This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft File: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft (raw, json) Hash identifier: 0xWIPZeUivY7qRm/toG/HPpOh3lkiKs3xYiGCF8/6qk= Subject key identifier: 2B:E0:29:E7:DF:10:A6:FD:77:B6:03:A1:0A:14:6E:30:15:BB:76:F3 Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46 Certificate issuer: /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746 Certificate serial: 019B62B017DDB493F6FCB966A5392BEA9341 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft Manifest number: 179D Signing time: Sun 28 Dec 2025 02:01:06 +0000 Manifest this update: Sun 28 Dec 2025 02:01:06 +0000 Manifest next update: Mon 29 Dec 2025 02:01:06 +0000 Files and hashes: 1: IwZ3Z1oDg1FS827JU1tSlj8eb74.roa (hash: yIwUb6bD8Yu/MZmIZhvd3q5td4NtibwxlrC7RDOCuHM=) 2: SMQ9QVGYhC0I8pIMSi7pgpsFW1c.roa (hash: P/Liu3FMs1RtZp34UhptoqasRnmxQc/4vGzdeX20sw8=) 3: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl (hash: KTLAEZdZEgqfqyibwkaDMVsJNPXt8NF15SjC6c9vZEg=) 4: hyDMWUWDOwPLRhTXHqAvo0HE2Eg.roa (hash: qhk5EHJ02rRG0lhE9onju5bJfrP0rsBjK4tlKrdzuZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:b0:17:dd:b4:93:f6:fc:b9:66:a5:39:2b:ea:93:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746 Validity Not Before: Dec 28 02:01:06 2025 GMT Not After : Dec 29 02:01:06 2025 GMT Subject: CN=2be029e7df10a6fd77b603a10a146e3015bb76f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b9:a1:ce:a8:0e:9d:99:b3:67:5f:22:60:17: a6:8c:27:8a:08:86:ec:da:41:ef:22:af:51:93:40: 66:cf:0c:74:b8:f7:50:f7:21:a7:e5:28:4d:53:ad: 56:0f:ce:7a:b4:dd:62:f8:58:79:ee:3c:60:e8:ba: 07:f4:8b:d4:f6:e2:f2:89:fe:36:6c:bc:ae:7c:db: 97:94:40:0a:60:27:b7:9c:37:ed:e3:13:e6:71:4b: 75:a7:45:ae:f3:3f:02:cb:ff:18:89:49:3d:b8:53: e6:4b:7d:eb:d4:6b:e3:30:ab:9c:4b:7a:5d:32:76: 73:3b:d7:09:73:88:94:d7:0f:77:f1:8a:af:74:2c: 09:d5:29:bd:d0:c9:d7:da:82:46:cb:6a:5f:9c:f0: 45:9e:84:28:3d:72:f6:48:25:49:83:2b:3e:b4:a5: be:f6:da:42:67:a8:d4:ad:2a:48:d6:b5:72:7c:98: 8b:d3:97:13:4d:ef:a2:7d:b9:dc:d2:ca:7f:89:b8: 59:d7:f8:61:99:fc:00:09:fc:30:4d:ad:ff:ee:a2: 3d:7d:75:9e:1f:5a:ea:84:32:81:7a:b4:46:34:f4: 81:9f:80:b7:a4:c2:37:dc:6f:79:3b:a5:67:04:ee: 8e:1a:13:5e:2f:12:c0:23:a3:ac:5f:cf:78:aa:30: 06:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E0:29:E7:DF:10:A6:FD:77:B6:03:A1:0A:14:6E:30:15:BB:76:F3 X509v3 Authority Key Identifier: keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:0d:11:77:86:09:d5:13:33:a2:48:ea:8f:71:37:28:a8:8d: d7:10:50:32:8b:10:0c:6e:03:80:c5:d3:db:bf:19:ef:f4:11: 07:66:f2:21:26:7e:0b:0d:af:34:c9:4a:b5:88:6b:f1:40:ed: 02:fc:7c:74:22:43:5f:e6:1f:78:8c:cf:fe:01:c0:48:24:36: 66:c6:7c:b1:5f:65:e2:95:67:66:46:fe:95:27:2c:17:de:a5: 37:70:8b:d1:35:39:b7:14:26:ee:24:05:bb:b7:4e:3a:3b:04: 5f:e5:9e:1c:82:ed:1d:42:95:d4:48:23:1b:a3:cf:3c:76:a0: f9:91:70:94:84:6f:e6:b6:0d:b4:2e:64:1a:55:fc:41:8b:88: 9a:0e:9d:7a:2d:bc:90:0b:4c:4f:9c:c5:2f:d7:5f:df:c9:fc: 31:35:9a:5d:1e:97:bc:db:62:62:aa:7e:73:ec:4d:9f:60:36: a5:d0:0b:57:0f:74:c3:8b:ad:6f:49:57:54:99:73:6b:5c:c5: ec:71:05:0c:8e:d6:83:ca:c6:1d:81:8f:19:c2:2b:c2:f2:46: 2a:9d:98:90:8a:b2:83:96:da:bd:98:ad:cc:ff:b6:d5:95:8e: e4:91:d0:55:d7:b7:b4:5f:41:7f:db:b5:f2:48:77:90:91:1e: 20:e1:5b:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtisBfdtJP2/LlmpTkr6pNBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNTZkODM3ZmUyNTRmYTkyZTFmM2MyZjg2MWFhMWU0ODU1 MjE3NDYwHhcNMjUxMjI4MDIwMTA2WhcNMjUxMjI5MDIwMTA2WjAzMTEwLwYDVQQD EygyYmUwMjllN2RmMTBhNmZkNzdiNjAzYTEwYTE0NmUzMDE1YmI3NmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbmhzqgOnZmzZ18iYBemjCeKCIbs 2kHvIq9Rk0Bmzwx0uPdQ9yGn5ShNU61WD856tN1i+Fh57jxg6LoH9IvU9uLyif42 bLyufNuXlEAKYCe3nDft4xPmcUt1p0Wu8z8Cy/8YiUk9uFPmS33r1GvjMKucS3pd MnZzO9cJc4iU1w938YqvdCwJ1Sm90MnX2oJGy2pfnPBFnoQoPXL2SCVJgys+tKW+ 9tpCZ6jUrSpI1rVyfJiL05cTTe+ifbnc0sp/ibhZ1/hhmfwACfwwTa3/7qI9fXWe H1rqhDKBerRGNPSBn4C3pMI33G95O6VnBO6OGhNeLxLAI6OsX894qjAGFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCvgKeffEKb9d7YDoQoUbjAVu3bzMB8GA1UdIwQY MBaAFP9W2Df+JU+pLh88L4YaoeSFUhdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xYjM3NDktOTY3My00MTJkLWIzNDgt NTBmYzRkNTU3ZDA4LzEvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8xYjM3NDktOTY3My00MTJkLWIzNDgtNTBmYzRkNTU3ZDA4 LzEvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQ0Rd4YJ 1RMzokjqj3E3KKiN1xBQMosQDG4DgMXT278Z7/QRB2byISZ+Cw2vNMlKtYhr8UDt Avx8dCJDX+YfeIzP/gHASCQ2ZsZ8sV9l4pVnZkb+lScsF96lN3CL0TU5txQm7iQF u7dOOjsEX+WeHILtHUKV1EgjG6PPPHag+ZFwlIRv5rYNtC5kGlX8QYuImg6dei28 kAtMT5zFL9df38n8MTWaXR6XvNtiYqp+c+xNn2A2pdALVw90w4utb0lXVJlza1zF 7HEFDI7Wg8rGHYGPGcIrwvJGKp2YkIqyg5bavZitzP+21ZWO5JHQVde3tF9Bf9u1 8kh3kJEeIOFbQg== -----END CERTIFICATE-----Generated at Sun Dec 28 05:51:39 2025 by rpki-client