This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft File: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft (raw, json) Hash identifier: Wf2mNOcmoMWoS1PKLIPqH7oEjmd1UuKZaIkLkIIB5z0= Subject key identifier: 44:83:2A:E0:8D:52:FA:DC:0C:17:13:30:E8:DD:D3:2F:00:64:2E:F9 Authority key identifier: F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA Certificate issuer: /CN=f984bce44fa32801d7f10ce9839b06084ddff2ba Certificate serial: 019B59ACEE07BB961A786F3A60F52DB41BAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft Manifest number: 131C Signing time: Fri 26 Dec 2025 08:01:03 +0000 Manifest this update: Fri 26 Dec 2025 08:01:03 +0000 Manifest next update: Sat 27 Dec 2025 08:01:03 +0000 Files and hashes: 1: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl (hash: wX+QrnPUiLzVHmscm6T35euXpu9FT2Acyi+tAz05ZoU=) 2: uY3zUef0aSQ_1cVEf2POkOTu658.roa (hash: 5Ji2ueMdcBCO2VElJdA2ZSQYLd05uzaWuTi54eXzep8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 08:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:ee:07:bb:96:1a:78:6f:3a:60:f5:2d:b4:1b:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f984bce44fa32801d7f10ce9839b06084ddff2ba Validity Not Before: Dec 26 08:01:03 2025 GMT Not After : Dec 27 08:01:03 2025 GMT Subject: CN=44832ae08d52fadc0c171330e8ddd32f00642ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cf:2c:a5:f3:67:28:61:c4:a6:51:b4:62:fa: 52:0c:be:c1:cd:6a:02:cd:16:43:48:cd:cc:5d:d4: 9e:8c:44:f1:f2:a6:4a:6c:56:45:93:bd:75:76:a7: 2f:c7:eb:39:97:a1:04:92:d8:42:9d:f2:30:6c:b1: 78:4e:e8:4a:ba:89:bb:ae:aa:2e:b4:76:1a:e3:dd: 73:ae:fe:92:39:a8:62:55:a4:ec:59:3e:a7:65:5f: f7:35:d5:9b:b2:ce:be:69:11:ce:72:3d:7d:ff:d0: c8:49:ce:58:07:69:46:ee:6e:62:17:54:54:d0:e7: 26:ed:d8:11:3d:f4:e1:57:28:3e:c9:64:71:8e:35: 6b:0a:dc:05:9a:c5:7e:0b:ca:df:b3:e7:c1:f4:98: 7d:62:ae:c5:dc:20:b2:65:73:6b:87:ef:65:67:0a: 0b:eb:e0:01:86:76:4c:5a:0b:97:13:85:5e:7d:d6: 79:e6:ea:31:6e:df:f6:6d:fc:1d:e3:cd:11:b1:8e: de:39:93:51:0f:6a:b7:df:a9:95:f9:bd:65:4b:7c: 59:c2:8c:46:9b:d0:2f:c0:8f:93:d1:db:b6:8a:ad: e0:05:1e:ec:19:fa:56:9a:67:b9:05:84:e6:28:ab: 94:29:20:1a:e5:38:b1:fe:b6:68:05:20:e0:2f:4a: 08:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:83:2A:E0:8D:52:FA:DC:0C:17:13:30:E8:DD:D3:2F:00:64:2E:F9 X509v3 Authority Key Identifier: keyid:F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:4e:a4:b1:0c:46:7f:bf:a6:da:36:9b:9c:38:c3:fb:4e:1e: 71:70:04:55:e5:66:5c:e0:fe:8b:8e:b2:cd:9e:db:4d:e1:52: bb:0a:ff:9a:ba:91:00:83:4f:f2:c7:dd:93:4a:01:e3:88:63: fd:7f:c1:0e:95:66:52:f6:40:8e:22:72:94:49:d8:5d:68:b4: 74:3f:c5:5a:62:31:71:21:d2:90:2f:59:82:7f:a1:4e:5b:6f: 50:6a:86:7f:02:ca:08:68:79:d2:3d:fb:4c:6c:b2:9a:c3:7f: d6:76:bf:2e:ca:cd:38:7d:95:06:93:3c:1d:de:c1:b9:db:e1: 1e:31:d5:48:5b:89:d8:ea:7f:a6:cc:04:69:e0:d0:5e:ba:15: 85:17:d8:fb:d6:57:7b:ed:d7:7f:07:55:7d:bd:0c:ac:84:bf: 7e:fc:e1:b5:13:91:52:c9:e9:d3:f0:e2:65:9e:99:64:4d:e5: 47:66:2c:cc:64:12:7a:84:30:8a:88:ed:d8:75:b8:e8:f4:3c: de:04:0c:f5:cd:9a:9f:ab:96:6c:61:3f:54:5a:ec:34:5f:b6: a8:24:20:ef:8e:45:af:81:00:a6:06:a9:33:f8:d7:17:f0:31: 56:1b:43:7f:f2:42:3c:a6:d4:f2:7c:bd:a2:5c:be:d7:31:21: d1:2e:f9:e5 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtZrO4Hu5YaeG86YPUttButMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ODRiY2U0NGZhMzI4MDFkN2YxMGNlOTgzOWIwNjA4NGRk ZmYyYmEwHhcNMjUxMjI2MDgwMTAzWhcNMjUxMjI3MDgwMTAzWjAzMTEwLwYDVQQD Eyg0NDgzMmFlMDhkNTJmYWRjMGMxNzEzMzBlOGRkZDMyZjAwNjQyZWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz88spfNnKGHEplG0YvpSDL7BzWoC zRZDSM3MXdSejETx8qZKbFZFk711dqcvx+s5l6EEkthCnfIwbLF4TuhKuom7rqou tHYa491zrv6SOahiVaTsWT6nZV/3NdWbss6+aRHOcj19/9DISc5YB2lG7m5iF1RU 0Ocm7dgRPfThVyg+yWRxjjVrCtwFmsV+C8rfs+fB9Jh9Yq7F3CCyZXNrh+9lZwoL 6+ABhnZMWguXE4VefdZ55uoxbt/2bfwd480RsY7eOZNRD2q336mV+b1lS3xZwoxG m9AvwI+T0du2iq3gBR7sGfpWmme5BYTmKKuUKSAa5Tix/rZoBSDgL0oItwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFESDKuCNUvrcDBcTMOjd0y8AZC75MB8GA1UdIwQY MBaAFPmEvORPoygB1/EM6YObBghN3/K6MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ZUzg1RS1qS0FIWDhRenBnNXNHQ0UzZjhyby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvYWVjZjJlLTI5YTQtNGEyMC04ZGU1 LWRiMThjMTA0MWE5NS8xLzEtWVM4NUUtaktBSFg4UXpwZzVzR0NFM2Y4cm8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2U0L2FlY2YyZS0yOWE0LTRhMjAtOGRlNS1kYjE4YzEwNDFh OTUvMS8xLVlTODVFLWpLQUhYOFF6cGc1c0dDRTNmOHJvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD06k sQxGf7+m2jabnDjD+04ecXAEVeVmXOD+i46yzZ7bTeFSuwr/mrqRAINP8sfdk0oB 44hj/X/BDpVmUvZAjiJylEnYXWi0dD/FWmIxcSHSkC9Zgn+hTltvUGqGfwLKCGh5 0j37TGyymsN/1na/LsrNOH2VBpM8Hd7BudvhHjHVSFuJ2Op/pswEaeDQXroVhRfY +9ZXe+3XfwdVfb0MrIS/fvzhtRORUsnp0/DiZZ6ZZE3lR2YszGQSeoQwiojt2HW4 6PQ83gQM9c2an6uWbGE/VFrsNF+2qCQg745Fr4EApgapM/jXF/AxVhtDf/JCPKbU 8ny9oly+1zEh0S755Q== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:24 2025 by rpki-client