This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft File: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft (raw, json) Hash identifier: a/9Fcs0kbVprRhGJoXdpBvKdYo7/UVBP5+sFLsbEL2w= Subject key identifier: D5:D4:B0:8B:C7:43:D0:A9:FB:20:03:83:5D:AB:85:78:6A:47:7A:14 Authority key identifier: D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7 Certificate issuer: /CN=d588db17666fa9515af31dba095d0f250f84bdf7 Certificate serial: 019B5AF6B366FE10199793FD078D97668BC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 14:01:15 +0000 Manifest this update: Fri 26 Dec 2025 14:01:15 +0000 Manifest next update: Sat 27 Dec 2025 14:01:15 +0000 Files and hashes: 1: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl (hash: whs5pu8JcBfjKbBKn1eGLB9sqxr7Jg15ZR9VFT9BrPU=) 2: bGf4cCRG9dkpmbXoKNR-wNn-qNk.roa (hash: Cp+HX5WugU73QzyqqCmrt27DN2j3Lyp2sZVezzd5Obc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:b3:66:fe:10:19:97:93:fd:07:8d:97:66:8b:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d588db17666fa9515af31dba095d0f250f84bdf7 Validity Not Before: Dec 26 14:01:15 2025 GMT Not After : Dec 27 14:01:15 2025 GMT Subject: CN=d5d4b08bc743d0a9fb2003835dab85786a477a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8d:69:81:27:45:e5:a0:a6:b2:a5:02:0a:48: da:22:1a:ec:0e:2f:d7:17:10:57:cd:c4:c1:1b:ba: 3b:ae:f3:9e:43:09:99:47:35:a2:e0:8a:27:7a:32: b2:b3:76:2b:e3:98:e7:99:d5:b4:90:4a:0f:71:5d: a8:c5:2b:3e:da:b3:35:29:21:a5:48:52:05:8f:b2: aa:d0:16:07:23:a5:41:6d:9b:4b:fc:01:ec:6b:b3: f0:c3:9d:5b:60:9e:01:55:f6:69:84:79:be:33:36: 6e:d1:e9:58:9c:a3:d6:ae:71:80:72:54:ab:c5:b6: 02:91:0a:9e:ea:fc:c3:36:2e:fb:a0:c5:8b:c1:92: 00:2e:50:a7:5d:1b:97:a0:40:f5:8b:fe:18:67:4a: e3:6e:7f:af:08:91:69:44:bb:31:b2:50:ab:31:74: f6:a6:ab:96:6a:4a:65:c8:3a:65:cc:88:6f:74:c3: 62:59:2b:0a:ea:72:7c:f0:56:14:5c:cb:17:fd:3e: 04:a6:ce:d3:88:3a:10:98:ab:3f:74:4d:8b:ab:09: 7c:a7:05:ef:04:dd:99:e8:3f:68:84:d0:6d:10:c5: 20:3a:6f:d7:32:54:ca:9e:d8:0a:f8:77:1f:20:8b: de:cd:a0:c4:e1:3f:c4:be:58:91:63:86:7c:8f:1d: 25:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D4:B0:8B:C7:43:D0:A9:FB:20:03:83:5D:AB:85:78:6A:47:7A:14 X509v3 Authority Key Identifier: keyid:D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:55:c0:42:24:4b:1f:2d:a4:5c:53:79:3d:90:a4:4c:c5:85: bd:17:3a:b1:1e:8f:58:1c:41:5d:88:7f:5a:a8:c5:5f:d4:08: 44:c7:35:d3:f0:42:44:94:99:57:b3:e8:37:ac:da:8a:77:81: 3c:64:15:c5:84:f4:75:0c:b4:60:9c:ad:bb:06:66:aa:cf:1e: 54:9e:c0:4f:8f:e7:ed:cd:6d:27:65:6a:95:c1:bd:74:d1:a1: d7:88:59:78:09:26:7e:34:86:cb:39:a2:01:56:a4:47:65:d3: 28:f2:cc:5b:ce:c4:b9:79:2a:49:4c:e7:53:84:10:bf:11:8a: e8:7d:ae:36:9b:fb:d6:39:74:6f:3d:d2:39:c9:7c:de:18:1d: a2:cb:e9:e2:39:75:b0:a1:21:3e:70:5a:4b:2a:45:b1:a0:4d: 05:23:75:4d:5f:52:9a:92:64:b9:ed:a3:d7:3f:60:15:ca:a5: 09:cc:77:33:e3:63:0b:c8:0d:fe:01:a8:61:0e:d2:6d:80:0d: 75:20:d8:55:6b:7d:83:b2:b0:43:7b:f4:80:b3:7d:22:04:05: 45:94:c0:5a:2e:e0:aa:74:7b:a5:b5:46:ef:c0:46:73:8c:f4: 08:0b:90:14:22:a0:9e:e2:65:13:46:c9:ee:f3:a1:3a:b3:1c: 70:bd:8f:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9rNm/hAZl5P9B42XZovGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ODhkYjE3NjY2ZmE5NTE1YWYzMWRiYTA5NWQwZjI1MGY4 NGJkZjcwHhcNMjUxMjI2MTQwMTE1WhcNMjUxMjI3MTQwMTE1WjAzMTEwLwYDVQQD EyhkNWQ0YjA4YmM3NDNkMGE5ZmIyMDAzODM1ZGFiODU3ODZhNDc3YTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko1pgSdF5aCmsqUCCkjaIhrsDi/X FxBXzcTBG7o7rvOeQwmZRzWi4IonejKys3Yr45jnmdW0kEoPcV2oxSs+2rM1KSGl SFIFj7Kq0BYHI6VBbZtL/AHsa7Pww51bYJ4BVfZphHm+MzZu0elYnKPWrnGAclSr xbYCkQqe6vzDNi77oMWLwZIALlCnXRuXoED1i/4YZ0rjbn+vCJFpRLsxslCrMXT2 pquWakplyDplzIhvdMNiWSsK6nJ88FYUXMsX/T4Eps7TiDoQmKs/dE2Lqwl8pwXv BN2Z6D9ohNBtEMUgOm/XMlTKntgK+HcfIIvezaDE4T/EvliRY4Z8jx0lJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXUsIvHQ9Cp+yADg12rhXhqR3oUMB8GA1UdIwQY MBaAFNWI2xdmb6lRWvMdugldDyUPhL33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVlqYkYyWnZxVkZhOHgyNkNWMFBKUS1FdmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zZDdlMjAtOTAyMi00OTJhLWI4ODIt MzE4OGU5ZDFmNWEwLzEvMVlqYkYyWnZxVkZhOHgyNkNWMFBKUS1FdmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8zZDdlMjAtOTAyMi00OTJhLWI4ODItMzE4OGU5ZDFmNWEw LzEvMVlqYkYyWnZxVkZhOHgyNkNWMFBKUS1FdmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY1XAQiRL Hy2kXFN5PZCkTMWFvRc6sR6PWBxBXYh/WqjFX9QIRMc10/BCRJSZV7PoN6zaineB PGQVxYT0dQy0YJytuwZmqs8eVJ7AT4/n7c1tJ2VqlcG9dNGh14hZeAkmfjSGyzmi AVakR2XTKPLMW87EuXkqSUznU4QQvxGK6H2uNpv71jl0bz3SOcl83hgdosvp4jl1 sKEhPnBaSypFsaBNBSN1TV9SmpJkue2j1z9gFcqlCcx3M+NjC8gN/gGoYQ7SbYAN dSDYVWt9g7KwQ3v0gLN9IgQFRZTAWi7gqnR7pbVG78BGc4z0CAuQFCKgnuJlE0bJ 7vOhOrMccL2PoQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:16 2025 by rpki-client