This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft File: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json) Hash identifier: J6j07/y+gZvFEouyuLNx7pRsuc05zympC881pdirtx4= Subject key identifier: 81:0D:91:22:43:DE:87:36:6D:DE:B0:57:F1:FA:91:39:48:43:E1:25 Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf Certificate serial: 019B31C390A98120A132B2407B2A8F720DAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft Manifest number: 0F64 Signing time: Thu 18 Dec 2025 14:00:58 +0000 Manifest this update: Thu 18 Dec 2025 14:00:58 +0000 Manifest next update: Fri 19 Dec 2025 14:00:58 +0000 Files and hashes: 1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: G0RoTb0b47PZU+b/0PNgXI00MrlLr8IHbD/iBEr/Yac=) 2: ZrVj2s197OVZslr8l0eL6BOnr3w.roa (hash: MfbdU/hx9JIBrv7/G68X/y0zTkmoV59GNKmYnsQV+5o=) 3: mwni58KyYHbpUQER4Pt8qtMcan4.roa (hash: 1zAR9iZ3h0/evzy5xE5e6DnfwvHvR1HUWm8sNJWcti0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:90:a9:81:20:a1:32:b2:40:7b:2a:8f:72:0d:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf Validity Not Before: Dec 18 14:00:58 2025 GMT Not After : Dec 19 14:00:58 2025 GMT Subject: CN=810d912243de87366ddeb057f1fa91394843e125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:65:f5:ee:c8:fe:a1:23:7f:8b:5a:5d:2e:3a: 4e:07:fa:a4:10:d9:3c:0a:5b:35:16:44:69:c0:f9: 82:72:85:12:7d:dc:49:fc:9b:d2:52:d6:94:27:c0: 2a:e9:b3:84:8d:a3:fd:ab:fe:9e:06:62:61:be:f3: fa:db:3a:e7:f9:c7:76:58:eb:f4:6a:71:fa:0f:c0: b7:8b:d1:1b:64:71:7f:1d:ff:a8:71:89:ea:5a:7e: 37:62:5d:9f:3d:00:6c:99:13:01:2f:60:65:6c:cf: 78:05:b2:fc:b7:03:3c:6d:17:1a:09:08:73:25:2d: 8a:0b:78:c6:5b:b9:4d:2c:12:65:cb:91:94:84:3a: f7:c3:ce:65:e0:0a:9f:df:67:76:84:f5:3a:7e:6d: 48:7a:10:04:c5:63:23:b8:2a:eb:f5:25:49:c8:36: 49:cf:99:f1:88:dd:86:8a:cf:fa:af:3c:f2:a1:c6: e5:dd:f3:0b:ee:bc:d0:0f:17:64:87:17:9a:f3:e3: 79:e7:f3:7d:fc:14:4b:ea:44:16:69:ad:81:c6:84: 27:60:8e:84:14:c5:8a:17:3e:b0:f4:f2:ea:b7:bf: d0:66:ee:1b:2c:79:70:75:2c:66:07:89:8c:c8:41: dc:e6:f6:96:89:95:c9:d5:a3:2f:d0:68:2f:15:1e: 1c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0D:91:22:43:DE:87:36:6D:DE:B0:57:F1:FA:91:39:48:43:E1:25 X509v3 Authority Key Identifier: keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:1f:5c:87:42:a6:4f:63:73:eb:7c:78:80:af:f2:39:96:db: 8d:9e:7a:77:70:7c:39:11:b0:bc:b5:9a:09:f5:fb:9f:4f:16: e8:02:4c:ab:ae:48:b5:fc:96:66:9c:5a:1c:96:8a:43:9d:93: 86:17:bb:0a:38:65:27:89:72:30:1e:e7:fd:1a:d7:5a:76:01: 44:2d:42:0f:de:74:d3:ea:ad:2e:29:6f:10:bd:fb:a2:72:ab: 83:9c:18:bf:a8:bb:74:5e:b5:0a:21:c0:69:e3:48:34:b3:80: d5:70:bc:6c:66:22:c2:48:99:77:c1:6a:e7:ca:de:18:f2:76: 72:8b:15:93:6e:af:9d:ea:1d:37:d4:cc:7e:5c:23:ec:fd:bb: 71:0b:22:c6:31:c4:27:bf:27:37:3a:5f:3b:89:26:cf:fd:09: b3:01:c3:6d:69:5d:89:2c:d4:18:2b:e2:ef:59:98:64:22:82: 7e:95:ce:05:b4:71:cf:d0:6b:eb:c9:07:3f:11:11:fb:16:6d: f0:4a:d1:7e:09:76:13:f3:1a:03:0a:0f:f9:ec:5a:d5:8d:0e: 80:7e:c9:3a:32:52:1b:4f:17:c9:9b:58:d0:6c:ff:f3:0f:d3: 30:23:55:33:99:62:8a:89:5f:4e:0b:14:e7:d6:51:77:5e:90: 36:8c:b0:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw5CpgSChMrJAeyqPcg2rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MzhkNzcyNmE1ZjFmMzNkYTE1ZDg3ZTVjOGIwZTQ4ZjUw MjgxYmYwHhcNMjUxMjE4MTQwMDU4WhcNMjUxMjE5MTQwMDU4WjAzMTEwLwYDVQQD Eyg4MTBkOTEyMjQzZGU4NzM2NmRkZWIwNTdmMWZhOTEzOTQ4NDNlMTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGX17sj+oSN/i1pdLjpOB/qkENk8 Cls1FkRpwPmCcoUSfdxJ/JvSUtaUJ8Aq6bOEjaP9q/6eBmJhvvP62zrn+cd2WOv0 anH6D8C3i9EbZHF/Hf+ocYnqWn43Yl2fPQBsmRMBL2BlbM94BbL8twM8bRcaCQhz JS2KC3jGW7lNLBJly5GUhDr3w85l4Aqf32d2hPU6fm1IehAExWMjuCrr9SVJyDZJ z5nxiN2Gis/6rzzyocbl3fML7rzQDxdkhxea8+N55/N9/BRL6kQWaa2BxoQnYI6E FMWKFz6w9PLqt7/QZu4bLHlwdSxmB4mMyEHc5vaWiZXJ1aMv0GgvFR4c1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIENkSJD3oc2bd6wV/H6kTlIQ+ElMB8GA1UdIwQY MBaAFNU413JqXx8z2hXYflyLDkj1AoG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVRqWGNtcGZIelBhRmRoLVhJc09TUFVDZ2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80M2M0NTEtZTRlOS00ODU5LWI5ODUt MmQ5ZGY0ZWY1ZjUwLzEvMVRqWGNtcGZIelBhRmRoLVhJc09TUFVDZ2I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC80M2M0NTEtZTRlOS00ODU5LWI5ODUtMmQ5ZGY0ZWY1ZjUw LzEvMVRqWGNtcGZIelBhRmRoLVhJc09TUFVDZ2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADx9ch0Km T2Nz63x4gK/yOZbbjZ56d3B8ORGwvLWaCfX7n08W6AJMq65ItfyWZpxaHJaKQ52T hhe7CjhlJ4lyMB7n/RrXWnYBRC1CD9500+qtLilvEL37onKrg5wYv6i7dF61CiHA aeNINLOA1XC8bGYiwkiZd8Fq58reGPJ2cosVk26vneodN9TMflwj7P27cQsixjHE J78nNzpfO4kmz/0JswHDbWldiSzUGCvi71mYZCKCfpXOBbRxz9Br68kHPxER+xZt 8ErRfgl2E/MaAwoP+exa1Y0OgH7JOjJSG08XyZtY0Gz/8w/TMCNVM5liiolfTgsU 59ZRd16QNoywWA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:05:14 2025 by rpki-client