This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft File: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft (raw, json) Hash identifier: L0omzD6UNjspoJQI3/fOGIuDIN+W7eYgdu5ZvzzxYSg= Subject key identifier: 8B:50:F0:23:A8:6F:14:F6:FA:01:FB:68:97:61:24:F5:05:31:63:82 Authority key identifier: F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71 Certificate issuer: /CN=f83faec93d403f3713823fa39c7d27c62e921471 Certificate serial: 019B710FE03E869D4A25944959EABC7BBB3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft Manifest number: 17A3 Signing time: Tue 30 Dec 2025 21:00:24 +0000 Manifest this update: Tue 30 Dec 2025 21:00:24 +0000 Manifest next update: Wed 31 Dec 2025 21:00:24 +0000 Files and hashes: 1: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl (hash: h7gG1U0IEsamD0sEfpSDqJQkH/3fcPPzsuZVY9lFN7s=) 2: 72LdJQQ_XzgvUHseE2sST5RXq_4.roa (hash: kR5iFtf9EPBMZTsPkYiIRyrCHP6r5lMPF7yM/ECFgng=) 3: lput6Z6vJPdy08jemWLG6WZi0oE.roa (hash: muWWXK/VbX5K0RlIXjBqeo4nzxA9w0OVj29rsOGgE/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 21:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:0f:e0:3e:86:9d:4a:25:94:49:59:ea:bc:7b:bb:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f83faec93d403f3713823fa39c7d27c62e921471 Validity Not Before: Dec 30 21:00:24 2025 GMT Not After : Dec 31 21:00:24 2025 GMT Subject: CN=8b50f023a86f14f6fa01fb68976124f505316382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:05:1b:2e:19:f7:7d:aa:b3:f3:6e:6c:c8:ef: 05:1d:a9:c2:d0:64:68:5c:6d:e2:ea:0a:79:97:3c: 22:f9:25:66:f8:d2:23:08:f1:a3:54:f3:c8:82:6c: aa:86:d1:a2:4b:26:92:0d:8f:43:23:2c:12:2d:e2: bf:cf:0a:38:44:f9:fa:61:30:9f:58:6a:4b:b7:8c: ca:aa:4b:63:f5:b7:98:63:1c:e1:29:a5:4e:af:60: 20:08:3a:97:f3:ab:ea:6f:15:c8:a8:43:dd:7b:4e: 86:a3:fc:44:d3:58:a7:0d:35:c6:09:2f:ce:74:ac: f9:f4:e5:2f:ac:56:eb:b6:f6:77:5d:c6:df:78:d6: 78:d4:fa:4d:a3:62:96:77:1e:41:36:a7:9e:7e:6d: 66:f2:e7:51:97:21:83:fd:4d:30:66:76:76:e9:41: da:1c:d1:32:2b:46:ee:d7:9e:d1:ef:e2:f9:d7:a4: 25:30:a4:1c:25:cb:0a:d9:bf:d0:cf:02:da:ce:51: 0f:63:65:2e:b0:35:36:93:32:93:17:67:58:9d:90: 3a:73:22:0e:67:07:c5:32:e7:91:f7:4e:17:a6:54: d0:fd:f9:08:23:b7:e8:9d:f1:6c:df:91:3e:ea:5e: 72:8e:bc:35:f5:b0:37:d7:bd:c1:88:5b:3c:fb:1a: 17:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:50:F0:23:A8:6F:14:F6:FA:01:FB:68:97:61:24:F5:05:31:63:82 X509v3 Authority Key Identifier: keyid:F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:75:4a:ce:3e:fa:c7:3e:71:5e:1d:de:d2:af:cd:cc:44:07: b9:30:b5:2c:56:d5:e3:4d:80:bf:56:a0:ac:7c:e2:c3:0f:b5: 00:ba:8d:a3:09:5c:ca:36:10:c6:b3:1f:54:25:d5:db:a0:97: c2:8e:bb:5a:11:8c:12:96:87:97:b2:03:1a:0d:3b:a3:6a:e0: 65:00:1e:62:cc:80:8c:72:ec:ab:61:e4:82:c2:e6:b1:d3:14: 7f:43:5f:65:7e:cb:83:de:bf:c9:a0:87:9b:77:74:5b:4b:6b: 35:4e:12:f0:58:a5:ed:38:3a:16:4d:a2:0c:01:c3:8d:45:07: a8:a3:c2:b4:93:8e:ff:51:c3:aa:cd:58:f8:0d:a7:ef:2c:90: a5:d1:c5:c9:27:2e:cd:40:a9:72:cf:25:be:ce:7b:ff:3a:06: c7:fa:0f:5b:2d:8b:a1:52:3f:6f:4a:88:6c:6a:88:6c:92:0d: c9:6e:0a:e8:1a:77:4a:23:75:de:b3:68:04:59:75:ca:b4:29: 88:ff:5d:fe:28:11:82:c0:87:6e:c4:4f:a8:13:21:08:ac:b4: 65:27:19:57:7c:70:28:c2:da:d9:3b:61:4b:8e:a6:02:91:cb: 5c:68:4c:3e:28:96:0a:22:c4:eb:72:93:39:a0:f3:8b:b3:81: 91:c6:4c:a1 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtxD+A+hp1KJZRJWeq8e7s+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4M2ZhZWM5M2Q0MDNmMzcxMzgyM2ZhMzljN2QyN2M2MmU5 MjE0NzEwHhcNMjUxMjMwMjEwMDI0WhcNMjUxMjMxMjEwMDI0WjAzMTEwLwYDVQQD Eyg4YjUwZjAyM2E4NmYxNGY2ZmEwMWZiNjg5NzYxMjRmNTA1MzE2MzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgUbLhn3faqz825syO8FHanC0GRo XG3i6gp5lzwi+SVm+NIjCPGjVPPIgmyqhtGiSyaSDY9DIywSLeK/zwo4RPn6YTCf WGpLt4zKqktj9beYYxzhKaVOr2AgCDqX86vqbxXIqEPde06Go/xE01inDTXGCS/O dKz59OUvrFbrtvZ3XcbfeNZ41PpNo2KWdx5BNqeefm1m8udRlyGD/U0wZnZ26UHa HNEyK0bu157R7+L516QlMKQcJcsK2b/QzwLazlEPY2UusDU2kzKTF2dYnZA6cyIO ZwfFMueR904XplTQ/fkII7fonfFs35E+6l5yjrw19bA3173BiFs8+xoXAQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFItQ8COobxT2+gH7aJdhJPUFMWOCMB8GA1UdIwQY MBaAFPg/rsk9QD83E4I/o5x9J8YukhRxMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ELXV5VDFBUHpjVGdqLWpuSDBueGk2U0ZIRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkvOTcwY2YwLTkyOTgtNGZmMC1iYWY1 LTIxMGFlMDU2OWE0NS8xLzEtRC11eVQxQVB6Y1Rnai1qbkgwbnhpNlNGSEUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2I5Lzk3MGNmMC05Mjk4LTRmZjAtYmFmNS0yMTBhZTA1Njlh NDUvMS8xLUQtdXlUMUFQemNUZ2otam5IMG54aTZTRkhFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHVK zj76xz5xXh3e0q/NzEQHuTC1LFbV402Av1agrHziww+1ALqNowlcyjYQxrMfVCXV 26CXwo67WhGMEpaHl7IDGg07o2rgZQAeYsyAjHLsq2HkgsLmsdMUf0NfZX7Lg96/ yaCHm3d0W0trNU4S8Fil7Tg6Fk2iDAHDjUUHqKPCtJOO/1HDqs1Y+A2n7yyQpdHF yScuzUCpcs8lvs57/zoGx/oPWy2LoVI/b0qIbGqIbJINyW4K6Bp3SiN13rNoBFl1 yrQpiP9d/igRgsCHbsRPqBMhCKy0ZScZV3xwKMLa2TthS46mApHLXGhMPiiWCiLE 63KTOaDzi7OBkcZMoQ== -----END CERTIFICATE-----Generated at Wed Dec 31 02:01:24 2025 by rpki-client