This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft File: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft (raw, json) Hash identifier: di1peAGj1uAfUJfuMKzdYtoaVONTYuw6E2qsxNjYUqY= Subject key identifier: E8:78:39:0D:A9:3B:C1:EB:6A:FF:CD:6E:F9:4E:40:80:90:D4:69:C3 Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73 Certificate issuer: /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473 Certificate serial: 019AF088B4EE3FCD52BAA4B7AA7E6A706058 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft Manifest number: 178E Signing time: Fri 05 Dec 2025 22:01:22 +0000 Manifest this update: Fri 05 Dec 2025 22:01:22 +0000 Manifest next update: Sat 06 Dec 2025 22:01:22 +0000 Files and hashes: 1: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl (hash: ydsgzcYRE4cPP6v4plO6I8LZxoDyLSyMFXZbKSfOdMI=) 2: 6ZeRNkK2gfkBTq-HCKi4E0wDn0g.roa (hash: EG2r/8KWDUcCkyQHYwdunKSI5bgRdtrDYdyzMOQ6sPg=) 3: 7zkL6is6uiT0K6jbnHgG4_foxLs.roa (hash: 7s5RovPfiSb41Rd6Pj/MwhULMmTO5+df4JKH36bwQEY=) 4: OtQ48GIqhoV8BbHUJtSPHtzr3bM.roa (hash: Qd9IkkyUrKLcvFwMqdzhvX7YcnKe2XLSIuFWdUOxwyk=) 5: RDfRFkINmnxAYr0i5lo-RrZfvvM.roa (hash: OK1hJOOaClcL1ul04CJbPRYEerL2hSCv/3xJn1BxpKo=) 6: W-3pllcOO_r6leZFXqyl0NNm9Ww.roa (hash: cCQm6IWECwZhgYdkg5jkkG+WaaUJSwWYVhY2RXgyFBM=) 7: gwNf7hRUcUlc_WP0obY5q2dBbnQ.roa (hash: rRyAeqxP/tdvl1xFzDmcY8amsglq1slf48aSCQfMHSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:b4:ee:3f:cd:52:ba:a4:b7:aa:7e:6a:70:60:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473 Validity Not Before: Dec 5 22:01:22 2025 GMT Not After : Dec 6 22:01:22 2025 GMT Subject: CN=e878390da93bc1eb6affcd6ef94e408090d469c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ea:48:b3:85:a5:69:e8:94:e5:1a:c2:ba:c7: bc:71:a1:b3:b3:d7:f1:be:06:cc:d9:a4:c8:4e:b9: ce:55:d8:6e:bb:7a:4d:18:ac:50:12:dd:e5:04:41: 62:24:46:51:cc:1f:2d:e6:58:f3:db:91:55:2d:54: 08:81:16:47:39:cd:07:40:4e:da:2c:8a:6a:fc:d7: 3f:86:72:24:83:fb:dd:5f:88:8d:4f:62:f9:cb:25: b9:71:0d:65:b6:ea:be:3a:d7:a0:a9:58:c7:cf:a8: 50:fd:a1:1c:19:7e:75:a2:6d:03:a2:32:3d:2c:06: 6b:d6:44:0f:07:12:b5:cd:4c:7f:30:15:1d:3d:0e: 5c:66:08:44:ec:db:50:23:36:6e:7d:83:2d:6b:33: 1c:fa:4e:7a:ad:c9:de:ce:c8:08:b4:26:50:1d:4e: 86:88:fd:80:fe:14:92:dc:ff:58:5a:53:7b:61:1e: ea:22:51:f8:1d:ec:08:31:5f:36:d0:89:6e:b6:e4: 70:98:ae:86:66:97:11:0b:f9:37:2f:40:77:bb:db: 71:7e:6c:cc:e7:15:db:4c:82:1e:f2:f6:3a:05:11: 45:96:23:d4:46:6b:b7:12:f2:25:9e:2b:f4:8d:3a: 4c:a6:b6:48:38:56:aa:7f:4f:e9:2a:b7:fa:6c:8d: b0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:78:39:0D:A9:3B:C1:EB:6A:FF:CD:6E:F9:4E:40:80:90:D4:69:C3 X509v3 Authority Key Identifier: keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:02:83:59:f6:2e:95:94:8c:7a:ee:47:fc:fc:1a:68:ab:7c: 2d:93:5c:98:c3:09:35:88:45:4b:39:0a:6a:5c:6c:19:e3:7e: 6b:7b:5e:9b:a2:23:82:4f:cc:ae:ad:a5:b3:89:4d:8f:47:0e: 85:38:f2:43:3f:4b:43:ff:6e:20:54:47:3c:b1:2d:04:20:9c: 7a:56:17:ea:68:cc:3a:df:e4:05:38:45:00:7f:2b:4e:1f:e5: 70:2a:64:56:d6:5e:d3:a8:f1:cd:b2:04:eb:84:25:2a:6c:2f: 75:64:22:91:6a:02:98:a4:6f:8d:bf:45:26:fe:29:d3:e5:55: 4d:bc:84:27:a7:bd:b8:72:46:11:62:95:3d:fd:cf:a2:11:8b: c7:49:94:e1:ec:89:01:7e:32:c2:16:67:eb:03:73:1a:3d:30: 60:b0:0c:10:36:64:a5:88:e8:0e:57:6a:0d:c8:40:ae:40:43: 56:46:14:6a:51:5c:7b:e7:72:ed:ff:57:c3:3d:f6:da:98:77: a4:39:4c:13:22:8a:b3:22:44:aa:f0:5a:6c:9c:24:b3:e0:0d: 9e:e6:6a:97:03:69:5f:ff:7c:64:50:c0:7d:88:cc:2c:34:27: 6a:7a:b0:50:30:23:54:5a:92:05:9a:a9:66:2e:e6:98:d9:9a: 14:5b:f0:a1 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrwiLTuP81SuqS3qn5qcGBYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ODU2ZDY3NGYwZTlkYmY2MDEyZDViNWQzZDk2YjQzYWZk NzY0NzMwHhcNMjUxMjA1MjIwMTIyWhcNMjUxMjA2MjIwMTIyWjAzMTEwLwYDVQQD EyhlODc4MzkwZGE5M2JjMWViNmFmZmNkNmVmOTRlNDA4MDkwZDQ2OWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+pIs4WlaeiU5RrCuse8caGzs9fx vgbM2aTITrnOVdhuu3pNGKxQEt3lBEFiJEZRzB8t5ljz25FVLVQIgRZHOc0HQE7a LIpq/Nc/hnIkg/vdX4iNT2L5yyW5cQ1ltuq+OtegqVjHz6hQ/aEcGX51om0DojI9 LAZr1kQPBxK1zUx/MBUdPQ5cZghE7NtQIzZufYMtazMc+k56rcnezsgItCZQHU6G iP2A/hSS3P9YWlN7YR7qIlH4HewIMV820IlutuRwmK6GZpcRC/k3L0B3u9txfmzM 5xXbTIIe8vY6BRFFliPURmu3EvIlniv0jTpMprZIOFaqf0/pKrf6bI2w0QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOh4OQ2pO8Hrav/NbvlOQICQ1GnDMB8GA1UdIwQY MBaAFPmFbWdPDp2/YBLVtdPZa0Ov12RzMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ZVnRaMDhPbmI5Z0V0VzEwOWxyUTZfWFpITS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvOWY5NTkwLTdmMGEtNDFiMy1hYzRm LWVmZDE0ZGI5NTdmYi8xLzEtWVZ0WjA4T25iOWdFdFcxMDlsclE2X1haSE0ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzBhLzlmOTU5MC03ZjBhLTQxYjMtYWM0Zi1lZmQxNGRiOTU3 ZmIvMS8xLVlWdFowOE9uYjlnRXRXMTA5bHJRNl9YWkhNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQKD WfYulZSMeu5H/PwaaKt8LZNcmMMJNYhFSzkKalxsGeN+a3tem6Ijgk/Mrq2ls4lN j0cOhTjyQz9LQ/9uIFRHPLEtBCCcelYX6mjMOt/kBThFAH8rTh/lcCpkVtZe06jx zbIE64QlKmwvdWQikWoCmKRvjb9FJv4p0+VVTbyEJ6e9uHJGEWKVPf3PohGLx0mU 4eyJAX4ywhZn6wNzGj0wYLAMEDZkpYjoDldqDchArkBDVkYUalFce+dy7f9Xwz32 2ph3pDlMEyKKsyJEqvBabJwks+ANnuZqlwNpX/98ZFDAfYjMLDQnanqwUDAjVFqS BZqpZi7mmNmaFFvwoQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:12:31 2025 by rpki-client