This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft File: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft (raw, json) Hash identifier: hVNtYpc8ZUErleOcH0kIJ9MyYM43u/QXqzPzk7FhLXo= Subject key identifier: DF:4D:9D:A9:7A:6E:57:7F:C5:0D:54:E2:89:FF:A2:6C:2F:88:FD:1A Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73 Certificate issuer: /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473 Certificate serial: 019B3BD9B6C070531C3E02778FE43AC18757 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft Manifest number: 17B5 Signing time: Sat 20 Dec 2025 13:01:22 +0000 Manifest this update: Sat 20 Dec 2025 13:01:22 +0000 Manifest next update: Sun 21 Dec 2025 13:01:22 +0000 Files and hashes: 1: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl (hash: hxBaNekPtDZITKna/30MMqbL0XJYsK1kUpGtUSMXj+U=) 2: 6ZeRNkK2gfkBTq-HCKi4E0wDn0g.roa (hash: EG2r/8KWDUcCkyQHYwdunKSI5bgRdtrDYdyzMOQ6sPg=) 3: 7zkL6is6uiT0K6jbnHgG4_foxLs.roa (hash: 7s5RovPfiSb41Rd6Pj/MwhULMmTO5+df4JKH36bwQEY=) 4: OtQ48GIqhoV8BbHUJtSPHtzr3bM.roa (hash: Qd9IkkyUrKLcvFwMqdzhvX7YcnKe2XLSIuFWdUOxwyk=) 5: RDfRFkINmnxAYr0i5lo-RrZfvvM.roa (hash: OK1hJOOaClcL1ul04CJbPRYEerL2hSCv/3xJn1BxpKo=) 6: W-3pllcOO_r6leZFXqyl0NNm9Ww.roa (hash: cCQm6IWECwZhgYdkg5jkkG+WaaUJSwWYVhY2RXgyFBM=) 7: gwNf7hRUcUlc_WP0obY5q2dBbnQ.roa (hash: rRyAeqxP/tdvl1xFzDmcY8amsglq1slf48aSCQfMHSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:b6:c0:70:53:1c:3e:02:77:8f:e4:3a:c1:87:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473 Validity Not Before: Dec 20 13:01:22 2025 GMT Not After : Dec 21 13:01:22 2025 GMT Subject: CN=df4d9da97a6e577fc50d54e289ffa26c2f88fd1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0d:aa:8d:da:4d:b9:61:44:8d:72:84:3a:88: e0:a9:83:78:e8:dd:d9:e5:c3:7b:cc:4a:22:4b:d5: e6:44:4d:ed:11:30:ae:61:fb:e6:c3:93:91:39:33: 87:a8:f7:f6:b8:62:7d:7e:49:d1:e6:22:28:83:fd: 21:e1:30:2f:18:02:e6:07:cf:31:0c:3e:6a:60:34: 2e:e4:48:91:bc:1e:3f:89:58:03:24:0f:a9:16:65: 12:27:19:f9:ce:1e:70:e9:e6:4b:dc:01:31:c0:74: 3e:71:6d:9d:48:42:4a:d8:91:08:49:18:dd:a5:1e: 59:1e:a0:6d:56:cb:1f:1c:65:ae:2d:41:28:a6:f8: 5a:90:35:36:a4:70:ab:d5:24:59:4a:fc:86:4d:fc: 32:0c:37:3c:94:74:cc:0a:1b:6a:b1:cf:b5:12:a6: 83:82:7c:66:ed:65:c3:7c:62:17:fa:8f:3f:fd:0d: 12:8e:18:f7:88:84:9b:a2:0d:71:7a:25:25:d6:d2: 5f:e8:31:25:bb:f5:b5:23:77:c3:2c:71:11:bd:0a: 69:39:db:0e:0a:b2:a2:af:96:c9:ea:e0:94:7a:e6: 7d:4d:4f:cd:e7:d2:a8:d8:0b:e8:e6:a5:65:88:85: 3f:8e:0a:be:a0:dd:51:10:3f:fc:7f:5a:be:48:44: ae:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4D:9D:A9:7A:6E:57:7F:C5:0D:54:E2:89:FF:A2:6C:2F:88:FD:1A X509v3 Authority Key Identifier: keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:a1:08:2a:25:bf:b9:da:36:cc:a5:b3:6b:70:06:96:17:33: 46:38:4b:19:05:d7:2a:16:a3:9d:40:dd:ab:ce:37:d8:fd:41: cf:65:39:49:85:45:0a:82:5e:10:e9:31:a3:18:43:19:0a:4c: 07:96:60:8a:82:ff:72:51:28:ff:31:31:80:ae:62:33:b0:35: 23:81:37:d5:1f:86:d7:44:bb:9d:c9:60:dc:13:80:e8:63:76: a5:c1:1a:85:a6:31:ba:b2:25:fa:71:25:2b:25:67:c6:e4:2c: 7a:88:0a:aa:d1:bf:53:81:27:65:fc:52:18:5d:a1:6c:b3:e8: c2:b1:03:2d:f4:88:54:d3:67:fd:78:e7:38:c8:71:80:37:c9: 07:9a:f7:8d:1e:6b:fe:4d:55:62:fd:33:3c:bd:af:a1:40:fc: 51:a2:90:b1:81:18:32:3f:c5:a6:28:e0:95:d3:88:d9:32:36: af:92:4d:50:64:4e:d3:2f:57:2a:a7:2c:c2:3d:b6:22:8d:88: 10:c6:9d:e1:68:24:c3:23:2b:6d:12:5f:32:44:51:b8:50:eb: 55:50:f6:5a:59:58:01:a8:bf:9c:9c:fe:14:45:5d:ee:d3:a7: ef:59:a0:18:05:af:6e:81:fb:11:cf:c3:eb:c6:d1:19:de:72: 83:31:0a:f7 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs72bbAcFMcPgJ3j+Q6wYdXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ODU2ZDY3NGYwZTlkYmY2MDEyZDViNWQzZDk2YjQzYWZk NzY0NzMwHhcNMjUxMjIwMTMwMTIyWhcNMjUxMjIxMTMwMTIyWjAzMTEwLwYDVQQD EyhkZjRkOWRhOTdhNmU1NzdmYzUwZDU0ZTI4OWZmYTI2YzJmODhmZDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlw2qjdpNuWFEjXKEOojgqYN46N3Z 5cN7zEoiS9XmRE3tETCuYfvmw5OROTOHqPf2uGJ9fknR5iIog/0h4TAvGALmB88x DD5qYDQu5EiRvB4/iVgDJA+pFmUSJxn5zh5w6eZL3AExwHQ+cW2dSEJK2JEISRjd pR5ZHqBtVssfHGWuLUEopvhakDU2pHCr1SRZSvyGTfwyDDc8lHTMChtqsc+1EqaD gnxm7WXDfGIX+o8//Q0Sjhj3iISbog1xeiUl1tJf6DElu/W1I3fDLHERvQppOdsO CrKir5bJ6uCUeuZ9TU/N59Ko2Avo5qVliIU/jgq+oN1RED/8f1q+SESu1wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFN9Nnal6bld/xQ1U4on/omwviP0aMB8GA1UdIwQY MBaAFPmFbWdPDp2/YBLVtdPZa0Ov12RzMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ZVnRaMDhPbmI5Z0V0VzEwOWxyUTZfWFpITS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvOWY5NTkwLTdmMGEtNDFiMy1hYzRm LWVmZDE0ZGI5NTdmYi8xLzEtWVZ0WjA4T25iOWdFdFcxMDlsclE2X1haSE0ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzBhLzlmOTU5MC03ZjBhLTQxYjMtYWM0Zi1lZmQxNGRiOTU3 ZmIvMS8xLVlWdFowOE9uYjlnRXRXMTA5bHJRNl9YWkhNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHKEI KiW/udo2zKWza3AGlhczRjhLGQXXKhajnUDdq8432P1Bz2U5SYVFCoJeEOkxoxhD GQpMB5ZgioL/clEo/zExgK5iM7A1I4E31R+G10S7nclg3BOA6GN2pcEahaYxurIl +nElKyVnxuQseogKqtG/U4EnZfxSGF2hbLPowrEDLfSIVNNn/XjnOMhxgDfJB5r3 jR5r/k1VYv0zPL2voUD8UaKQsYEYMj/FpijgldOI2TI2r5JNUGRO0y9XKqcswj22 Io2IEMad4WgkwyMrbRJfMkRRuFDrVVD2WllYAai/nJz+FEVd7tOn71mgGAWvboH7 Ec/D68bRGd5ygzEK9w== -----END CERTIFICATE-----Generated at Sat Dec 20 21:08:35 2025 by rpki-client