This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft File: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft (raw, json) Hash identifier: cHYEnrs/LUqNZMGTXJ67rf/HSLodC5c/e5TYeBXOn2M= Subject key identifier: A7:72:E5:00:A7:65:50:9B:5D:7A:8E:FF:94:7A:BE:39:1C:E5:23:11 Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85 Certificate issuer: /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885 Certificate serial: 019B39EB470BC8C17DCCEBA9BFC4596F67C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft Manifest number: 0A51 Signing time: Sat 20 Dec 2025 04:01:19 +0000 Manifest this update: Sat 20 Dec 2025 04:01:19 +0000 Manifest next update: Sun 21 Dec 2025 04:01:19 +0000 Files and hashes: 1: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl (hash: BNQFxD3rGs/7M7KMeDxUp+OdJC3ZPnFv7f0n41EpA4I=) 2: 9z9dKpnx6EzUcHVGNf_uGpVw9Os.roa (hash: a0dVE6vpgZW3UUjOxu/nfSbGxvoPx4y2RaBLkZkeRbc=) 3: NAkfZdC-lHIooI3gKnWXiaH-HsE.roa (hash: w3/vlIu5NjwEAa3XQiOFjmWkJL3BENVNbQUqUr266qk=) 4: tHjmQ9NOKNWbyApXtXSEVz3gkFM.roa (hash: SBZ1boxaRQZqnvXhV5a0MuSyAE629IVLf7UqxBja6yQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:47:0b:c8:c1:7d:cc:eb:a9:bf:c4:59:6f:67:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885 Validity Not Before: Dec 20 04:01:19 2025 GMT Not After : Dec 21 04:01:19 2025 GMT Subject: CN=a772e500a765509b5d7a8eff947abe391ce52311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:34:37:6f:d6:98:bf:28:c0:ee:da:95:ed:ab: 84:69:df:c4:a1:52:26:ad:54:0d:78:af:fd:16:b1: b1:87:5c:a3:1c:18:e2:3f:24:bd:b0:cb:b4:f9:0a: c8:58:78:d9:8b:ed:5a:a7:06:0c:b5:9b:9a:ca:84: dc:24:27:f2:fa:a5:8b:55:6d:06:a7:20:9c:9b:b0: 0b:ad:2c:0f:21:0f:25:cf:d5:28:e5:97:88:5f:a5: d8:9b:29:4e:f1:87:1f:a0:d3:92:e3:8c:14:7e:26: 33:42:8b:2a:75:06:f5:fc:11:7c:2b:e7:fe:46:7d: 63:48:7f:20:a3:53:cf:7a:7f:02:6c:77:56:56:c4: c2:f3:23:66:2b:bb:cd:6c:80:9b:c0:70:33:47:40: 78:0a:c2:d3:72:1b:a7:14:ae:ad:02:ca:02:ef:cb: ec:d7:8f:6a:b9:f8:d2:92:84:15:72:55:1f:ee:5e: 99:5e:90:7c:80:35:35:6e:90:bb:83:7d:fb:41:db: 6f:c9:b6:71:c2:27:af:77:e2:70:51:01:1e:18:55: a9:95:6a:5b:0e:61:05:f3:c5:7c:91:e1:91:3d:ce: f4:01:cd:ad:8f:ab:42:23:09:79:a3:93:29:5b:fd: a9:ff:eb:4a:e1:d3:17:08:21:98:fe:21:dd:20:20: c4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:72:E5:00:A7:65:50:9B:5D:7A:8E:FF:94:7A:BE:39:1C:E5:23:11 X509v3 Authority Key Identifier: keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:f2:5c:4d:45:2c:a1:6e:4d:ca:87:26:b0:70:d8:4d:32:fc: 0c:9f:41:42:18:28:32:2b:e1:7a:b3:fd:53:ef:99:94:a0:53: 55:2a:b9:53:3d:f9:f6:db:e5:24:1f:30:cc:72:3a:5e:fa:18: b9:03:0e:00:5f:c7:de:0d:f5:b5:d1:60:2c:f8:1c:16:95:09: 2d:35:d4:90:12:07:8b:82:77:be:b1:0e:4b:98:4e:55:97:9f: 0c:4a:fe:e4:f4:08:6f:98:85:61:bd:c1:66:c1:a8:e8:9d:23: b5:b1:ae:8b:89:59:f2:5e:62:3f:9a:5d:b0:9d:a1:ae:38:ec: 9d:36:95:f0:04:6b:e3:92:6d:ee:ae:b1:74:bf:7f:54:d1:8e: 53:8f:2f:3b:23:2a:63:9f:ae:0d:f4:02:eb:3c:87:7f:2e:79: 68:41:a0:9c:65:1c:c1:6f:6b:11:48:f0:f3:db:03:af:54:ea: 09:c4:e7:84:cc:75:c7:c3:ba:12:af:85:c9:99:3b:02:03:9e: a5:06:73:93:e0:b5:c5:82:50:e6:e4:86:bb:1a:f0:4f:1a:0e: 9c:7a:cb:8a:f4:51:ce:8b:f9:89:d1:f5:23:c2:d6:b3:cc:20: b8:a8:d3:01:35:f1:db:ac:ad:d1:ad:fd:78:69:f0:d1:4e:a5: 0a:31:57:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs560cLyMF9zOupv8RZb2fHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MzAxZjc3Mjc1M2Q4MGE3YjYyYzJkMjEzZDM0N2EzYjll YmU4ODUwHhcNMjUxMjIwMDQwMTE5WhcNMjUxMjIxMDQwMTE5WjAzMTEwLwYDVQQD EyhhNzcyZTUwMGE3NjU1MDliNWQ3YThlZmY5NDdhYmUzOTFjZTUyMzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzQ3b9aYvyjA7tqV7auEad/EoVIm rVQNeK/9FrGxh1yjHBjiPyS9sMu0+QrIWHjZi+1apwYMtZuayoTcJCfy+qWLVW0G pyCcm7ALrSwPIQ8lz9Uo5ZeIX6XYmylO8YcfoNOS44wUfiYzQosqdQb1/BF8K+f+ Rn1jSH8go1PPen8CbHdWVsTC8yNmK7vNbICbwHAzR0B4CsLTchunFK6tAsoC78vs 149qufjSkoQVclUf7l6ZXpB8gDU1bpC7g337QdtvybZxwievd+JwUQEeGFWplWpb DmEF88V8keGRPc70Ac2tj6tCIwl5o5MpW/2p/+tK4dMXCCGY/iHdICDEiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdy5QCnZVCbXXqO/5R6vjkc5SMRMB8GA1UdIwQY MBaAFNcwH3cnU9gKe2LC0hPTR6O56+iFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83N2Q2ZWUtYThlMS00YjAxLTgzY2It MmY2NzY5ZTc1ZjI0LzEvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy83N2Q2ZWUtYThlMS00YjAxLTgzY2ItMmY2NzY5ZTc1ZjI0 LzEvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfJcTUUs oW5NyocmsHDYTTL8DJ9BQhgoMivherP9U++ZlKBTVSq5Uz359tvlJB8wzHI6XvoY uQMOAF/H3g31tdFgLPgcFpUJLTXUkBIHi4J3vrEOS5hOVZefDEr+5PQIb5iFYb3B ZsGo6J0jtbGui4lZ8l5iP5pdsJ2hrjjsnTaV8ARr45Jt7q6xdL9/VNGOU48vOyMq Y5+uDfQC6zyHfy55aEGgnGUcwW9rEUjw89sDr1TqCcTnhMx1x8O6Eq+FyZk7AgOe pQZzk+C1xYJQ5uSGuxrwTxoOnHrLivRRzov5idH1I8LWs8wguKjTATXx26yt0a39 eGnw0U6lCjFXLw== -----END CERTIFICATE-----Generated at Sat Dec 20 11:00:52 2025 by rpki-client