This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft File: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft (raw, json) Hash identifier: WueUJ5WM9GSQPvvqZBxZIAnEB9bx6SVCHl0uQw/3F5Y= Subject key identifier: FD:CE:1C:DF:79:50:37:23:E1:05:6F:18:63:03:60:87:4E:49:27:60 Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73 Certificate issuer: /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473 Certificate serial: 019B78A406BC46CAEAFFA9113D41AAD339D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft Manifest number: 17D5 Signing time: Thu 01 Jan 2026 08:19:34 +0000 Manifest this update: Thu 01 Jan 2026 08:19:34 +0000 Manifest next update: Fri 02 Jan 2026 08:19:34 +0000 Files and hashes: 1: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl (hash: HXSSkaIlvV3qbGpO8VSps2X/1RUcw7sqD3Ub1QR+j8A=) 2: FHwGNHrCl9ZDaI5iHSATgi0eQI4.roa (hash: Ry8wkccjRDgFgOO1ND+5XAwtEK69W7guaqIyY6Z98Uk=) 3: GgM8OW03SnTWQN6a4-JcJuboxRQ.roa (hash: PcNLLvc5YaEzAxnanxM9AExzd2bC6OppQmgQXDF3KdM=) 4: HbEx7H1JLwPBlmcAN-xpDopPNGM.roa (hash: YJcx1ed3tK16bbLzRe+E+u16eoX0vPPKSbeVN78fzcs=) 5: KnpLhbBEufmPsTr4rfzt358Z5NA.roa (hash: spWQWP4oc84BPT4Abbm0x2lE5bf02yTSVRuZE9yCBqk=) 6: O01AHTz126xddYBIHOgu7hjWpTQ.roa (hash: wUbmS1l2rNfhauG9wUd4dDdjVRn6lpjxrfwiwa8yNYQ=) 7: paJ_DE2H42zvRaO-PkfsPRsWcgo.roa (hash: ZLCNlkkwSoN76l5ZmTEE4VyXeJGMvWwQpQVxOZQbfbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 08:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a4:06:bc:46:ca:ea:ff:a9:11:3d:41:aa:d3:39:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473 Validity Not Before: Jan 1 08:19:34 2026 GMT Not After : Jan 2 08:19:34 2026 GMT Subject: CN=fdce1cdf79503723e1056f18630360874e492760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:57:d3:8c:a6:49:08:ec:8b:b8:c8:2b:98:7d: 8e:cd:7e:6b:af:c4:62:d9:80:06:bf:c4:ef:87:6b: c6:1f:a5:33:23:83:82:f9:9e:ee:25:75:e3:c0:a9: 12:70:43:b0:98:93:66:4b:d1:b2:7b:6a:68:d5:b2: bb:f0:8c:77:32:b3:8d:8e:20:4c:04:de:b2:8c:22: c9:ef:bb:7e:7f:61:68:d9:d3:79:63:a2:18:58:23: fd:6e:35:e9:c6:86:1b:31:95:d7:bd:80:4f:e8:1a: 5d:f0:5f:a5:91:ca:95:41:f5:ed:a6:e9:66:0e:3d: 2f:ca:1b:92:e1:37:d6:dd:14:d8:a8:1c:71:fe:ee: 50:6b:84:3f:54:93:c3:62:1f:22:d0:9c:5f:3f:50: b7:4e:8b:db:00:b6:06:e8:9b:41:86:d7:81:e6:87: 02:86:5f:0f:b5:37:ec:93:54:99:72:84:e9:9f:ae: 26:b7:cc:65:14:41:b4:59:90:57:0a:0f:c7:97:da: 3d:6a:3c:64:73:13:01:50:9f:0e:84:45:f9:6b:db: 99:ab:77:ba:75:40:b8:46:2e:aa:4c:b7:b8:a5:85: 5a:b7:ab:04:5b:8f:07:23:81:11:33:ad:8e:fc:3b: dc:61:60:26:60:0b:f1:18:7f:19:b5:4b:69:26:a9: 6d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:CE:1C:DF:79:50:37:23:E1:05:6F:18:63:03:60:87:4E:49:27:60 X509v3 Authority Key Identifier: keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:05:87:22:ba:99:cb:d3:8e:cf:ab:45:1a:e8:ad:7c:ee:d9: 91:dd:53:c7:d1:0e:5a:f1:b1:3a:f0:d4:d3:7a:1c:d4:3d:2d: 2c:72:ae:21:e8:5c:74:89:32:76:6a:77:b0:bc:ef:67:85:d7: 21:2f:84:65:a1:cc:bf:6e:a0:db:40:1c:dd:38:8d:a4:31:05: 96:1f:dc:a3:de:ad:80:20:b5:13:d2:b4:dd:6d:0f:79:74:b3: b3:03:cf:a2:01:54:59:52:b9:3e:f6:d4:6f:c7:3e:a4:24:52: 6f:6b:7b:ad:22:d9:f0:5b:6c:bc:df:ce:fb:f9:ae:c1:ea:d9: 00:5a:6c:7a:af:1c:e5:df:d1:a6:fa:79:32:81:4f:ca:99:bf: 1e:c5:77:b8:62:4f:0d:be:dc:aa:25:0c:2d:10:39:60:8c:4e: 40:5c:70:92:14:dc:63:ac:f1:f0:f9:a4:2a:25:56:e8:91:e0: 9b:4f:9c:2e:9a:6f:df:57:2d:e2:69:8d:2c:55:c1:0b:45:24: c3:54:2a:1e:f6:03:95:3c:2c:0a:b0:89:17:15:5a:20:c0:58: 97:b8:3e:ee:49:b5:80:b1:26:32:e5:8c:7d:a2:09:c4:a1:48: ec:bb:da:0b:2b:b4:46:2e:3a:df:c1:d7:7f:80:df:8e:f6:2b: 39:a8:e7:76 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt4pAa8Rsrq/6kRPUGq0znVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ODU2ZDY3NGYwZTlkYmY2MDEyZDViNWQzZDk2YjQzYWZk NzY0NzMwHhcNMjYwMTAxMDgxOTM0WhcNMjYwMTAyMDgxOTM0WjAzMTEwLwYDVQQD EyhmZGNlMWNkZjc5NTAzNzIzZTEwNTZmMTg2MzAzNjA4NzRlNDkyNzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklfTjKZJCOyLuMgrmH2OzX5rr8Ri 2YAGv8Tvh2vGH6UzI4OC+Z7uJXXjwKkScEOwmJNmS9Gye2po1bK78Ix3MrONjiBM BN6yjCLJ77t+f2Fo2dN5Y6IYWCP9bjXpxoYbMZXXvYBP6Bpd8F+lkcqVQfXtpulm Dj0vyhuS4TfW3RTYqBxx/u5Qa4Q/VJPDYh8i0JxfP1C3TovbALYG6JtBhteB5ocC hl8PtTfsk1SZcoTpn64mt8xlFEG0WZBXCg/Hl9o9ajxkcxMBUJ8OhEX5a9uZq3e6 dUC4Ri6qTLe4pYVat6sEW48HI4ERM62O/DvcYWAmYAvxGH8ZtUtpJqltpQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFP3OHN95UDcj4QVvGGMDYIdOSSdgMB8GA1UdIwQY MBaAFPmFbWdPDp2/YBLVtdPZa0Ov12RzMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ZVnRaMDhPbmI5Z0V0VzEwOWxyUTZfWFpITS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvOWY5NTkwLTdmMGEtNDFiMy1hYzRm LWVmZDE0ZGI5NTdmYi8xLzEtWVZ0WjA4T25iOWdFdFcxMDlsclE2X1haSE0ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzBhLzlmOTU5MC03ZjBhLTQxYjMtYWM0Zi1lZmQxNGRiOTU3 ZmIvMS8xLVlWdFowOE9uYjlnRXRXMTA5bHJRNl9YWkhNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAWH IrqZy9OOz6tFGuitfO7Zkd1Tx9EOWvGxOvDU03oc1D0tLHKuIehcdIkydmp3sLzv Z4XXIS+EZaHMv26g20Ac3TiNpDEFlh/co96tgCC1E9K03W0PeXSzswPPogFUWVK5 PvbUb8c+pCRSb2t7rSLZ8FtsvN/O+/muwerZAFpseq8c5d/Rpvp5MoFPypm/HsV3 uGJPDb7cqiUMLRA5YIxOQFxwkhTcY6zx8PmkKiVW6JHgm0+cLppv31ct4mmNLFXB C0Ukw1QqHvYDlTwsCrCJFxVaIMBYl7g+7km1gLEmMuWMfaIJxKFI7LvaCyu0Ri46 38HXf4DfjvYrOajndg== -----END CERTIFICATE-----Generated at Thu Jan 1 11:04:32 2026 by rpki-client