This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft File: 1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft (raw, json) Hash identifier: mTCYHzulxc8XIFpt6hbJP07RQJvgV0uhlFS/ZWZOKKw= Subject key identifier: AB:B4:7C:AE:43:9F:BD:EC:55:21:3C:F8:6E:4C:DE:51:1E:3A:E7:2C Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7 Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7 Certificate serial: 019B3EDA6FA8C53076666974440CCCF5BE4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft Manifest number: 1351 Signing time: Sun 21 Dec 2025 03:01:01 +0000 Manifest this update: Sun 21 Dec 2025 03:01:01 +0000 Manifest next update: Mon 22 Dec 2025 03:01:01 +0000 Files and hashes: 1: 0NC1N_A-fQvGxJ0y6M2HnKF7jRA.roa (hash: ui4M3nog1Gu32ZWTG5lmnhIcOo/8j6eCO17Kb4EZuZM=) 2: 1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl (hash: hLEAFODgu10w44vt03Otd8RahZMpmJRUzXPSIzw5KRk=) 3: 4d1Pkq7-lWC3-1U-aIUJanzwNos.roa (hash: zZsUqZYfGAefG3I0e/YYA4kFIUGe+3X4rCm4R/YUXUc=) 4: Iiq1HkVTZWG93GXR5SmJNt8J3X0.roa (hash: ACz9bOMro7XmfGTKe0GkQ+qfpA1L29Dv5xB1Qya9/EA=) 5: ONL3PQ4OeKj9GolWXDmn2ruNHnw.roa (hash: rXKbdPmJw7wfX0tqsu5yb+15Jpu2GS0eUYlTZU0/zCs=) 6: rlSu8PBi6nqeGqAf18qNJl44Mq4.roa (hash: OJVJSdfw2izkHPFtKDpWYbt59YAxHvGayaJxgK3I62Q=) 7: vk-2RYHviyXKCP3eAAsgKKSkBv4.roa (hash: AV445OcWK5tkwYC3s0HKBp//h5gf47ykPfmI2RcuEUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:6f:a8:c5:30:76:66:69:74:44:0c:cc:f5:be:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7 Validity Not Before: Dec 21 03:01:01 2025 GMT Not After : Dec 22 03:01:01 2025 GMT Subject: CN=abb47cae439fbdec55213cf86e4cde511e3ae72c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1f:c6:66:07:9d:b6:5f:2e:64:c9:01:a4:e8: 65:17:aa:80:19:91:3e:f5:5b:bf:1c:ff:a2:9c:4a: 01:5d:4f:13:c0:d5:91:51:95:ff:93:2b:2b:c4:7f: 3e:a3:cb:33:9d:e4:b9:f4:6c:b3:65:0a:7f:2d:cd: fd:a4:bd:d3:b0:1f:8c:84:c9:38:a3:d8:59:0c:06: 83:3f:ad:5d:a5:a9:ee:cc:01:72:4a:dd:67:a8:b1: d3:bd:e2:d9:42:b1:f1:2e:b6:32:3c:23:e7:4a:2e: eb:c4:b9:b0:7f:ec:d7:7e:60:2f:2a:3b:e3:ee:2b: b7:c0:53:5b:d9:09:f3:32:5c:54:cd:39:4f:e0:81: e8:cd:8d:f1:00:e9:0e:7e:a8:47:92:b9:52:f3:ba: 2f:11:f2:69:6e:24:54:dc:dc:f8:9c:a7:1e:4e:f5: 4d:6f:2e:05:8b:b4:b7:e8:96:cf:32:e4:d8:12:da: 51:17:05:fc:d1:52:7f:7b:37:10:38:d6:ad:fa:e3: 9d:90:46:19:f0:23:35:40:fd:1f:e9:7d:40:e5:37: 10:5e:0d:b2:cb:4f:fe:37:95:a5:f8:e4:28:45:b8: a3:39:15:cd:6b:21:31:3d:d6:37:fd:53:1a:ca:24: 28:da:eb:87:fb:67:5b:78:f8:ff:57:d2:bc:c7:07: 15:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B4:7C:AE:43:9F:BD:EC:55:21:3C:F8:6E:4C:DE:51:1E:3A:E7:2C X509v3 Authority Key Identifier: keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:07:bd:2d:13:3f:38:1f:47:57:6d:5a:05:7c:3e:52:48:bd: a5:a4:07:1f:3e:49:5b:bd:41:a5:59:6a:59:38:27:41:53:f1: 85:fc:26:b1:0c:5e:21:90:f8:19:67:84:c3:5d:b1:3e:dc:68: 54:6c:d3:63:9c:52:69:0d:a7:ff:7d:9d:94:00:6c:aa:b6:be: cd:2f:91:04:4d:a5:be:5e:39:85:1f:c2:f0:1b:e3:7b:ff:2d: 39:e0:da:4c:d9:76:34:6b:16:70:0d:f9:36:c3:b6:ad:ea:e7: 6c:b8:31:5f:3b:58:af:a4:e1:29:1e:b3:a9:4f:34:3a:0d:f0: 65:1f:ad:88:21:0a:fe:b0:66:a2:23:4e:63:27:c8:b3:e4:6f: f3:ad:30:c1:b5:8f:12:9d:47:95:b8:b6:96:07:3c:28:68:fb: f3:f3:c3:44:5c:49:38:b7:42:f1:c6:ae:7a:2c:70:ee:4b:a7: 6c:92:70:cf:76:18:ad:37:d6:de:0d:9e:7a:42:e7:08:94:1a: 43:03:3e:ca:ea:84:7b:19:94:27:ad:2d:30:a3:5b:c0:a8:7a: fb:b9:bd:1c:98:b3:ef:99:af:66:54:e7:f2:38:bd:c5:b8:25: 92:04:57:3d:4f:13:0d:5d:30:4d:66:34:21:38:58:15:dd:bc: 19:23:34:03 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs+2m+oxTB2Zml0RAzM9b5OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4Nzk5ODhlMGY0OTk3MWEzMjZmNDE5ZTVjZmFjYmZkZGNj OTkzZTcwHhcNMjUxMjIxMDMwMTAxWhcNMjUxMjIyMDMwMTAxWjAzMTEwLwYDVQQD EyhhYmI0N2NhZTQzOWZiZGVjNTUyMTNjZjg2ZTRjZGU1MTFlM2FlNzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR/GZgedtl8uZMkBpOhlF6qAGZE+ 9Vu/HP+inEoBXU8TwNWRUZX/kysrxH8+o8szneS59GyzZQp/Lc39pL3TsB+MhMk4 o9hZDAaDP61dpanuzAFySt1nqLHTveLZQrHxLrYyPCPnSi7rxLmwf+zXfmAvKjvj 7iu3wFNb2QnzMlxUzTlP4IHozY3xAOkOfqhHkrlS87ovEfJpbiRU3Nz4nKceTvVN by4Fi7S36JbPMuTYEtpRFwX80VJ/ezcQONat+uOdkEYZ8CM1QP0f6X1A5TcQXg2y y0/+N5Wl+OQoRbijORXNayExPdY3/VMayiQo2uuH+2dbePj/V9K8xwcV1wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKu0fK5Dn73sVSE8+G5M3lEeOucsMB8GA1UdIwQY MBaAFPh5mI4PSZcaMm9Bnlz6y/3cyZPnMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1IbVlqZzlKbHhveWIwR2VYUHJMX2R6SmstYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvYWYzZDgxLTAwNDctNDEzYy05MWY0 LTA0NzBiNGJiMzBkYi8xLzEtSG1Zamc5Smx4b3liMEdlWFByTF9kekprLWMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzA1L2FmM2Q4MS0wMDQ3LTQxM2MtOTFmNC0wNDcwYjRiYjMw ZGIvMS8xLUhtWWpnOUpseG95YjBHZVhQckxfZHpKay1jLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUge9 LRM/OB9HV21aBXw+Uki9paQHHz5JW71BpVlqWTgnQVPxhfwmsQxeIZD4GWeEw12x PtxoVGzTY5xSaQ2n/32dlABsqra+zS+RBE2lvl45hR/C8Bvje/8tOeDaTNl2NGsW cA35NsO2rernbLgxXztYr6ThKR6zqU80Og3wZR+tiCEK/rBmoiNOYyfIs+Rv860w wbWPEp1Hlbi2lgc8KGj78/PDRFxJOLdC8caueixw7kunbJJwz3YYrTfW3g2eekLn CJQaQwM+yuqEexmUJ60tMKNbwKh6+7m9HJiz75mvZlTn8ji9xbglkgRXPU8TDV0w TWY0IThYFd28GSM0Aw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:59:22 2025 by rpki-client