This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft File: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft (raw, json) Hash identifier: 9ayfGz96frK+HM1UHAwZrDNDGVfPKW943zJnX920QGo= Subject key identifier: 5F:11:99:5B:6A:F8:C0:95:AC:2E:AF:1F:56:3C:E2:24:AA:5D:AA:FC Authority key identifier: F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71 Certificate issuer: /CN=f83faec93d403f3713823fa39c7d27c62e921471 Certificate serial: 019B44A53122BD5DB841E50C7A87FFF6C4A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 06:00:35 +0000 Manifest this update: Mon 22 Dec 2025 06:00:35 +0000 Manifest next update: Tue 23 Dec 2025 06:00:35 +0000 Files and hashes: 1: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl (hash: HPOpQm24Vtie2KHfmhkM+f9awoA2oDd/B2+CgvPVBjA=) 2: 72LdJQQ_XzgvUHseE2sST5RXq_4.roa (hash: kR5iFtf9EPBMZTsPkYiIRyrCHP6r5lMPF7yM/ECFgng=) 3: lput6Z6vJPdy08jemWLG6WZi0oE.roa (hash: muWWXK/VbX5K0RlIXjBqeo4nzxA9w0OVj29rsOGgE/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:31:22:bd:5d:b8:41:e5:0c:7a:87:ff:f6:c4:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f83faec93d403f3713823fa39c7d27c62e921471 Validity Not Before: Dec 22 06:00:35 2025 GMT Not After : Dec 23 06:00:35 2025 GMT Subject: CN=5f11995b6af8c095ac2eaf1f563ce224aa5daafc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:49:24:72:02:d2:74:dd:a2:83:bd:2a:5f:9e: 38:ca:9e:c9:88:77:70:53:72:b0:ac:74:13:8f:4f: 62:18:d8:02:c8:b7:ea:7c:d8:51:57:5d:41:f1:aa: 22:93:20:33:a5:b1:d0:90:5e:73:bc:27:3f:18:10: dc:3d:cb:25:0d:ce:58:72:65:a8:68:e4:bc:f9:12: ac:1c:d2:13:a8:91:98:23:13:91:2c:e7:55:aa:38: 00:90:59:fa:6a:0d:bf:8c:ba:c8:fc:d9:8d:e6:8d: bc:4f:10:06:37:62:8a:de:d9:b7:07:39:89:78:a6: 4e:03:79:27:00:08:60:88:47:84:6d:be:61:e0:a2: fb:9b:88:09:b7:91:1a:40:29:29:78:42:30:83:09: 61:75:59:03:5c:4b:d8:51:68:eb:bc:92:b4:f0:70: 16:f0:98:ac:3a:34:28:df:19:cd:6d:95:ff:c6:8b: d3:09:b1:1f:19:fd:d6:46:0d:ff:e6:1c:db:a7:d2: e2:d0:bc:2a:16:86:ea:10:ba:25:3c:e6:57:78:1f: 3b:94:56:b0:96:61:ff:bf:ab:4c:19:f4:b3:38:b4: dd:2d:ba:bf:de:a5:55:65:92:7d:5b:3a:ca:2e:3d: b7:9e:7f:fc:dd:65:1c:18:26:1e:66:d7:27:78:7f: b4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:11:99:5B:6A:F8:C0:95:AC:2E:AF:1F:56:3C:E2:24:AA:5D:AA:FC X509v3 Authority Key Identifier: keyid:F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:08:37:26:00:cb:ad:8f:b1:db:c4:79:b5:32:9e:70:6e:90: 53:8b:30:5e:43:d1:51:6c:0e:11:2f:e0:d0:a5:c7:d5:36:19: 87:9a:0e:6a:d6:fb:7a:36:f9:60:29:13:6f:ca:40:65:31:4e: 75:d6:93:ee:cd:83:06:be:c7:d7:91:fa:71:3d:7b:9c:fc:ef: c6:b1:18:10:54:e5:70:0c:36:77:06:8c:0f:82:b6:1e:d8:92: 73:34:c5:c0:46:d1:a8:09:67:cf:4e:cb:6d:cc:2d:0e:54:30: b1:bb:62:e3:4a:d7:4e:5c:50:00:78:2f:1c:97:4e:5d:2f:39: a8:e7:6a:98:4d:41:3c:0d:35:90:07:78:4c:5f:fc:e9:38:24: e7:d6:34:95:ad:2e:1e:2e:c9:1a:a8:6e:2d:01:2a:f5:dc:cc: 4f:f2:34:b9:1b:d4:f7:b3:cc:e7:0b:9b:86:c9:5f:fa:a8:c4: e8:f7:ec:24:9b:1c:92:6f:fc:08:f8:3d:38:0e:6f:eb:1f:90: 4d:bf:0c:40:b0:59:e5:56:3e:1a:a5:45:38:11:b5:a6:b7:ba: a5:b4:21:a6:b1:f6:8c:1e:f1:12:67:ff:53:80:88:fa:dd:8f: ec:2f:08:fa:88:a6:d7:64:8c:e6:13:10:d6:e3:0b:38:43:c5: 46:88:2e:7e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtEpTEivV24QeUMeof/9sSjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4M2ZhZWM5M2Q0MDNmMzcxMzgyM2ZhMzljN2QyN2M2MmU5 MjE0NzEwHhcNMjUxMjIyMDYwMDM1WhcNMjUxMjIzMDYwMDM1WjAzMTEwLwYDVQQD Eyg1ZjExOTk1YjZhZjhjMDk1YWMyZWFmMWY1NjNjZTIyNGFhNWRhYWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEkkcgLSdN2ig70qX544yp7JiHdw U3KwrHQTj09iGNgCyLfqfNhRV11B8aoikyAzpbHQkF5zvCc/GBDcPcslDc5YcmWo aOS8+RKsHNITqJGYIxORLOdVqjgAkFn6ag2/jLrI/NmN5o28TxAGN2KK3tm3BzmJ eKZOA3knAAhgiEeEbb5h4KL7m4gJt5EaQCkpeEIwgwlhdVkDXEvYUWjrvJK08HAW 8JisOjQo3xnNbZX/xovTCbEfGf3WRg3/5hzbp9Li0LwqFobqELolPOZXeB87lFaw lmH/v6tMGfSzOLTdLbq/3qVVZZJ9WzrKLj23nn/83WUcGCYeZtcneH+0rQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFF8RmVtq+MCVrC6vH1Y84iSqXar8MB8GA1UdIwQY MBaAFPg/rsk9QD83E4I/o5x9J8YukhRxMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ELXV5VDFBUHpjVGdqLWpuSDBueGk2U0ZIRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkvOTcwY2YwLTkyOTgtNGZmMC1iYWY1 LTIxMGFlMDU2OWE0NS8xLzEtRC11eVQxQVB6Y1Rnai1qbkgwbnhpNlNGSEUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2I5Lzk3MGNmMC05Mjk4LTRmZjAtYmFmNS0yMTBhZTA1Njlh NDUvMS8xLUQtdXlUMUFQemNUZ2otam5IMG54aTZTRkhFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwg3 JgDLrY+x28R5tTKecG6QU4swXkPRUWwOES/g0KXH1TYZh5oOatb7ejb5YCkTb8pA ZTFOddaT7s2DBr7H15H6cT17nPzvxrEYEFTlcAw2dwaMD4K2HtiSczTFwEbRqAln z07LbcwtDlQwsbti40rXTlxQAHgvHJdOXS85qOdqmE1BPA01kAd4TF/86Tgk59Y0 la0uHi7JGqhuLQEq9dzMT/I0uRvU97PM5wubhslf+qjE6PfsJJsckm/8CPg9OA5v 6x+QTb8MQLBZ5VY+GqVFOBG1pre6pbQhprH2jB7xEmf/U4CI+t2P7C8I+oim12SM 5hMQ1uMLOEPFRogufg== -----END CERTIFICATE-----Generated at Mon Dec 22 11:32:50 2025 by rpki-client