This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft File: 1_T2S1EKQbB8nVAASzUlaUzEIjM.mft (raw, json) Hash identifier: 3b8guIfQAEExveylCJXDL+r07IxqhFmUGZeYgpChKv0= Subject key identifier: 82:CC:F7:5A:D6:31:7B:74:EB:8F:0F:0E:9A:90:55:F7:2B:07:16:7D Authority key identifier: D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33 Certificate issuer: /CN=d7f4f64b510a41b07c9d50004b3525694cc42233 Certificate serial: 019AF2ADCB4AEAD07885CEE0B65B31F644B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft Manifest number: FC Signing time: Sat 06 Dec 2025 08:01:07 +0000 Manifest this update: Sat 06 Dec 2025 08:01:07 +0000 Manifest next update: Sun 07 Dec 2025 08:01:07 +0000 Files and hashes: 1: 1_T2S1EKQbB8nVAASzUlaUzEIjM.crl (hash: 2bA0fhxXXqxrBzSYTvvkjwLbUVNKWFk5tfPvt+YnRDU=) 2: FoUBO1CLvHv9IUZgMqlXSTP27UE.roa (hash: UWDESR9+S/CWXTmG2rrRD+fM1FniiIp0n2rFP03so88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:cb:4a:ea:d0:78:85:ce:e0:b6:5b:31:f6:44:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7f4f64b510a41b07c9d50004b3525694cc42233 Validity Not Before: Dec 6 08:01:07 2025 GMT Not After : Dec 7 08:01:07 2025 GMT Subject: CN=82ccf75ad6317b74eb8f0f0e9a9055f72b07167d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:21:e4:9f:40:05:c4:fc:00:80:49:1f:9c:a8: ae:90:7f:a3:05:92:2a:90:0e:77:57:9d:9f:14:c6: d9:12:c7:c4:0c:9c:6e:84:6c:5e:a7:72:50:4f:41: 34:fa:c6:75:26:c3:42:3e:5c:c3:7c:a6:6b:86:be: 97:b0:bc:55:d2:b1:fa:c6:2f:a3:61:4d:7f:33:c7: ea:48:bf:79:aa:32:5b:fe:b9:0f:ae:8e:3f:84:f5: be:90:cb:0b:0d:4a:cd:3b:25:dc:d9:01:3a:71:12: 08:56:5e:93:06:3b:03:20:58:22:af:7e:f7:da:4c: b5:2f:43:44:9c:7c:25:2c:dc:b4:f8:a6:64:fc:6e: fd:4e:80:ba:3d:cc:4d:5e:86:ec:21:d2:2a:d8:ae: 67:d7:72:a4:53:f8:29:0b:04:af:ca:3c:d2:04:80: d3:95:a9:af:92:ea:7c:df:e3:0f:81:c0:8d:80:67: d2:60:93:df:28:3d:6f:72:be:9b:56:dc:6e:a7:2e: 71:de:bc:4d:f6:77:41:0a:c5:86:41:03:39:2b:39: 51:61:4e:b4:cb:d7:b7:07:bf:19:dd:00:9a:94:a8: b6:e7:96:98:fa:60:6f:66:dc:b4:c2:8a:26:2a:15: 54:a3:98:f5:f7:9e:00:f9:67:59:21:c1:28:ce:b7: df:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CC:F7:5A:D6:31:7B:74:EB:8F:0F:0E:9A:90:55:F7:2B:07:16:7D X509v3 Authority Key Identifier: keyid:D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:b1:b5:80:36:0e:8f:6a:1e:8b:26:2c:da:2c:09:d6:3c:50: c7:e4:1e:d3:7a:3f:0f:a2:0a:a4:69:22:3c:7f:fa:5b:8c:af: 69:22:b4:67:21:2a:fe:f5:3b:f2:24:e9:74:d4:5f:28:96:71: db:2c:76:0a:a0:4c:8e:9f:bf:5f:88:57:16:d1:b5:1c:6a:c6: 6c:bc:61:27:94:4e:e8:50:81:42:48:e8:d9:aa:07:e6:67:ce: c9:00:47:ec:4e:c8:b1:cc:9c:dd:3d:7b:5e:51:e2:2f:26:e3: 29:7c:af:5d:ef:4a:f5:7c:f3:7c:d0:c4:ec:62:bc:de:b3:4b: 30:ae:eb:dc:a2:3a:e6:71:fc:63:aa:8b:56:07:e0:45:bb:8a: 65:84:94:a5:f7:d6:4f:96:e3:b2:cb:41:6a:b1:7f:27:e7:c8: 98:c2:b3:6c:45:f4:f2:65:eb:3d:cd:c5:c2:98:2f:33:01:86: a6:20:65:45:d6:9d:25:f8:35:01:63:58:76:2e:9f:12:87:f7: 64:e1:83:9e:54:97:0f:c5:08:59:22:23:35:fe:e3:8f:72:c6: 49:e0:47:68:15:6c:8d:ae:d4:ad:50:87:d3:7c:b1:1a:bf:57: 80:3f:f7:9d:c7:95:a4:bb:29:5c:9d:4f:ac:70:46:94:97:e9: d2:42:86:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrctK6tB4hc7gtlsx9kS1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZjRmNjRiNTEwYTQxYjA3YzlkNTAwMDRiMzUyNTY5NGNj NDIyMzMwHhcNMjUxMjA2MDgwMTA3WhcNMjUxMjA3MDgwMTA3WjAzMTEwLwYDVQQD Eyg4MmNjZjc1YWQ2MzE3Yjc0ZWI4ZjBmMGU5YTkwNTVmNzJiMDcxNjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCHkn0AFxPwAgEkfnKiukH+jBZIq kA53V52fFMbZEsfEDJxuhGxep3JQT0E0+sZ1JsNCPlzDfKZrhr6XsLxV0rH6xi+j YU1/M8fqSL95qjJb/rkPro4/hPW+kMsLDUrNOyXc2QE6cRIIVl6TBjsDIFgir373 2ky1L0NEnHwlLNy0+KZk/G79ToC6PcxNXobsIdIq2K5n13KkU/gpCwSvyjzSBIDT lamvkup83+MPgcCNgGfSYJPfKD1vcr6bVtxupy5x3rxN9ndBCsWGQQM5KzlRYU60 y9e3B78Z3QCalKi255aY+mBvZty0woomKhVUo5j1954A+WdZIcEozrffswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILM91rWMXt0648PDpqQVfcrBxZ9MB8GA1UdIwQY MBaAFNf09ktRCkGwfJ1QAEs1JWlMxCIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMV9UMlMxRUtRYkI4blZBQVN6VWxhVXpFSWpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85ZTNkY2QtZjFhMi00ZmI5LThjN2Ut ZDU0NTYyZjUyZTkzLzEvMV9UMlMxRUtRYkI4blZBQVN6VWxhVXpFSWpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy85ZTNkY2QtZjFhMi00ZmI5LThjN2UtZDU0NTYyZjUyZTkz LzEvMV9UMlMxRUtRYkI4blZBQVN6VWxhVXpFSWpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLG1gDYO j2oeiyYs2iwJ1jxQx+Qe03o/D6IKpGkiPH/6W4yvaSK0ZyEq/vU78iTpdNRfKJZx 2yx2CqBMjp+/X4hXFtG1HGrGbLxhJ5RO6FCBQkjo2aoH5mfOyQBH7E7Iscyc3T17 XlHiLybjKXyvXe9K9XzzfNDE7GK83rNLMK7r3KI65nH8Y6qLVgfgRbuKZYSUpffW T5bjsstBarF/J+fImMKzbEX08mXrPc3FwpgvMwGGpiBlRdadJfg1AWNYdi6fEof3 ZOGDnlSXD8UIWSIjNf7jj3LGSeBHaBVsja7UrVCH03yxGr9XgD/3nceVpLspXJ1P rHBGlJfp0kKGAA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:15 2025 by rpki-client