This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft File: 1TX4-scGL3fyS5jNXDtUqJutSDg.mft (raw, json) Hash identifier: xJrVET0cphs/D9Fjsi4DtmdE6ViTliVrqgRCtxX5dpA= Subject key identifier: CA:28:64:F0:F8:56:DE:D7:8B:6C:4C:4E:D9:7B:4D:9D:62:EC:D9:38 Authority key identifier: D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38 Certificate issuer: /CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838 Certificate serial: 019B2B1DD9394D385D8BE9B02CA035BF0454 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft Manifest number: 1712 Signing time: Wed 17 Dec 2025 07:02:14 +0000 Manifest this update: Wed 17 Dec 2025 07:02:14 +0000 Manifest next update: Thu 18 Dec 2025 07:02:14 +0000 Files and hashes: 1: 1TX4-scGL3fyS5jNXDtUqJutSDg.crl (hash: Y7PYzvOs1i/Iu5I6od3O9b4/JzB94o9EdTOntYJyMDU=) 2: N3-917WPyl7E_IHoSS2FMLc18wo.roa (hash: VHNMzSlgwcYRKlzGy0Nb6X63KDdiRRNUd0w6+PH3+3w=) 3: oJEvXpEBpuYbcFfcZPDBTEehGY8.roa (hash: b0SdOLZ2AbPJ+0i7CwF2Gja+/00y5/FVMUIAvNs5h1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:d9:39:4d:38:5d:8b:e9:b0:2c:a0:35:bf:04:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838 Validity Not Before: Dec 17 07:02:14 2025 GMT Not After : Dec 18 07:02:14 2025 GMT Subject: CN=ca2864f0f856ded78b6c4c4ed97b4d9d62ecd938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:79:96:ee:07:26:00:d4:e3:77:88:60:10:9d: db:14:a1:d4:b5:9f:0f:33:a6:41:2f:34:31:29:f4: a7:35:ee:83:57:d9:55:a0:bd:ea:b4:1f:e2:c3:35: 1a:06:ae:70:5d:3c:cf:25:f3:79:5d:70:a8:e6:df: 1c:ab:78:43:6d:51:22:20:34:87:86:74:66:e8:d9: 4e:86:10:65:6c:24:ba:85:0d:c2:c8:c8:3f:48:96: af:92:86:ec:7f:b6:a0:c7:fc:b7:24:fb:b6:ae:0e: bc:b8:0c:50:fc:44:0d:3e:62:c8:9e:64:8e:63:cb: 14:ad:ab:1d:75:7d:43:83:87:71:52:06:ee:5d:a2: 12:25:d5:98:78:f3:1b:8e:d4:08:2e:23:9d:eb:a7: ff:96:86:ca:61:73:1f:d4:0a:6e:8c:df:c8:ca:af: 74:17:2a:58:7f:47:f6:9e:56:ba:b4:3e:db:f6:69: 56:2b:c1:d2:74:11:32:ac:2d:70:a4:98:9a:9f:a9: 10:52:12:6a:63:9a:4c:8e:f0:77:3e:a8:cb:4e:4c: 77:0e:f5:c7:da:86:df:cd:98:40:d9:9c:3d:d8:9f: 50:ee:3f:42:3d:b9:28:25:e3:59:aa:70:64:f9:ac: 2e:d7:17:3e:9b:a8:77:df:81:f2:b7:ba:e9:19:f5: 16:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:28:64:F0:F8:56:DE:D7:8B:6C:4C:4E:D9:7B:4D:9D:62:EC:D9:38 X509v3 Authority Key Identifier: keyid:D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:86:58:6b:af:e2:59:e9:6c:47:d2:80:aa:a0:f5:20:7b:9f: 1d:e6:7e:c4:74:fc:70:8d:30:77:59:bc:d8:ba:b1:ca:09:d4: 96:cd:15:b2:f7:df:87:0a:46:0b:09:b0:4e:c6:3f:1d:8b:f4: 8f:20:8f:8a:73:34:cf:b0:7f:9c:0a:03:58:7a:7b:80:11:59: 32:b7:a2:08:e8:07:a2:08:a1:fe:53:5e:10:56:fe:0e:9e:5a: c4:92:a2:46:5d:b0:ff:01:30:7e:b2:18:fb:6d:b5:88:a3:b9: 6d:1e:d0:bb:d9:8e:b1:e7:6c:f3:6a:31:61:3c:37:da:db:09: 17:2f:3b:b9:b2:8e:fa:65:9b:9d:0a:8b:4b:6e:82:c3:f5:1a: 1f:de:8a:22:6c:26:ad:13:73:80:1c:20:fb:70:bd:7a:18:79: e2:71:df:2b:ab:94:a2:85:20:f2:2d:03:78:b7:4a:b6:fd:31: 33:5d:52:dd:2a:02:d3:d3:a5:06:8d:9d:b7:fb:7a:d3:d2:15: 25:71:58:4f:ab:b6:11:ca:98:fc:28:ff:ed:62:1e:0a:54:3d: 49:4c:ff:db:c4:24:8e:18:aa:79:09:f7:6a:b4:20:76:66:84: b6:e7:df:6b:72:59:61:cf:d5:a8:e6:1a:be:43:9a:4c:15:87: 5d:03:63:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHdk5TThdi+mwLKA1vwRUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MzVmOGZhYzcwNjJmNzdmMjRiOThjZDVjM2I1NGE4OWJh ZDQ4MzgwHhcNMjUxMjE3MDcwMjE0WhcNMjUxMjE4MDcwMjE0WjAzMTEwLwYDVQQD EyhjYTI4NjRmMGY4NTZkZWQ3OGI2YzRjNGVkOTdiNGQ5ZDYyZWNkOTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nmW7gcmANTjd4hgEJ3bFKHUtZ8P M6ZBLzQxKfSnNe6DV9lVoL3qtB/iwzUaBq5wXTzPJfN5XXCo5t8cq3hDbVEiIDSH hnRm6NlOhhBlbCS6hQ3CyMg/SJavkobsf7agx/y3JPu2rg68uAxQ/EQNPmLInmSO Y8sUrasddX1Dg4dxUgbuXaISJdWYePMbjtQILiOd66f/lobKYXMf1ApujN/Iyq90 FypYf0f2nla6tD7b9mlWK8HSdBEyrC1wpJian6kQUhJqY5pMjvB3PqjLTkx3DvXH 2obfzZhA2Zw92J9Q7j9CPbkoJeNZqnBk+awu1xc+m6h334Hyt7rpGfUWeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMooZPD4Vt7Xi2xMTtl7TZ1i7Nk4MB8GA1UdIwQY MBaAFNU1+PrHBi938kuYzVw7VKibrUg4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVRYNC1zY0dMM2Z5UzVqTlhEdFVxSnV0U0RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wOTdkYTEtN2NjOS00MzQzLTgwMjQt YjMxMGQ3MWMyY2FkLzEvMVRYNC1zY0dMM2Z5UzVqTlhEdFVxSnV0U0RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8wOTdkYTEtN2NjOS00MzQzLTgwMjQtYjMxMGQ3MWMyY2Fk LzEvMVRYNC1zY0dMM2Z5UzVqTlhEdFVxSnV0U0RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPIZYa6/i WelsR9KAqqD1IHufHeZ+xHT8cI0wd1m82LqxygnUls0VsvffhwpGCwmwTsY/HYv0 jyCPinM0z7B/nAoDWHp7gBFZMreiCOgHogih/lNeEFb+Dp5axJKiRl2w/wEwfrIY +221iKO5bR7Qu9mOseds82oxYTw32tsJFy87ubKO+mWbnQqLS26Cw/UaH96KImwm rRNzgBwg+3C9ehh54nHfK6uUooUg8i0DeLdKtv0xM11S3SoC09OlBo2dt/t609IV JXFYT6u2EcqY/Cj/7WIeClQ9SUz/28QkjhiqeQn3arQgdmaEtuffa3JZYc/VqOYa vkOaTBWHXQNjyA== -----END CERTIFICATE-----Generated at Wed Dec 17 13:47:02 2025 by rpki-client