This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json) Hash identifier: xakTyoxf5i2DG30dJzqJ4fBfbeSLMvn8dlIGhh5pmIw= Subject key identifier: 01:22:58:A9:47:F8:0F:BA:C1:87:49:BE:BB:75:E9:55:DA:D0:5D:A1 Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21 Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21 Certificate serial: 019AF16476020A8098EA635DA7B2CB918971 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 02:01:24 +0000 Manifest this update: Sat 06 Dec 2025 02:01:24 +0000 Manifest next update: Sun 07 Dec 2025 02:01:24 +0000 Files and hashes: 1: 0qa8r-MxNMLt6tCXa-K5V6QBkro.roa (hash: oU+YFw1zeHKoa31/el8AmGzlkf3ldrnYHs0Qc542gzw=) 2: 2s9R-8NKLGYziws7CzdBBuI05qY.roa (hash: 8cPZV8bL1izy9SNqvDNd1+gha6xq2vYnb61KexJW8KE=) 3: 8trwTS6zWWIc2CXU2a9uB3EK1CE.roa (hash: cB6Sm/NTvhdg/vAHTGU6288+fVcpUIfblu8fCuXy72c=) 4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: 4vwY6mGYM4wyD1eB00lgJfIy1y7ua1Z+K12N96pEaSk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:76:02:0a:80:98:ea:63:5d:a7:b2:cb:91:89:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21 Validity Not Before: Dec 6 02:01:24 2025 GMT Not After : Dec 7 02:01:24 2025 GMT Subject: CN=012258a947f80fbac18749bebb75e955dad05da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:72:eb:4e:be:4a:bc:22:05:f7:f3:ca:48:6d: a8:02:da:75:53:61:e8:92:c4:08:f1:37:67:6b:d3: fe:08:21:84:7b:7a:4e:08:61:a1:0d:ef:bc:ae:46: fb:42:93:13:6f:3d:46:0c:fc:6c:73:1b:81:ed:d3: fb:06:bc:07:3e:24:ba:70:f5:93:cc:56:00:8a:85: a0:7f:0b:bf:a7:ff:f2:b0:ab:8e:b9:07:8e:2e:26: 46:a4:3b:d2:d8:1c:ea:ea:e6:92:4d:0e:25:d0:61: 11:0f:77:ff:4f:cb:3e:53:d3:50:41:57:56:05:a8: 72:8d:c8:7a:39:f8:52:f3:02:e7:31:e8:57:13:9a: 4a:8c:ce:36:4c:bc:2d:ae:80:f7:3b:28:46:c3:1c: 54:e7:85:8c:c6:11:76:c6:b4:f7:69:23:25:cc:e9: 8e:f7:dc:69:06:fd:89:6a:f7:34:24:59:72:1c:9b: a7:d7:97:86:97:0e:f6:27:e5:2a:b6:2f:b0:ad:38: 72:ad:69:e7:40:18:94:1b:2a:a2:a0:27:0a:12:30: 83:15:9f:bf:37:82:01:dc:1a:fa:a8:20:cd:7b:09: 92:85:17:06:a9:1a:63:cb:d8:b9:cd:3b:19:ab:a9: 1e:54:a0:e6:dd:ca:81:b4:71:0e:1a:28:3c:31:64: 6c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:22:58:A9:47:F8:0F:BA:C1:87:49:BE:BB:75:E9:55:DA:D0:5D:A1 X509v3 Authority Key Identifier: keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:e9:fc:87:7b:27:9b:16:31:45:57:01:54:c5:ce:97:af:a1: b3:21:93:a0:39:eb:3e:97:b0:10:72:b5:e4:76:a9:89:d5:2e: 3b:5c:cb:e5:3a:14:da:c9:2b:ef:72:f2:b7:dd:2d:7d:c1:9c: e4:c1:81:ab:a9:db:a6:88:77:0d:f4:fa:8c:ba:80:67:0e:80: 65:c8:93:d5:dc:06:dc:32:01:13:e5:96:33:75:cb:b7:26:53: ea:05:77:84:51:57:ca:4d:a0:ca:e7:f8:8f:ec:2c:17:a1:5d: a3:cf:12:1b:d2:dc:e5:fc:4b:4b:a0:2f:08:b4:6b:2a:fa:32: 31:c2:1e:96:8b:16:cd:6f:83:e1:7f:18:23:34:92:77:75:5f: bf:79:a3:b9:2f:65:e9:0a:4b:1e:43:02:bd:3a:32:0f:8e:bf: 5f:32:95:55:67:87:d0:71:6f:61:2e:c6:d0:f0:a4:f6:3f:82: d9:3e:bf:0c:65:8d:3c:73:80:56:77:ad:21:9e:a5:d5:d7:62: 9b:d2:30:b4:06:ad:25:07:91:68:6b:64:ee:f1:1c:75:dd:9e: 85:02:3d:63:41:a0:a8:83:cf:73:e7:e1:90:67:08:b0:5a:71: 0c:85:1d:64:55:7f:07:c3:7c:68:2a:bd:08:71:8a:36:5a:9d: 32:43:c7:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHYCCoCY6mNdp7LLkYlxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NWEwNTY2ZDBiNjNhMWY4NjJkODM0NThlNGYyZWE2ZmQ4 ZjdkMjEwHhcNMjUxMjA2MDIwMTI0WhcNMjUxMjA3MDIwMTI0WjAzMTEwLwYDVQQD EygwMTIyNThhOTQ3ZjgwZmJhYzE4NzQ5YmViYjc1ZTk1NWRhZDA1ZGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XLrTr5KvCIF9/PKSG2oAtp1U2Ho ksQI8Tdna9P+CCGEe3pOCGGhDe+8rkb7QpMTbz1GDPxscxuB7dP7BrwHPiS6cPWT zFYAioWgfwu/p//ysKuOuQeOLiZGpDvS2Bzq6uaSTQ4l0GERD3f/T8s+U9NQQVdW Bahyjch6OfhS8wLnMehXE5pKjM42TLwtroD3OyhGwxxU54WMxhF2xrT3aSMlzOmO 99xpBv2Javc0JFlyHJun15eGlw72J+Uqti+wrThyrWnnQBiUGyqioCcKEjCDFZ+/ N4IB3Br6qCDNewmShRcGqRpjy9i5zTsZq6keVKDm3cqBtHEOGig8MWRsawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAEiWKlH+A+6wYdJvrt16VXa0F2hMB8GA1UdIwQY MBaAFLdaBWbQtjofhi2DRY5PLqb9j30hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQt ODNmNjAxYzNmYjU5LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQtODNmNjAxYzNmYjU5 LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcun8h3sn mxYxRVcBVMXOl6+hsyGToDnrPpewEHK15HapidUuO1zL5ToU2skr73Lyt90tfcGc 5MGBq6nbpoh3DfT6jLqAZw6AZciT1dwG3DIBE+WWM3XLtyZT6gV3hFFXyk2gyuf4 j+wsF6Fdo88SG9Lc5fxLS6AvCLRrKvoyMcIelosWzW+D4X8YIzSSd3Vfv3mjuS9l 6QpLHkMCvToyD46/XzKVVWeH0HFvYS7G0PCk9j+C2T6/DGWNPHOAVnetIZ6l1ddi m9IwtAatJQeRaGtk7vEcdd2ehQI9Y0GgqIPPc+fhkGcIsFpxDIUdZFV/B8N8aCq9 CHGKNlqdMkPH4g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:12 2025 by rpki-client