This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft File: 1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft (raw, json) Hash identifier: m1Opu6PxmDAdYHXGSZnlDWqV9TNZW7nW9Yg6Y8OnpXc= Subject key identifier: A2:67:FC:BC:5A:5F:25:51:6A:C6:4D:17:68:1D:4D:E3:B1:57:4B:CD Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Certificate serial: 019B54F3FD481DC4BF7A8172B9ABE3ACF260 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft Manifest number: 17AE Signing time: Thu 25 Dec 2025 10:00:34 +0000 Manifest this update: Thu 25 Dec 2025 10:00:34 +0000 Manifest next update: Fri 26 Dec 2025 10:00:34 +0000 Files and hashes: 1: 0OeAqS6vX3gO6vvCqqj93y9hg-0.roa (hash: 4e6GVSZZmDnDLgJOl3djtnEbqT5lDhaJq4dAZ/qU/lk=) 2: 1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl (hash: BsWk721sfjX/YWFfP9ylgvqvRBsIHd2dyz7f77nr6fM=) 3: 3ezvkbNYlAAPTTtiMpMfAXi1MZc.roa (hash: vAEGRwBdpnrHv/YkIQBOy6F594hqpTCRBhtvpnyCndE=) 4: B9T2tEPkzR3I7bfjqMLpjqVmqX0.roa (hash: jvG6Kma4d2VGMYtzkdxrMtFkS2r5Ue1ZSeSqhiErA3k=) 5: IHhv8_mZDx6A2j-F31Pdu0k8CrY.roa (hash: STtIVy8Sw+YzG++4aOUBuN18lGWUI/cMQ7xzdEE/ceE=) 6: NBa1UmmcofJztBL8pTAUTjZFH0k.roa (hash: 86hIGHbzSCBjbpNQmq5AwTHYQV5MFxXejgndiQ6r1LA=) 7: VO1QZo2vfxheLbeFL1rejYxNYBI.roa (hash: FCnZcb/OtfouViKRapPfAgcT5IF02/4Osl8N+1EzEnE=) 8: Wc2-UHBTfF-XHLzgQS0SwCmvlB0.roa (hash: 7aSWc04NFLdsEACjlaycXN0TGgVCRx18P8RZa+kCQIU=) 9: cUk9gF1NAvXhh8uQPdgOvohfLq4.roa (hash: kUG38NhhNKk78iTPsGRqnyUiXKkoTEwb6ImAUIs7EvU=) 10: doz6pIZLFsQi2mYQNJFMwi6P3-w.roa (hash: cmXkx2OZFz2XattOJlW1YfABpPcx3f/r/UMGYZNOMGI=) 11: ioa7P1e1SCYd3BcfFxtI-9P6P2k.roa (hash: 1p7OVkFIK8eU+7iB9pcEKKjlG4sNNxXEXZnDzToZ8Ac=) 12: pCc_cSWUTGqBPQv4cw6oAWrJ3Dw.roa (hash: 592DXKAG5uM8BEJZmdLRa+vW+5yO7qDryAvPgg1YlKU=) 13: pVMgUdSHj0nlaCG6yBmxCGoOV48.roa (hash: iYu6/b1RnNkG7/TqQe3ysX2HEttIbsgucDRlivFMstY=) 14: udVjWjtCw8-mpprcmzafPsXqAEg.roa (hash: 4jYyql/ul3ChaZUGCo2qkL0DtI4tuS2kYKNXsqMrYh4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:f3:fd:48:1d:c4:bf:7a:81:72:b9:ab:e3:ac:f2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Validity Not Before: Dec 25 10:00:34 2025 GMT Not After : Dec 26 10:00:34 2025 GMT Subject: CN=a267fcbc5a5f25516ac64d17681d4de3b1574bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ad:1f:35:87:7f:00:87:1a:a7:9f:27:d3:f6: cf:40:2a:e0:6f:79:28:29:56:b9:21:50:c2:1e:76: 3b:e3:19:4c:3c:44:52:bb:59:7f:1a:3d:0d:8d:10: f1:29:dd:36:61:d6:f2:fd:61:95:69:2b:70:d1:c1: 5e:ea:35:d8:10:19:f6:7f:0b:5a:ff:34:f3:f7:cd: 76:e1:6a:80:49:0e:4d:41:1d:09:b3:35:92:74:fe: 45:fd:d8:6f:64:f8:1d:64:6d:d1:33:70:02:7e:68: e4:6d:b0:be:15:03:c3:1b:4b:9c:e6:ae:41:93:c3: e9:7e:a0:13:89:26:32:c5:5f:b0:e4:a6:14:bb:7d: f5:06:ef:8b:91:0c:79:71:59:ce:a5:d1:90:6f:4a: d5:ff:3f:fc:77:dc:63:56:d2:40:b0:8e:25:70:c4: 59:ba:a6:54:cc:2f:b7:21:59:a7:b3:c2:87:c3:40: cc:ee:93:a4:0a:54:1d:e0:02:10:0e:8e:1c:3d:04: 8b:6d:2d:94:b7:24:9b:92:9d:40:26:98:d4:88:5f: f6:70:73:a0:d7:b9:c4:fe:df:35:8b:7c:cd:89:28: 9f:3c:52:70:b2:bc:8e:64:ca:c0:5c:1a:0a:fa:ee: 81:38:60:23:7b:f4:4b:b3:be:b6:08:e1:b0:be:23: d9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:67:FC:BC:5A:5F:25:51:6A:C6:4D:17:68:1D:4D:E3:B1:57:4B:CD X509v3 Authority Key Identifier: keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:61:ea:96:3c:92:40:ec:11:19:f2:2a:cf:2e:ba:27:5e:9b: 10:d7:9b:e2:cd:df:cd:a8:53:cd:69:c9:d7:01:ff:03:18:0c: 8c:6d:6e:c9:bd:81:5f:7f:18:2c:e6:89:90:bb:a4:bc:84:b5: 6b:ac:39:5a:c3:aa:bc:38:cb:4f:7c:51:c2:9c:37:39:0f:5f: 6a:fd:c2:50:2d:e3:e6:1a:ac:88:b0:dc:d6:c0:56:d6:bb:13: dc:70:55:95:b7:27:6e:59:52:c0:1b:4d:da:bf:d2:79:ef:30: fc:9a:16:57:e7:e8:e2:d4:c2:3b:d8:85:3f:19:c9:cd:8f:dc: 3e:2c:c4:d9:16:e7:e0:20:ee:35:fa:6b:88:d6:5a:42:d2:e1: 53:b3:0b:03:b4:13:c3:01:cf:fc:4f:56:ab:2c:9b:5f:94:c4: 11:ea:e1:01:2c:0d:8d:c3:35:4b:d3:a2:7e:9a:c8:32:dd:54: 13:0d:fc:8d:14:b8:ce:fa:a0:0c:0c:be:8a:60:b8:f4:68:0f: 9d:50:da:fd:d0:cc:cb:24:ac:10:f2:63:3f:24:3a:df:07:39: 7b:c6:85:23:25:37:ad:ec:c1:0f:7b:be:b1:ad:26:ef:b7:dd: 16:68:af:ce:03:0a:33:26:48:59:a8:8e:6b:43:6a:3e:d8:90: 0a:4b:0d:ba -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtU8/1IHcS/eoFyuavjrPJgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhY2NiYjcyYWE5ODg0YTViZjhkMGU3NTc0MDRhMTdlNWUy MzMyMmMwHhcNMjUxMjI1MTAwMDM0WhcNMjUxMjI2MTAwMDM0WjAzMTEwLwYDVQQD EyhhMjY3ZmNiYzVhNWYyNTUxNmFjNjRkMTc2ODFkNGRlM2IxNTc0YmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA060fNYd/AIcap58n0/bPQCrgb3ko KVa5IVDCHnY74xlMPERSu1l/Gj0NjRDxKd02Ydby/WGVaStw0cFe6jXYEBn2fwta /zTz98124WqASQ5NQR0JszWSdP5F/dhvZPgdZG3RM3ACfmjkbbC+FQPDG0uc5q5B k8PpfqATiSYyxV+w5KYUu331Bu+LkQx5cVnOpdGQb0rV/z/8d9xjVtJAsI4lcMRZ uqZUzC+3IVmns8KHw0DM7pOkClQd4AIQDo4cPQSLbS2UtySbkp1AJpjUiF/2cHOg 17nE/t81i3zNiSifPFJwsryOZMrAXBoK+u6BOGAje/RLs762COGwviPZpwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKJn/LxaXyVRasZNF2gdTeOxV0vNMB8GA1UdIwQY MBaAFPrMu3KqmISlv40OdXQEoX5eIzIsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1zeTdjcXFZaEtXX2pRNTFkQVNoZmw0ak1pdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvZThjYjQ0LWE5NTQtNDY3Mi1iOWE0 LWE0OWU1YzY2MzNiZC8xLzEtc3k3Y3FxWWhLV19qUTUxZEFTaGZsNGpNaXcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzUzL2U4Y2I0NC1hOTU0LTQ2NzItYjlhNC1hNDllNWM2NjMz YmQvMS8xLXN5N2NxcVloS1dfalE1MWRBU2hmbDRqTWl3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2Hq ljySQOwRGfIqzy66J16bENeb4s3fzahTzWnJ1wH/AxgMjG1uyb2BX38YLOaJkLuk vIS1a6w5WsOqvDjLT3xRwpw3OQ9fav3CUC3j5hqsiLDc1sBW1rsT3HBVlbcnbllS wBtN2r/See8w/JoWV+fo4tTCO9iFPxnJzY/cPizE2Rbn4CDuNfpriNZaQtLhU7ML A7QTwwHP/E9WqyybX5TEEerhASwNjcM1S9OifprIMt1UEw38jRS4zvqgDAy+imC4 9GgPnVDa/dDMyySsEPJjPyQ63wc5e8aFIyU3rezBD3u+sa0m77fdFmivzgMKMyZI WaiOa0NqPtiQCksNug== -----END CERTIFICATE-----Generated at Thu Dec 25 13:07:35 2025 by rpki-client