This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft File: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft (raw, json) Hash identifier: Rgb6EYK4YO0IkCuYMWmctYoLA/z6CkPraUwavbQM1xI= Subject key identifier: FF:D7:74:EB:F2:88:D6:3B:10:60:61:E8:BD:A3:4B:1A:F0:AD:BA:21 Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85 Certificate issuer: /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885 Certificate serial: 019AACF12FD1633369B5EF2B374605BF3D81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft Manifest number: 0A08 Signing time: Sat 22 Nov 2025 19:01:18 +0000 Manifest this update: Sat 22 Nov 2025 19:01:18 +0000 Manifest next update: Sun 23 Nov 2025 19:01:18 +0000 Files and hashes: 1: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl (hash: /6TcufQ4B8cYYj4Svvt8zk16cJZqUxWRYZoARQWgqv0=) 2: 9z9dKpnx6EzUcHVGNf_uGpVw9Os.roa (hash: a0dVE6vpgZW3UUjOxu/nfSbGxvoPx4y2RaBLkZkeRbc=) 3: NAkfZdC-lHIooI3gKnWXiaH-HsE.roa (hash: w3/vlIu5NjwEAa3XQiOFjmWkJL3BENVNbQUqUr266qk=) 4: tHjmQ9NOKNWbyApXtXSEVz3gkFM.roa (hash: SBZ1boxaRQZqnvXhV5a0MuSyAE629IVLf7UqxBja6yQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:f1:2f:d1:63:33:69:b5:ef:2b:37:46:05:bf:3d:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885 Validity Not Before: Nov 22 19:01:18 2025 GMT Not After : Nov 23 19:01:18 2025 GMT Subject: CN=ffd774ebf288d63b106061e8bda34b1af0adba21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bb:2e:20:40:95:7b:54:b4:28:af:e9:b3:1e: eb:8c:4d:ec:e6:82:d5:ae:03:0a:ef:5b:40:90:0a: f3:91:c1:cd:04:ce:4e:04:28:05:73:d4:da:e8:f8: 8f:52:3b:a9:95:14:65:e9:17:ce:21:2b:c7:c3:04: cc:f0:b4:7a:10:29:59:53:24:e6:b5:53:41:91:fd: 1c:48:70:fd:12:7c:62:9b:c1:51:c5:4c:d3:db:76: f0:e6:6f:39:f1:4b:0c:f6:d1:9c:1d:11:b8:78:d6: 97:f8:ae:21:4b:27:03:99:c6:f4:02:59:59:90:96: f9:0f:e8:43:bd:4f:85:25:ff:44:70:23:8d:9a:80: ca:60:a8:c7:65:b1:e6:30:d9:3f:ce:e7:47:e7:a0: c4:22:39:fd:5d:00:82:80:e7:97:37:b4:ba:e9:50: a7:50:0c:e8:b3:76:ea:13:9f:cb:c5:c2:83:f1:54: aa:6d:ec:2c:40:27:0f:85:bd:67:1e:fb:12:4d:a6: eb:0b:3b:ce:0d:8f:09:f7:52:2c:57:ae:33:8c:4d: 54:f9:bf:5e:e0:1e:2c:82:60:a8:c7:9a:37:17:2c: b2:a9:5e:f6:2c:fc:63:af:81:69:0f:0b:28:56:2d: 80:b2:0c:72:ac:d6:48:38:e4:cd:d7:f5:47:60:e3: b7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D7:74:EB:F2:88:D6:3B:10:60:61:E8:BD:A3:4B:1A:F0:AD:BA:21 X509v3 Authority Key Identifier: keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:56:e8:d8:73:53:ac:65:95:44:88:3c:d7:b1:37:ac:fc:4d: cc:a0:41:29:c9:b6:7b:bd:f9:ba:62:37:c4:2a:ed:f7:2d:e2: 65:c1:b8:29:c8:17:fe:7a:65:cb:b5:2d:e8:e9:8e:17:4f:6b: 86:8c:fe:57:43:3f:07:26:9a:76:0a:3c:1b:db:f1:e2:af:80: a6:50:82:5b:18:fb:a4:14:c0:ce:58:1d:65:a7:3f:ff:db:3b: a2:04:30:cd:b0:92:78:40:47:97:5f:e3:3e:63:79:bf:e2:90: 0a:2b:11:9f:ab:ac:a2:83:d7:01:0a:1e:27:13:88:60:b3:1a: 14:42:ee:c3:ea:17:c1:82:36:b3:fc:50:3a:aa:90:4c:8e:aa: 8b:4c:ef:ee:19:2f:44:f3:0b:ac:bf:58:11:db:92:bd:bf:ef: f5:cb:ad:ba:1a:dc:cb:46:8f:03:99:5e:3a:5f:2d:39:09:b9: 81:bd:a7:8b:5c:55:38:15:6c:02:03:f6:c0:b2:c7:f2:7e:87: 96:e9:5d:4b:50:97:69:64:66:b9:de:0e:5f:71:a7:f0:f4:83: 91:17:15:99:bb:ee:cd:03:9d:4b:0e:58:ef:74:cb:80:c1:1c: ba:44:89:4f:de:99:fd:a5:03:40:c4:42:34:68:cf:40:5e:ad: bc:68:0d:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqs8S/RYzNpte8rN0YFvz2BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MzAxZjc3Mjc1M2Q4MGE3YjYyYzJkMjEzZDM0N2EzYjll YmU4ODUwHhcNMjUxMTIyMTkwMTE4WhcNMjUxMTIzMTkwMTE4WjAzMTEwLwYDVQQD EyhmZmQ3NzRlYmYyODhkNjNiMTA2MDYxZThiZGEzNGIxYWYwYWRiYTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprsuIECVe1S0KK/psx7rjE3s5oLV rgMK71tAkArzkcHNBM5OBCgFc9Ta6PiPUjuplRRl6RfOISvHwwTM8LR6EClZUyTm tVNBkf0cSHD9Enxim8FRxUzT23bw5m858UsM9tGcHRG4eNaX+K4hSycDmcb0AllZ kJb5D+hDvU+FJf9EcCONmoDKYKjHZbHmMNk/zudH56DEIjn9XQCCgOeXN7S66VCn UAzos3bqE5/LxcKD8VSqbewsQCcPhb1nHvsSTabrCzvODY8J91IsV64zjE1U+b9e 4B4sgmCox5o3FyyyqV72LPxjr4FpDwsoVi2AsgxyrNZIOOTN1/VHYOO3EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/XdOvyiNY7EGBh6L2jSxrwrbohMB8GA1UdIwQY MBaAFNcwH3cnU9gKe2LC0hPTR6O56+iFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83N2Q2ZWUtYThlMS00YjAxLTgzY2It MmY2NzY5ZTc1ZjI0LzEvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy83N2Q2ZWUtYThlMS00YjAxLTgzY2ItMmY2NzY5ZTc1ZjI0 LzEvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASFbo2HNT rGWVRIg817E3rPxNzKBBKcm2e735umI3xCrt9y3iZcG4KcgX/nply7Ut6OmOF09r hoz+V0M/Byaadgo8G9vx4q+AplCCWxj7pBTAzlgdZac//9s7ogQwzbCSeEBHl1/j PmN5v+KQCisRn6usooPXAQoeJxOIYLMaFELuw+oXwYI2s/xQOqqQTI6qi0zv7hkv RPMLrL9YEduSvb/v9cutuhrcy0aPA5leOl8tOQm5gb2ni1xVOBVsAgP2wLLH8n6H luldS1CXaWRmud4OX3Gn8PSDkRcVmbvuzQOdSw5Y73TLgMEcukSJT96Z/aUDQMRC NGjPQF6tvGgNlA== -----END CERTIFICATE-----Generated at Sat Nov 22 20:58:52 2025 by rpki-client