This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft File: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft (raw, json) Hash identifier: C0C4Zfkw2I5i+dc2K1Etp1NM4XN1jkn0jPmBxhQIZsk= Subject key identifier: 18:DC:BF:AA:9E:46:4E:64:4A:26:87:F3:CA:CD:B8:17:DA:09:39:F8 Authority key identifier: F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8 Certificate issuer: /CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8 Certificate serial: 019B5976C7760439D0061B15843CD512B0D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft Manifest number: 1794 Signing time: Fri 26 Dec 2025 07:01:55 +0000 Manifest this update: Fri 26 Dec 2025 07:01:55 +0000 Manifest next update: Sat 27 Dec 2025 07:01:55 +0000 Files and hashes: 1: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl (hash: jgBupPILlm09yp01+PqyLQj0xlRIWqKW9eaznH65kUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:c7:76:04:39:d0:06:1b:15:84:3c:d5:12:b0:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8 Validity Not Before: Dec 26 07:01:55 2025 GMT Not After : Dec 27 07:01:55 2025 GMT Subject: CN=18dcbfaa9e464e644a2687f3cacdb817da0939f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6c:a1:aa:91:f1:dd:96:72:de:d3:df:68:db: cb:5c:e2:d9:c4:43:8e:c7:69:3f:8b:67:82:14:53: 2a:16:9c:8d:c9:e5:ab:72:d4:38:72:b0:3c:b2:bd: ff:d8:07:28:35:e4:6f:50:f9:c7:73:ee:31:c8:1c: 55:18:1f:91:c3:63:5a:22:ef:f9:bc:59:38:fb:34: 7a:cd:6c:65:b8:c5:34:1e:74:8b:72:b0:af:55:25: 93:67:3c:17:46:82:6e:ff:0c:47:7c:22:55:ce:f8: 7b:7e:8d:1c:0e:8e:53:2e:df:38:af:d9:89:2d:c9: 8e:3d:19:47:0a:44:ca:ee:02:17:0f:33:1f:43:95: 36:de:52:66:da:21:84:66:15:af:37:a6:ce:fc:89: d5:71:3e:db:1a:fe:d8:17:18:d7:91:38:7b:84:a2: a4:f9:88:dd:38:47:89:34:8b:35:c9:f9:5e:91:68: 49:50:a2:8e:a9:9e:93:dd:0c:41:44:3d:b8:dd:58: 3d:74:34:a0:a7:7a:68:5d:54:78:13:2b:66:6b:1e: 12:58:f5:41:e8:42:2a:b1:34:9d:40:52:9f:ac:c5: a2:1e:49:dc:3c:33:5e:93:d4:96:ed:76:4b:4d:96: 6c:0b:00:35:f3:8d:fb:9b:71:53:59:4f:bd:4a:bc: d8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DC:BF:AA:9E:46:4E:64:4A:26:87:F3:CA:CD:B8:17:DA:09:39:F8 X509v3 Authority Key Identifier: keyid:F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:c1:7a:0b:4c:da:76:22:24:0e:5f:a8:a1:9f:57:ae:71:ef: 74:db:0f:6d:ed:d6:e3:d8:10:12:f0:c2:13:f7:72:78:f9:1b: 1d:45:3f:84:e3:64:09:da:e7:f0:5b:9b:5f:bd:cd:45:a6:dd: 9e:78:b8:39:92:33:3c:09:3d:ad:25:86:82:1a:a0:9f:d6:3b: 83:bc:7a:f7:33:cf:f5:d9:61:5c:01:c1:bd:ed:5d:ea:35:c9: 0e:c0:37:81:19:83:32:e8:61:b0:06:a5:d6:04:74:33:ea:f5: c9:46:7e:2b:38:c4:27:bb:eb:c4:67:2c:07:5c:d6:d4:5a:99: f7:1f:2d:a1:45:96:cc:69:ca:1d:39:c7:04:a5:39:c6:02:6d: d5:c1:59:19:4e:bb:bd:dc:72:a1:65:c8:43:7f:8d:29:13:8f: 77:f0:74:00:be:3d:00:28:dd:ca:24:a3:8d:1d:c4:64:2f:9f: c1:3d:6b:26:0b:0d:93:f1:15:05:3a:bf:62:60:42:fd:55:83: 26:e7:57:2c:1b:71:4c:92:e0:9d:12:a6:ec:52:05:f8:74:08: 6c:4b:fb:ff:89:cb:02:f7:a5:29:17:95:c4:d9:94:a5:93:1a: 93:f1:be:43:3b:77:73:eb:b7:97:19:84:fa:67:97:a0:1f:cf: 97:25:e8:91 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtZdsd2BDnQBhsVhDzVErDSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4OWM5YTY5MjM0NTI3Yjc4Njk0OGIyZWI0YzY1MDlkYjBh NGQ1YTgwHhcNMjUxMjI2MDcwMTU1WhcNMjUxMjI3MDcwMTU1WjAzMTEwLwYDVQQD EygxOGRjYmZhYTllNDY0ZTY0NGEyNjg3ZjNjYWNkYjgxN2RhMDkzOWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmyhqpHx3ZZy3tPfaNvLXOLZxEOO x2k/i2eCFFMqFpyNyeWrctQ4crA8sr3/2AcoNeRvUPnHc+4xyBxVGB+Rw2NaIu/5 vFk4+zR6zWxluMU0HnSLcrCvVSWTZzwXRoJu/wxHfCJVzvh7fo0cDo5TLt84r9mJ LcmOPRlHCkTK7gIXDzMfQ5U23lJm2iGEZhWvN6bO/InVcT7bGv7YFxjXkTh7hKKk +YjdOEeJNIs1yflekWhJUKKOqZ6T3QxBRD243Vg9dDSgp3poXVR4Eytmax4SWPVB 6EIqsTSdQFKfrMWiHkncPDNek9SW7XZLTZZsCwA18437m3FTWU+9SrzY+wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBjcv6qeRk5kSiaH88rNuBfaCTn4MB8GA1UdIwQY MBaAFPicmmkjRSe3hpSLLrTGUJ2wpNWoMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1KeWFhU05GSjdlR2xJc3V0TVpRbmJDazFhZy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvOTk5MmMyLTBjZGQtNDM2MS05YzAz LWMyY2NjZTZjNDdhNC8xLzEtSnlhYVNORko3ZUdsSXN1dE1aUW5iQ2sxYWcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2IxLzk5OTJjMi0wY2RkLTQzNjEtOWMwMy1jMmNjY2U2YzQ3 YTQvMS8xLUp5YWFTTkZKN2VHbElzdXRNWlFuYkNrMWFnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8F6 C0zadiIkDl+ooZ9XrnHvdNsPbe3W49gQEvDCE/dyePkbHUU/hONkCdrn8FubX73N Rabdnni4OZIzPAk9rSWGghqgn9Y7g7x69zPP9dlhXAHBve1d6jXJDsA3gRmDMuhh sAal1gR0M+r1yUZ+KzjEJ7vrxGcsB1zW1FqZ9x8toUWWzGnKHTnHBKU5xgJt1cFZ GU67vdxyoWXIQ3+NKROPd/B0AL49ACjdyiSjjR3EZC+fwT1rJgsNk/EVBTq/YmBC /VWDJudXLBtxTJLgnRKm7FIF+HQIbEv7/4nLAvelKReVxNmUpZMak/G+Qzt3c+u3 lxmE+meXoB/PlyXokQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:05 2025 by rpki-client