This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft File: 1TX4-scGL3fyS5jNXDtUqJutSDg.mft (raw, json) Hash identifier: ltxA6Ho61p7NXt77WpsUUv61f9xhD3x/rZ/7RyJqy3E= Subject key identifier: D8:DC:BC:E8:E6:8F:48:C2:89:51:D9:18:36:B8:E6:0A:40:42:FF:03 Authority key identifier: D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38 Certificate issuer: /CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838 Certificate serial: 019AF12D65D056692EAD928C3957EC4BF73C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 01:01:15 +0000 Manifest this update: Sat 06 Dec 2025 01:01:15 +0000 Manifest next update: Sun 07 Dec 2025 01:01:15 +0000 Files and hashes: 1: 1TX4-scGL3fyS5jNXDtUqJutSDg.crl (hash: /zwwrkaSZEDshJXyIo7ap7Sxu97q6c3lfs2syFd7s4U=) 2: N3-917WPyl7E_IHoSS2FMLc18wo.roa (hash: VHNMzSlgwcYRKlzGy0Nb6X63KDdiRRNUd0w6+PH3+3w=) 3: oJEvXpEBpuYbcFfcZPDBTEehGY8.roa (hash: b0SdOLZ2AbPJ+0i7CwF2Gja+/00y5/FVMUIAvNs5h1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:65:d0:56:69:2e:ad:92:8c:39:57:ec:4b:f7:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838 Validity Not Before: Dec 6 01:01:15 2025 GMT Not After : Dec 7 01:01:15 2025 GMT Subject: CN=d8dcbce8e68f48c28951d91836b8e60a4042ff03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:83:99:04:58:ca:ea:ea:ef:df:b1:48:b5:e7: 3a:a8:d3:de:b5:c2:15:d9:fa:9c:66:68:52:e2:54: 98:6e:fb:78:e5:c6:e4:50:f4:55:d0:7f:1b:e4:69: 24:9f:9a:5d:50:76:a3:ca:16:6f:0f:d5:0b:b2:05: 2b:ca:30:fa:9c:32:1b:52:28:d5:59:4a:65:86:e6: 89:63:81:62:00:48:5b:04:44:36:95:29:9f:4b:76: c8:34:fc:39:b7:31:9f:b7:cf:28:6b:dc:c8:bd:1f: 2d:a7:5b:90:0e:63:fd:0f:53:4e:ab:f2:18:d9:47: ac:ab:20:6c:cc:38:3b:4d:28:1f:f6:c1:a9:a8:09: c4:50:4f:f6:10:c6:c9:4c:9e:79:18:64:c3:90:7c: 56:c6:9d:7c:27:5b:fe:60:48:78:4b:53:6e:15:a4: d7:24:10:47:61:b5:e3:11:11:7d:d8:e6:c1:77:af: d0:60:30:b1:f6:fb:5c:3a:f7:d4:d7:03:67:15:88: 38:30:39:d6:60:f9:70:85:91:9c:e2:5a:bb:19:43: 98:3e:32:75:d0:72:ad:b3:c8:84:3d:c8:82:ab:38: 4a:fa:a0:58:24:2f:ca:db:75:ee:07:9d:04:d8:9e: 56:eb:d6:f2:b6:94:9c:69:0c:b6:7f:bb:6e:f7:60: aa:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:DC:BC:E8:E6:8F:48:C2:89:51:D9:18:36:B8:E6:0A:40:42:FF:03 X509v3 Authority Key Identifier: keyid:D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:73:70:fa:03:01:ef:c1:eb:9f:f3:4d:57:b7:0c:ee:db:2c: 79:66:a8:dd:1d:c6:f3:fb:66:e3:8f:bb:6e:bd:aa:55:41:ba: 24:df:c1:ce:4d:b9:e3:8f:b6:ea:31:6b:87:03:5b:8d:66:2d: ff:3f:27:6e:4f:73:44:5c:3f:38:db:41:ec:db:81:7f:46:49: b7:28:62:f5:56:54:a9:42:2c:6b:05:f3:0b:31:f5:bb:bd:e0: 81:69:9f:22:d2:1d:e3:88:aa:dd:37:4e:20:b0:62:56:35:95: f3:0f:15:90:62:64:32:f4:10:b9:7e:c4:fc:9f:72:d0:3d:9c: 24:67:8c:50:63:79:81:18:8b:e5:a6:88:9f:88:48:ed:2a:58: 1a:9e:de:87:69:17:51:64:a7:f0:28:ea:12:2d:ef:f6:3a:0d: c9:39:a3:40:d1:7d:5e:8f:e1:cf:a2:d7:f2:59:b2:43:f9:a1: aa:6f:49:81:c6:de:a5:7b:ea:16:25:a3:70:ac:50:70:96:f3: 4c:83:54:be:c0:9d:03:56:5b:54:32:c7:d8:11:4d:de:31:45: 95:36:40:4f:94:8b:09:30:df:c0:ab:87:c6:5d:4c:15:7f:b1: 3c:ea:1c:de:7c:6e:d4:93:19:cd:b1:e1:f4:ec:57:4a:fe:9c: dd:5f:8a:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWXQVmkurZKMOVfsS/c8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MzVmOGZhYzcwNjJmNzdmMjRiOThjZDVjM2I1NGE4OWJh ZDQ4MzgwHhcNMjUxMjA2MDEwMTE1WhcNMjUxMjA3MDEwMTE1WjAzMTEwLwYDVQQD EyhkOGRjYmNlOGU2OGY0OGMyODk1MWQ5MTgzNmI4ZTYwYTQwNDJmZjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4OZBFjK6urv37FItec6qNPetcIV 2fqcZmhS4lSYbvt45cbkUPRV0H8b5Gkkn5pdUHajyhZvD9ULsgUryjD6nDIbUijV WUplhuaJY4FiAEhbBEQ2lSmfS3bINPw5tzGft88oa9zIvR8tp1uQDmP9D1NOq/IY 2UesqyBszDg7TSgf9sGpqAnEUE/2EMbJTJ55GGTDkHxWxp18J1v+YEh4S1NuFaTX JBBHYbXjERF92ObBd6/QYDCx9vtcOvfU1wNnFYg4MDnWYPlwhZGc4lq7GUOYPjJ1 0HKts8iEPciCqzhK+qBYJC/K23XuB50E2J5W69bytpScaQy2f7tu92CqhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjcvOjmj0jCiVHZGDa45gpAQv8DMB8GA1UdIwQY MBaAFNU1+PrHBi938kuYzVw7VKibrUg4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVRYNC1zY0dMM2Z5UzVqTlhEdFVxSnV0U0RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wOTdkYTEtN2NjOS00MzQzLTgwMjQt YjMxMGQ3MWMyY2FkLzEvMVRYNC1zY0dMM2Z5UzVqTlhEdFVxSnV0U0RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8wOTdkYTEtN2NjOS00MzQzLTgwMjQtYjMxMGQ3MWMyY2Fk LzEvMVRYNC1zY0dMM2Z5UzVqTlhEdFVxSnV0U0RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQHNw+gMB 78Hrn/NNV7cM7tsseWao3R3G8/tm44+7br2qVUG6JN/Bzk2544+26jFrhwNbjWYt /z8nbk9zRFw/ONtB7NuBf0ZJtyhi9VZUqUIsawXzCzH1u73ggWmfItId44iq3TdO ILBiVjWV8w8VkGJkMvQQuX7E/J9y0D2cJGeMUGN5gRiL5aaIn4hI7SpYGp7eh2kX UWSn8CjqEi3v9joNyTmjQNF9Xo/hz6LX8lmyQ/mhqm9JgcbepXvqFiWjcKxQcJbz TINUvsCdA1ZbVDLH2BFN3jFFlTZAT5SLCTDfwKuHxl1MFX+xPOoc3nxu1JMZzbHh 9OxXSv6c3V+KdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:01 2025 by rpki-client