This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft File: 1yGexzg_oGEEgN36YsP4LEAM1W8.mft (raw, json) Hash identifier: jjKZ1rOKf/vslwdErbfI7yhPkpjNKYgXo1v0N/I/ias= Subject key identifier: EB:59:6C:FF:8B:0E:1F:09:C7:62:93:16:7A:D5:EA:75:5B:45:D7:8D Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F Certificate issuer: /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f Certificate serial: 019AF12CC9C675C01A7B558C7468D6ACD50C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft Manifest number: 1776 Signing time: Sat 06 Dec 2025 01:00:35 +0000 Manifest this update: Sat 06 Dec 2025 01:00:35 +0000 Manifest next update: Sun 07 Dec 2025 01:00:35 +0000 Files and hashes: 1: 1yGexzg_oGEEgN36YsP4LEAM1W8.crl (hash: dIgMsY078j1vkZgYrTPAI+b0kx4SmRbggWBKVmArS5s=) 2: PqhLYK9y6l-hcls-AteZg7ZowWc.roa (hash: 5kkmCBC611tewDVZOjvNR50HAAbuHCz11F3GzXw+Bh4=) 3: U8dIjWtcY2-M_CEVsA6b8bwpFDE.roa (hash: Fkz8GUWY9XL31RlpgAhEjSOpkZkA5/bNbRzb9y7VS9c=) 4: rkMUgmhsqbXXRN9oFUiXQpZDv8U.roa (hash: qJePBEGYHTN0gemfII7b2mdoR3N62f9upxA2WFELbiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c9:c6:75:c0:1a:7b:55:8c:74:68:d6:ac:d5:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f Validity Not Before: Dec 6 01:00:35 2025 GMT Not After : Dec 7 01:00:35 2025 GMT Subject: CN=eb596cff8b0e1f09c76293167ad5ea755b45d78d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b7:f9:cb:17:2d:1e:11:f8:25:5f:ef:5d:69: 19:da:3e:53:29:99:eb:a0:1a:b5:40:db:0f:38:c4: 42:4b:93:da:33:47:98:9d:7f:3f:be:d1:38:05:32: 00:dc:1e:a4:59:51:86:8b:49:73:fe:4a:5e:a0:35: c2:87:2a:66:72:b9:9d:9d:19:ac:a5:56:5a:5b:ae: b3:7c:52:0c:5a:7e:1d:da:80:d2:11:fd:59:94:05: 0a:ca:cd:73:49:e8:d1:64:ce:52:81:dd:28:8c:88: d0:fa:af:0d:9e:47:f0:69:1d:80:0c:a4:58:25:0b: 52:84:ef:f6:a0:e0:9f:80:66:60:c6:20:57:98:30: 67:cb:b1:33:cc:c3:2b:50:44:1c:64:35:fd:a1:89: 96:66:36:50:5c:8a:5a:ee:0d:50:eb:15:5a:41:e4: bf:42:e4:6c:7b:06:c8:bb:1c:e2:93:cc:58:94:ff: 78:66:f7:71:a9:15:be:d4:52:6b:7a:21:73:48:a1: 19:f2:e9:64:33:be:82:ec:9c:90:f7:20:22:84:d9: 8d:3e:bb:ea:db:1b:7e:2d:3d:79:ad:e8:85:69:8a: 0c:4c:f4:20:17:0b:5c:11:89:f5:23:7e:b4:21:cc: 6f:06:8c:ae:20:19:8c:91:6b:88:ca:79:76:49:16: 20:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:59:6C:FF:8B:0E:1F:09:C7:62:93:16:7A:D5:EA:75:5B:45:D7:8D X509v3 Authority Key Identifier: keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:3b:0c:9c:0a:fa:4b:d5:f3:08:89:fd:79:64:69:f1:cb:f5: 16:77:0d:ca:45:12:f3:8f:f1:26:0d:cb:48:3d:23:2a:43:be: e4:a4:21:7a:19:37:22:0c:31:fe:11:07:24:e2:3a:85:1a:ee: 97:aa:a2:dc:7f:23:5c:cd:a6:82:68:80:18:42:bd:54:c3:f1: 96:1f:34:76:89:55:5f:be:d6:d2:1f:c7:7f:9f:bd:19:8e:35: 05:24:fd:57:0a:80:28:97:63:83:a9:77:15:49:ce:28:ac:8b: cf:7a:b0:8f:e8:82:5d:2c:a8:5b:93:0a:17:26:c4:f0:54:17: 65:24:ab:0e:00:5f:32:70:41:ff:1a:c4:c8:f6:f8:d6:99:43: 32:d2:40:6e:e6:50:c4:22:59:27:d8:c4:49:d2:fd:ba:9d:42: 94:23:a0:04:e7:38:f3:18:ce:8f:bf:13:7b:ff:8f:22:1d:62: 5e:7b:67:00:b1:fa:05:be:9c:ad:2f:2b:55:be:35:51:c0:df: d6:1f:28:0b:78:56:66:c5:95:8e:a9:12:68:b5:2c:2a:fb:e9: f7:c1:68:87:d3:ac:27:db:fb:94:bf:4d:02:92:b1:3d:1a:41: 3a:ff:e0:ff:84:22:53:79:7e:42:bc:f8:c6:d8:36:17:68:2c: ea:c6:6c:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMnGdcAae1WMdGjWrNUMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MjE5ZWM3MzgzZmEwNjEwNDgwZGRmYTYyYzNmODJjNDAw Y2Q1NmYwHhcNMjUxMjA2MDEwMDM1WhcNMjUxMjA3MDEwMDM1WjAzMTEwLwYDVQQD EyhlYjU5NmNmZjhiMGUxZjA5Yzc2MjkzMTY3YWQ1ZWE3NTViNDVkNzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bf5yxctHhH4JV/vXWkZ2j5TKZnr oBq1QNsPOMRCS5PaM0eYnX8/vtE4BTIA3B6kWVGGi0lz/kpeoDXChypmcrmdnRms pVZaW66zfFIMWn4d2oDSEf1ZlAUKys1zSejRZM5Sgd0ojIjQ+q8NnkfwaR2ADKRY JQtShO/2oOCfgGZgxiBXmDBny7EzzMMrUEQcZDX9oYmWZjZQXIpa7g1Q6xVaQeS/ QuRsewbIuxzik8xYlP94ZvdxqRW+1FJreiFzSKEZ8ulkM76C7JyQ9yAihNmNPrvq 2xt+LT15reiFaYoMTPQgFwtcEYn1I360IcxvBoyuIBmMkWuIynl2SRYgZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtZbP+LDh8Jx2KTFnrV6nVbRdeNMB8GA1UdIwQY MBaAFNchnsc4P6BhBIDd+mLD+CxADNVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXlHZXh6Z19vR0VFZ04zNllzUDRMRUFNMVc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mYmZmYmMtYWI4Mi00MDU4LWI4Yjct ZDBjODJhM2NmNGI2LzEvMXlHZXh6Z19vR0VFZ04zNllzUDRMRUFNMVc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9mYmZmYmMtYWI4Mi00MDU4LWI4YjctZDBjODJhM2NmNGI2 LzEvMXlHZXh6Z19vR0VFZ04zNllzUDRMRUFNMVc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqjsMnAr6 S9XzCIn9eWRp8cv1FncNykUS84/xJg3LSD0jKkO+5KQhehk3Igwx/hEHJOI6hRru l6qi3H8jXM2mgmiAGEK9VMPxlh80dolVX77W0h/Hf5+9GY41BST9VwqAKJdjg6l3 FUnOKKyLz3qwj+iCXSyoW5MKFybE8FQXZSSrDgBfMnBB/xrEyPb41plDMtJAbuZQ xCJZJ9jESdL9up1ClCOgBOc48xjOj78Te/+PIh1iXntnALH6Bb6crS8rVb41UcDf 1h8oC3hWZsWVjqkSaLUsKvvp98Foh9OsJ9v7lL9NApKxPRpBOv/g/4QiU3l+Qrz4 xtg2F2gs6sZsUA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:23 2025 by rpki-client