This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft File: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft (raw, json) Hash identifier: RtM8EoERFkuDdPdVube2ipVpIUnAECOet93dg6r97bU= Subject key identifier: 0C:31:46:8E:56:1E:72:67:AF:DE:DB:F2:C9:F3:C1:1E:EE:51:58:BF Authority key identifier: F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA Certificate issuer: /CN=f984bce44fa32801d7f10ce9839b06084ddff2ba Certificate serial: 019B4A39D123F54D8D413B473194C08AAF41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft Manifest number: 1314 Signing time: Tue 23 Dec 2025 08:01:01 +0000 Manifest this update: Tue 23 Dec 2025 08:01:01 +0000 Manifest next update: Wed 24 Dec 2025 08:01:01 +0000 Files and hashes: 1: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl (hash: mXbI2YIarAh7iCTcodznFv9tg8kSdhPUqV3dBAY2QVY=) 2: uY3zUef0aSQ_1cVEf2POkOTu658.roa (hash: 5Ji2ueMdcBCO2VElJdA2ZSQYLd05uzaWuTi54eXzep8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 08:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:39:d1:23:f5:4d:8d:41:3b:47:31:94:c0:8a:af:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f984bce44fa32801d7f10ce9839b06084ddff2ba Validity Not Before: Dec 23 08:01:01 2025 GMT Not After : Dec 24 08:01:01 2025 GMT Subject: CN=0c31468e561e7267afdedbf2c9f3c11eee5158bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:00:aa:e4:41:85:6b:9b:3b:3a:f6:54:dc:6a: 3a:8a:e2:3c:82:64:a0:6f:8e:a7:ca:b4:00:aa:b3: bf:15:ac:47:da:5c:fe:e7:ca:82:f7:e1:66:d7:c5: 88:33:fd:9b:76:ac:1f:eb:a3:fb:59:00:52:d4:c8: 12:31:70:4e:88:2f:e8:8b:6c:e1:fa:78:07:93:1c: c7:83:62:b1:48:c6:21:61:7b:44:28:3b:d6:42:6b: 31:0b:31:f6:e0:0c:c5:29:d0:54:7b:27:99:88:25: f4:af:40:a4:c5:f8:34:15:12:82:70:a6:4c:e6:19: 88:16:60:bb:ca:c5:52:00:42:33:13:53:80:1a:10: 68:f6:3c:e2:96:a6:8b:4a:a2:4b:a4:e3:f9:c7:34: 3e:06:c1:4e:35:d2:88:35:0c:e7:43:c8:e5:c9:14: b9:8e:01:a5:dc:d8:ce:fa:d3:5a:04:18:de:c5:8c: a9:33:e8:9b:2b:c1:ee:3a:d5:b9:bd:1b:56:0a:87: f5:91:88:ce:09:99:00:f4:dc:2d:66:dd:d6:65:34: e8:2d:bb:c5:7d:f1:f8:17:78:e3:11:a1:67:e2:e2: d4:27:03:01:07:5b:97:6e:7a:7b:28:a6:4b:47:23: 68:d0:ff:c6:78:bf:a2:6a:8a:00:e6:fd:dc:16:1b: 9c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:31:46:8E:56:1E:72:67:AF:DE:DB:F2:C9:F3:C1:1E:EE:51:58:BF X509v3 Authority Key Identifier: keyid:F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:a1:60:48:9a:de:8f:11:8b:5e:a3:bd:75:3d:5c:16:4b:ac: 9d:6e:e0:f5:55:3b:ae:bb:fd:e0:7e:cd:00:d8:17:0e:b3:49: 31:4b:77:bc:7f:73:fe:b7:ca:c9:00:3d:eb:b1:2d:3e:e7:f2: 4e:2c:33:af:93:35:ce:63:a3:9f:7a:ed:11:8a:73:f1:e6:77: 49:a9:eb:ea:b4:fb:b8:c1:2f:26:03:29:6d:dc:49:b3:41:9b: 77:6e:f9:da:ab:a4:6d:98:ca:d1:0d:31:9e:67:13:fb:3c:f6: ed:a1:aa:66:a0:34:a4:cf:a3:91:e0:3d:bc:0b:4b:61:ac:18: de:df:36:27:c7:ca:c0:e4:44:fa:ee:d9:06:07:4b:6a:bc:b6: 55:a8:60:89:b8:33:f2:44:e6:82:62:1c:fb:f4:88:68:8c:fb: 3e:55:aa:04:99:c2:76:ad:a9:48:2f:14:72:10:29:79:f1:8a: da:08:71:fb:46:38:46:80:70:0c:ce:be:21:ab:17:0d:97:7b: 2f:7f:e7:97:7d:0b:1a:50:77:50:a9:69:98:0d:c3:ce:3a:24: 70:b2:de:78:e8:13:3b:56:69:12:7c:49:b7:b3:f4:8a:70:ef: 2b:10:45:aa:92:83:ee:0e:24:6b:6d:e2:fb:d5:c0:3a:dd:4c: 18:43:8f:f3 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtKOdEj9U2NQTtHMZTAiq9BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ODRiY2U0NGZhMzI4MDFkN2YxMGNlOTgzOWIwNjA4NGRk ZmYyYmEwHhcNMjUxMjIzMDgwMTAxWhcNMjUxMjI0MDgwMTAxWjAzMTEwLwYDVQQD EygwYzMxNDY4ZTU2MWU3MjY3YWZkZWRiZjJjOWYzYzExZWVlNTE1OGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgCq5EGFa5s7OvZU3Go6iuI8gmSg b46nyrQAqrO/FaxH2lz+58qC9+Fm18WIM/2bdqwf66P7WQBS1MgSMXBOiC/oi2zh +ngHkxzHg2KxSMYhYXtEKDvWQmsxCzH24AzFKdBUeyeZiCX0r0Ckxfg0FRKCcKZM 5hmIFmC7ysVSAEIzE1OAGhBo9jzilqaLSqJLpOP5xzQ+BsFONdKINQznQ8jlyRS5 jgGl3NjO+tNaBBjexYypM+ibK8HuOtW5vRtWCof1kYjOCZkA9NwtZt3WZTToLbvF ffH4F3jjEaFn4uLUJwMBB1uXbnp7KKZLRyNo0P/GeL+iaooA5v3cFhucgwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAwxRo5WHnJnr97b8snzwR7uUVi/MB8GA1UdIwQY MBaAFPmEvORPoygB1/EM6YObBghN3/K6MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ZUzg1RS1qS0FIWDhRenBnNXNHQ0UzZjhyby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvYWVjZjJlLTI5YTQtNGEyMC04ZGU1 LWRiMThjMTA0MWE5NS8xLzEtWVM4NUUtaktBSFg4UXpwZzVzR0NFM2Y4cm8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2U0L2FlY2YyZS0yOWE0LTRhMjAtOGRlNS1kYjE4YzEwNDFh OTUvMS8xLVlTODVFLWpLQUhYOFF6cGc1c0dDRTNmOHJvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkqFg SJrejxGLXqO9dT1cFkusnW7g9VU7rrv94H7NANgXDrNJMUt3vH9z/rfKyQA967Et PufyTiwzr5M1zmOjn3rtEYpz8eZ3Sanr6rT7uMEvJgMpbdxJs0Gbd2752qukbZjK 0Q0xnmcT+zz27aGqZqA0pM+jkeA9vAtLYawY3t82J8fKwORE+u7ZBgdLary2Vahg ibgz8kTmgmIc+/SIaIz7PlWqBJnCdq2pSC8UchApefGK2ghx+0Y4RoBwDM6+IasX DZd7L3/nl30LGlB3UKlpmA3DzjokcLLeeOgTO1ZpEnxJt7P0inDvKxBFqpKD7g4k a23i+9XAOt1MGEOP8w== -----END CERTIFICATE-----Generated at Tue Dec 23 10:47:37 2025 by rpki-client