This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.mft File: t1ELZRv73wnISGqBNiAABb77SX0.mft (raw, json) Hash identifier: vPylZrlpBEt7m3ljUTPah94/j3EqUvF2DnJ4VG4wAU0= Subject key identifier: 83:43:77:6E:03:4E:6F:8C:2E:65:E9:13:30:A5:EC:A5:0F:3E:88:00 Authority key identifier: B7:51:0B:65:1B:FB:DF:09:C8:48:6A:81:36:20:00:05:BE:FB:49:7D Certificate issuer: /CN=b7510b651bfbdf09c8486a8136200005befb497d Certificate serial: 019B2C6646338083E6F11917DB3EA2B8422A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1ELZRv73wnISGqBNiAABb77SX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.mft Manifest number: 0DFF Signing time: Wed 17 Dec 2025 13:00:58 +0000 Manifest this update: Wed 17 Dec 2025 13:00:58 +0000 Manifest next update: Thu 18 Dec 2025 13:00:58 +0000 Files and hashes: 1: Jiow1t-Pk1ZOtI6Aqeh1RaSW3p4.roa (hash: DYR6jlP51Fl43ZL0B6qnJrGHJROyqbTA9KSRORts0Uo=) 2: t1ELZRv73wnISGqBNiAABb77SX0.crl (hash: X5RzPueOOsji5yUAfBthDvsKOlswLXNc45DDeYEbuEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.mft rsync://rpki.ripe.net/repository/DEFAULT/t1ELZRv73wnISGqBNiAABb77SX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:46:33:80:83:e6:f1:19:17:db:3e:a2:b8:42:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7510b651bfbdf09c8486a8136200005befb497d Validity Not Before: Dec 17 13:00:58 2025 GMT Not After : Dec 18 13:00:58 2025 GMT Subject: CN=8343776e034e6f8c2e65e91330a5eca50f3e8800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e1:9e:a2:b6:97:2c:d0:9a:b8:4b:01:80:87: 8b:1f:17:85:c3:00:81:7b:63:c7:81:3e:92:da:66: 00:ec:5c:08:5f:5e:7f:8b:c1:7c:4b:eb:f0:b1:33: 30:41:d1:3b:8f:4d:05:93:7c:2b:39:13:c3:9b:6d: 26:2c:2a:9d:79:61:f5:49:ad:e2:0d:16:be:a2:f3: f4:a8:9a:aa:83:a5:24:29:b3:64:53:c9:19:82:d2: 01:3b:f9:2a:36:2e:56:b5:1c:b4:92:ff:80:52:1b: 9d:34:d3:d9:c0:f2:62:f4:fa:9e:20:55:f5:0a:b2: 37:48:cc:5a:93:b0:ae:34:d0:25:24:2f:68:ee:76: 7c:0a:3c:f5:5d:fd:c2:7f:1f:46:ea:f2:90:82:59: a2:0a:c1:30:4c:27:7e:91:46:87:63:dc:cc:7d:d5: be:fd:b9:8b:e0:d6:b6:1f:7e:de:5a:3b:c7:60:a6: aa:c8:d3:61:d4:46:d4:25:cf:6d:ea:c2:0d:5f:c9: c0:5e:ae:28:23:16:49:83:c4:a3:95:60:1d:f3:00: f5:7e:c1:f1:1b:33:1d:e5:50:e6:f0:9c:20:9d:97: 51:9f:e8:1c:15:13:fc:a0:e6:c5:4f:d3:09:83:c6: 47:9b:6c:73:1b:e8:79:3b:55:21:fc:7c:c2:8c:e3: de:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:43:77:6E:03:4E:6F:8C:2E:65:E9:13:30:A5:EC:A5:0F:3E:88:00 X509v3 Authority Key Identifier: keyid:B7:51:0B:65:1B:FB:DF:09:C8:48:6A:81:36:20:00:05:BE:FB:49:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1ELZRv73wnISGqBNiAABb77SX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:d7:4f:fc:7a:e0:5b:b9:5b:7b:99:1e:2d:ea:98:7f:7f:89: 92:e7:2f:23:70:1b:33:80:0f:b9:2d:02:3c:5c:8c:32:d6:7d: ac:42:95:40:74:e2:1d:f7:95:c5:5d:43:9c:a6:a8:71:d8:eb: 0c:1c:cd:b1:70:c3:ef:b4:42:72:c3:1d:74:66:a4:72:35:8e: bc:b1:50:66:b2:ee:c9:d2:85:6b:57:2d:f9:22:52:54:bf:3a: da:13:8d:6d:36:89:34:75:cc:88:b8:8b:ba:e6:ae:47:a4:fe: db:bc:cc:7e:4d:60:d3:26:b5:68:ed:34:fc:87:7e:ef:10:d1: 20:59:60:bf:10:95:bc:bf:20:4a:be:62:88:cb:0b:3f:33:bb: 6b:3b:3f:d6:58:17:a6:52:fb:54:3e:8f:de:6d:b7:24:e0:61: df:df:82:5d:0e:eb:61:ba:90:c1:3a:4c:0d:c9:9a:d2:17:5d: ff:f4:6b:f1:ca:eb:98:fe:6e:7a:53:c7:4e:6c:f2:15:e2:ce: 90:c7:4c:1d:48:00:3b:2a:03:e9:17:0f:56:a5:93:b4:84:f4: ce:a0:90:d3:38:4a:9c:11:20:33:81:97:09:58:fd:d2:ef:2b: 4a:d7:f5:fa:f1:de:79:84:39:e2:f3:06:ae:33:52:b0:27:85: 54:52:c3:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZkYzgIPm8RkX2z6iuEIqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NTEwYjY1MWJmYmRmMDljODQ4NmE4MTM2MjAwMDA1YmVm YjQ5N2QwHhcNMjUxMjE3MTMwMDU4WhcNMjUxMjE4MTMwMDU4WjAzMTEwLwYDVQQD Eyg4MzQzNzc2ZTAzNGU2ZjhjMmU2NWU5MTMzMGE1ZWNhNTBmM2U4ODAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+GeoraXLNCauEsBgIeLHxeFwwCB e2PHgT6S2mYA7FwIX15/i8F8S+vwsTMwQdE7j00Fk3wrORPDm20mLCqdeWH1Sa3i DRa+ovP0qJqqg6UkKbNkU8kZgtIBO/kqNi5WtRy0kv+AUhudNNPZwPJi9PqeIFX1 CrI3SMxak7CuNNAlJC9o7nZ8Cjz1Xf3Cfx9G6vKQglmiCsEwTCd+kUaHY9zMfdW+ /bmL4Na2H37eWjvHYKaqyNNh1EbUJc9t6sINX8nAXq4oIxZJg8SjlWAd8wD1fsHx GzMd5VDm8JwgnZdRn+gcFRP8oObFT9MJg8ZHm2xzG+h5O1Uh/HzCjOPefwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINDd24DTm+MLmXpEzCl7KUPPogAMB8GA1UdIwQY MBaAFLdRC2Ub+98JyEhqgTYgAAW++0l9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDFFTFpSdjczd25JU0dxQk5pQUFCYjc3U1gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9iZmYxYzMtMDA4NC00MmJiLWJjZjct MmNiODg3N2ZkOTcwLzEvdDFFTFpSdjczd25JU0dxQk5pQUFCYjc3U1gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9iZmYxYzMtMDA4NC00MmJiLWJjZjctMmNiODg3N2ZkOTcw LzEvdDFFTFpSdjczd25JU0dxQk5pQUFCYjc3U1gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjNdP/Hrg W7lbe5keLeqYf3+JkucvI3AbM4APuS0CPFyMMtZ9rEKVQHTiHfeVxV1DnKaocdjr DBzNsXDD77RCcsMddGakcjWOvLFQZrLuydKFa1ct+SJSVL862hONbTaJNHXMiLiL uuauR6T+27zMfk1g0ya1aO00/Id+7xDRIFlgvxCVvL8gSr5iiMsLPzO7azs/1lgX plL7VD6P3m23JOBh39+CXQ7rYbqQwTpMDcma0hdd//Rr8crrmP5uelPHTmzyFeLO kMdMHUgAOyoD6RcPVqWTtIT0zqCQ0zhKnBEgM4GXCVj90u8rStf1+vHeeYQ54vMG rjNSsCeFVFLD1g== -----END CERTIFICATE-----Generated at Wed Dec 17 17:44:46 2025 by rpki-client