This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft File: 1-YoC0gxrfeNXEl84sXNcobkfh7M.mft (raw, json) Hash identifier: 1NMZw9ay4Czi4Cbwe8L3Q8zEFRsZtayHxp/7Tism4WY= Subject key identifier: A6:4E:66:FB:C8:60:DD:6C:FC:C0:6C:38:CF:55:81:C3:E8:A5:B2:B7 Authority key identifier: F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3 Certificate issuer: /CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3 Certificate serial: 019B1B72679AF59AF5AFC2B2B4663ED5DE64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft Manifest number: 1555 Signing time: Sun 14 Dec 2025 06:00:40 +0000 Manifest this update: Sun 14 Dec 2025 06:00:40 +0000 Manifest next update: Mon 15 Dec 2025 06:00:40 +0000 Files and hashes: 1: 1-YoC0gxrfeNXEl84sXNcobkfh7M.crl (hash: fcd9U4ZDgXl2KEaqXtUeWMkootbptps9ggU89MwlgCM=) 2: KOw7xMKHlQCXW_5gRyvKjG3BAa4.roa (hash: lL3/S+AcvkiAqiXw9PyhHyyK0CE6Zf/JEzIe2/vsusg=) 3: NleaA2dNW39O_bLmPG6btbUsU3Y.roa (hash: sf3a501O0GUvM+JaIfyUft8SNLFrIk6yXA4pjHEA8yc=) 4: VXuZkRLoEcdAW1J7RtAxdgrcSzo.roa (hash: dJX4lpj20W+7pafsIHml8SOFrK8bjcSrzM7WjN8BZk8=) 5: hlJjKHJFeD3j4Nr8Kn0Ft2J4O1E.roa (hash: Fv/393RUKDmiuBI9kyyedtNaYIDs37je0cMv9FMaRSg=) 6: zTw4UgDwTum-l_h9WbH_dREg6CQ.roa (hash: b7idLBgnKlFBdz/jKpa7Hm7iiMdE241Sp7LHy9Qhpzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:72:67:9a:f5:9a:f5:af:c2:b2:b4:66:3e:d5:de:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3 Validity Not Before: Dec 14 06:00:40 2025 GMT Not After : Dec 15 06:00:40 2025 GMT Subject: CN=a64e66fbc860dd6cfcc06c38cf5581c3e8a5b2b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5f:71:0c:43:c3:2a:d9:60:1c:e2:82:61:26: c2:ea:3b:07:04:07:80:9a:89:31:c7:f3:c8:e1:f1: da:d4:29:4b:00:8a:ed:53:af:91:42:de:eb:52:5b: 66:f0:fc:e5:80:f9:43:49:d5:8f:87:b3:d4:05:fd: 3a:9c:35:c4:74:86:09:6f:78:2b:21:1d:e0:0c:db: 0f:23:70:78:30:d8:7d:27:a4:b2:01:a8:93:f3:49: 0f:6e:2e:4d:4a:7f:1f:17:88:91:9c:e7:79:63:ce: 0e:aa:bd:ea:1d:90:33:df:d0:d3:5e:ed:6d:70:13: bf:df:10:c9:3e:cf:9a:56:49:50:dd:bd:83:70:8c: bf:f4:47:2b:72:f6:44:13:42:f9:b3:1c:49:a4:87: 0d:1c:0c:de:d7:4b:b9:4b:3c:b7:27:81:c4:69:20: 28:04:2d:14:c6:50:f5:81:f0:bf:06:64:a2:47:0e: fb:a7:21:96:fa:47:b3:00:85:18:4d:82:11:ba:c3: 8b:ae:2b:88:57:b7:4a:ff:35:e6:fd:b5:f4:63:f9: 08:8a:af:12:8e:3c:97:cf:9b:ed:1f:ff:4a:66:ac: 77:45:69:67:ae:bc:ba:1f:d9:81:86:b0:f9:03:09: cb:37:dd:32:a2:63:f7:51:1d:91:51:b7:75:a9:d4: a0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4E:66:FB:C8:60:DD:6C:FC:C0:6C:38:CF:55:81:C3:E8:A5:B2:B7 X509v3 Authority Key Identifier: keyid:F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:a2:21:23:2a:a8:5e:64:c1:a2:46:c9:96:3e:3a:32:d9:05: a6:77:e9:69:60:fa:a8:e1:0f:00:bb:14:e1:38:15:ff:e3:08: a4:96:f7:49:fe:a7:a6:20:9d:ed:8f:a7:64:ab:e8:52:75:79: f9:64:c7:fc:09:c9:60:94:3d:6e:0c:54:6e:1b:ab:1b:1e:44: 9f:94:6c:d7:d6:fe:7a:41:e4:a6:b0:f4:9a:95:c1:7d:0b:d6: 3c:7e:d0:6c:51:27:b0:3f:e1:e5:7d:76:59:73:58:76:ca:52: 64:0c:a2:47:2a:8e:91:79:62:74:e1:0e:22:f1:2b:d7:98:c6: e7:31:13:4f:ce:14:62:e9:13:14:a2:4a:04:a8:8d:87:ae:5e: 93:d0:55:64:f8:fb:17:b8:c3:df:d3:05:d5:21:fe:d5:2f:ba: b1:93:59:3c:d2:96:1d:01:60:ae:b0:9c:80:0f:93:64:ab:b5: 23:88:11:6a:0b:c2:c7:51:89:a9:10:1a:a8:4f:db:27:5a:d6: 38:3f:93:a1:46:54:40:18:05:b6:a2:56:ca:27:8d:91:95:1e: c5:53:88:32:41:e5:95:7e:f3:3b:4a:12:98:a8:21:b8:a5:42: 2c:57:b2:5a:2b:50:fe:f6:ac:3e:d9:a6:4a:91:5b:94:55:2d: f6:1d:7f:23 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsbcmea9Zr1r8KytGY+1d5kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5OGEwMmQyMGM2YjdkZTM1NzEyNWYzOGIxNzM1Y2ExYjkx Zjg3YjMwHhcNMjUxMjE0MDYwMDQwWhcNMjUxMjE1MDYwMDQwWjAzMTEwLwYDVQQD EyhhNjRlNjZmYmM4NjBkZDZjZmNjMDZjMzhjZjU1ODFjM2U4YTViMmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzF9xDEPDKtlgHOKCYSbC6jsHBAeA mokxx/PI4fHa1ClLAIrtU6+RQt7rUltm8PzlgPlDSdWPh7PUBf06nDXEdIYJb3gr IR3gDNsPI3B4MNh9J6SyAaiT80kPbi5NSn8fF4iRnOd5Y84Oqr3qHZAz39DTXu1t cBO/3xDJPs+aVklQ3b2DcIy/9EcrcvZEE0L5sxxJpIcNHAze10u5Szy3J4HEaSAo BC0UxlD1gfC/BmSiRw77pyGW+kezAIUYTYIRusOLriuIV7dK/zXm/bX0Y/kIiq8S jjyXz5vtH/9KZqx3RWlnrry6H9mBhrD5AwnLN90yomP3UR2RUbd1qdSgrQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKZOZvvIYN1s/MBsOM9VgcPopbK3MB8GA1UdIwQY MBaAFPmKAtIMa33jVxJfOLFzXKG5H4ezMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Zb0MwZ3hyZmVOWEVsODRzWE5jb2JrZmg3TS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvYTkyMDZlLWMxZTEtNGMxNS05NTMz LWFjZTNkNjc1ZDNjZC8xLzEtWW9DMGd4cmZlTlhFbDg0c1hOY29ia2ZoN00ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzdiL2E5MjA2ZS1jMWUxLTRjMTUtOTUzMy1hY2UzZDY3NWQz Y2QvMS8xLVlvQzBneHJmZU5YRWw4NHNYTmNvYmtmaDdNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtqIh IyqoXmTBokbJlj46MtkFpnfpaWD6qOEPALsU4TgV/+MIpJb3Sf6npiCd7Y+nZKvo UnV5+WTH/AnJYJQ9bgxUbhurGx5En5Rs19b+ekHkprD0mpXBfQvWPH7QbFEnsD/h 5X12WXNYdspSZAyiRyqOkXlidOEOIvEr15jG5zETT84UYukTFKJKBKiNh65ek9BV ZPj7F7jD39MF1SH+1S+6sZNZPNKWHQFgrrCcgA+TZKu1I4gRagvCx1GJqRAaqE/b J1rWOD+ToUZUQBgFtqJWyieNkZUexVOIMkHllX7zO0oSmKghuKVCLFeyWitQ/vas PtmmSpFblFUt9h1/Iw== -----END CERTIFICATE-----Generated at Sun Dec 14 12:21:47 2025 by rpki-client