This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft File: 1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft (raw, json) Hash identifier: OlW7rq8mKVHXywoStRI3eab0j6UvRZSrkOaIinFJqbM= Subject key identifier: 5D:23:CB:77:09:ED:58:CB:AE:E7:68:CA:12:3A:22:73:1F:B9:7F:82 Authority key identifier: D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84 Certificate issuer: /CN=d58214cfa326611e9d494135a12ce8276f0f1784 Certificate serial: 019B3F7F803E29678F089431FF40B1AC3768 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft Manifest number: 0912 Signing time: Sun 21 Dec 2025 06:01:18 +0000 Manifest this update: Sun 21 Dec 2025 06:01:18 +0000 Manifest next update: Mon 22 Dec 2025 06:01:18 +0000 Files and hashes: 1: 1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl (hash: KFW/ZF66cGesNdBYPSpPNj5GN/nlqN+qBjV2s2ac+X0=) 2: 1ga8nVlGxTmTngINMpKry6AQMr4.roa (hash: Dm3zUfcqGdu/uBK93tg3lyr6TLgweEHTMY6jPc57f2s=) 3: DGnBXPgoLqm6MITID6kUNCzRUOs.roa (hash: hIciNbRFt51fw1TxuPPGC92uEfq4OzzxLq8zVboWuDA=) 4: EXso7tzCAhfaJCky2E8mk6hxz0E.roa (hash: 9/wsiraIK6tEnjIhsMzkIKM5OLlXL/pBel2txdfmR1w=) 5: ORMftoMd9do2ooK5ue-6TvmAIxQ.roa (hash: gRL2F0Qf83gqy3K3r8kmYdUB/bOzK/Peuq/Grv7jGIY=) 6: be5WdK6iPEkhbXurpsBiJLlldps.roa (hash: 0YokzCz16IGMuCLhlbe4WQ2dF7nXC982PfyCD/leOcY=) 7: hXDhzeK-jX0gCQmDt_ZZNEI7MI4.roa (hash: 5BKSkgpGQ/JZ0CAuFzin9pgFCCI9sY5+ZEzUzT6gZfU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:80:3e:29:67:8f:08:94:31:ff:40:b1:ac:37:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58214cfa326611e9d494135a12ce8276f0f1784 Validity Not Before: Dec 21 06:01:18 2025 GMT Not After : Dec 22 06:01:18 2025 GMT Subject: CN=5d23cb7709ed58cbaee768ca123a22731fb97f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:35:0b:2b:18:11:79:55:9c:51:dd:e1:f1:35: d1:b9:f2:34:56:47:c6:5f:82:d9:74:64:4d:42:b5: a2:e1:38:e4:e8:71:d7:fa:56:6a:88:81:66:1c:bf: 40:6c:4c:20:45:92:13:9d:0a:dd:31:e0:5d:ed:d3: 0d:28:76:18:71:c6:d8:a7:21:6f:b3:6a:f4:00:b5: 2f:36:c1:2b:3a:d1:e7:9a:cc:9c:8d:09:c3:b8:cd: e2:24:2f:58:ab:0e:40:84:77:c0:e1:29:35:96:0b: c7:2c:29:6f:57:69:70:d7:d8:73:31:8b:f6:59:c1: 59:6e:08:c6:9e:1c:00:4a:7f:41:42:3b:4b:55:6e: fb:bc:b5:25:05:a8:72:27:55:09:28:6a:7d:6c:ab: f7:2b:21:3c:ee:5e:02:42:bb:99:ad:29:07:94:8a: db:50:ac:6c:14:87:8a:c4:51:d8:fb:42:89:21:0f: bf:4e:7d:41:e0:1c:04:63:3a:2e:62:19:02:ee:23: 6f:37:6f:d4:eb:c0:a8:e3:5a:6b:c5:91:28:a6:ad: a2:ac:1f:8f:30:6f:79:e1:d6:60:52:c7:bd:8d:22: 14:54:58:8d:47:d8:88:05:71:5d:9e:3a:4f:06:fd: 1e:da:d2:3f:02:8f:01:b6:66:42:0a:3e:14:22:60: 34:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:23:CB:77:09:ED:58:CB:AE:E7:68:CA:12:3A:22:73:1F:B9:7F:82 X509v3 Authority Key Identifier: keyid:D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:dc:7f:09:e8:81:46:ae:0b:23:4b:60:f4:bf:30:cc:48:c9: 1c:d7:3d:1a:cd:b2:ec:0d:f4:99:90:99:71:54:27:e1:c8:43: c3:ca:3b:19:ff:23:f4:a4:1b:c4:c7:11:43:77:54:40:ad:48: 07:f6:6c:9c:91:a0:91:a9:04:0e:69:3a:66:0d:da:be:c9:32: 4b:4a:23:35:84:a8:2d:c1:ac:10:70:be:08:fa:69:30:6b:4a: a9:49:4a:1a:a1:46:23:cb:32:cc:40:82:41:20:e0:e4:8b:69: 8f:2d:8c:a2:16:69:e3:84:f1:72:23:87:b0:3d:c1:5c:85:07: c1:0f:2e:11:63:5f:f8:6f:5f:9a:a0:96:0d:8a:50:d5:85:b7: 95:ab:98:0d:a6:53:be:39:79:9a:ca:bd:82:de:66:77:fb:ae: d5:04:7c:c8:e3:a8:ab:43:93:b4:54:e0:b0:e7:92:a5:03:3b: 68:8b:60:15:b5:26:a9:e8:ed:a8:90:73:b8:45:02:a2:74:50: 5d:41:5e:aa:9f:cd:81:e6:ff:9b:2f:89:4f:a5:8f:92:a0:e3: 41:49:ec:9b:e1:a3:9a:e2:16:a8:de:3d:11:60:04:bd:46:c4: ae:47:2c:1d:48:a0:4f:09:e6:06:45:0f:78:9c:95:34:09:4b: 37:a7:00:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/f4A+KWePCJQx/0CxrDdoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ODIxNGNmYTMyNjYxMWU5ZDQ5NDEzNWExMmNlODI3NmYw ZjE3ODQwHhcNMjUxMjIxMDYwMTE4WhcNMjUxMjIyMDYwMTE4WjAzMTEwLwYDVQQD Eyg1ZDIzY2I3NzA5ZWQ1OGNiYWVlNzY4Y2ExMjNhMjI3MzFmYjk3ZjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjULKxgReVWcUd3h8TXRufI0VkfG X4LZdGRNQrWi4Tjk6HHX+lZqiIFmHL9AbEwgRZITnQrdMeBd7dMNKHYYccbYpyFv s2r0ALUvNsErOtHnmsycjQnDuM3iJC9Yqw5AhHfA4Sk1lgvHLClvV2lw19hzMYv2 WcFZbgjGnhwASn9BQjtLVW77vLUlBahyJ1UJKGp9bKv3KyE87l4CQruZrSkHlIrb UKxsFIeKxFHY+0KJIQ+/Tn1B4BwEYzouYhkC7iNvN2/U68Co41prxZEopq2irB+P MG954dZgUse9jSIUVFiNR9iIBXFdnjpPBv0e2tI/Ao8BtmZCCj4UImA01QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0jy3cJ7VjLrudoyhI6InMfuX+CMB8GA1UdIwQY MBaAFNWCFM+jJmEenUlBNaEs6CdvDxeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVlJVXo2TW1ZUjZkU1VFMW9Tem9KMjhQRjRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NzdlZWYtNGQwMi00ZDM5LWIxZTQt MTA3OWQ1NWFlZTkxLzEvMVlJVXo2TW1ZUjZkU1VFMW9Tem9KMjhQRjRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NzdlZWYtNGQwMi00ZDM5LWIxZTQtMTA3OWQ1NWFlZTkx LzEvMVlJVXo2TW1ZUjZkU1VFMW9Tem9KMjhQRjRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARtx/CeiB Rq4LI0tg9L8wzEjJHNc9Gs2y7A30mZCZcVQn4chDw8o7Gf8j9KQbxMcRQ3dUQK1I B/ZsnJGgkakEDmk6Zg3avskyS0ojNYSoLcGsEHC+CPppMGtKqUlKGqFGI8syzECC QSDg5Itpjy2MohZp44TxciOHsD3BXIUHwQ8uEWNf+G9fmqCWDYpQ1YW3lauYDaZT vjl5msq9gt5md/uu1QR8yOOoq0OTtFTgsOeSpQM7aItgFbUmqejtqJBzuEUConRQ XUFeqp/Ngeb/my+JT6WPkqDjQUnsm+GjmuIWqN49EWAEvUbErkcsHUigTwnmBkUP eJyVNAlLN6cAvg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:58:33 2025 by rpki-client