This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft File: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft (raw, json) Hash identifier: hxX2kBPG8KOKP8pQekXSundC5w/QtHPbc/0XAZJEupM= Subject key identifier: 75:C3:21:C8:B1:17:8C:CB:D1:7A:F2:C3:F3:22:C0:C0:5D:4B:E2:2D Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b Certificate serial: 019AF1644E1AFDE14517D4E6124E96CF6B5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft Manifest number: 1773 Signing time: Sat 06 Dec 2025 02:01:13 +0000 Manifest this update: Sat 06 Dec 2025 02:01:13 +0000 Manifest next update: Sun 07 Dec 2025 02:01:13 +0000 Files and hashes: 1: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl (hash: 204shZnyCjuEFIn//daM20l91IIijB2AUYIq8l58FLM=) 2: LAbYOinZZOhTcyKiJf7ioNWaoRM.roa (hash: 6Goc3YnbiYxs3x4btVAtwsDJJBqkd3Y6gTGImQ5TWEw=) 3: Ml6MKIuGs5X6FYCoibWIrDM8sZw.roa (hash: sr8ii208yixvZe4Nt1vf4FirRpNYMo5v1lAxQmPyK4E=) 4: NeK3VE5xIVumcURQvZORGSezPug.roa (hash: Kyuhso1DU/JY4Cd8KqltzS/UkVVtl7rIX1KuhxLgmkQ=) 5: SAShV7Cx-3cRFcPWPoHPU7seh9k.roa (hash: lzRGc/kfVkESt27Rk5Rm2MTThTLX4bNiPJvrX6OzG4s=) 6: TWLMxWYadUOjpfWSoRjdz4gkQVQ.roa (hash: eJJWCwgtvt1cLj2rlNHb1YuUwHOAuKtSsp+SGbWPUGI=) 7: U2YIuXAyUCZOsR4Cw5PSPdwaU0s.roa (hash: gWdVxjtR19wt31Bo3G5JO46Z63mY8LolhR8kTQQgD5Q=) 8: WvZhz4-xli7Jg3AjUEb09s8yIcg.roa (hash: nyDmjCwaWeBGV6O57JlcDsH1rd4TtVrk7nDHN+GYZDc=) 9: kSLVwGt_NyDYhkUM69fkyKqLKhE.roa (hash: 4uQpl4b7ipDKF9oMjr4f401/xIMAMkUuha8dHxAMb/k=) 10: mNj5xv9nGXpe1PGynvCZZnjrBHA.roa (hash: TkkqknjW6haSUV3elF7SSi1mf8BrofgKNJO9r7Ncf54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:4e:1a:fd:e1:45:17:d4:e6:12:4e:96:cf:6b:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b Validity Not Before: Dec 6 02:01:13 2025 GMT Not After : Dec 7 02:01:13 2025 GMT Subject: CN=75c321c8b1178ccbd17af2c3f322c0c05d4be22d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:80:cb:5b:b1:46:c7:0e:0d:0f:3f:9d:ad:86: ae:d2:21:90:07:88:c9:8c:4d:ff:81:0f:c7:e9:30: 82:30:b7:68:35:24:00:ba:86:4c:56:48:c8:cf:7e: 04:20:ca:1e:08:b3:3b:53:cb:49:04:ad:1c:98:a3: 42:22:c8:3b:36:b6:de:64:49:9b:3c:8a:44:da:11: 42:0e:70:c8:dc:fd:ef:19:ef:05:19:11:66:cc:a6: 7b:94:cc:40:f1:39:7e:58:02:6e:ee:5a:08:e2:e0: f8:eb:f5:38:54:cb:c5:48:34:37:4e:cd:d9:d7:db: e9:03:05:75:e0:23:aa:1f:83:1c:5b:02:09:03:31: 92:93:3d:b7:80:bf:a0:a7:0c:81:4a:6d:94:ab:1b: ed:0f:1c:8b:26:56:03:58:fd:bd:3a:b8:a0:ce:56: b4:83:8b:cf:51:0c:e7:93:ec:51:26:99:81:06:1d: 8c:b4:80:b7:b6:61:a3:8f:48:ef:06:9c:6b:c5:9a: 36:80:f8:34:88:22:c8:37:47:89:b0:31:75:ab:51: 5c:c5:c1:5e:fa:39:ee:19:cf:5d:1e:66:54:6b:67: 0e:02:55:69:90:08:70:92:7e:47:27:ef:15:d0:6c: c4:8c:ee:51:cc:89:a6:fb:bd:5c:9a:eb:e6:d9:e2: e7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C3:21:C8:B1:17:8C:CB:D1:7A:F2:C3:F3:22:C0:C0:5D:4B:E2:2D X509v3 Authority Key Identifier: keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:09:f3:5e:47:82:63:31:05:b3:93:cc:e7:4e:03:db:b1:2d: 46:d2:a5:db:c1:b0:bb:de:00:d5:b6:fe:31:de:ec:5e:be:c5: 45:18:e2:55:85:a1:de:83:25:8a:54:61:5d:3e:a7:ca:f4:4b: f2:10:5b:c3:87:32:ed:63:c9:da:db:90:5f:db:94:9f:56:b2: e3:ad:2c:31:17:09:a0:ae:19:8c:61:ce:c3:56:9a:43:0c:5f: 4b:a9:1a:49:58:38:0c:29:05:a5:8f:bf:ac:3d:54:0c:5a:b2: 13:59:7c:9d:13:c0:1e:e3:f9:46:97:35:b9:e9:d1:6c:ff:6c: ac:af:5d:74:4b:52:2d:80:17:d3:04:85:76:7f:87:f6:7b:5a: a1:9c:8a:c2:9e:27:5c:02:89:3e:81:4e:8e:28:26:c1:40:8a: 43:bf:60:31:89:a2:83:0a:9f:dd:f8:0f:f3:08:cb:3c:b9:86: e6:e1:15:ed:c1:9b:b0:fc:b4:e1:41:07:af:39:38:b7:65:3b: a2:5a:a4:c8:58:72:f3:d4:e6:7b:6c:f3:87:da:dd:5f:0d:33: 35:d7:e2:eb:09:57:83:06:2e:ab:bb:26:bb:95:b0:14:df:22: 00:87:f2:8d:12:87:6b:ba:19:8a:be:20:f5:77:a9:be:29:6d: 25:ae:e5:1e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxZE4a/eFFF9TmEk6Wz2teMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZDcxMDBlNzdlZDkxMTlkNjZlMjMyMWJiNjcxMWQ3ZTc2 MDk4MmIwHhcNMjUxMjA2MDIwMTEzWhcNMjUxMjA3MDIwMTEzWjAzMTEwLwYDVQQD Eyg3NWMzMjFjOGIxMTc4Y2NiZDE3YWYyYzNmMzIyYzBjMDVkNGJlMjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4DLW7FGxw4NDz+drYau0iGQB4jJ jE3/gQ/H6TCCMLdoNSQAuoZMVkjIz34EIMoeCLM7U8tJBK0cmKNCIsg7NrbeZEmb PIpE2hFCDnDI3P3vGe8FGRFmzKZ7lMxA8Tl+WAJu7loI4uD46/U4VMvFSDQ3Ts3Z 19vpAwV14COqH4McWwIJAzGSkz23gL+gpwyBSm2UqxvtDxyLJlYDWP29Origzla0 g4vPUQznk+xRJpmBBh2MtIC3tmGjj0jvBpxrxZo2gPg0iCLIN0eJsDF1q1FcxcFe +jnuGc9dHmZUa2cOAlVpkAhwkn5HJ+8V0GzEjO5RzImm+71cmuvm2eLnfwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHXDIcixF4zL0Xryw/MiwMBdS+ItMB8GA1UdIwQY MBaAFPrXEA537ZEZ1m4jIbtnEdfnYJgrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS10Y1FEbmZ0a1JuV2JpTWh1MmNSMS1kZ21Dcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvMDFkNDExLWQ5MTUtNDI3Ny04ZmUy LTc2YjBkZGEyYmYzZS8xLzEtdGNRRG5mdGtSbldiaU1odTJjUjEtZGdtQ3MubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzNlLzAxZDQxMS1kOTE1LTQyNzctOGZlMi03NmIwZGRhMmJm M2UvMS8xLXRjUURuZnRrUm5XYmlNaHUyY1IxLWRnbUNzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnAnz XkeCYzEFs5PM504D27EtRtKl28Gwu94A1bb+Md7sXr7FRRjiVYWh3oMlilRhXT6n yvRL8hBbw4cy7WPJ2tuQX9uUn1ay460sMRcJoK4ZjGHOw1aaQwxfS6kaSVg4DCkF pY+/rD1UDFqyE1l8nRPAHuP5Rpc1uenRbP9srK9ddEtSLYAX0wSFdn+H9ntaoZyK wp4nXAKJPoFOjigmwUCKQ79gMYmigwqf3fgP8wjLPLmG5uEV7cGbsPy04UEHrzk4 t2U7olqkyFhy89Tme2zzh9rdXw0zNdfi6wlXgwYuq7smu5WwFN8iAIfyjRKHa7oZ ir4g9XepviltJa7lHg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:18:00 2025 by rpki-client