:40:47 Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf Certificate serial: 019B3D59BE12205F8D1D35AA0E84686A537B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft Manifest number: 0F6A Signing time: Sat 20 Dec 2025 20:00:50 +0000 Manifest this update: Sat 20 Dec 2025 20:00:50 +0000 Manifest next update: Sun 21 Dec 2025 20:00:50 +0000 Files and hashes: 1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: F8DvOn06KxvDasZWy9qYy+nw9lykMbSC58u7QXxxYoU=) 2: ZrVj2s197OVZslr8l0eL6BOnr3w.roa (hash: MfbdU/hx9JIBrv7/G68X/y0zTkmoV59GNKmYnsQV+5o=) 3: mwni58KyYHbpUQER4Pt8qtMcan4.roa (hash: 1zAR9iZ3h0/evzy5xE5e6DnfwvHvR1HUWm8sNJWcti0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:be:12:20:5f:8d:1d:35:aa:0e:84:68:6a:53:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf Validity Not Before: Dec 20 20:00:50 2025 GMT Not After : Dec 21 20:00:50 2025 GMT Subject: CN=7e20120f7048992a0e1aa7aa6579a4d3548b4047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ed:a7:73:02:ae:28:d0:3e:5c:10:84:7d:02: 1b:c4:58:a4:28:69:16:3f:70:3e:3f:81:be:8c:88: 3a:99:00:b6:a2:68:9c:1b:f0:74:03:29:d7:8c:ed: 99:77:8b:c3:76:6a:4d:1a:e3:94:d1:9f:3d:30:34: 10:54:4d:35:22:3a:97:ab:57:bb:9e:ea:af:ec:c0: c4:37:9b:92:a1:ef:1f:8b:ea:a0:51:57:19:cc:94: 79:c8:ea:34:db:2f:90:c4:1d:1f:9c:6e:5c:47:2e: af:3f:99:41:3e:9c:1e:41:97:eb:07:4d:e4:0d:4e: f2:0d:65:ab:41:c6:ec:ce:d2:1b:dc:5a:f2:02:31: ea:b0:e6:6f:7d:f0:7b:35:98:ec:8c:33:d5:99:c2: 82:54:1b:7d:b7:2b:6c:c6:44:f3:75:84:b7:7e:44: 85:65:bc:c2:6c:fb:75:4f:dd:0a:31:2f:18:96:24: eb:05:fb:d9:35:c5:57:6e:e8:ae:1f:a6:d2:3d:b5: 6a:be:d9:fe:97:35:37:80:ef:01:5c:0b:a2:e1:17: 09:c1:ef:2a:86:f7:a7:5e:9d:f3:33:c4:1f:7f:82: f8:6c:4a:8e:ab:0c:1d:c9:b7:61:dd:8d:ed:53:92: 41:5a:a1:89:7f:85:38:a2:53:a7:9c:93:b1:23:f5: 6b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:20:12:0F:70:48:99:2A:0E:1A:A7:AA:65:79:A4:D3:54:8B:40:47 X509v3 Authority Key Identifier: keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:e9:ba:40:bf:fa:5e:72:33:47:23:85:ad:40:72:7d:4c:7d: d0:7a:a8:8c:14:02:56:43:80:ee:f7:a1:e3:d4:63:39:a8:db: 39:65:d8:70:a2:71:5d:ee:b9:a0:60:c6:73:c4:0f:54:94:ab: 43:52:5c:cc:49:70:5f:34:da:10:19:07:8e:ea:69:37:81:8e: 2b:b8:67:89:a3:14:0c:76:73:b5:54:a3:8f:44:de:48:5a:dd: e4:4b:44:54:4c:57:1f:7d:a1:9b:1e:04:76:87:45:f1:0f:65: 26:68:33:6e:44:d3:43:61:02:55:4a:18:cb:83:f9:78:dc:ff: 22:de:47:04:dc:d2:35:cc:36:7e:a4:1d:c8:0e:a2:ec:b1:28: f0:55:1c:1f:90:77:26:37:63:0a:4b:6e:57:ef:e8:e5:b5:63: 22:d5:32:eb:68:ad:a4:f1:87:4f:58:ed:6f:7c:73:27:d2:27: d4:1d:93:f5:68:48:a9:3f:e8:a8:e1:62:c6:b9:56:e1:45:c8: 4b:05:d2:ae:2f:68:00:5f:27:85:f7:80:55:2a:b7:b4:76:3d: 6c:80:51:a8:5e:35:32:9b:b9:7d:4f:d7:92:b9:6d:dc:48:8b: c4:b1:14:77:93:d1:18:cd:f7:60:4e:7d:a5:96:99:d2:b7:02: c1:82:d4:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wb4SIF+NHTWqDoRoalN7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MzhkNzcyNmE1ZjFmMzNkYTE1ZDg3ZTVjOGIwZTQ4ZjUw MjgxYmYwHhcNMjUxMjIwMjAwMDUwWhcNMjUxMjIxMjAwMDUwWjAzMTEwLwYDVQQD Eyg3ZTIwMTIwZjcwNDg5OTJhMGUxYWE3YWE2NTc5YTRkMzU0OGI0MDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAme2ncwKuKNA+XBCEfQIbxFikKGkW P3A+P4G+jIg6mQC2omicG/B0AynXjO2Zd4vDdmpNGuOU0Z89MDQQVE01IjqXq1e7 nuqv7MDEN5uSoe8fi+qgUVcZzJR5yOo02y+QxB0fnG5cRy6vP5lBPpweQZfrB03k DU7yDWWrQcbsztIb3FryAjHqsOZvffB7NZjsjDPVmcKCVBt9tytsxkTzdYS3fkSF ZbzCbPt1T90KMS8YliTrBfvZNcVXbuiuH6bSPbVqvtn+lzU3gO8BXAui4RcJwe8q hvenXp3zM8Qff4L4bEqOqwwdybdh3Y3tU5JBWqGJf4U4olOnnJOxI/VrSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4gEg9wSJkqDhqnqmV5pNNUi0BHMB8GA1UdIwQY MBaAFNU413JqXx8z2hXYflyLDkj1AoG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVRqWGNtcGZIelBhRmRoLVhJc09TUFVDZ2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80M2M0NTEtZTRlOS00ODU5LWI5ODUt MmQ5ZGY0ZWY1ZjUwLzEvMVRqWGNtcGZIelBhRmRoLVhJc09TUFVDZ2I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC80M2M0NTEtZTRlOS00ODU5LWI5ODUtMmQ5ZGY0ZWY1ZjUw LzEvMVRqWGNtcGZIelBhRmRoLVhJc09TUFVDZ2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOem6QL/6 XnIzRyOFrUByfUx90HqojBQCVkOA7veh49RjOajbOWXYcKJxXe65oGDGc8QPVJSr Q1JczElwXzTaEBkHjuppN4GOK7hniaMUDHZztVSjj0TeSFrd5EtEVExXH32hmx4E dodF8Q9lJmgzbkTTQ2ECVUoYy4P5eNz/It5HBNzSNcw2fqQdyA6i7LEo8FUcH5B3 JjdjCktuV+/o5bVjItUy62itpPGHT1jtb3xzJ9In1B2T9WhIqT/oqOFixrlW4UXI SwXSri9oAF8nhfeAVSq3tHY9bIBRqF41Mpu5fU/Xkrlt3EiLxLEUd5PRGM33YE59 pZaZ0rcCwYLUdg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:42:00 2025 by rpki-client