This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft File: 1DySR0_tODyV-izNg9YU9X5WPYI.mft (raw, json) Hash identifier: 0PCFRBRYvMYfu6GAqd0+oKEeAnahrSijF9DUo3abYdE= Subject key identifier: 7E:05:E3:2F:AC:28:1E:69:3A:AB:E0:90:10:B7:D1:1D:96:A3:95:30 Authority key identifier: D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82 Certificate issuer: /CN=d43c92474fed383c95fa2ccd83d614f57e563d82 Certificate serial: 019AF208D20D95C550FE036C5383A5492923 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:00:55 +0000 Manifest this update: Sat 06 Dec 2025 05:00:55 +0000 Manifest next update: Sun 07 Dec 2025 05:00:55 +0000 Files and hashes: 1: 1DySR0_tODyV-izNg9YU9X5WPYI.crl (hash: 02NDNUTrG8CMcZqcisoMVJbyv9IszxYB+lTxKUWdk24=) 2: YeNb4uILFMttwTAEJ0OqaURJezM.roa (hash: TrCAXhjpMq5IYAz3anoVsFKGrU1fVwfTtHHZACZFwhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d2:0d:95:c5:50:fe:03:6c:53:83:a5:49:29:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d43c92474fed383c95fa2ccd83d614f57e563d82 Validity Not Before: Dec 6 05:00:55 2025 GMT Not After : Dec 7 05:00:55 2025 GMT Subject: CN=7e05e32fac281e693aabe09010b7d11d96a39530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:42:09:61:d8:41:4e:d5:30:3c:73:1e:2d:36: ee:06:9c:01:3f:40:97:8c:12:a0:95:98:8b:05:83: bd:85:00:25:e9:d7:2d:56:74:d4:22:3d:41:8c:4c: 22:2f:ef:07:31:a3:a0:69:96:f9:ba:9c:67:29:5f: 97:d3:97:74:b6:43:72:b7:80:d2:a2:65:68:3b:7a: 42:6c:14:c0:6d:f9:a7:d4:ea:3a:fd:90:14:8c:4b: b3:d4:52:c5:38:90:9d:a1:24:4e:03:97:16:91:c6: 21:a0:0a:3d:d1:10:34:f8:65:a7:dc:45:79:7b:3c: 94:78:68:ae:0d:87:d6:63:81:85:f9:86:5a:06:05: 5f:f7:c7:88:57:0c:76:31:a5:bd:1d:b4:05:06:fe: 0b:d0:ae:c0:cf:61:8b:d2:95:d8:13:26:8a:e7:83: f4:0f:34:9e:b1:91:cd:e1:63:7c:5e:aa:cb:55:7f: f8:3d:fc:7d:c4:7f:2d:df:bb:c4:ff:1c:9c:ca:03: 05:58:9b:a9:18:32:b2:48:66:54:41:85:f8:63:86: e3:b4:8b:3e:3c:8b:d1:67:51:10:13:92:d5:6b:bd: 0f:85:ec:1f:6c:9c:9d:86:8e:e4:0a:dc:59:01:12: 46:fd:6c:69:6b:0c:d5:df:a0:3e:2b:00:57:00:c3: b8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:05:E3:2F:AC:28:1E:69:3A:AB:E0:90:10:B7:D1:1D:96:A3:95:30 X509v3 Authority Key Identifier: keyid:D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:10:5c:bd:d8:1d:20:69:f7:a3:88:99:60:bd:b0:d2:93:58: cf:66:6c:75:d2:5b:25:ca:d8:1e:5e:65:14:e8:0d:18:b4:d8: bb:89:b8:89:e2:b1:8a:0f:16:da:bc:1b:02:cd:b6:0a:b5:f2: e2:d4:c2:a8:63:05:34:6a:75:60:c6:19:c3:b8:00:e8:ce:09: a9:39:ea:a7:0a:ba:65:29:fd:a2:28:16:54:72:9d:6a:f9:1a: b4:12:9d:39:c2:f0:31:5f:bc:17:4c:fc:10:54:00:85:a5:cb: 76:70:32:ad:ad:60:6d:ff:94:41:a0:b0:44:fa:30:f1:80:3a: e4:68:ce:f0:f7:69:98:ab:93:61:e2:66:2a:a5:0a:67:2b:b3: a0:77:f6:81:4a:87:0e:93:89:49:91:8e:b8:cc:9d:f8:3c:c9: 65:2a:92:30:bf:e4:d8:df:e8:85:a6:bc:67:f4:77:09:c8:f0: 38:23:86:4e:f9:d6:9b:3d:ce:be:7e:f3:93:51:cc:e2:50:c0: 4f:db:18:ac:b9:96:cd:fa:3d:15:f1:59:d0:be:07:91:bc:af: 27:cd:67:e0:10:ee:08:80:8a:b8:66:b0:d0:e7:97:f6:a3:2c: 62:31:ee:34:ae:e0:e9:62:7b:86:4f:c2:d6:65:ee:91:47:d3: 88:29:1c:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNINlcVQ/gNsU4OlSSkjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0M2M5MjQ3NGZlZDM4M2M5NWZhMmNjZDgzZDYxNGY1N2U1 NjNkODIwHhcNMjUxMjA2MDUwMDU1WhcNMjUxMjA3MDUwMDU1WjAzMTEwLwYDVQQD Eyg3ZTA1ZTMyZmFjMjgxZTY5M2FhYmUwOTAxMGI3ZDExZDk2YTM5NTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0IJYdhBTtUwPHMeLTbuBpwBP0CX jBKglZiLBYO9hQAl6dctVnTUIj1BjEwiL+8HMaOgaZb5upxnKV+X05d0tkNyt4DS omVoO3pCbBTAbfmn1Oo6/ZAUjEuz1FLFOJCdoSROA5cWkcYhoAo90RA0+GWn3EV5 ezyUeGiuDYfWY4GF+YZaBgVf98eIVwx2MaW9HbQFBv4L0K7Az2GL0pXYEyaK54P0 DzSesZHN4WN8XqrLVX/4Pfx9xH8t37vE/xycygMFWJupGDKySGZUQYX4Y4bjtIs+ PIvRZ1EQE5LVa70PhewfbJydho7kCtxZARJG/WxpawzV36A+KwBXAMO4OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4F4y+sKB5pOqvgkBC30R2Wo5UwMB8GA1UdIwQY MBaAFNQ8kkdP7Tg8lfoszYPWFPV+Vj2CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUR5U1IwX3RPRHlWLWl6Tmc5WVU5WDVXUFlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84NDFmM2EtYWI4My00ZGQ5LWIxODMt NmIwNmMxNzZiZDVhLzEvMUR5U1IwX3RPRHlWLWl6Tmc5WVU5WDVXUFlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84NDFmM2EtYWI4My00ZGQ5LWIxODMtNmIwNmMxNzZiZDVh LzEvMUR5U1IwX3RPRHlWLWl6Tmc5WVU5WDVXUFlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjRBcvdgd IGn3o4iZYL2w0pNYz2ZsddJbJcrYHl5lFOgNGLTYu4m4ieKxig8W2rwbAs22CrXy 4tTCqGMFNGp1YMYZw7gA6M4JqTnqpwq6ZSn9oigWVHKdavkatBKdOcLwMV+8F0z8 EFQAhaXLdnAyra1gbf+UQaCwRPow8YA65GjO8PdpmKuTYeJmKqUKZyuzoHf2gUqH DpOJSZGOuMyd+DzJZSqSML/k2N/ohaa8Z/R3CcjwOCOGTvnWmz3Ovn7zk1HM4lDA T9sYrLmWzfo9FfFZ0L4HkbyvJ81n4BDuCICKuGaw0OeX9qMsYjHuNK7g6WJ7hk/C 1mXukUfTiCkcKA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:06 2025 by rpki-client