This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft File: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft (raw, json) Hash identifier: Sri3hsl/fTvgLu9M0ZTc4sE88jc3KN06M4VuNlYhBsI= Subject key identifier: 44:16:BA:B3:05:51:C7:10:03:F3:BC:02:B1:A6:12:D8:E0:C5:D0:73 Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46 Certificate issuer: /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746 Certificate serial: 019B3C109311146B48E7FC99D4D95B7DA4A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 14:01:17 +0000 Manifest this update: Sat 20 Dec 2025 14:01:17 +0000 Manifest next update: Sun 21 Dec 2025 14:01:17 +0000 Files and hashes: 1: IwZ3Z1oDg1FS827JU1tSlj8eb74.roa (hash: yIwUb6bD8Yu/MZmIZhvd3q5td4NtibwxlrC7RDOCuHM=) 2: SMQ9QVGYhC0I8pIMSi7pgpsFW1c.roa (hash: P/Liu3FMs1RtZp34UhptoqasRnmxQc/4vGzdeX20sw8=) 3: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl (hash: ESb4lP3ZmabuYvLCHYRReHbDh7s+GjVlBcCII+MLzPU=) 4: hyDMWUWDOwPLRhTXHqAvo0HE2Eg.roa (hash: qhk5EHJ02rRG0lhE9onju5bJfrP0rsBjK4tlKrdzuZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:93:11:14:6b:48:e7:fc:99:d4:d9:5b:7d:a4:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746 Validity Not Before: Dec 20 14:01:17 2025 GMT Not After : Dec 21 14:01:17 2025 GMT Subject: CN=4416bab30551c71003f3bc02b1a612d8e0c5d073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4a:29:09:eb:f6:4d:59:df:3c:b0:48:c3:85: 52:f0:56:47:ba:3e:6a:ad:7a:99:cc:78:37:f5:5a: fb:e7:b9:eb:e9:2b:50:9c:cb:f0:b4:c4:a3:3f:04: 9e:a1:c0:c6:23:e8:e5:b4:3e:5a:8b:9d:13:5a:84: 90:bc:36:8e:26:17:40:c1:3c:9f:6f:b7:f8:27:1c: eb:a0:d9:45:57:fe:8c:78:fd:01:2d:1b:9a:f9:6e: da:c3:91:96:3b:9d:50:ca:a0:25:f1:45:5f:ec:94: 31:dc:93:b5:d5:cc:bb:15:9c:aa:75:1c:85:e0:f6: b4:e1:d7:01:d5:73:6f:e7:40:a6:4f:4a:90:e0:e5: 76:82:b6:a5:8b:da:9d:42:46:c4:15:c1:f2:9f:50: 5b:53:96:de:86:76:0d:d5:c7:58:89:8c:9e:7a:ba: 90:cb:7a:41:95:9a:ff:40:6b:c6:9b:0e:82:82:c2: a0:be:d0:80:6a:b2:df:03:d6:78:b0:fb:b6:3b:cb: 7c:67:7e:c4:63:cb:4e:ca:59:34:04:72:bb:09:90: 42:58:4a:af:9a:aa:f0:17:ef:ff:57:8c:2d:08:66: 33:18:cd:36:02:18:13:39:a9:85:22:96:1b:45:6b: 2d:d3:3d:4c:13:a3:c7:65:4f:0d:3d:3d:63:9d:6f: 44:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:16:BA:B3:05:51:C7:10:03:F3:BC:02:B1:A6:12:D8:E0:C5:D0:73 X509v3 Authority Key Identifier: keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:33:ce:c8:69:40:3e:2d:13:27:91:18:cf:cb:11:d6:21:fc: 5f:4d:3f:15:61:9d:33:a8:e6:31:f4:64:6b:f5:6d:83:21:e0: 5b:dd:b7:0d:b0:53:88:a3:74:21:71:22:ba:52:e5:ad:7b:21: a0:d3:29:7d:dc:4c:d7:95:83:d0:fc:47:77:7d:c5:9e:24:93: 56:ef:ba:b0:f6:e5:90:e0:8b:95:b3:ea:8e:75:d6:b7:8a:70: 71:56:20:70:68:e7:22:20:af:47:76:e0:ef:8f:ca:a9:58:47: 05:bc:64:bd:b8:dd:3f:4d:7d:94:a1:dc:ff:eb:37:44:64:02: da:a8:fc:ad:de:c1:e3:12:49:c7:81:4b:85:e0:b0:4d:53:1f: 35:b5:a6:ef:36:04:f5:ad:55:5c:5b:89:7b:27:97:2d:f0:9a: 64:b7:d7:e7:fa:fa:1d:61:b5:5c:49:7a:4d:35:69:11:14:20: e7:af:f5:d9:01:70:dc:4b:f4:c6:cc:47:cd:7a:b1:f9:48:e8: d1:73:f8:46:03:51:51:1b:fb:d6:1d:21:de:6b:63:de:0e:c9: 57:17:e8:7a:5c:2b:88:a5:79:7c:2c:a6:b1:97:43:a9:69:f3: 1a:24:64:ea:f3:af:04:fb:5e:06:60:30:43:bb:0b:e0:a8:14: 58:b9:c2:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EJMRFGtI5/yZ1NlbfaSmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNTZkODM3ZmUyNTRmYTkyZTFmM2MyZjg2MWFhMWU0ODU1 MjE3NDYwHhcNMjUxMjIwMTQwMTE3WhcNMjUxMjIxMTQwMTE3WjAzMTEwLwYDVQQD Eyg0NDE2YmFiMzA1NTFjNzEwMDNmM2JjMDJiMWE2MTJkOGUwYzVkMDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0opCev2TVnfPLBIw4VS8FZHuj5q rXqZzHg39Vr757nr6StQnMvwtMSjPwSeocDGI+jltD5ai50TWoSQvDaOJhdAwTyf b7f4JxzroNlFV/6MeP0BLRua+W7aw5GWO51QyqAl8UVf7JQx3JO11cy7FZyqdRyF 4Pa04dcB1XNv50CmT0qQ4OV2grali9qdQkbEFcHyn1BbU5behnYN1cdYiYyeerqQ y3pBlZr/QGvGmw6CgsKgvtCAarLfA9Z4sPu2O8t8Z37EY8tOylk0BHK7CZBCWEqv mqrwF+//V4wtCGYzGM02AhgTOamFIpYbRWst0z1ME6PHZU8NPT1jnW9ELQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQWurMFUccQA/O8ArGmEtjgxdBzMB8GA1UdIwQY MBaAFP9W2Df+JU+pLh88L4YaoeSFUhdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xYjM3NDktOTY3My00MTJkLWIzNDgt NTBmYzRkNTU3ZDA4LzEvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8xYjM3NDktOTY3My00MTJkLWIzNDgtNTBmYzRkNTU3ZDA4 LzEvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAETPOyGlA Pi0TJ5EYz8sR1iH8X00/FWGdM6jmMfRka/VtgyHgW923DbBTiKN0IXEiulLlrXsh oNMpfdxM15WD0PxHd33FniSTVu+6sPblkOCLlbPqjnXWt4pwcVYgcGjnIiCvR3bg 74/KqVhHBbxkvbjdP019lKHc/+s3RGQC2qj8rd7B4xJJx4FLheCwTVMfNbWm7zYE 9a1VXFuJeyeXLfCaZLfX5/r6HWG1XEl6TTVpERQg56/12QFw3Ev0xsxHzXqx+Ujo 0XP4RgNRURv71h0h3mtj3g7JVxfoelwriKV5fCymsZdDqWnzGiRk6vOvBPteBmAw Q7sL4KgUWLnCLg== -----END CERTIFICATE-----Generated at Sat Dec 20 16:58:04 2025 by rpki-client