This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft File: 1-K1UNiT40ygeyXBFjudS8QpCRSk.mft (raw, json) Hash identifier: ZkoSdlhIVF3unCyv0m7wyX2xlffLKlVnA6wdPTKjxsc= Subject key identifier: D8:42:1B:A1:7C:67:5D:A9:BF:C6:CB:0D:C4:74:D6:52:64:21:6F:51 Authority key identifier: F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29 Certificate issuer: /CN=f8ad543624f8d3281ec970458ee752f10a424529 Certificate serial: 019B3FB65D1C41326FB8B6B26BE9BA3FBE2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft Manifest number: 1792 Signing time: Sun 21 Dec 2025 07:01:14 +0000 Manifest this update: Sun 21 Dec 2025 07:01:14 +0000 Manifest next update: Mon 22 Dec 2025 07:01:14 +0000 Files and hashes: 1: 0IRPcg0Zsb-gPoOdS1ZxVTcB0GM.roa (hash: ujPSAk32+dpIjTUsucTHydurSTU82h9ZEz2rCwGCvb4=) 2: 1-K1UNiT40ygeyXBFjudS8QpCRSk.crl (hash: JPn8P/cIEenyr3fbWL03LsdEEYoLs4CmtXn8pxpnHGM=) 3: 27QIFK3RME4zastoZr-Aqup92E4.roa (hash: AP5Zl89w4EnvvkKDLE1wTCUl3HvQyebnmKUtnCiGMTg=) 4: JbyektcecEj3BAlwzdyd-YQZG-I.roa (hash: qaQjv/GNe5ncVF9/+USSvz1DDnlwL3O9F43o15WDW8o=) 5: Pza9faIJ5cktDsZNFR6fEzPMTws.roa (hash: IZazQ28vh340utjMZWOtEpCw1yIpqU4ff78jK5/vzyY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:5d:1c:41:32:6f:b8:b6:b2:6b:e9:ba:3f:be:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8ad543624f8d3281ec970458ee752f10a424529 Validity Not Before: Dec 21 07:01:14 2025 GMT Not After : Dec 22 07:01:14 2025 GMT Subject: CN=d8421ba17c675da9bfc6cb0dc474d65264216f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8b:f2:04:b5:5e:ab:3c:98:6d:75:51:d8:83: 7d:b4:f0:20:5e:56:c9:78:9d:21:03:74:69:34:78: 44:ff:0a:47:39:25:90:39:5c:18:5d:63:a9:5f:a9: 56:c7:11:0f:3d:c3:cb:2c:6c:a9:63:4c:5b:bc:d1: ea:78:23:e7:98:ab:8c:7e:8d:cd:29:18:55:23:fe: fd:e0:d7:5f:1f:ed:2b:61:da:b9:a6:0d:db:f4:31: 13:87:bc:7e:b1:d7:e1:f4:7e:74:45:e4:c3:a3:d9: 4a:50:e2:65:12:4d:33:47:f3:e0:c0:b2:d1:fd:86: 4f:92:f1:92:ab:f8:fe:4c:8f:25:c8:62:3c:9a:0e: fb:0c:2f:2c:2c:1a:3a:6e:c5:1a:5c:78:e6:4f:d6: 01:29:70:ad:7c:d7:43:25:10:3a:ec:07:74:c6:a3: 24:76:7e:e0:03:91:d1:1f:18:b2:56:a0:20:1e:5a: 0f:7c:b5:5f:ce:b1:7c:d3:d5:f5:21:5d:3a:55:78: 2b:dc:a2:64:17:23:fd:c6:ee:5b:5b:d3:dc:95:ed: 24:78:00:cf:60:8a:bc:db:71:1f:43:96:0b:14:26: 4d:5d:88:5c:b7:bc:a8:02:03:92:3d:6f:bf:da:47: 0e:52:98:ca:e0:89:86:2b:c8:99:23:b9:80:3c:47: 66:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:42:1B:A1:7C:67:5D:A9:BF:C6:CB:0D:C4:74:D6:52:64:21:6F:51 X509v3 Authority Key Identifier: keyid:F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:8d:e4:a2:cc:04:20:bc:88:a3:a5:02:a1:25:6d:39:fa:02: 92:0a:5e:dd:51:38:6a:68:d7:ad:70:2f:2a:61:82:37:84:ec: af:da:00:fd:74:bc:2c:05:0b:74:dc:35:34:cc:40:3e:8a:b9: eb:6a:90:e0:51:a0:3e:7f:b9:21:4b:e3:bc:c3:30:58:10:3e: c1:69:39:66:70:53:2c:25:0b:02:ae:3e:39:c5:9f:b2:f3:94: 6a:96:db:07:2d:e4:ee:5f:69:82:64:8d:a7:8a:d3:61:0f:bd: 1e:99:fb:f8:06:df:1f:1a:bb:00:3f:36:36:1e:36:48:3b:dd: e9:e5:1d:3f:33:c8:3a:ff:0a:21:0f:ed:e8:75:f1:fd:9d:5e: 14:b7:f6:3f:7b:e9:13:3f:82:e7:43:bc:30:10:d4:c5:d3:8e: 9d:92:19:a9:e9:2c:d5:f8:0b:24:fa:16:2a:80:f8:35:e6:9b: 4e:02:6e:39:ae:d6:73:11:9b:f9:37:30:11:7b:3e:9c:fb:15: fe:ed:76:e1:d4:b1:dc:d8:55:4f:fd:9c:be:ee:47:8e:d9:bf: 22:64:6f:87:00:2b:cf:20:dc:5f:3c:8f:70:b8:53:13:a4:98: 67:ae:82:5c:42:0e:f5:2b:1c:fd:5f:d2:69:fd:19:bb:18:b5: 4e:5f:db:36 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs/tl0cQTJvuLaya+m6P74tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YWQ1NDM2MjRmOGQzMjgxZWM5NzA0NThlZTc1MmYxMGE0 MjQ1MjkwHhcNMjUxMjIxMDcwMTE0WhcNMjUxMjIyMDcwMTE0WjAzMTEwLwYDVQQD EyhkODQyMWJhMTdjNjc1ZGE5YmZjNmNiMGRjNDc0ZDY1MjY0MjE2ZjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4vyBLVeqzyYbXVR2IN9tPAgXlbJ eJ0hA3RpNHhE/wpHOSWQOVwYXWOpX6lWxxEPPcPLLGypY0xbvNHqeCPnmKuMfo3N KRhVI/794NdfH+0rYdq5pg3b9DETh7x+sdfh9H50ReTDo9lKUOJlEk0zR/PgwLLR /YZPkvGSq/j+TI8lyGI8mg77DC8sLBo6bsUaXHjmT9YBKXCtfNdDJRA67Ad0xqMk dn7gA5HRHxiyVqAgHloPfLVfzrF809X1IV06VXgr3KJkFyP9xu5bW9Pcle0keADP YIq823EfQ5YLFCZNXYhct7yoAgOSPW+/2kcOUpjK4ImGK8iZI7mAPEdmiQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNhCG6F8Z12pv8bLDcR01lJkIW9RMB8GA1UdIwQY MBaAFPitVDYk+NMoHslwRY7nUvEKQkUpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LMVVOaVQ0MHlnZXlYQkZqdWRTOFFwQ1JTay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvYWYxZjY0LWMzNWYtNDdlOC04N2M5 LThhMTFiNDcxOWQ4Mi8xLzEtSzFVTmlUNDB5Z2V5WEJGanVkUzhRcENSU2subWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzIwL2FmMWY2NC1jMzVmLTQ3ZTgtODdjOS04YTExYjQ3MTlk ODIvMS8xLUsxVU5pVDQweWdleVhCRmp1ZFM4UXBDUlNrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY43k oswEILyIo6UCoSVtOfoCkgpe3VE4amjXrXAvKmGCN4Tsr9oA/XS8LAULdNw1NMxA Poq562qQ4FGgPn+5IUvjvMMwWBA+wWk5ZnBTLCULAq4+OcWfsvOUapbbBy3k7l9p gmSNp4rTYQ+9Hpn7+AbfHxq7AD82Nh42SDvd6eUdPzPIOv8KIQ/t6HXx/Z1eFLf2 P3vpEz+C50O8MBDUxdOOnZIZqeks1fgLJPoWKoD4NeabTgJuOa7WcxGb+TcwEXs+ nPsV/u124dSx3NhVT/2cvu5Hjtm/ImRvhwArzyDcXzyPcLhTE6SYZ66CXEIO9Ssc /V/Saf0Zuxi1Tl/bNg== -----END CERTIFICATE-----Generated at Sun Dec 21 11:39:44 2025 by rpki-client