This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft File: dT1Hbblt4eWGIxGacLnXsAtnbaA.mft (raw, json) Hash identifier: znFhGNa0TTwwLMW0mj3XLKJkGSf/puJrzyhYZK2E/4I= Subject key identifier: 1A:65:E1:18:7F:7F:9D:3D:45:53:AE:21:82:E0:51:1D:93:C0:01:9D Authority key identifier: 75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0 Certificate issuer: /CN=753d476db96de1e58623119a70b9d7b00b676da0 Certificate serial: 019AF54068424A517B5EB74E225DAEC3ABC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 20:00:30 +0000 Manifest this update: Sat 06 Dec 2025 20:00:30 +0000 Manifest next update: Sun 07 Dec 2025 20:00:30 +0000 Files and hashes: 1: 46jADdHLKU7NIyeYvDkR9sakzHU.roa (hash: byWqvbSSzcE1Xc0qEaXyUWnOp7q2hSYPDvEBq1c3RLI=) 2: ZzBmvMdXYMiQ9bwVHMIzO7s9SmM.roa (hash: sLT+c6scYZ8+Q07xIyxSqYkUzEuyYwiK9vh89QW6tS8=) 3: dT1Hbblt4eWGIxGacLnXsAtnbaA.crl (hash: b5g8WZ/WR/C3CfwqT2jYmol/s6qxMbYJz5B9x0evXRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:68:42:4a:51:7b:5e:b7:4e:22:5d:ae:c3:ab:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=753d476db96de1e58623119a70b9d7b00b676da0 Validity Not Before: Dec 6 20:00:30 2025 GMT Not After : Dec 7 20:00:30 2025 GMT Subject: CN=1a65e1187f7f9d3d4553ae2182e0511d93c0019d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b9:15:84:1d:26:fa:3e:55:16:f8:70:4f:36: b8:5c:02:e1:d5:b3:e2:dc:71:9f:4e:57:0f:43:9a: 3b:d4:ee:e3:82:ea:24:91:d3:dc:2a:68:63:45:81: 65:63:0c:ad:2d:c4:78:9d:08:ec:bb:4f:0b:98:c9: ae:cf:d6:ca:bd:e1:88:5f:62:3d:ab:26:0c:ff:9a: 3f:e8:0b:21:7b:d7:4c:a7:93:3e:0c:21:fd:7d:2e: b8:43:03:63:d6:79:84:30:10:ea:d0:aa:97:1c:fb: 9f:ca:ab:4f:d6:4a:41:8b:f6:6e:c6:97:2a:96:b6: 01:be:66:b1:5f:a9:34:b7:55:d1:f8:4e:16:97:34: d8:b5:05:57:24:f4:e5:74:31:96:ad:fe:72:48:af: 78:9d:cf:96:1b:9a:ff:14:4d:80:9b:6b:20:7c:7e: 93:5b:ae:8e:da:35:c6:de:88:62:25:f4:71:76:90: 8b:b3:f5:e4:be:17:b0:87:17:cc:50:66:99:5d:ae: d9:34:c8:aa:b0:2e:63:45:99:02:93:28:c2:e8:49: 72:22:58:d8:d7:e5:46:f1:3e:4d:24:0e:a6:30:cd: 7e:20:3a:7f:f5:4c:db:60:39:21:96:68:03:93:f6: 48:a7:65:42:ed:ca:66:99:c2:0f:0a:0a:de:ae:12: d3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:65:E1:18:7F:7F:9D:3D:45:53:AE:21:82:E0:51:1D:93:C0:01:9D X509v3 Authority Key Identifier: keyid:75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:35:94:07:02:51:f1:7f:90:3f:56:26:2c:0c:37:9c:0e:6d: 0f:aa:60:e2:4a:61:1d:9e:57:8a:83:71:11:d5:b1:cf:c0:16: 1b:60:c8:96:5b:58:2e:7a:fa:81:9a:36:4f:27:17:bf:ff:1a: f0:40:30:92:82:88:1c:e3:f0:3e:ec:1e:fc:7c:d5:02:d8:05: 69:67:fe:5a:ad:7c:c4:ed:a2:ec:e5:54:8d:64:c9:55:70:37: 0d:dc:1f:b2:9b:7c:f6:92:97:86:f9:9a:24:02:6c:ab:a4:c6: 92:27:4f:7a:ac:30:0e:4a:1c:82:32:bf:2e:11:ba:e7:52:5e: e3:a6:fa:24:69:f8:9f:63:81:ae:dd:b1:30:d7:f6:06:e4:25: 7f:85:c4:3d:4b:68:22:10:f0:7a:66:37:e3:9a:9a:3a:89:42: 71:6e:95:c8:9d:30:ca:d9:8e:22:aa:7d:10:e3:3a:ad:6c:e1: 42:6d:ac:11:5d:6e:25:71:b4:34:d7:19:c5:30:39:99:a5:b8: 24:36:9b:ba:3f:e8:b1:4f:c1:08:a4:40:a0:50:07:fe:84:cb: 2b:0c:c4:0d:1c:a6:ac:ba:98:27:66:d2:82:4b:e8:90:49:83: 9c:4b:cb:1f:42:47:fa:81:a6:ad:c6:2f:8d:03:8f:3a:63:12: 85:5e:e4:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QGhCSlF7XrdOIl2uw6vBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1M2Q0NzZkYjk2ZGUxZTU4NjIzMTE5YTcwYjlkN2IwMGI2 NzZkYTAwHhcNMjUxMjA2MjAwMDMwWhcNMjUxMjA3MjAwMDMwWjAzMTEwLwYDVQQD EygxYTY1ZTExODdmN2Y5ZDNkNDU1M2FlMjE4MmUwNTExZDkzYzAwMTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bkVhB0m+j5VFvhwTza4XALh1bPi 3HGfTlcPQ5o71O7jguokkdPcKmhjRYFlYwytLcR4nQjsu08LmMmuz9bKveGIX2I9 qyYM/5o/6Ashe9dMp5M+DCH9fS64QwNj1nmEMBDq0KqXHPufyqtP1kpBi/Zuxpcq lrYBvmaxX6k0t1XR+E4WlzTYtQVXJPTldDGWrf5ySK94nc+WG5r/FE2Am2sgfH6T W66O2jXG3ohiJfRxdpCLs/XkvhewhxfMUGaZXa7ZNMiqsC5jRZkCkyjC6ElyIljY 1+VG8T5NJA6mMM1+IDp/9UzbYDkhlmgDk/ZIp2VC7cpmmcIPCgrerhLTcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpl4Rh/f509RVOuIYLgUR2TwAGdMB8GA1UdIwQY MBaAFHU9R225beHlhiMRmnC517ALZ22gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82YTljZjktYzBjYy00MDExLTg2MGUt NDY4NTc4MmFjMmMzLzEvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi82YTljZjktYzBjYy00MDExLTg2MGUtNDY4NTc4MmFjMmMz LzEvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzWUBwJR 8X+QP1YmLAw3nA5tD6pg4kphHZ5XioNxEdWxz8AWG2DIlltYLnr6gZo2TycXv/8a 8EAwkoKIHOPwPuwe/HzVAtgFaWf+Wq18xO2i7OVUjWTJVXA3Ddwfspt89pKXhvma JAJsq6TGkidPeqwwDkocgjK/LhG651Je46b6JGn4n2OBrt2xMNf2BuQlf4XEPUto IhDwemY345qaOolCcW6VyJ0wytmOIqp9EOM6rWzhQm2sEV1uJXG0NNcZxTA5maW4 JDabuj/osU/BCKRAoFAH/oTLKwzEDRymrLqYJ2bSgkvokEmDnEvLH0JH+oGmrcYv jQOPOmMShV7kbg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:24:18 2025 by rpki-client