This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft File: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft (raw, json) Hash identifier: FqNhl+JbjvJDJJXqvlcoiGDoR3B1cfH5/Hp8fvmphqg= Subject key identifier: 4B:A4:C8:20:B9:85:0B:FF:B6:49:59:EE:04:41:A6:24:19:11:72:AC Authority key identifier: F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71 Certificate issuer: /CN=f83faec93d403f3713823fa39c7d27c62e921471 Certificate serial: 019B59E3713F27D4ACD46271305D90FE5F9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 09:00:36 +0000 Manifest this update: Fri 26 Dec 2025 09:00:36 +0000 Manifest next update: Sat 27 Dec 2025 09:00:36 +0000 Files and hashes: 1: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl (hash: YF4CEYzcZ4YOjSqiBEeoRc6ShBqca/AKBpls+Vlp1SY=) 2: 72LdJQQ_XzgvUHseE2sST5RXq_4.roa (hash: kR5iFtf9EPBMZTsPkYiIRyrCHP6r5lMPF7yM/ECFgng=) 3: lput6Z6vJPdy08jemWLG6WZi0oE.roa (hash: muWWXK/VbX5K0RlIXjBqeo4nzxA9w0OVj29rsOGgE/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:71:3f:27:d4:ac:d4:62:71:30:5d:90:fe:5f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f83faec93d403f3713823fa39c7d27c62e921471 Validity Not Before: Dec 26 09:00:36 2025 GMT Not After : Dec 27 09:00:36 2025 GMT Subject: CN=4ba4c820b9850bffb64959ee0441a624191172ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:26:26:60:f0:e7:4f:6e:9a:ae:82:a5:c9:d0: 47:a9:ec:ad:12:10:54:80:c7:25:3d:db:ef:82:69: fb:3b:83:38:fd:65:98:08:4d:9e:2f:44:94:f3:67: 60:7c:79:b2:80:64:8b:ef:6f:df:e0:0c:c5:a7:6b: e6:b7:22:0a:9c:12:68:f7:85:c8:b5:41:15:47:32: 69:59:00:e9:61:03:9e:b9:5a:80:79:f1:61:ce:ad: 8d:6d:f3:0a:4d:13:24:92:d6:ec:d3:f8:b5:6f:57: 8e:e1:3e:6f:f2:47:dd:f6:30:8b:9f:99:a8:11:fc: 2f:3e:c9:e0:71:cf:0e:d5:82:5c:73:59:f9:dd:e2: 80:ab:0f:1d:2d:99:3c:31:62:e7:64:43:16:51:ce: 8b:f0:c9:4c:d7:ea:b3:4f:1a:2c:b7:20:94:c3:f4: 6f:02:20:b9:45:b1:a9:f5:92:6b:75:aa:bd:7b:18: d4:bf:61:92:61:94:4b:eb:a0:c1:3c:d8:97:89:bc: 88:44:3a:bd:75:04:67:cf:51:46:ea:f9:57:fa:0c: af:95:68:c7:cf:54:bf:9c:99:f3:9f:af:57:3d:aa: 2b:fb:2f:2c:97:6a:ec:1d:29:3c:bf:6f:27:ca:8c: c9:0b:4a:f1:83:0e:19:16:fc:a1:ed:75:94:9e:2e: 12:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A4:C8:20:B9:85:0B:FF:B6:49:59:EE:04:41:A6:24:19:11:72:AC X509v3 Authority Key Identifier: keyid:F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:4c:bd:d0:ea:f5:5c:7a:64:01:79:4a:cb:b5:5f:b0:ad:76: 2a:1a:9a:59:cb:1d:18:73:d3:c4:12:9b:74:23:b4:97:2f:96: c9:f9:41:30:da:f6:b6:aa:3f:ee:93:7b:87:b8:3f:f8:fe:51: e8:a0:86:62:3b:32:3f:9e:98:e1:04:4b:60:a7:c4:68:07:6d: de:0d:1e:a3:9f:33:20:0f:4e:9a:3a:3b:9e:eb:f7:82:7e:51: bf:39:fb:c8:d3:60:fe:56:a0:a0:10:e5:17:38:17:a2:56:6c: 0b:9d:5b:73:14:2f:f3:66:23:65:09:ac:44:b5:83:8f:31:4c: 00:5b:29:7f:9b:5c:61:3f:bd:89:a9:74:8b:a2:74:14:82:d6: 88:be:d7:e1:5a:6b:c9:6d:6a:97:5a:6a:1f:b3:16:5f:5d:d5: be:62:bc:7c:70:81:88:14:67:b8:15:2b:be:b9:84:ba:99:76: 26:42:33:47:93:b1:de:d0:a1:47:c9:2d:ba:93:6f:16:2a:52: 3c:a9:20:15:4b:2a:d9:a6:8b:71:38:b5:31:32:fe:b8:60:47: 33:3c:dd:34:d7:2d:37:61:22:3f:44:ad:5f:67:5b:0d:90:36: 33:69:b8:88:28:03:ec:db:c1:6f:f2:fe:f2:f1:b8:ca:29:8d: b8:d5:a4:51 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtZ43E/J9Ss1GJxMF2Q/l+eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4M2ZhZWM5M2Q0MDNmMzcxMzgyM2ZhMzljN2QyN2M2MmU5 MjE0NzEwHhcNMjUxMjI2MDkwMDM2WhcNMjUxMjI3MDkwMDM2WjAzMTEwLwYDVQQD Eyg0YmE0YzgyMGI5ODUwYmZmYjY0OTU5ZWUwNDQxYTYyNDE5MTE3MmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyYmYPDnT26aroKlydBHqeytEhBU gMclPdvvgmn7O4M4/WWYCE2eL0SU82dgfHmygGSL72/f4AzFp2vmtyIKnBJo94XI tUEVRzJpWQDpYQOeuVqAefFhzq2NbfMKTRMkktbs0/i1b1eO4T5v8kfd9jCLn5mo EfwvPsngcc8O1YJcc1n53eKAqw8dLZk8MWLnZEMWUc6L8MlM1+qzTxostyCUw/Rv AiC5RbGp9ZJrdaq9exjUv2GSYZRL66DBPNiXibyIRDq9dQRnz1FG6vlX+gyvlWjH z1S/nJnzn69XPaor+y8sl2rsHSk8v28nyozJC0rxgw4ZFvyh7XWUni4SqQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEukyCC5hQv/tklZ7gRBpiQZEXKsMB8GA1UdIwQY MBaAFPg/rsk9QD83E4I/o5x9J8YukhRxMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ELXV5VDFBUHpjVGdqLWpuSDBueGk2U0ZIRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkvOTcwY2YwLTkyOTgtNGZmMC1iYWY1 LTIxMGFlMDU2OWE0NS8xLzEtRC11eVQxQVB6Y1Rnai1qbkgwbnhpNlNGSEUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2I5Lzk3MGNmMC05Mjk4LTRmZjAtYmFmNS0yMTBhZTA1Njlh NDUvMS8xLUQtdXlUMUFQemNUZ2otam5IMG54aTZTRkhFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMUy9 0Or1XHpkAXlKy7VfsK12KhqaWcsdGHPTxBKbdCO0ly+WyflBMNr2tqo/7pN7h7g/ +P5R6KCGYjsyP56Y4QRLYKfEaAdt3g0eo58zIA9Omjo7nuv3gn5Rvzn7yNNg/lag oBDlFzgXolZsC51bcxQv82YjZQmsRLWDjzFMAFspf5tcYT+9ial0i6J0FILWiL7X 4VpryW1ql1pqH7MWX13VvmK8fHCBiBRnuBUrvrmEupl2JkIzR5Ox3tChR8ktupNv FipSPKkgFUsq2aaLcTi1MTL+uGBHMzzdNNctN2EiP0StX2dbDZA2M2m4iCgD7NvB b/L+8vG4yimNuNWkUQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:25 2025 by rpki-client