This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft File: 1YzIUG_tu1Bh3pklsH1kmRihmSY.mft (raw, json) Hash identifier: 2cC4mFDcQTF0fI1CblIVVVuPgpeQyJ9xCHGqDSV18K4= Subject key identifier: FC:54:7D:9B:45:34:1A:CC:A7:AE:5B:AA:BC:D2:3B:6D:49:09:8C:00 Authority key identifier: D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26 Certificate issuer: /CN=d58cc8506fedbb5061de9925b07d649918a19926 Certificate serial: 019B5A5152558F5991C20B11871FE9E3BB0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft Manifest number: 1279 Signing time: Fri 26 Dec 2025 11:00:37 +0000 Manifest this update: Fri 26 Dec 2025 11:00:37 +0000 Manifest next update: Sat 27 Dec 2025 11:00:37 +0000 Files and hashes: 1: 1YzIUG_tu1Bh3pklsH1kmRihmSY.crl (hash: QnkCF09uWa2lTKMsNvpOrrIjXzBofFUQUEjhdfbRuN8=) 2: DniqmtindUam8vj_sVzvh8icBDA.roa (hash: ta5Hj3U5JYOoiYd4yiO8g7IzMIhuCaznIwtfzYiosBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:52:55:8f:59:91:c2:0b:11:87:1f:e9:e3:bb:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58cc8506fedbb5061de9925b07d649918a19926 Validity Not Before: Dec 26 11:00:37 2025 GMT Not After : Dec 27 11:00:37 2025 GMT Subject: CN=fc547d9b45341acca7ae5baabcd23b6d49098c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:46:ae:a9:ec:06:f0:4d:1e:bc:1f:90:b8:8f: a5:b9:54:c4:dc:af:78:43:00:8a:bd:33:d6:11:34: 94:8b:c6:bf:3b:5d:74:83:e2:3b:70:fc:a3:1c:f8: 17:45:94:ad:c8:0d:3f:7d:b8:e8:50:dc:5f:77:fc: 23:10:63:31:30:35:ef:f5:70:36:62:e5:3a:03:cf: e1:bc:2c:ef:de:ab:61:17:f5:35:de:a5:dc:d4:57: 83:c4:fb:bc:b1:b6:98:9b:ad:5a:9b:dc:c8:1e:2c: bb:e6:dc:1b:2c:bd:c3:2b:9e:53:2e:98:7b:f6:1a: bb:19:63:58:60:53:8d:fd:77:f5:2d:21:bb:9b:f9: 91:75:30:e4:3a:b9:fd:b4:4e:e2:8e:cf:43:4f:d3: 57:cf:88:53:13:e0:b8:06:9e:0e:41:64:59:76:d9: 45:6c:e1:5c:6c:38:02:a1:a8:8f:f1:00:a8:f3:c2: 4c:51:0b:0b:5d:13:8c:35:44:aa:59:91:c6:ae:cf: f7:50:16:8d:07:55:40:af:ec:5b:10:f6:46:5c:34: 4e:3c:0e:07:86:ad:a6:71:44:bb:2d:6e:99:c8:03: 83:f0:d9:1b:54:bc:4e:4b:49:39:ee:18:d7:cd:ad: c7:7c:2b:91:c9:0c:0a:3d:f2:73:e2:ab:67:2a:97: fc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:54:7D:9B:45:34:1A:CC:A7:AE:5B:AA:BC:D2:3B:6D:49:09:8C:00 X509v3 Authority Key Identifier: keyid:D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:08:1a:aa:db:8c:c1:00:14:c3:f7:94:6e:ff:1c:88:bb:d1: 3f:da:82:9d:9f:80:4b:31:0c:b2:d7:76:bd:48:49:a3:d7:74: 0e:15:38:49:fe:fe:66:3f:2b:f8:49:69:28:07:5d:e3:2c:a3: 45:59:4e:c2:79:dd:22:e8:4e:a3:58:cd:c0:96:c9:f4:cf:b8: 4d:05:82:87:db:a6:20:a6:a7:c5:27:5d:d1:65:c0:35:5e:1d: 2a:45:dd:b2:94:76:8a:f7:df:dc:56:15:63:f9:a0:fb:66:20: 9a:51:c3:3e:8b:e1:ab:84:c8:3b:03:f2:65:a8:38:e3:3b:86: b0:4f:a0:f1:73:f8:fd:10:30:47:4b:31:71:fb:10:9a:4e:28: ca:c6:30:d9:d5:6a:37:2d:1c:18:30:fa:7f:fa:5a:64:f2:d4: 00:18:56:aa:5c:1e:0e:d5:09:3e:21:15:70:71:73:1e:94:71: 13:14:9f:be:35:0d:cd:10:39:6b:66:16:73:73:ad:e3:ba:05: f6:44:5f:f7:c4:c3:da:a3:06:7e:c0:1b:8b:e9:e9:5e:e6:83: af:27:67:15:a6:f7:3b:22:34:8d:11:02:64:5c:43:48:ad:b2: da:d7:85:26:61:a4:d1:5b:02:ff:45:86:a7:86:ea:70:fc:4a: c6:89:4a:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUVJVj1mRwgsRhx/p47sOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1OGNjODUwNmZlZGJiNTA2MWRlOTkyNWIwN2Q2NDk5MThh MTk5MjYwHhcNMjUxMjI2MTEwMDM3WhcNMjUxMjI3MTEwMDM3WjAzMTEwLwYDVQQD EyhmYzU0N2Q5YjQ1MzQxYWNjYTdhZTViYWFiY2QyM2I2ZDQ5MDk4YzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkauqewG8E0evB+QuI+luVTE3K94 QwCKvTPWETSUi8a/O110g+I7cPyjHPgXRZStyA0/fbjoUNxfd/wjEGMxMDXv9XA2 YuU6A8/hvCzv3qthF/U13qXc1FeDxPu8sbaYm61am9zIHiy75twbLL3DK55TLph7 9hq7GWNYYFON/Xf1LSG7m/mRdTDkOrn9tE7ijs9DT9NXz4hTE+C4Bp4OQWRZdtlF bOFcbDgCoaiP8QCo88JMUQsLXROMNUSqWZHGrs/3UBaNB1VAr+xbEPZGXDROPA4H hq2mcUS7LW6ZyAOD8NkbVLxOS0k57hjXza3HfCuRyQwKPfJz4qtnKpf8xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxUfZtFNBrMp65bqrzSO21JCYwAMB8GA1UdIwQY MBaAFNWMyFBv7btQYd6ZJbB9ZJkYoZkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVl6SVVHX3R1MUJoM3BrbHNIMWttUmlobVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy80NmVmYjUtYzllNy00ZjA4LWJjNmEt YmIzZTgxOWYzZGRjLzEvMVl6SVVHX3R1MUJoM3BrbHNIMWttUmlobVNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy80NmVmYjUtYzllNy00ZjA4LWJjNmEtYmIzZTgxOWYzZGRj LzEvMVl6SVVHX3R1MUJoM3BrbHNIMWttUmlobVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASQgaqtuM wQAUw/eUbv8ciLvRP9qCnZ+ASzEMstd2vUhJo9d0DhU4Sf7+Zj8r+ElpKAdd4yyj RVlOwnndIuhOo1jNwJbJ9M+4TQWCh9umIKanxSdd0WXANV4dKkXdspR2ivff3FYV Y/mg+2YgmlHDPovhq4TIOwPyZag44zuGsE+g8XP4/RAwR0sxcfsQmk4oysYw2dVq Ny0cGDD6f/paZPLUABhWqlweDtUJPiEVcHFzHpRxExSfvjUNzRA5a2YWc3Ot47oF 9kRf98TD2qMGfsAbi+npXuaDrydnFab3OyI0jRECZFxDSK2y2teFJmGk0VsC/0WG p4bqcPxKxolKNw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:28 2025 by rpki-client