This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft File: nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json) Hash identifier: 3i5ReS8IHA6PKZOelWB4V2L+4cQgfZ8svRZeKqMRJ34= Subject key identifier: 4A:14:FD:3F:64:E4:64:76:17:26:15:43:15:7D:12:51:B5:5C:79:27 Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81 Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81 Certificate serial: 019AF05192C01DDC95F5E5DC238AAE4C4C88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft Manifest number: 1763 Signing time: Fri 05 Dec 2025 21:01:08 +0000 Manifest this update: Fri 05 Dec 2025 21:01:08 +0000 Manifest next update: Sat 06 Dec 2025 21:01:08 +0000 Files and hashes: 1: LAf6z2y7d_FvHWa2exDFEGsDUYk.roa (hash: yLu10ItcbqMAqor4DiKoo4ryX77evtxiM9mUG5P0yVc=) 2: kgdBEe32jL4o_RNVND7NTLfwJwI.roa (hash: PZIGs+YorN99DtOYFOROjFtihI/jC535mZ5OqGnLcRA=) 3: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: wvLiC1lYt9gCPibC3YCO2HSNAk/b0AqLvERLpg3DXbQ=) 4: qO2F63snosgQCd-tQ25OAd4civA.roa (hash: KELhV9b4nDo2k2LkjCvA0ufUmi/5QZ+HPUiWXl9d83Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:92:c0:1d:dc:95:f5:e5:dc:23:8a:ae:4c:4c:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81 Validity Not Before: Dec 5 21:01:08 2025 GMT Not After : Dec 6 21:01:08 2025 GMT Subject: CN=4a14fd3f64e4647617261543157d1251b55c7927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f7:31:a4:07:e1:81:91:1e:c6:bf:25:96:4a: 89:a5:47:9a:36:47:e8:54:69:49:3c:29:24:a4:51: 1e:f3:df:59:bc:fb:0e:2f:cb:1f:26:c4:24:33:7e: c4:37:47:22:6c:9d:8f:f9:1b:6c:fd:54:5a:2c:9b: 25:ef:4c:31:4c:8e:ad:0a:5e:77:4e:ba:5d:d1:bc: f1:41:86:2b:e2:c4:76:38:92:9d:a4:19:19:3d:67: a6:cf:a7:e7:24:ff:ea:cb:33:fc:a8:6c:1c:da:b3: 9c:cf:79:1f:7a:59:60:d9:35:1a:e6:bf:30:5b:46: a0:c4:73:d0:23:dc:88:a9:c9:54:cc:83:84:6f:2b: 67:df:3b:b6:f9:60:9d:b9:6f:48:81:af:97:b8:67: bf:c7:6c:e2:89:f6:c7:7f:1f:ae:c9:3e:05:dd:80: 09:7f:61:fc:2d:88:34:f3:89:39:18:50:b1:16:38: 6d:60:b9:0a:1a:9a:86:70:29:05:33:79:d6:76:2c: fe:86:8c:fe:73:f3:5c:55:06:93:24:c6:7e:61:15: bf:10:35:38:eb:99:da:ef:26:94:5c:de:f0:54:ac: 64:b1:e7:ed:76:16:47:81:64:fd:1a:07:0d:4e:8f: dd:57:f4:83:9e:21:25:5a:21:5d:c3:8f:bc:c1:33: b6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:14:FD:3F:64:E4:64:76:17:26:15:43:15:7D:12:51:B5:5C:79:27 X509v3 Authority Key Identifier: keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:09:df:e5:e5:de:72:64:6e:32:74:de:e0:73:24:75:ff:dd: 6a:01:72:bc:3d:9f:aa:c1:bb:31:f0:4f:a3:a7:87:21:50:e3: 01:8f:28:b4:a2:fe:e9:b5:97:66:38:a8:22:5e:11:f6:d8:a6: ff:18:04:e8:50:cb:0d:af:7f:4c:47:e6:92:95:58:f1:ad:74: c5:1a:e2:86:ea:d0:4c:28:27:e8:47:47:38:9f:6e:ce:ef:56: 8d:1c:31:1b:58:f0:29:68:d0:94:30:61:e9:fd:e0:26:66:57: e2:1d:a0:a0:63:4f:e9:75:55:a2:73:c8:b0:f2:a0:8f:3d:8a: bc:11:21:22:3a:76:0f:7e:ed:86:d7:19:4a:95:89:ef:83:6c: f2:3f:52:16:24:48:2d:d8:85:c5:3a:4b:19:bb:f6:56:af:ab: 6f:c2:4f:d7:0e:15:22:93:fc:5a:42:18:c9:7a:ab:f0:ae:0e: d2:a0:31:a1:79:90:80:c3:dc:3f:7b:45:28:3c:a6:b9:10:cc: 83:c2:7d:42:22:6e:fd:ba:76:56:4e:8f:b6:12:54:a7:10:65: 88:78:7c:e4:1c:35:76:9e:91:27:92:3a:29:fd:7e:6d:38:56: 85:d7:71:0b:1f:31:15:20:2f:2c:51:d2:33:d7:41:99:55:c0: 7f:ed:9d:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUZLAHdyV9eXcI4quTEyIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkM2Q2MjdjMjk3ZmU1NDJkODM1OWE4NmQ4ZTJmOWViZDk1 NjVhODEwHhcNMjUxMjA1MjEwMTA4WhcNMjUxMjA2MjEwMTA4WjAzMTEwLwYDVQQD Eyg0YTE0ZmQzZjY0ZTQ2NDc2MTcyNjE1NDMxNTdkMTI1MWI1NWM3OTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvcxpAfhgZEexr8llkqJpUeaNkfo VGlJPCkkpFEe899ZvPsOL8sfJsQkM37EN0cibJ2P+Rts/VRaLJsl70wxTI6tCl53 Trpd0bzxQYYr4sR2OJKdpBkZPWemz6fnJP/qyzP8qGwc2rOcz3kfellg2TUa5r8w W0agxHPQI9yIqclUzIOEbytn3zu2+WCduW9Iga+XuGe/x2ziifbHfx+uyT4F3YAJ f2H8LYg084k5GFCxFjhtYLkKGpqGcCkFM3nWdiz+hoz+c/NcVQaTJMZ+YRW/EDU4 65na7yaUXN7wVKxkseftdhZHgWT9GgcNTo/dV/SDniElWiFdw4+8wTO2zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEoU/T9k5GR2FyYVQxV9ElG1XHknMB8GA1UdIwQY MBaAFJ09Ynwpf+VC2DWahtji+evZVlqBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kZGMxYWEtNWEzYS00MTYzLWI1ZTgt MTVlYTMzN2E3ODQwLzEvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9kZGMxYWEtNWEzYS00MTYzLWI1ZTgtMTVlYTMzN2E3ODQw LzEvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuAnf5eXe cmRuMnTe4HMkdf/dagFyvD2fqsG7MfBPo6eHIVDjAY8otKL+6bWXZjioIl4R9tim /xgE6FDLDa9/TEfmkpVY8a10xRrihurQTCgn6EdHOJ9uzu9WjRwxG1jwKWjQlDBh 6f3gJmZX4h2goGNP6XVVonPIsPKgjz2KvBEhIjp2D37thtcZSpWJ74Ns8j9SFiRI LdiFxTpLGbv2Vq+rb8JP1w4VIpP8WkIYyXqr8K4O0qAxoXmQgMPcP3tFKDymuRDM g8J9QiJu/bp2Vk6PthJUpxBliHh85Bw1dp6RJ5I6Kf1+bThWhddxCx8xFSAvLFHS M9dBmVXAf+2dlg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:44 2025 by rpki-client