This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft File: 1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft (raw, json) Hash identifier: 20GWEN1wA2qElyWwKwrPOa6DwiU7oga+HX+m/h8Vptg= Subject key identifier: 4D:70:48:3A:9B:A2:B7:D1:DD:EE:CE:E8:67:55:7C:02:21:7F:E1:0B Authority key identifier: D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84 Certificate issuer: /CN=d58214cfa326611e9d494135a12ce8276f0f1784 Certificate serial: 019B0F3737150DBF9D8A3243FCCF6A9BC7C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft Manifest number: 08F9 Signing time: Thu 11 Dec 2025 21:00:35 +0000 Manifest this update: Thu 11 Dec 2025 21:00:35 +0000 Manifest next update: Fri 12 Dec 2025 21:00:35 +0000 Files and hashes: 1: 1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl (hash: 4UotGe5Nx10VR4b+NkBsNZPZ0/sl6a6bKvZBMkdFYPM=) 2: 1ga8nVlGxTmTngINMpKry6AQMr4.roa (hash: Dm3zUfcqGdu/uBK93tg3lyr6TLgweEHTMY6jPc57f2s=) 3: DGnBXPgoLqm6MITID6kUNCzRUOs.roa (hash: hIciNbRFt51fw1TxuPPGC92uEfq4OzzxLq8zVboWuDA=) 4: EXso7tzCAhfaJCky2E8mk6hxz0E.roa (hash: 9/wsiraIK6tEnjIhsMzkIKM5OLlXL/pBel2txdfmR1w=) 5: ORMftoMd9do2ooK5ue-6TvmAIxQ.roa (hash: gRL2F0Qf83gqy3K3r8kmYdUB/bOzK/Peuq/Grv7jGIY=) 6: be5WdK6iPEkhbXurpsBiJLlldps.roa (hash: 0YokzCz16IGMuCLhlbe4WQ2dF7nXC982PfyCD/leOcY=) 7: hXDhzeK-jX0gCQmDt_ZZNEI7MI4.roa (hash: 5BKSkgpGQ/JZ0CAuFzin9pgFCCI9sY5+ZEzUzT6gZfU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:37:15:0d:bf:9d:8a:32:43:fc:cf:6a:9b:c7:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58214cfa326611e9d494135a12ce8276f0f1784 Validity Not Before: Dec 11 21:00:35 2025 GMT Not After : Dec 12 21:00:35 2025 GMT Subject: CN=4d70483a9ba2b7d1ddeecee867557c02217fe10b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:c8:32:7f:67:65:7e:77:1f:21:04:6d:af: d0:44:e0:71:81:04:1c:cb:02:f7:9c:da:fa:e5:77: b4:32:36:8a:d6:54:5c:cb:e7:38:6c:13:b5:09:d9: a5:e9:07:70:1a:24:92:1e:c6:34:95:2c:90:94:13: 99:62:0f:f2:3d:62:a0:e7:d3:66:85:ae:f3:bb:29: 5e:39:1a:b1:7e:a6:36:19:25:99:b5:e9:54:27:76: cd:3e:1d:33:d3:6e:0a:e9:a7:51:55:c6:e5:94:ca: 33:88:ed:cd:ff:8c:8c:d9:89:15:f9:e0:6e:d4:bd: 76:64:c9:16:85:3e:df:1f:c5:cd:5f:1a:d2:33:20: 56:fb:cc:7f:10:66:ae:5d:6a:57:e8:48:19:2e:c9: 7f:1a:4e:50:34:47:d6:c5:a7:9d:ca:01:d7:35:b1: 20:8c:78:5d:86:11:7a:53:da:ae:30:af:2d:a5:8f: 5c:ac:55:8b:cb:71:8e:2e:7f:ea:58:11:da:34:4e: 26:0b:90:89:5e:dc:49:11:cd:26:42:ab:07:0e:b0: 28:0a:b0:ae:09:bb:d9:66:11:51:78:12:f6:b1:37: e6:5c:c1:72:4a:6a:e9:89:34:60:9f:a2:51:dc:76: 9b:58:b3:4f:4f:05:bd:fd:0b:95:5a:d2:2b:d0:73: 64:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:70:48:3A:9B:A2:B7:D1:DD:EE:CE:E8:67:55:7C:02:21:7F:E1:0B X509v3 Authority Key Identifier: keyid:D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:11:2e:27:ce:89:09:6c:50:cf:c9:cd:3d:7c:a5:01:75:cb: 6d:aa:0a:19:b2:18:ab:c5:51:60:60:af:95:8c:f5:f6:34:33: 10:92:32:29:d0:a1:51:14:18:c4:03:cf:27:26:67:9e:da:e4: 46:5a:b2:d5:38:3f:c7:99:af:3e:45:3c:bb:25:1e:ad:c0:59: ce:f4:fe:72:76:54:1b:43:e9:ca:9d:0d:90:82:f0:82:03:1b: a3:d1:d8:c3:f2:18:05:2e:70:a1:36:73:7a:9f:df:66:9b:e1: b3:d8:b7:50:e8:29:f2:fc:eb:d9:a5:8b:4c:e1:89:29:ea:ea: 5b:f8:83:1a:19:c4:bf:14:90:22:e1:bf:39:55:a6:49:8e:a5: d6:4f:78:98:77:56:b2:cb:e9:61:1b:c2:58:53:90:e3:0e:5f: 4e:b1:6f:55:24:a0:df:84:86:f9:9d:22:d6:46:af:4d:28:08: d4:fd:a5:07:42:50:7f:74:5f:33:30:60:74:92:2c:96:90:60: d3:eb:1a:39:70:f7:44:2b:bd:96:b8:4c:3a:11:08:8d:89:f3: b8:cf:cd:72:1a:dd:fb:6d:39:be:56:db:93:bd:36:71:4a:30: 48:10:cd:6f:4c:11:fe:2c:5e:ee:60:c3:f4:09:78:b4:51:18: 31:f2:5a:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPNzcVDb+dijJD/M9qm8fGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ODIxNGNmYTMyNjYxMWU5ZDQ5NDEzNWExMmNlODI3NmYw ZjE3ODQwHhcNMjUxMjExMjEwMDM1WhcNMjUxMjEyMjEwMDM1WjAzMTEwLwYDVQQD Eyg0ZDcwNDgzYTliYTJiN2QxZGRlZWNlZTg2NzU1N2MwMjIxN2ZlMTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw7IMn9nZX53HyEEba/QROBxgQQc ywL3nNr65Xe0MjaK1lRcy+c4bBO1Cdml6QdwGiSSHsY0lSyQlBOZYg/yPWKg59Nm ha7zuyleORqxfqY2GSWZtelUJ3bNPh0z024K6adRVcbllMoziO3N/4yM2YkV+eBu 1L12ZMkWhT7fH8XNXxrSMyBW+8x/EGauXWpX6EgZLsl/Gk5QNEfWxaedygHXNbEg jHhdhhF6U9quMK8tpY9crFWLy3GOLn/qWBHaNE4mC5CJXtxJEc0mQqsHDrAoCrCu CbvZZhFReBL2sTfmXMFySmrpiTRgn6JR3HabWLNPTwW9/QuVWtIr0HNk2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1wSDqborfR3e7O6GdVfAIhf+ELMB8GA1UdIwQY MBaAFNWCFM+jJmEenUlBNaEs6CdvDxeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVlJVXo2TW1ZUjZkU1VFMW9Tem9KMjhQRjRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NzdlZWYtNGQwMi00ZDM5LWIxZTQt MTA3OWQ1NWFlZTkxLzEvMVlJVXo2TW1ZUjZkU1VFMW9Tem9KMjhQRjRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NzdlZWYtNGQwMi00ZDM5LWIxZTQtMTA3OWQ1NWFlZTkx LzEvMVlJVXo2TW1ZUjZkU1VFMW9Tem9KMjhQRjRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApREuJ86J CWxQz8nNPXylAXXLbaoKGbIYq8VRYGCvlYz19jQzEJIyKdChURQYxAPPJyZnntrk Rlqy1Tg/x5mvPkU8uyUercBZzvT+cnZUG0Ppyp0NkILwggMbo9HYw/IYBS5woTZz ep/fZpvhs9i3UOgp8vzr2aWLTOGJKerqW/iDGhnEvxSQIuG/OVWmSY6l1k94mHdW ssvpYRvCWFOQ4w5fTrFvVSSg34SG+Z0i1kavTSgI1P2lB0JQf3RfMzBgdJIslpBg 0+saOXD3RCu9lrhMOhEIjYnzuM/Nchrd+205vlbbk702cUowSBDNb0wR/ixe7mDD 9Al4tFEYMfJarQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:24:42 2025 by rpki-client