This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft File: 1-yqlrPybsP5rkR8eytPrVNRcs28.mft (raw, json) Hash identifier: TEoBLOJt8HcW3xRVt/ZTQDoK97oJ7BCGRKc7oKcnIzU= Subject key identifier: 72:8D:BD:D1:42:08:EB:76:38:3C:1F:FD:9D:53:59:92:77:B0:DA:9A Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f Certificate serial: 019AFAD4AC33ED49EAB7142C0BB1CF23FDD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft Manifest number: 08B1 Signing time: Sun 07 Dec 2025 22:00:32 +0000 Manifest this update: Sun 07 Dec 2025 22:00:32 +0000 Manifest next update: Mon 08 Dec 2025 22:00:32 +0000 Files and hashes: 1: 1-yqlrPybsP5rkR8eytPrVNRcs28.crl (hash: H/hctG4S+Clnpb5+mFokbH2BuscD1ZF4zAE1QN0qvrI=) 2: 8BItxdRwiz6e55f08Mt17mlwvV8.roa (hash: cojnwxd3ILvAkZ0dYhgxffSNvY1zxZ63Duvu6PuvkIM=) 3: QO_GooH2m885Q2taEPXMPgyGMvU.roa (hash: 1VnTsOfjtKGYm7FG0JLVMLSQUzntH2YHEOdl/AmQZTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:d4:ac:33:ed:49:ea:b7:14:2c:0b:b1:cf:23:fd:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f Validity Not Before: Dec 7 22:00:32 2025 GMT Not After : Dec 8 22:00:32 2025 GMT Subject: CN=728dbdd14208eb76383c1ffd9d53599277b0da9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d6:23:ba:c4:79:2e:b8:de:c9:6b:82:a2:3e: 23:7e:d2:fd:ea:8b:a9:ed:bf:75:06:ac:6b:2b:59: e7:29:fb:6a:81:d9:a2:40:64:55:46:38:d9:4d:3d: b8:1b:98:9c:02:d9:dd:eb:fd:01:38:37:d9:1d:48: 82:25:52:e1:78:50:71:18:9c:2c:89:51:75:e3:d0: 80:8c:26:8c:f0:c2:14:1e:a9:73:46:2a:1e:1e:3f: 8a:a0:3e:08:dc:bc:94:81:c4:c3:5f:b8:4f:23:06: 20:be:76:12:60:f0:13:17:5a:ac:ab:43:28:b1:02: 43:aa:ae:f2:f7:6b:bb:df:52:85:a8:d5:2b:f6:bd: c0:52:24:f7:0f:95:03:e7:46:52:84:d5:56:b0:72: 79:26:89:02:f4:3e:3e:08:65:1d:be:19:be:b5:dd: 60:a7:7b:c3:4b:45:82:a8:63:fd:c7:a5:49:a8:0e: b7:11:6d:17:60:84:bb:cb:e3:e6:03:33:b2:df:47: a9:39:db:33:69:28:0f:ff:e1:66:c7:2d:c6:d2:a2: 1e:ca:75:47:31:ca:48:86:4f:2f:a9:0d:c0:64:31: db:7b:66:8e:8a:f6:b1:f4:91:98:27:da:93:b3:23: 9f:b0:8c:68:b7:0a:08:5a:50:2b:da:e8:86:f2:17: 33:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8D:BD:D1:42:08:EB:76:38:3C:1F:FD:9D:53:59:92:77:B0:DA:9A X509v3 Authority Key Identifier: keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:61:75:2c:6b:73:33:c0:4c:f7:45:ce:e9:3a:76:d4:46:8c: 37:8d:f8:76:d7:3a:42:ab:96:6f:29:44:93:5c:74:f3:6f:41: b5:5c:c0:c8:6f:ac:8e:cc:eb:00:ff:69:91:79:57:da:b9:58: 3f:fc:31:b1:af:bc:e6:14:58:0f:0f:8d:b8:18:4a:59:c3:e2: 6d:ad:0b:5e:38:3f:d2:62:83:df:b4:60:01:57:9d:cb:63:ba: 9e:25:b0:cb:46:ba:70:cc:5e:8d:8e:ef:a7:6b:81:ef:4b:34: 91:07:01:ab:a9:f5:85:8e:e5:19:47:64:f2:7d:90:bd:04:a7: 3c:98:67:7e:62:ca:7b:52:c7:49:32:e3:b6:e9:1a:1c:3a:00: b0:a3:b4:e3:da:ad:38:93:d4:ec:a9:e6:04:b8:5b:d2:76:76: 6a:74:2e:6b:82:fb:4f:7e:ed:92:ca:a4:cc:c6:9f:48:a5:52: 24:2a:c1:29:72:88:4c:2e:76:3e:83:39:9a:95:b8:a0:08:9e: 22:1a:5d:c0:cb:bd:35:0a:c5:e1:67:d4:f2:0e:fc:c8:7c:d5: d9:b8:15:ea:4b:e5:26:ac:38:6c:f1:b6:66:4d:f6:38:99:ee: cf:57:55:e7:fc:71:d5:2a:67:3f:c5:3e:0a:3c:ca:d4:03:35: c8:e4:c0:61 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr61Kwz7UnqtxQsC7HPI/3SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMmFhNWFjZmM5YmIwZmU2YjkxMWYxZWNhZDNlYjU0ZDQ1 Y2IzNmYwHhcNMjUxMjA3MjIwMDMyWhcNMjUxMjA4MjIwMDMyWjAzMTEwLwYDVQQD Eyg3MjhkYmRkMTQyMDhlYjc2MzgzYzFmZmQ5ZDUzNTk5Mjc3YjBkYTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39YjusR5LrjeyWuCoj4jftL96oup 7b91BqxrK1nnKftqgdmiQGRVRjjZTT24G5icAtnd6/0BODfZHUiCJVLheFBxGJws iVF149CAjCaM8MIUHqlzRioeHj+KoD4I3LyUgcTDX7hPIwYgvnYSYPATF1qsq0Mo sQJDqq7y92u731KFqNUr9r3AUiT3D5UD50ZShNVWsHJ5JokC9D4+CGUdvhm+td1g p3vDS0WCqGP9x6VJqA63EW0XYIS7y+PmAzOy30epOdszaSgP/+Fmxy3G0qIeynVH McpIhk8vqQ3AZDHbe2aOivax9JGYJ9qTsyOfsIxotwoIWlAr2uiG8hczjQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHKNvdFCCOt2ODwf/Z1TWZJ3sNqaMB8GA1UdIwQY MBaAFPsqpaz8m7D+a5EfHsrT61TUXLNvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS15cWxyUHlic1A1cmtSOGV5dFByVk5SY3MyOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvZDllN2VkLTNjMGYtNGE5Mi04NzE2 LWVlMDU3Y2Y5YzE2MS8xLzEteXFsclB5YnNQNXJrUjhleXRQclZOUmNzMjgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2YxL2Q5ZTdlZC0zYzBmLTRhOTItODcxNi1lZTA1N2NmOWMx NjEvMS8xLXlxbHJQeWJzUDVya1I4ZXl0UHJWTlJjczI4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOWF1 LGtzM8BM90XO6Tp21EaMN434dtc6QquWbylEk1x0829BtVzAyG+sjszrAP9pkXlX 2rlYP/wxsa+85hRYDw+NuBhKWcPiba0LXjg/0mKD37RgAVedy2O6niWwy0a6cMxe jY7vp2uB70s0kQcBq6n1hY7lGUdk8n2QvQSnPJhnfmLKe1LHSTLjtukaHDoAsKO0 49qtOJPU7KnmBLhb0nZ2anQua4L7T37tksqkzMafSKVSJCrBKXKITC52PoM5mpW4 oAieIhpdwMu9NQrF4WfU8g78yHzV2bgV6kvlJqw4bPG2Zk32OJnuz1dV5/xx1Spn P8U+CjzK1AM1yOTAYQ== -----END CERTIFICATE-----Generated at Mon Dec 8 00:54:12 2025 by rpki-client