This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft File: 1zSS5NJcO70MXiDFqF7LIuyXNgo.mft (raw, json) Hash identifier: RTaZqaM+hEKfocEU33hMSsQzo11fgoV3uGC71QhEE8M= Subject key identifier: 88:68:C6:4E:E2:3A:19:02:91:BF:1F:1D:32:CE:18:59:CC:C3:38:0B Authority key identifier: D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A Certificate issuer: /CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a Certificate serial: 019B0F0117E98CF395724659D66DF63D4B35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft Manifest number: 105F Signing time: Thu 11 Dec 2025 20:01:28 +0000 Manifest this update: Thu 11 Dec 2025 20:01:28 +0000 Manifest next update: Fri 12 Dec 2025 20:01:28 +0000 Files and hashes: 1: 1zSS5NJcO70MXiDFqF7LIuyXNgo.crl (hash: XlYou0Tps+1AuU9HX8KcnXfBpiiSVlwrS52kbgcBRsw=) 2: 5xcSPqM5FqBggD3xhK_H_WBIj8c.roa (hash: 6UaEvDEdIHAI+VC/wqQ4jP8F3NZ9weH+TS5AN/LWzwY=) 3: NDt_WTrjoPL0cL8oTyPCRgNakA0.roa (hash: Hp1RzwRCWlMoxPuIUolhJVdqweoyQ9ReAqFHs5ETdBY=) 4: oTJ3WFdDrwDwPRwq0KV_9933-4Y.roa (hash: mhBZetUkSVK2917d65VbBa4ZgrfV11qg/and0h4flas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 20:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:01:17:e9:8c:f3:95:72:46:59:d6:6d:f6:3d:4b:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a Validity Not Before: Dec 11 20:01:28 2025 GMT Not After : Dec 12 20:01:28 2025 GMT Subject: CN=8868c64ee23a190291bf1f1d32ce1859ccc3380b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ad:08:ee:a9:8c:dc:ad:4b:af:98:34:ab:49: 3e:cc:1e:3b:76:fe:8c:51:25:2a:c5:5c:bf:41:f7: 45:be:2d:1f:cd:0a:0d:91:12:b9:75:af:91:d5:95: 2c:02:58:bc:0a:0f:58:d3:21:91:71:9d:46:3b:76: 4a:17:3f:40:6e:eb:5c:5a:c9:ba:06:47:ba:fb:a5: 15:23:9b:8f:44:66:bd:3b:14:a8:fb:13:46:73:cc: b5:6d:56:97:28:9b:6b:24:20:6d:14:48:2f:6a:84: 8d:d2:ac:8c:0b:51:ca:45:45:df:f7:b4:10:7e:df: e4:d8:21:3a:31:7f:77:8f:8d:c0:02:b2:ec:13:ef: a3:7b:aa:d6:a3:da:fe:b3:0a:e7:4b:b8:32:cb:a8: c8:22:46:07:d6:85:2e:b7:39:11:aa:52:a0:a0:ed: 15:59:bd:85:b4:a3:a4:f2:dd:05:f8:6a:1c:ad:7b: 76:45:5c:a5:49:ce:7c:6b:d1:03:01:cb:d0:e2:88: 3b:8c:e3:27:da:17:fd:7a:5a:fe:5b:b1:33:1b:0f: cd:38:2d:a7:95:4e:6f:df:3c:80:08:f5:37:21:10: 62:92:52:4c:d5:c3:61:8d:ae:2b:05:4b:34:81:91: aa:33:36:20:4a:61:22:a2:b7:88:b7:61:75:9a:a8: ee:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:68:C6:4E:E2:3A:19:02:91:BF:1F:1D:32:CE:18:59:CC:C3:38:0B X509v3 Authority Key Identifier: keyid:D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:00:4f:68:64:e1:50:ca:b8:cb:30:cb:29:52:91:94:70:63: 0b:f0:0a:d3:4c:bb:0d:4f:ae:2a:1c:f0:1b:0b:c0:fd:b7:95: e8:74:7f:33:fe:d6:9c:96:20:3f:09:b6:fe:db:c0:6d:94:ed: b5:f7:19:65:41:5e:0b:f1:23:29:a5:f8:15:55:45:2a:c4:8b: b5:af:67:15:6f:d1:e0:2f:97:b3:43:17:9a:f0:85:13:0b:a7: 5c:74:de:0f:cf:92:39:9e:c6:ae:9c:a9:5d:5c:be:f2:80:1d: 45:bf:c4:54:70:57:92:5f:23:8e:92:c5:a6:e6:d5:a9:9c:d8: ba:50:80:ab:2b:5b:8e:50:c1:41:1c:14:21:6f:1a:fa:25:f4: 1a:d9:b1:5d:77:98:74:c4:a9:18:8f:38:c0:43:83:20:68:9d: d4:07:bc:1a:a5:69:10:f0:68:20:dd:36:d4:5e:36:28:46:67: e4:eb:52:5b:3d:a6:1b:42:ff:87:4d:c5:94:e9:06:d9:98:a4: 62:f7:91:58:28:69:7e:a6:1e:77:67:b0:0f:22:7d:78:28:36: 23:6a:01:75:e1:77:d6:2e:ca:c4:d1:20:48:86:86:35:98:8a: dd:d5:54:c3:5f:51:47:32:d4:af:3f:8e:dd:74:96:1e:d9:72: cc:6e:3c:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPARfpjPOVckZZ1m32PUs1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MzQ5MmU0ZDI1YzNiYmQwYzVlMjBjNWE4NWVjYjIyZWM5 NzM2MGEwHhcNMjUxMjExMjAwMTI4WhcNMjUxMjEyMjAwMTI4WjAzMTEwLwYDVQQD Eyg4ODY4YzY0ZWUyM2ExOTAyOTFiZjFmMWQzMmNlMTg1OWNjYzMzODBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq60I7qmM3K1Lr5g0q0k+zB47dv6M USUqxVy/QfdFvi0fzQoNkRK5da+R1ZUsAli8Cg9Y0yGRcZ1GO3ZKFz9AbutcWsm6 Bke6+6UVI5uPRGa9OxSo+xNGc8y1bVaXKJtrJCBtFEgvaoSN0qyMC1HKRUXf97QQ ft/k2CE6MX93j43AArLsE++je6rWo9r+swrnS7gyy6jIIkYH1oUutzkRqlKgoO0V Wb2FtKOk8t0F+GocrXt2RVylSc58a9EDAcvQ4og7jOMn2hf9elr+W7EzGw/NOC2n lU5v3zyACPU3IRBiklJM1cNhja4rBUs0gZGqMzYgSmEioreIt2F1mqjuqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhoxk7iOhkCkb8fHTLOGFnMwzgLMB8GA1UdIwQY MBaAFNc0kuTSXDu9DF4gxaheyyLslzYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXpTUzVOSmNPNzBNWGlERnFGN0xJdXlYTmdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8wOWFhNjEtODdkNy00ZjUzLTk4MTgt ZGVjMjFlZWZhMzhiLzEvMXpTUzVOSmNPNzBNWGlERnFGN0xJdXlYTmdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8wOWFhNjEtODdkNy00ZjUzLTk4MTgtZGVjMjFlZWZhMzhi LzEvMXpTUzVOSmNPNzBNWGlERnFGN0xJdXlYTmdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhwBPaGTh UMq4yzDLKVKRlHBjC/AK00y7DU+uKhzwGwvA/beV6HR/M/7WnJYgPwm2/tvAbZTt tfcZZUFeC/EjKaX4FVVFKsSLta9nFW/R4C+Xs0MXmvCFEwunXHTeD8+SOZ7Grpyp XVy+8oAdRb/EVHBXkl8jjpLFpubVqZzYulCAqytbjlDBQRwUIW8a+iX0GtmxXXeY dMSpGI84wEODIGid1Ae8GqVpEPBoIN021F42KEZn5OtSWz2mG0L/h03FlOkG2Zik YveRWChpfqYed2ewDyJ9eCg2I2oBdeF31i7KxNEgSIaGNZiK3dVUw19RRzLUrz+O 3XSWHtlyzG48JA== -----END CERTIFICATE-----Generated at Fri Dec 12 05:49:59 2025 by rpki-client