This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft File: 1-K1UNiT40ygeyXBFjudS8QpCRSk.mft (raw, json) Hash identifier: pidgFrA/alPRzMXEpt6YyysPT9TJUQ7+0qfbXtv6O78= Subject key identifier: 0B:FD:D3:FE:47:91:9A:35:FA:C7:52:80:98:E9:24:45:28:B5:E0:94 Authority key identifier: F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29 Certificate issuer: /CN=f8ad543624f8d3281ec970458ee752f10a424529 Certificate serial: 019AF276760C08D9423569F08C656476FE17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 07:00:41 +0000 Manifest this update: Sat 06 Dec 2025 07:00:41 +0000 Manifest next update: Sun 07 Dec 2025 07:00:41 +0000 Files and hashes: 1: 0IRPcg0Zsb-gPoOdS1ZxVTcB0GM.roa (hash: ujPSAk32+dpIjTUsucTHydurSTU82h9ZEz2rCwGCvb4=) 2: 1-K1UNiT40ygeyXBFjudS8QpCRSk.crl (hash: eyXwSoSR2BDRLLQizZmB+ac9HE2JcZKN9KMtpW1vMxE=) 3: 27QIFK3RME4zastoZr-Aqup92E4.roa (hash: AP5Zl89w4EnvvkKDLE1wTCUl3HvQyebnmKUtnCiGMTg=) 4: JbyektcecEj3BAlwzdyd-YQZG-I.roa (hash: qaQjv/GNe5ncVF9/+USSvz1DDnlwL3O9F43o15WDW8o=) 5: Pza9faIJ5cktDsZNFR6fEzPMTws.roa (hash: IZazQ28vh340utjMZWOtEpCw1yIpqU4ff78jK5/vzyY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:76:0c:08:d9:42:35:69:f0:8c:65:64:76:fe:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8ad543624f8d3281ec970458ee752f10a424529 Validity Not Before: Dec 6 07:00:41 2025 GMT Not After : Dec 7 07:00:41 2025 GMT Subject: CN=0bfdd3fe47919a35fac7528098e9244528b5e094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ec:51:2c:12:51:9f:40:2a:0b:6d:65:d9:16: 9a:d2:d7:40:f0:bc:60:68:1d:12:7c:50:7b:ea:1a: 4e:6d:e1:00:52:0b:d4:e6:4d:7c:36:38:2e:3f:24: e8:f1:f8:34:7e:9a:eb:53:e8:d8:91:62:6a:34:a6: 14:14:2e:81:c7:3d:e4:58:ff:40:a6:80:a4:d3:8f: cd:9a:89:d8:7a:23:75:e8:fb:82:75:4e:0f:f4:d7: da:38:0c:fc:b8:4f:80:26:a8:6a:02:eb:81:4d:16: 74:6c:93:64:cb:8b:1e:66:b4:2b:2c:21:02:9c:59: b7:39:7c:c5:cd:db:d4:a2:7e:32:be:52:44:20:7c: 8f:f7:10:3a:fe:a3:25:20:6f:ce:cb:c9:6a:06:39: cb:5c:74:23:59:84:bd:90:65:40:b9:ac:ec:88:1d: d6:60:cd:9d:1d:ff:c4:af:0a:69:6b:7e:d2:e6:7d: 91:c8:ec:f3:30:eb:42:63:a9:d5:8d:e0:bf:fc:b6: c4:cd:bd:d0:4b:c6:5d:8b:48:b9:d0:83:df:ad:6b: 5c:af:1c:89:94:46:71:47:31:4c:c5:48:b1:8d:40: 4f:c5:cb:69:80:b1:db:09:9a:d1:6c:a3:8b:e8:d2: 49:5f:e5:bf:af:cb:f0:ac:43:36:95:6a:df:d2:f0: 59:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:FD:D3:FE:47:91:9A:35:FA:C7:52:80:98:E9:24:45:28:B5:E0:94 X509v3 Authority Key Identifier: keyid:F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:96:e7:ed:94:73:54:dd:8f:22:ef:0a:bb:fb:6b:74:bb:db: 7c:51:96:99:66:c4:84:cb:5c:c6:0a:4b:b6:c6:21:61:e5:4f: 9d:89:75:43:f9:00:63:67:b1:f6:ce:49:c7:6c:ff:22:25:8a: f8:5b:90:89:40:95:cd:11:91:fa:a1:81:08:d6:64:21:94:1b: cd:0b:c9:3e:8a:20:fe:d0:aa:d7:1a:90:33:ba:1c:ac:82:ae: 82:54:30:68:24:11:6e:32:72:8c:33:c5:80:d8:22:2c:da:e1: e9:b7:dc:14:d1:14:49:1a:c9:86:35:ee:49:89:c7:f7:c5:3e: 9f:79:95:a3:3f:a5:56:d6:2c:80:cd:9b:40:1f:31:ff:7e:7d: 4e:37:e8:d6:b5:ba:f7:d1:06:d4:d9:3f:0e:00:ba:5f:e5:a4: cc:bf:b2:de:7c:af:1c:58:b0:70:fd:d3:fa:b7:71:74:f4:53: 90:47:83:a3:72:d8:7b:ce:c3:3b:e8:b9:65:55:b8:ec:a8:69: 63:ad:ab:17:8d:71:55:0b:65:e0:42:8f:95:8d:bf:25:db:f4: a5:5a:b4:6a:9a:e5:00:e2:6b:95:c9:62:ba:7f:28:46:a8:40: 3e:30:36:ff:10:fc:16:f0:79:8f:1b:68:9a:b8:99:22:2f:5c: 20:5e:66:3a -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrydnYMCNlCNWnwjGVkdv4XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YWQ1NDM2MjRmOGQzMjgxZWM5NzA0NThlZTc1MmYxMGE0 MjQ1MjkwHhcNMjUxMjA2MDcwMDQxWhcNMjUxMjA3MDcwMDQxWjAzMTEwLwYDVQQD EygwYmZkZDNmZTQ3OTE5YTM1ZmFjNzUyODA5OGU5MjQ0NTI4YjVlMDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+xRLBJRn0AqC21l2Raa0tdA8Lxg aB0SfFB76hpObeEAUgvU5k18NjguPyTo8fg0fprrU+jYkWJqNKYUFC6Bxz3kWP9A poCk04/NmonYeiN16PuCdU4P9NfaOAz8uE+AJqhqAuuBTRZ0bJNky4seZrQrLCEC nFm3OXzFzdvUon4yvlJEIHyP9xA6/qMlIG/Oy8lqBjnLXHQjWYS9kGVAuazsiB3W YM2dHf/Erwppa37S5n2RyOzzMOtCY6nVjeC//LbEzb3QS8Zdi0i50IPfrWtcrxyJ lEZxRzFMxUixjUBPxctpgLHbCZrRbKOL6NJJX+W/r8vwrEM2lWrf0vBZ9wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAv90/5HkZo1+sdSgJjpJEUoteCUMB8GA1UdIwQY MBaAFPitVDYk+NMoHslwRY7nUvEKQkUpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LMVVOaVQ0MHlnZXlYQkZqdWRTOFFwQ1JTay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvYWYxZjY0LWMzNWYtNDdlOC04N2M5 LThhMTFiNDcxOWQ4Mi8xLzEtSzFVTmlUNDB5Z2V5WEJGanVkUzhRcENSU2subWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzIwL2FmMWY2NC1jMzVmLTQ3ZTgtODdjOS04YTExYjQ3MTlk ODIvMS8xLUsxVU5pVDQweWdleVhCRmp1ZFM4UXBDUlNrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm5bn 7ZRzVN2PIu8Ku/trdLvbfFGWmWbEhMtcxgpLtsYhYeVPnYl1Q/kAY2ex9s5Jx2z/ IiWK+FuQiUCVzRGR+qGBCNZkIZQbzQvJPoog/tCq1xqQM7ocrIKuglQwaCQRbjJy jDPFgNgiLNrh6bfcFNEUSRrJhjXuSYnH98U+n3mVoz+lVtYsgM2bQB8x/359Tjfo 1rW699EG1Nk/DgC6X+WkzL+y3nyvHFiwcP3T+rdxdPRTkEeDo3LYe87DO+i5ZVW4 7KhpY62rF41xVQtl4EKPlY2/Jdv0pVq0aprlAOJrlcliun8oRqhAPjA2/xD8FvB5 jxtomriZIi9cIF5mOg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:08:31 2025 by rpki-client