This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft File: 1-tzmN--ygZRxWsKnISniBXG5g68.mft (raw, json) Hash identifier: MMVd2I/Sxrynf7tz6b0rPeOtAgM/oUUBIccVw9GvdMg= Subject key identifier: 0E:52:3C:62:0F:30:DD:84:BA:F8:31:4B:AE:91:D6:66:C7:7D:CA:94 Authority key identifier: FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF Certificate issuer: /CN=fadce637efb28194715ac2a72129e20571b983af Certificate serial: 019AF5E639161827549CEE59F2BF4B5FCD49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 23:01:37 +0000 Manifest this update: Sat 06 Dec 2025 23:01:37 +0000 Manifest next update: Sun 07 Dec 2025 23:01:37 +0000 Files and hashes: 1: 1-tzmN--ygZRxWsKnISniBXG5g68.crl (hash: Y4AMAmphYbenoqyXK74DBE9pLGDuFzAB5dPmVzDc5Cw=) 2: 5E1ZOs6jBFxTFh2Cf5ZnFlkIOxc.roa (hash: pA+HTgzqmsnmbM9IncUhyb9kGpbMUOBHi5UiEoEtsy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:39:16:18:27:54:9c:ee:59:f2:bf:4b:5f:cd:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadce637efb28194715ac2a72129e20571b983af Validity Not Before: Dec 6 23:01:37 2025 GMT Not After : Dec 7 23:01:37 2025 GMT Subject: CN=0e523c620f30dd84baf8314bae91d666c77dca94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:95:e8:2c:83:1a:e6:15:43:30:05:c7:9f:09: f8:48:85:71:f9:ce:be:ab:fe:67:74:c9:fe:11:21: 5c:af:61:6f:f1:62:bd:e7:40:91:f3:be:a9:5e:2f: 31:5a:7a:38:80:2a:77:48:37:1e:a8:a7:01:0c:db: 73:2b:61:46:24:ef:14:1b:90:a7:05:e3:32:60:60: bf:da:cf:e6:e8:79:e8:7e:ee:e7:d5:0c:e2:48:92: b8:67:54:16:bb:ad:37:1f:9b:e4:4d:ab:b1:69:d2: 19:5b:df:50:95:ac:35:32:69:04:7e:80:54:f0:87: 63:d9:32:8f:c4:71:fa:b6:71:2b:54:f4:0c:5e:fa: ef:3a:1a:6a:89:15:44:f8:cc:0d:91:db:ee:bd:e2: c5:2b:0c:5a:64:fa:a3:ba:f8:b8:af:8c:da:ec:6b: e9:cd:51:d6:f9:de:2f:c5:4d:55:0a:cf:51:66:f4: ff:df:b9:7a:28:44:fb:57:8a:55:d1:0c:75:9c:01: f8:17:06:e8:f4:bf:9b:59:b9:06:55:16:b5:a0:e4: b8:ed:f0:d7:c5:cc:3c:33:b6:10:09:d9:4b:df:22: b5:34:e4:48:47:06:85:c6:db:68:f0:ff:e3:aa:5b: 78:e5:a9:83:b7:67:3d:e4:b6:e1:72:14:3a:c0:19: 69:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:52:3C:62:0F:30:DD:84:BA:F8:31:4B:AE:91:D6:66:C7:7D:CA:94 X509v3 Authority Key Identifier: keyid:FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:15:e1:75:c8:95:e5:26:12:62:12:e7:b0:b1:c2:ee:85:43: 82:52:6f:32:eb:ca:42:fd:75:16:e6:63:19:30:68:aa:65:36: d9:76:e1:d1:7d:22:ac:aa:99:87:12:70:ed:86:9a:d3:ee:61: eb:73:d2:d3:f8:f0:65:4c:44:f1:28:c0:1a:f2:08:ce:2c:5a: 05:93:f3:dd:9a:76:08:32:8a:4d:3f:b3:61:8f:e2:67:80:60: 73:b8:b4:c9:9b:08:4a:3d:a7:ab:0a:a0:6e:1f:e2:25:51:d7: 2d:e7:71:0a:1b:17:90:78:de:d8:72:8a:fd:ea:a4:57:42:d5: f1:98:46:63:d7:7f:46:dd:8e:b4:c9:fa:4b:95:f8:02:a6:a5: ef:9c:62:a1:5c:2b:dc:b6:ec:cd:ef:96:43:bd:a2:db:49:de: c4:79:c8:93:37:b4:21:3e:96:41:d2:ab:fc:ee:20:b7:f0:a4: 10:c7:86:ad:4e:d6:ab:d4:a6:f8:f1:bc:ec:ab:6c:8f:59:06: 27:cd:6e:4c:6c:44:5e:7d:5e:d7:75:1f:fa:d8:66:5a:e1:15: 55:89:64:cf:d8:1e:48:63:c3:90:22:29:c5:54:d3:c1:de:48: 17:cb:4f:13:9f:64:5f:e2:90:52:27:8a:69:6c:cb:25:97:f9: b9:18:97:12 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr15jkWGCdUnO5Z8r9LX81JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZGNlNjM3ZWZiMjgxOTQ3MTVhYzJhNzIxMjllMjA1NzFi OTgzYWYwHhcNMjUxMjA2MjMwMTM3WhcNMjUxMjA3MjMwMTM3WjAzMTEwLwYDVQQD EygwZTUyM2M2MjBmMzBkZDg0YmFmODMxNGJhZTkxZDY2NmM3N2RjYTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JXoLIMa5hVDMAXHnwn4SIVx+c6+ q/5ndMn+ESFcr2Fv8WK950CR876pXi8xWno4gCp3SDceqKcBDNtzK2FGJO8UG5Cn BeMyYGC/2s/m6Hnofu7n1QziSJK4Z1QWu603H5vkTauxadIZW99Qlaw1MmkEfoBU 8Idj2TKPxHH6tnErVPQMXvrvOhpqiRVE+MwNkdvuveLFKwxaZPqjuvi4r4za7Gvp zVHW+d4vxU1VCs9RZvT/37l6KET7V4pV0Qx1nAH4Fwbo9L+bWbkGVRa1oOS47fDX xcw8M7YQCdlL3yK1NORIRwaFxtto8P/jqlt45amDt2c95LbhchQ6wBlpBwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFA5SPGIPMN2EuvgxS66R1mbHfcqUMB8GA1UdIwQY MBaAFPrc5jfvsoGUcVrCpyEp4gVxuYOvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS10em1OLS15Z1pSeFdzS25JU25pQlhHNWc2OC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvNTVmYmM1LWIyZGMtNDYzOS05YTNh LTY0MTE3ZGIyYzRlMS8xLzEtdHptTi0teWdaUnhXc0tuSVNuaUJYRzVnNjgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2M0LzU1ZmJjNS1iMmRjLTQ2MzktOWEzYS02NDExN2RiMmM0 ZTEvMS8xLXR6bU4tLXlnWlJ4V3NLbklTbmlCWEc1ZzY4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhBXh dciV5SYSYhLnsLHC7oVDglJvMuvKQv11FuZjGTBoqmU22Xbh0X0irKqZhxJw7Yaa 0+5h63PS0/jwZUxE8SjAGvIIzixaBZPz3Zp2CDKKTT+zYY/iZ4Bgc7i0yZsISj2n qwqgbh/iJVHXLedxChsXkHje2HKK/eqkV0LV8ZhGY9d/Rt2OtMn6S5X4Aqal75xi oVwr3Lbsze+WQ72i20nexHnIkze0IT6WQdKr/O4gt/CkEMeGrU7Wq9Sm+PG87Kts j1kGJ81uTGxEXn1e13Uf+thmWuEVVYlkz9geSGPDkCIpxVTTwd5IF8tPE59kX+KQ UieKaWzLJZf5uRiXEg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:57:35 2025 by rpki-client