This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft File: 1YzIUG_tu1Bh3pklsH1kmRihmSY.mft (raw, json) Hash identifier: JSg3uENAcxGR+FomnEBycziJfb1CFRez6srOviAAgaE= Subject key identifier: 1D:7E:FB:BF:E7:DE:B6:3C:5D:4A:A7:7B:8A:12:E5:59:49:DB:42:7B Authority key identifier: D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26 Certificate issuer: /CN=d58cc8506fedbb5061de9925b07d649918a19926 Certificate serial: 019B3B6B2CABB1261E2FE4FA81743B5B3E26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft Manifest number: 1269 Signing time: Sat 20 Dec 2025 11:00:38 +0000 Manifest this update: Sat 20 Dec 2025 11:00:38 +0000 Manifest next update: Sun 21 Dec 2025 11:00:38 +0000 Files and hashes: 1: 1YzIUG_tu1Bh3pklsH1kmRihmSY.crl (hash: obLXFgHvzX0FyNdpS7cLQS+heiyD+7hjrSLKkeG7UaU=) 2: DniqmtindUam8vj_sVzvh8icBDA.roa (hash: ta5Hj3U5JYOoiYd4yiO8g7IzMIhuCaznIwtfzYiosBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:2c:ab:b1:26:1e:2f:e4:fa:81:74:3b:5b:3e:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58cc8506fedbb5061de9925b07d649918a19926 Validity Not Before: Dec 20 11:00:38 2025 GMT Not After : Dec 21 11:00:38 2025 GMT Subject: CN=1d7efbbfe7deb63c5d4aa77b8a12e55949db427b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5b:3d:6b:c1:0a:97:ef:62:f2:6d:79:76:32: 1e:2c:5e:c7:ed:d7:12:3f:1e:f1:3e:36:97:21:b4: 16:7e:58:7a:50:fd:26:95:a9:61:ce:ca:f4:d0:ec: 28:41:19:17:f4:71:da:24:dd:fb:bb:a8:0e:e6:49: 53:ce:17:10:7a:bf:46:19:a7:19:5a:d3:1f:79:f7: ef:cf:2e:56:18:b5:cd:72:89:19:81:1f:13:61:63: bf:45:18:64:5d:d7:90:27:5d:46:79:44:da:53:9c: 46:ed:09:36:3e:d2:b2:87:9a:e3:ca:77:7a:4a:1b: ce:60:55:48:35:cf:3d:bb:86:c3:c0:b3:e5:ba:a3: 35:28:37:aa:24:be:99:54:a2:a4:73:57:fc:ec:b0: d1:20:e8:77:ad:8f:7e:55:f3:88:94:17:8d:37:1f: 87:07:a8:92:20:0a:d6:f8:0e:12:04:7c:a4:69:f8: 7b:62:2b:c6:a8:d6:73:93:7b:c5:85:36:b4:01:f9: a8:db:8f:0f:98:6d:d1:e8:0b:ff:fe:48:76:30:ee: 0b:e4:50:70:f2:c4:d1:56:28:0e:a2:91:f7:24:e0: 93:a0:ef:a7:aa:23:b0:51:2f:01:22:8a:14:43:6d: cc:f9:78:a1:40:81:32:48:07:e0:5e:f3:39:aa:f1: 54:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7E:FB:BF:E7:DE:B6:3C:5D:4A:A7:7B:8A:12:E5:59:49:DB:42:7B X509v3 Authority Key Identifier: keyid:D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:13:b1:b8:0a:56:ee:b8:7d:03:c2:ac:54:65:8f:96:87:ff: fa:09:2d:84:04:ea:ae:e7:dd:6b:37:28:b8:a1:7f:48:4a:a6: 23:63:fa:88:67:68:64:03:5a:3f:a6:d7:cf:1b:93:10:78:45: 6c:28:9a:9d:5a:95:2c:d9:d0:27:54:64:15:72:f5:b1:95:a0: 5b:5e:f0:b2:15:32:a3:7c:c3:b8:f4:17:95:dd:7e:da:a7:06: f2:f8:47:52:e6:5d:20:bf:17:3f:de:06:a6:4f:db:f3:8f:59: d5:32:6c:d4:b9:f1:53:92:7f:e2:b9:af:dc:5c:76:59:35:84: 38:46:81:48:42:5b:cd:e3:ea:0a:de:7f:8c:fd:98:39:c1:26: 6b:dd:53:0d:85:1c:f2:d6:8c:a1:fb:e8:10:fe:3c:52:9f:23: 35:cc:89:49:6e:0a:85:a2:bf:3b:83:c6:80:9f:71:73:44:eb: d9:05:36:8f:66:c4:60:76:65:1c:ec:e1:ec:0a:75:a3:93:f6: 34:7a:8f:3e:4a:33:fa:c8:37:60:69:a9:b0:45:f5:ac:2a:4a: 13:ec:e7:60:7d:81:0d:0f:81:f6:e8:92:05:af:be:39:b5:49: 23:84:98:a0:46:79:7e:51:f8:cc:e3:41:aa:23:5b:ea:98:a2: 66:82:4e:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ayyrsSYeL+T6gXQ7Wz4mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1OGNjODUwNmZlZGJiNTA2MWRlOTkyNWIwN2Q2NDk5MThh MTk5MjYwHhcNMjUxMjIwMTEwMDM4WhcNMjUxMjIxMTEwMDM4WjAzMTEwLwYDVQQD EygxZDdlZmJiZmU3ZGViNjNjNWQ0YWE3N2I4YTEyZTU1OTQ5ZGI0MjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Vs9a8EKl+9i8m15djIeLF7H7dcS Px7xPjaXIbQWflh6UP0mlalhzsr00OwoQRkX9HHaJN37u6gO5klTzhcQer9GGacZ WtMfeffvzy5WGLXNcokZgR8TYWO/RRhkXdeQJ11GeUTaU5xG7Qk2PtKyh5rjynd6 ShvOYFVINc89u4bDwLPluqM1KDeqJL6ZVKKkc1f87LDRIOh3rY9+VfOIlBeNNx+H B6iSIArW+A4SBHykafh7YivGqNZzk3vFhTa0Afmo248PmG3R6Av//kh2MO4L5FBw 8sTRVigOopH3JOCToO+nqiOwUS8BIooUQ23M+XihQIEySAfgXvM5qvFU3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1++7/n3rY8XUqne4oS5VlJ20J7MB8GA1UdIwQY MBaAFNWMyFBv7btQYd6ZJbB9ZJkYoZkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVl6SVVHX3R1MUJoM3BrbHNIMWttUmlobVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy80NmVmYjUtYzllNy00ZjA4LWJjNmEt YmIzZTgxOWYzZGRjLzEvMVl6SVVHX3R1MUJoM3BrbHNIMWttUmlobVNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy80NmVmYjUtYzllNy00ZjA4LWJjNmEtYmIzZTgxOWYzZGRj LzEvMVl6SVVHX3R1MUJoM3BrbHNIMWttUmlobVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghOxuApW 7rh9A8KsVGWPlof/+gkthATqrufdazcouKF/SEqmI2P6iGdoZANaP6bXzxuTEHhF bCianVqVLNnQJ1RkFXL1sZWgW17wshUyo3zDuPQXld1+2qcG8vhHUuZdIL8XP94G pk/b849Z1TJs1LnxU5J/4rmv3Fx2WTWEOEaBSEJbzePqCt5/jP2YOcEma91TDYUc 8taMofvoEP48Up8jNcyJSW4KhaK/O4PGgJ9xc0Tr2QU2j2bEYHZlHOzh7Ap1o5P2 NHqPPkoz+sg3YGmpsEX1rCpKE+znYH2BDQ+B9uiSBa++ObVJI4SYoEZ5flH4zONB qiNb6piiZoJO0Q== -----END CERTIFICATE-----Generated at Sat Dec 20 19:33:09 2025 by rpki-client