This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft File: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft (raw, json) Hash identifier: Y2+W3bPxvAbhBWyqf7plLRLcrTj3GwS3UiGASz5k5IM= Subject key identifier: 36:B1:FE:7B:48:F7:1A:2E:E2:7D:6A:37:00:97:F5:D6:69:C7:62:FD Authority key identifier: F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08 Certificate issuer: /CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208 Certificate serial: 019B3945FB658C02422BC155178267517E24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft Manifest number: 0CA7 Signing time: Sat 20 Dec 2025 01:00:46 +0000 Manifest this update: Sat 20 Dec 2025 01:00:46 +0000 Manifest next update: Sun 21 Dec 2025 01:00:46 +0000 Files and hashes: 1: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl (hash: gJk45wS0M6gXzXxN/6paB4mgBiHArfbBRdeLJQpWufo=) 2: 6Z4b57MPwkhXcs7J77Og5ggNHxk.roa (hash: dJBszKW/oW+tRw8WTxNJkgV8kHFKswAFFpUPQ986IzE=) 3: EMHZK5FmGs3e4ft5zOEqyrPAX3k.roa (hash: SAEFhbIVJ1yY+JX9erZchhAcSGngszOxyT0JSaQzoqQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:45:fb:65:8c:02:42:2b:c1:55:17:82:67:51:7e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208 Validity Not Before: Dec 20 01:00:46 2025 GMT Not After : Dec 21 01:00:46 2025 GMT Subject: CN=36b1fe7b48f71a2ee27d6a370097f5d669c762fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:77:53:57:41:df:68:be:12:25:9a:51:ee:ed: ab:95:71:73:b6:9a:2d:5c:fb:ee:3b:06:68:fc:dd: ba:e2:c4:9f:f5:5d:ae:7d:31:36:29:a0:82:ab:fc: 95:db:2d:b8:f7:30:67:c8:7d:29:58:71:e9:ad:cd: 73:86:9b:07:a1:87:88:c6:a4:0c:96:c7:9e:9d:a7: d3:90:b7:34:3d:1e:76:32:b7:38:c7:18:ca:b9:b4: 56:af:10:c6:bb:59:30:8d:80:24:06:80:6e:88:5d: db:1c:c1:bf:d2:05:af:52:d8:74:d7:ab:a0:e9:3d: 08:85:38:c7:56:41:e3:a2:3f:d0:a1:02:71:ee:a3: 4d:fd:41:98:33:de:ed:8b:db:c4:b5:bf:00:1d:7c: 7f:fe:7e:2c:a0:43:b3:47:57:d8:53:80:0d:4a:fa: a6:7d:8c:2b:dd:5a:50:54:e6:03:e5:0a:a7:05:4e: 82:fa:3f:01:8a:ec:01:57:25:eb:ec:02:3d:51:a1: f5:ab:e7:95:a5:aa:40:97:1d:73:0d:4a:ae:d9:c5: 41:d3:8c:90:25:45:c1:dd:5d:90:e9:61:a0:04:60: a7:12:b6:90:24:b0:79:c7:3a:57:a6:77:93:e5:f5: 0b:11:ee:b2:09:66:b4:31:a2:49:8c:b4:cd:82:7a: 64:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B1:FE:7B:48:F7:1A:2E:E2:7D:6A:37:00:97:F5:D6:69:C7:62:FD X509v3 Authority Key Identifier: keyid:F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:99:cc:e1:e4:45:65:a1:51:95:9a:20:80:a6:c6:ab:2f:9d: b3:5b:be:41:e8:ab:8e:54:90:b6:ec:2f:e0:e0:5b:80:a8:de: 87:00:3a:1d:37:31:f3:74:4b:4f:8d:55:e2:4e:c2:50:81:6e: e5:95:c6:cb:ec:53:dc:e8:e0:ac:3e:f9:84:ed:8f:33:36:c7: ec:07:73:45:ae:ef:a2:f3:5f:61:66:97:6c:04:99:d4:58:fa: 00:81:5e:56:ed:2d:d4:99:3d:19:0e:4b:cd:77:71:2d:c9:61: a6:43:b6:e9:a8:79:ac:70:7a:d0:e0:18:3d:a8:b8:df:04:c3: ed:89:b6:65:cd:ad:79:d3:28:f7:65:c5:f4:ba:50:39:e6:17: 26:85:38:28:39:25:85:27:19:d0:6d:e7:af:70:06:1c:8d:7e: a9:c6:5e:09:3d:bc:24:d3:24:2a:bd:b1:18:b5:f9:10:6c:31: c4:0f:af:0b:28:9a:eb:62:4c:90:c3:51:11:0c:9b:85:0a:f2: 67:89:f3:f2:ac:b8:ee:11:b7:a0:f7:21:07:3c:39:61:4f:52: 91:09:d4:24:f4:55:0c:b2:04:0f:54:22:06:cd:97:6a:91:b9: d0:59:81:30:d0:84:87:79:f6:93:0d:5c:ec:fb:eb:09:8a:e3: 35:69:e4:76 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs5RftljAJCK8FVF4JnUX4kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YWU5ODgxYmYxMTIwOThhMmJmZDQ5YTBiY2ZmZGNjY2U3 YmMyMDgwHhcNMjUxMjIwMDEwMDQ2WhcNMjUxMjIxMDEwMDQ2WjAzMTEwLwYDVQQD EygzNmIxZmU3YjQ4ZjcxYTJlZTI3ZDZhMzcwMDk3ZjVkNjY5Yzc2MmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHdTV0HfaL4SJZpR7u2rlXFztpot XPvuOwZo/N264sSf9V2ufTE2KaCCq/yV2y249zBnyH0pWHHprc1zhpsHoYeIxqQM lseenafTkLc0PR52Mrc4xxjKubRWrxDGu1kwjYAkBoBuiF3bHMG/0gWvUth016ug 6T0IhTjHVkHjoj/QoQJx7qNN/UGYM97ti9vEtb8AHXx//n4soEOzR1fYU4ANSvqm fYwr3VpQVOYD5QqnBU6C+j8BiuwBVyXr7AI9UaH1q+eVpapAlx1zDUqu2cVB04yQ JUXB3V2Q6WGgBGCnEraQJLB5xzpXpneT5fULEe6yCWa0MaJJjLTNgnpkzQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDax/ntI9xou4n1qNwCX9dZpx2L9MB8GA1UdIwQY MBaAFPiumIG/ESCYor/UmgvP/czOe8IIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LNllnYjhSSUppaXY5U2FDOF85ek01N3dnZy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvNWQ5ZjU3LTBmMTAtNGUxNC1iNGFm LTI1YTE1YTUyNGY4Ny8xLzEtSzZZZ2I4UklKaWl2OVNhQzhfOXpNNTd3Z2cubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzE0LzVkOWY1Ny0wZjEwLTRlMTQtYjRhZi0yNWExNWE1MjRm ODcvMS8xLUs2WWdiOFJJSmlpdjlTYUM4Xzl6TTU3d2dnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuJnM 4eRFZaFRlZoggKbGqy+ds1u+QeirjlSQtuwv4OBbgKjehwA6HTcx83RLT41V4k7C UIFu5ZXGy+xT3OjgrD75hO2PMzbH7AdzRa7vovNfYWaXbASZ1Fj6AIFeVu0t1Jk9 GQ5LzXdxLclhpkO26ah5rHB60OAYPai43wTD7Ym2Zc2tedMo92XF9LpQOeYXJoU4 KDklhScZ0G3nr3AGHI1+qcZeCT28JNMkKr2xGLX5EGwxxA+vCyia62JMkMNREQyb hQryZ4nz8qy47hG3oPchBzw5YU9SkQnUJPRVDLIED1QiBs2XapG50FmBMNCEh3n2 kw1c7PvrCYrjNWnkdg== -----END CERTIFICATE-----Generated at Sat Dec 20 09:28:53 2025 by rpki-client