This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft File: 1-U3y-PWhPGRTaJFOPb5Coko22l0.mft (raw, json) Hash identifier: e3Yp8QuMV4tBJfsHM/TpFW1ey9u4ACg83dbzxU0SLIY= Subject key identifier: EF:28:20:95:EE:6F:E6:6B:EA:70:FD:48:04:E1:5E:E4:1B:5E:82:B2 Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D Certificate issuer: /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d Certificate serial: 019B39EAD059E38B869621A49F7B2C268DD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft Manifest number: 09D5 Signing time: Sat 20 Dec 2025 04:00:48 +0000 Manifest this update: Sat 20 Dec 2025 04:00:48 +0000 Manifest next update: Sun 21 Dec 2025 04:00:48 +0000 Files and hashes: 1: 1-U3y-PWhPGRTaJFOPb5Coko22l0.crl (hash: 1gLw3M5GqFwRqZXNboDEI1dohjrU+v5uqogENavZL8M=) 2: 6ZlUqBOWy6SfY78F6eyD54lMPAY.roa (hash: SE9+hxx8Z232AXhES9ATqyXkhpq/sJNlQEl+ue1Fkso=) 3: bxOTocJnEMQaZpcfRu6SqZ9nVWk.roa (hash: 24LpjnsSFmDuGUExqtfPTVWojNEGWlT3a13WwNuUa60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:d0:59:e3:8b:86:96:21:a4:9f:7b:2c:26:8d:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d Validity Not Before: Dec 20 04:00:48 2025 GMT Not After : Dec 21 04:00:48 2025 GMT Subject: CN=ef282095ee6fe66bea70fd4804e15ee41b5e82b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3c:e3:27:77:f3:2d:ac:79:d1:a1:ca:6d:29: 82:5b:a0:e2:4b:d5:67:fb:c9:09:59:12:a8:2c:3a: 18:83:a2:ed:c2:65:0e:da:d3:cb:9c:5f:d8:71:46: 49:fc:c7:c9:e7:62:f5:41:42:ef:46:1d:4c:98:85: 0b:fe:53:b5:c2:37:ac:d9:84:7f:84:f7:52:71:89: c0:b8:38:3c:9b:45:f5:12:2c:fc:28:7c:40:17:5b: 8c:94:c3:35:7f:64:bb:88:3e:4d:7f:0b:40:49:e1: d9:eb:73:df:2d:6b:01:e0:7e:45:56:6b:a6:3d:06: a0:5b:7b:f6:30:ec:2a:0d:60:e0:7a:b1:c9:d4:5b: 24:17:22:3f:2a:6e:b3:90:4f:30:bf:6f:96:2e:06: 00:56:7e:0d:1b:55:a4:7a:9b:91:1d:f7:3c:13:9d: 52:78:18:3e:bc:f6:46:a8:02:18:0d:f7:57:d3:9d: 2e:a0:c2:00:45:c3:bf:43:ff:90:b8:ed:57:e2:ab: 24:e9:e5:1c:70:ef:41:b5:af:65:2d:a5:43:07:c3: 1e:82:8c:34:6b:70:ca:93:6b:f1:bf:ae:82:89:58: 70:ed:8b:bb:bf:c3:48:21:97:88:df:dc:52:6f:1b: 0e:b0:01:6f:0b:e9:8a:a1:93:60:2e:d3:e1:09:eb: 29:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:28:20:95:EE:6F:E6:6B:EA:70:FD:48:04:E1:5E:E4:1B:5E:82:B2 X509v3 Authority Key Identifier: keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:7e:59:70:a9:e8:6b:13:44:5d:d2:e9:9d:de:79:81:59:b7: 46:c0:e0:af:8f:03:bd:53:a0:d5:06:dd:54:ba:92:e6:61:8a: 71:8e:32:f3:5a:04:57:e3:4c:dc:1b:fc:85:df:9d:bd:5e:28: c6:1b:83:52:51:0b:29:39:f3:62:22:b0:c4:a4:1b:ab:ff:cf: 76:85:85:a7:9d:04:f6:75:d7:1b:cf:c3:45:f8:23:31:44:2b: ce:d8:d5:45:fb:5c:46:93:0d:cf:f3:c9:11:97:0b:bc:bb:c1: 06:72:72:50:a5:1d:95:1a:47:2c:39:c8:8f:ee:83:d5:91:af: 58:45:29:ea:9e:0e:94:5b:bf:90:db:6a:24:00:f9:eb:e2:6a: 00:02:83:8c:5d:e1:45:a4:47:94:79:ac:34:44:5c:af:70:fa: 12:1a:19:03:8c:62:35:a9:eb:75:81:93:9f:b4:48:0b:c9:79: 86:2b:16:b4:92:60:0a:e9:4c:d5:d1:09:75:7c:1e:d9:66:64: 7d:f8:ae:5b:d7:72:03:37:38:53:d2:be:a8:42:15:36:c8:59: 76:c7:32:8b:a6:42:73:56:03:f9:6e:dd:94:cd:69:6f:b4:08: 70:aa:7e:ba:82:15:e0:7d:42:c2:b2:74:b8:f6:68:8d:17:68: 2a:15:ee:96 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs56tBZ44uGliGkn3ssJo3VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NGRmMmY4ZjVhMTNjNjQ1MzY4OTE0ZTNkYmU0MmEyNGEz NmRhNWQwHhcNMjUxMjIwMDQwMDQ4WhcNMjUxMjIxMDQwMDQ4WjAzMTEwLwYDVQQD EyhlZjI4MjA5NWVlNmZlNjZiZWE3MGZkNDgwNGUxNWVlNDFiNWU4MmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzzjJ3fzLax50aHKbSmCW6DiS9Vn +8kJWRKoLDoYg6LtwmUO2tPLnF/YcUZJ/MfJ52L1QULvRh1MmIUL/lO1wjes2YR/ hPdScYnAuDg8m0X1Eiz8KHxAF1uMlMM1f2S7iD5NfwtASeHZ63PfLWsB4H5FVmum PQagW3v2MOwqDWDgerHJ1FskFyI/Km6zkE8wv2+WLgYAVn4NG1WkepuRHfc8E51S eBg+vPZGqAIYDfdX050uoMIARcO/Q/+QuO1X4qsk6eUccO9Bta9lLaVDB8Megow0 a3DKk2vxv66CiVhw7Yu7v8NIIZeI39xSbxsOsAFvC+mKoZNgLtPhCespMQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFO8oIJXub+Zr6nD9SAThXuQbXoKyMB8GA1UdIwQY MBaAFPlN8vj1oTxkU2iRTj2+QqJKNtpdMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1VM3ktUFdoUEdSVGFKRk9QYjVDb2tvMjJsMC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvZmQ4MDc0LTIyM2EtNGI1Mi1iZWRk LTY2YmRmZmE4YmRjMS8xLzEtVTN5LVBXaFBHUlRhSkZPUGI1Q29rbzIybDAubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzJiL2ZkODA3NC0yMjNhLTRiNTItYmVkZC02NmJkZmZhOGJk YzEvMS8xLVUzeS1QV2hQR1JUYUpGT1BiNUNva28yMmwwLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn35Z cKnoaxNEXdLpnd55gVm3RsDgr48DvVOg1QbdVLqS5mGKcY4y81oEV+NM3Bv8hd+d vV4oxhuDUlELKTnzYiKwxKQbq//PdoWFp50E9nXXG8/DRfgjMUQrztjVRftcRpMN z/PJEZcLvLvBBnJyUKUdlRpHLDnIj+6D1ZGvWEUp6p4OlFu/kNtqJAD56+JqAAKD jF3hRaRHlHmsNERcr3D6EhoZA4xiNanrdYGTn7RIC8l5hisWtJJgCulM1dEJdXwe 2WZkffiuW9dyAzc4U9K+qEIVNshZdscyi6ZCc1YD+W7dlM1pb7QIcKp+uoIV4H1C wrJ0uPZojRdoKhXulg== -----END CERTIFICATE-----Generated at Sat Dec 20 11:26:16 2025 by rpki-client