This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft File: 1-K1UNiT40ygeyXBFjudS8QpCRSk.mft (raw, json) Hash identifier: /9XxGUM9KjDmSNnUXiJhy7LG+Tv0GWrRstC8I7bkHa4= Subject key identifier: 14:36:EE:D3:DB:37:F0:37:BE:EE:A1:45:8E:DC:EA:88:9C:1D:89:06 Authority key identifier: F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29 Certificate issuer: /CN=f8ad543624f8d3281ec970458ee752f10a424529 Certificate serial: 019B115D58E6EF4327D0B6D32731AD0392B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft Manifest number: 177A Signing time: Fri 12 Dec 2025 07:01:28 +0000 Manifest this update: Fri 12 Dec 2025 07:01:28 +0000 Manifest next update: Sat 13 Dec 2025 07:01:28 +0000 Files and hashes: 1: 0IRPcg0Zsb-gPoOdS1ZxVTcB0GM.roa (hash: ujPSAk32+dpIjTUsucTHydurSTU82h9ZEz2rCwGCvb4=) 2: 1-K1UNiT40ygeyXBFjudS8QpCRSk.crl (hash: PRB8ALOCX0wUknK8mdSNNqysJHiMyPUQnZOk9EhAfqo=) 3: 27QIFK3RME4zastoZr-Aqup92E4.roa (hash: AP5Zl89w4EnvvkKDLE1wTCUl3HvQyebnmKUtnCiGMTg=) 4: JbyektcecEj3BAlwzdyd-YQZG-I.roa (hash: qaQjv/GNe5ncVF9/+USSvz1DDnlwL3O9F43o15WDW8o=) 5: Pza9faIJ5cktDsZNFR6fEzPMTws.roa (hash: IZazQ28vh340utjMZWOtEpCw1yIpqU4ff78jK5/vzyY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5d:58:e6:ef:43:27:d0:b6:d3:27:31:ad:03:92:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8ad543624f8d3281ec970458ee752f10a424529 Validity Not Before: Dec 12 07:01:28 2025 GMT Not After : Dec 13 07:01:28 2025 GMT Subject: CN=1436eed3db37f037beeea1458edcea889c1d8906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d4:92:25:63:dc:7d:f8:d2:c8:f5:0e:eb:ba: 0b:5d:64:47:20:9b:8d:04:d4:56:8d:62:18:35:19: 4f:59:aa:b9:d6:51:60:f8:43:a5:57:90:15:d7:57: a9:2d:9a:0e:d7:89:4f:b2:79:ab:55:d4:86:60:bf: af:a5:d7:e2:91:a0:3a:fd:08:d6:b1:38:f5:e8:04: e7:e4:fc:92:a4:52:ab:7b:3c:e1:c3:17:c5:f5:8e: 41:31:ad:71:9e:ab:fb:d9:01:35:fa:41:14:7a:6e: 65:44:bd:db:02:91:f2:ca:31:20:32:f4:e4:04:ab: 2e:2c:1e:1b:39:3d:96:84:50:8d:12:bf:27:3d:79: a9:b7:d2:ed:f1:60:d8:03:37:3c:5d:77:17:71:34: 6a:e1:07:5c:28:e5:88:0a:6d:27:ff:31:c6:a0:2f: 84:0a:a5:44:1c:f4:c0:d2:88:86:02:bb:6e:48:38: cb:1f:42:8d:48:f8:2a:aa:98:a0:b4:71:1c:5a:12: 73:7f:b9:de:0d:12:48:17:ac:08:a7:4a:78:5c:d6: 79:57:4f:11:c8:5d:ca:44:0f:5d:7f:24:20:2a:72: 82:da:7e:ca:e8:fa:0c:a6:79:da:52:68:53:05:2c: 1b:ef:90:0e:f8:49:a4:52:09:99:f9:c4:50:1e:f8: e7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:36:EE:D3:DB:37:F0:37:BE:EE:A1:45:8E:DC:EA:88:9C:1D:89:06 X509v3 Authority Key Identifier: keyid:F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:4a:d2:d7:eb:e1:37:ac:ed:91:5c:99:f5:bd:92:c9:d1:0c: 4d:5a:f7:20:a8:40:dd:db:82:c3:4b:d4:d6:03:a8:ec:d4:07: 20:fa:3f:eb:87:59:01:9e:a5:bb:e5:91:c4:33:2c:06:16:c0: 38:ef:ab:e5:ed:02:56:2f:6a:2a:c8:8f:cd:22:16:c9:4f:a1: 71:2f:85:5b:6a:80:72:1c:22:1c:00:0e:8a:08:02:d9:22:62: 08:a9:3f:63:32:ec:d3:23:7f:1d:3a:4b:75:c1:8e:dc:a1:6a: 42:fb:c4:b1:25:8f:e6:8d:54:bb:24:45:02:25:4a:14:e1:d4: 0e:e5:93:66:c4:dd:a8:92:b7:62:bc:53:8e:61:5c:36:16:70: 13:56:3c:7b:22:ab:2d:2b:b8:40:59:5c:e9:18:de:da:2d:cb: b1:ec:41:40:d8:81:89:a6:46:07:25:bf:ee:53:76:6a:f6:14: a6:b4:f1:0f:28:24:89:55:fc:1a:07:40:d0:c2:83:f9:a8:5b: 2e:c6:7b:8c:4c:e3:54:4e:4b:15:98:a0:ea:a1:41:75:7e:b7: 23:1e:ec:01:2d:e1:17:c6:0c:f6:34:74:1a:ef:b3:43:37:8f: cd:c7:79:81:2a:76:6d:92:01:f4:39:93:04:f4:c3:84:c4:08: 81:d5:fa:13 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsRXVjm70Mn0LbTJzGtA5K3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YWQ1NDM2MjRmOGQzMjgxZWM5NzA0NThlZTc1MmYxMGE0 MjQ1MjkwHhcNMjUxMjEyMDcwMTI4WhcNMjUxMjEzMDcwMTI4WjAzMTEwLwYDVQQD EygxNDM2ZWVkM2RiMzdmMDM3YmVlZWExNDU4ZWRjZWE4ODljMWQ4OTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dSSJWPcffjSyPUO67oLXWRHIJuN BNRWjWIYNRlPWaq51lFg+EOlV5AV11epLZoO14lPsnmrVdSGYL+vpdfikaA6/QjW sTj16ATn5PySpFKrezzhwxfF9Y5BMa1xnqv72QE1+kEUem5lRL3bApHyyjEgMvTk BKsuLB4bOT2WhFCNEr8nPXmpt9Lt8WDYAzc8XXcXcTRq4QdcKOWICm0n/zHGoC+E CqVEHPTA0oiGArtuSDjLH0KNSPgqqpigtHEcWhJzf7neDRJIF6wIp0p4XNZ5V08R yF3KRA9dfyQgKnKC2n7K6PoMpnnaUmhTBSwb75AO+EmkUgmZ+cRQHvjnvQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBQ27tPbN/A3vu6hRY7c6oicHYkGMB8GA1UdIwQY MBaAFPitVDYk+NMoHslwRY7nUvEKQkUpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LMVVOaVQ0MHlnZXlYQkZqdWRTOFFwQ1JTay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvYWYxZjY0LWMzNWYtNDdlOC04N2M5 LThhMTFiNDcxOWQ4Mi8xLzEtSzFVTmlUNDB5Z2V5WEJGanVkUzhRcENSU2subWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzIwL2FmMWY2NC1jMzVmLTQ3ZTgtODdjOS04YTExYjQ3MTlk ODIvMS8xLUsxVU5pVDQweWdleVhCRmp1ZFM4UXBDUlNrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnkrS 1+vhN6ztkVyZ9b2SydEMTVr3IKhA3duCw0vU1gOo7NQHIPo/64dZAZ6lu+WRxDMs BhbAOO+r5e0CVi9qKsiPzSIWyU+hcS+FW2qAchwiHAAOiggC2SJiCKk/YzLs0yN/ HTpLdcGO3KFqQvvEsSWP5o1UuyRFAiVKFOHUDuWTZsTdqJK3YrxTjmFcNhZwE1Y8 eyKrLSu4QFlc6Rje2i3LsexBQNiBiaZGByW/7lN2avYUprTxDygkiVX8GgdA0MKD +ahbLsZ7jEzjVE5LFZig6qFBdX63Ix7sAS3hF8YM9jR0Gu+zQzePzcd5gSp2bZIB 9DmTBPTDhMQIgdX6Ew== -----END CERTIFICATE-----Generated at Fri Dec 12 17:12:14 2025 by rpki-client