This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft File: 1yGexzg_oGEEgN36YsP4LEAM1W8.mft (raw, json) Hash identifier: CxIsb8bJdndVYHEHybUzu5D6g03Cy2W8LS8slpbf2xU= Subject key identifier: C4:0B:78:86:1F:8D:B1:8C:CA:86:E8:2E:BF:EC:BA:D2:6D:3B:54:79 Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F Certificate issuer: /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f Certificate serial: 019B4DE083D43C31F1CB0F6D1FBA5171BBC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft Manifest number: 17A6 Signing time: Wed 24 Dec 2025 01:01:57 +0000 Manifest this update: Wed 24 Dec 2025 01:01:57 +0000 Manifest next update: Thu 25 Dec 2025 01:01:57 +0000 Files and hashes: 1: 1yGexzg_oGEEgN36YsP4LEAM1W8.crl (hash: DQvePYMco4gdeFfU6dfYosSK/D+qt1x5Zp1/L4Ul6l4=) 2: PqhLYK9y6l-hcls-AteZg7ZowWc.roa (hash: 5kkmCBC611tewDVZOjvNR50HAAbuHCz11F3GzXw+Bh4=) 3: U8dIjWtcY2-M_CEVsA6b8bwpFDE.roa (hash: Fkz8GUWY9XL31RlpgAhEjSOpkZkA5/bNbRzb9y7VS9c=) 4: rkMUgmhsqbXXRN9oFUiXQpZDv8U.roa (hash: qJePBEGYHTN0gemfII7b2mdoR3N62f9upxA2WFELbiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:83:d4:3c:31:f1:cb:0f:6d:1f:ba:51:71:bb:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f Validity Not Before: Dec 24 01:01:57 2025 GMT Not After : Dec 25 01:01:57 2025 GMT Subject: CN=c40b78861f8db18cca86e82ebfecbad26d3b5479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2c:34:44:77:e7:bf:d1:42:1f:03:ab:03:7f: 18:7d:8b:d0:0d:37:b6:0c:33:e0:36:1f:6f:a2:b4: 0c:8a:c3:99:c7:08:5c:fb:34:b6:9a:49:43:8f:96: 77:af:56:48:22:7d:79:7f:ff:5a:67:96:0c:98:ec: 2d:b6:4d:fe:75:aa:c0:d0:be:55:a2:7b:2e:cc:16: 65:32:2c:0f:21:6c:7a:c8:5a:43:83:d5:6b:7a:3b: ec:ff:1e:1a:a2:59:09:cd:dd:f3:42:a0:d9:b9:b6: 3d:23:cd:a8:67:d1:aa:49:0a:be:7b:71:4e:0a:11: da:92:08:3a:6e:01:f0:95:59:5a:90:2a:00:45:f9: 46:18:3e:d3:29:2c:cf:b6:54:8f:11:08:e5:50:56: 69:8c:6c:30:3a:2d:ac:cc:a6:47:ed:03:3c:43:4e: ba:84:53:b8:8a:5b:46:84:4b:51:d8:d9:33:a9:3d: a4:36:40:91:95:6c:94:95:49:29:a4:41:29:fa:b9: 6a:29:89:09:6d:23:22:eb:5a:34:06:71:0a:43:29: 41:c6:24:ff:ff:c7:41:87:42:52:8b:43:db:94:e1: 00:ec:14:2e:15:bd:a1:3f:25:a4:40:dd:64:4e:1f: 01:db:82:90:b4:1c:d6:3c:d6:9f:70:0c:51:5b:4e: 86:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:0B:78:86:1F:8D:B1:8C:CA:86:E8:2E:BF:EC:BA:D2:6D:3B:54:79 X509v3 Authority Key Identifier: keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:2b:d3:ec:e3:6c:93:5b:ff:36:c2:eb:ff:60:4c:e4:85:77: c9:9a:8c:24:a8:9a:ea:aa:47:1e:c6:9c:81:4c:f4:b7:7b:d4: 2f:54:55:90:ad:e8:06:71:40:52:d2:55:43:ab:0b:04:5c:8f: 33:b7:fc:cd:17:3d:84:21:3a:24:79:d2:e2:e9:5d:86:b3:b7: 01:65:6f:7c:9d:a1:f5:81:6c:3b:76:c2:65:9c:7a:47:5b:9f: b7:dc:6f:1b:fe:41:f6:96:31:dc:83:e5:78:69:ca:9b:5a:8c: 88:9f:8c:f3:8f:77:ce:8c:67:e9:21:6a:31:97:36:46:15:21: 66:c9:80:77:e0:af:f6:73:a3:29:7d:0a:e3:f6:bc:27:76:d3: c6:31:9f:44:95:ed:0f:52:96:7b:98:a9:26:82:3c:ef:8f:cc: f7:83:fb:55:ec:a8:0e:dc:33:0d:2e:65:93:80:c9:cd:ae:5a: a6:b4:cc:24:55:c1:fc:40:d4:07:78:86:02:77:84:3d:0c:72: cd:b8:1f:49:2d:a6:70:45:f4:cf:a8:91:eb:0d:13:10:d5:26: 57:89:7e:4e:a3:44:65:e6:6b:0b:e3:3d:cf:17:a6:00:4a:39: 74:26:30:20:47:8c:8e:54:e6:8d:05:e6:84:2a:97:35:4e:fe: 1e:56:ca:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4IPUPDHxyw9tH7pRcbvEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MjE5ZWM3MzgzZmEwNjEwNDgwZGRmYTYyYzNmODJjNDAw Y2Q1NmYwHhcNMjUxMjI0MDEwMTU3WhcNMjUxMjI1MDEwMTU3WjAzMTEwLwYDVQQD EyhjNDBiNzg4NjFmOGRiMThjY2E4NmU4MmViZmVjYmFkMjZkM2I1NDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCw0RHfnv9FCHwOrA38YfYvQDTe2 DDPgNh9vorQMisOZxwhc+zS2mklDj5Z3r1ZIIn15f/9aZ5YMmOwttk3+darA0L5V onsuzBZlMiwPIWx6yFpDg9Vrejvs/x4aolkJzd3zQqDZubY9I82oZ9GqSQq+e3FO ChHakgg6bgHwlVlakCoARflGGD7TKSzPtlSPEQjlUFZpjGwwOi2szKZH7QM8Q066 hFO4iltGhEtR2NkzqT2kNkCRlWyUlUkppEEp+rlqKYkJbSMi61o0BnEKQylBxiT/ /8dBh0JSi0PblOEA7BQuFb2hPyWkQN1kTh8B24KQtBzWPNafcAxRW06G5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQLeIYfjbGMyoboLr/sutJtO1R5MB8GA1UdIwQY MBaAFNchnsc4P6BhBIDd+mLD+CxADNVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXlHZXh6Z19vR0VFZ04zNllzUDRMRUFNMVc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mYmZmYmMtYWI4Mi00MDU4LWI4Yjct ZDBjODJhM2NmNGI2LzEvMXlHZXh6Z19vR0VFZ04zNllzUDRMRUFNMVc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9mYmZmYmMtYWI4Mi00MDU4LWI4YjctZDBjODJhM2NmNGI2 LzEvMXlHZXh6Z19vR0VFZ04zNllzUDRMRUFNMVc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAISvT7ONs k1v/NsLr/2BM5IV3yZqMJKia6qpHHsacgUz0t3vUL1RVkK3oBnFAUtJVQ6sLBFyP M7f8zRc9hCE6JHnS4uldhrO3AWVvfJ2h9YFsO3bCZZx6R1uft9xvG/5B9pYx3IPl eGnKm1qMiJ+M8493zoxn6SFqMZc2RhUhZsmAd+Cv9nOjKX0K4/a8J3bTxjGfRJXt D1KWe5ipJoI874/M94P7VeyoDtwzDS5lk4DJza5aprTMJFXB/EDUB3iGAneEPQxy zbgfSS2mcEX0z6iR6w0TENUmV4l+TqNEZeZrC+M9zxemAEo5dCYwIEeMjlTmjQXm hCqXNU7+HlbKaA== -----END CERTIFICATE-----Generated at Wed Dec 24 11:40:05 2025 by rpki-client