This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft File: 1-yqlrPybsP5rkR8eytPrVNRcs28.mft (raw, json) Hash identifier: ZOCOMxV3eu13dKNhLZhUSHUpOlP1rqWIQmMx7kNGBRs= Subject key identifier: 48:5C:4D:59:19:90:31:E7:09:36:68:AC:28:3E:DD:57:B0:F8:24:D9 Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f Certificate serial: 019B34C47413AF9A03D9F5915F78BA1B714E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft Manifest number: 08CF Signing time: Fri 19 Dec 2025 04:00:48 +0000 Manifest this update: Fri 19 Dec 2025 04:00:48 +0000 Manifest next update: Sat 20 Dec 2025 04:00:48 +0000 Files and hashes: 1: 1-yqlrPybsP5rkR8eytPrVNRcs28.crl (hash: 1/BzLQZaZ73MztwvxYjRu9/ZYg90skTIO2/kueJkjXY=) 2: 8BItxdRwiz6e55f08Mt17mlwvV8.roa (hash: cojnwxd3ILvAkZ0dYhgxffSNvY1zxZ63Duvu6PuvkIM=) 3: QO_GooH2m885Q2taEPXMPgyGMvU.roa (hash: 1VnTsOfjtKGYm7FG0JLVMLSQUzntH2YHEOdl/AmQZTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:74:13:af:9a:03:d9:f5:91:5f:78:ba:1b:71:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f Validity Not Before: Dec 19 04:00:48 2025 GMT Not After : Dec 20 04:00:48 2025 GMT Subject: CN=485c4d59199031e7093668ac283edd57b0f824d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:30:7f:93:1d:69:b2:b1:06:8d:97:77:03:9b: 21:ba:fe:0e:f3:11:ed:1c:5c:64:36:c0:91:ff:8b: b9:ef:8b:c1:c8:c3:a2:86:18:04:dd:9e:c3:10:fb: 05:69:50:b7:9b:62:7a:da:05:13:c9:e7:87:08:bc: c8:6f:79:76:ba:f6:16:62:52:0f:da:9d:60:2f:2b: 84:d0:a8:eb:86:69:4a:01:5c:81:fd:7b:37:e1:9f: fd:29:3b:96:69:a2:cd:7d:be:0f:1f:1a:6f:21:f8: bb:5a:9e:bb:04:09:56:b5:bc:84:71:fa:19:f1:6e: 9b:77:59:24:8b:84:4a:06:fd:29:34:c5:cf:f2:e0: 1a:d4:2c:4f:37:60:35:e6:1c:cb:a0:f7:dd:d6:0d: b5:50:25:bf:cf:f0:e4:19:25:1f:cf:d4:ff:89:0a: 5b:14:07:75:77:7f:cf:f3:f8:63:a2:22:ec:66:f8: ac:f4:42:d0:39:ec:36:b5:05:87:bd:38:c6:8e:7c: f0:de:9a:44:3e:b0:c3:16:02:c6:74:7c:0e:72:12: cc:5a:ee:68:72:ca:68:92:10:e6:61:24:47:25:ca: 96:43:75:68:77:ea:ea:cf:8f:73:8d:64:21:e6:73: 9a:3f:6b:86:46:f4:69:2f:e0:3b:e0:45:85:1f:ad: 2e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:5C:4D:59:19:90:31:E7:09:36:68:AC:28:3E:DD:57:B0:F8:24:D9 X509v3 Authority Key Identifier: keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:5f:34:c9:0b:26:fe:95:bc:6f:db:60:d3:e1:4f:91:f9:e0: 89:c4:35:81:ee:5b:90:14:36:6a:8a:49:b2:87:5b:3a:eb:22: 87:d2:99:0c:dc:96:e7:80:a7:04:40:f5:e7:d8:6d:99:bd:6d: 7e:a0:b4:4c:4f:d7:d3:9f:ef:82:93:8c:33:7c:4f:5e:a5:97: 55:1a:8d:f5:43:77:61:3f:74:1c:e5:d5:76:d9:2c:55:9e:96: d8:78:d3:ae:ef:10:d6:27:dd:6b:3d:b4:d8:94:28:ef:03:3c: ad:43:a9:34:0b:d8:95:f2:ac:f5:d1:70:28:19:5a:b9:16:78: 22:bf:1b:6f:27:6d:68:38:63:c8:6d:8d:b5:96:a7:77:11:a0: 51:fa:cf:4e:25:18:9d:68:12:a6:03:69:bc:8b:a8:51:66:27: 4d:2a:65:c4:3c:19:38:16:8e:46:af:1f:10:ca:e2:63:df:d6: d5:71:4c:02:09:85:2c:a8:cc:41:65:df:5d:f6:a7:0c:a4:dc: ec:fe:b9:c3:d1:db:a1:4a:3f:c9:20:e0:66:b0:d3:82:59:ed: 0f:fd:73:d2:ed:3a:de:84:d8:da:09:7e:82:c9:8f:ba:67:b2: 3e:52:0c:f4:97:92:f2:0e:0b:4d:20:f9:95:23:f1:29:40:e2: eb:d8:45:a3 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs0xHQTr5oD2fWRX3i6G3FOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMmFhNWFjZmM5YmIwZmU2YjkxMWYxZWNhZDNlYjU0ZDQ1 Y2IzNmYwHhcNMjUxMjE5MDQwMDQ4WhcNMjUxMjIwMDQwMDQ4WjAzMTEwLwYDVQQD Eyg0ODVjNGQ1OTE5OTAzMWU3MDkzNjY4YWMyODNlZGQ1N2IwZjgyNGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjB/kx1psrEGjZd3A5shuv4O8xHt HFxkNsCR/4u574vByMOihhgE3Z7DEPsFaVC3m2J62gUTyeeHCLzIb3l2uvYWYlIP 2p1gLyuE0KjrhmlKAVyB/Xs34Z/9KTuWaaLNfb4PHxpvIfi7Wp67BAlWtbyEcfoZ 8W6bd1kki4RKBv0pNMXP8uAa1CxPN2A15hzLoPfd1g21UCW/z/DkGSUfz9T/iQpb FAd1d3/P8/hjoiLsZvis9ELQOew2tQWHvTjGjnzw3ppEPrDDFgLGdHwOchLMWu5o cspokhDmYSRHJcqWQ3Vod+rqz49zjWQh5nOaP2uGRvRpL+A74EWFH60uMQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEhcTVkZkDHnCTZorCg+3Vew+CTZMB8GA1UdIwQY MBaAFPsqpaz8m7D+a5EfHsrT61TUXLNvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS15cWxyUHlic1A1cmtSOGV5dFByVk5SY3MyOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvZDllN2VkLTNjMGYtNGE5Mi04NzE2 LWVlMDU3Y2Y5YzE2MS8xLzEteXFsclB5YnNQNXJrUjhleXRQclZOUmNzMjgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2YxL2Q5ZTdlZC0zYzBmLTRhOTItODcxNi1lZTA1N2NmOWMx NjEvMS8xLXlxbHJQeWJzUDVya1I4ZXl0UHJWTlJjczI4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJl80 yQsm/pW8b9tg0+FPkfngicQ1ge5bkBQ2aopJsodbOusih9KZDNyW54CnBED159ht mb1tfqC0TE/X05/vgpOMM3xPXqWXVRqN9UN3YT90HOXVdtksVZ6W2HjTru8Q1ifd az202JQo7wM8rUOpNAvYlfKs9dFwKBlauRZ4Ir8bbydtaDhjyG2NtZandxGgUfrP TiUYnWgSpgNpvIuoUWYnTSplxDwZOBaORq8fEMriY9/W1XFMAgmFLKjMQWXfXfan DKTc7P65w9HboUo/ySDgZrDTglntD/1z0u063oTY2gl+gsmPumeyPlIM9JeS8g4L TSD5lSPxKUDi69hFow== -----END CERTIFICATE-----Generated at Fri Dec 19 10:21:17 2025 by rpki-client