This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft File: 1AYg6l2vilSq6hfyy57N8114UwY.mft (raw, json) Hash identifier: Ps8S5NE4gGslNe75UoAAh1vpWv8DP46rgSGGrBVS9iU= Subject key identifier: 63:4D:2C:38:EC:93:DE:23:D7:9D:40:C0:3D:DB:B7:31:0C:3D:B9:C7 Authority key identifier: D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06 Certificate issuer: /CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306 Certificate serial: 019AF12CC283924AAC8E5685DE72741887E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft Manifest number: 1239 Signing time: Sat 06 Dec 2025 01:00:33 +0000 Manifest this update: Sat 06 Dec 2025 01:00:33 +0000 Manifest next update: Sun 07 Dec 2025 01:00:33 +0000 Files and hashes: 1: 1AYg6l2vilSq6hfyy57N8114UwY.crl (hash: CSGgoRl1t+MMrqQKNsyfWVXZnXGhtWjp/M5uMkrhtfY=) 2: gGx-x2iRamyRfnlhx5me1YxCw6s.roa (hash: JLnMtxeLdoGYGRa/pvkNkIdX/aY0zlXxd7zsjwME0tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.crl rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c2:83:92:4a:ac:8e:56:85:de:72:74:18:87:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306 Validity Not Before: Dec 6 01:00:33 2025 GMT Not After : Dec 7 01:00:33 2025 GMT Subject: CN=634d2c38ec93de23d79d40c03ddbb7310c3db9c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d7:a6:bd:79:71:81:a6:1a:72:52:bc:63:75: 6e:f1:ba:81:34:13:19:84:be:55:28:86:08:eb:eb: 78:95:b5:4b:52:9e:81:4b:bc:03:ac:42:52:1e:6f: 68:18:91:a4:df:82:7f:bf:cc:0b:b9:38:5c:00:bb: 75:97:f3:ea:bb:15:19:5b:5f:13:9e:32:e6:28:53: 8e:1b:24:b6:c2:74:6e:db:55:e3:6f:09:94:f3:ba: d0:db:68:0f:04:72:a1:7a:64:69:8a:45:31:f1:dc: a4:b6:bb:8c:1d:52:89:23:6c:a6:33:51:89:30:fd: 98:84:4c:de:71:f2:6a:51:1a:3c:da:ec:19:c5:0e: cb:d9:7a:0f:8f:a9:29:e5:ed:5f:7a:7f:2f:86:54: c6:93:9d:e3:37:43:e0:87:5d:ff:17:35:1a:1c:05: da:70:3b:4e:e5:37:7b:d2:45:89:5d:5f:ef:ed:7a: 7c:33:b3:58:f8:8f:84:68:21:7b:c0:00:8e:db:b7: aa:e6:0f:e2:d4:7d:59:c7:f5:fd:b7:d3:93:55:f7: 5c:8c:1c:41:8e:95:c4:a4:4a:bc:f6:c9:42:c9:cf: fb:5d:45:d5:42:49:ba:43:70:9f:b3:35:31:d5:8f: 91:f7:f8:ca:58:e0:2d:c5:c9:f3:08:d6:44:04:68: 6c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4D:2C:38:EC:93:DE:23:D7:9D:40:C0:3D:DB:B7:31:0C:3D:B9:C7 X509v3 Authority Key Identifier: keyid:D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:97:b3:8f:6b:4c:59:67:3a:cf:3d:e7:cb:1d:6c:26:48:29: 01:81:64:69:73:d6:68:da:13:08:47:a4:ad:e8:68:17:7d:07: 65:c4:ef:e7:01:62:a5:f5:c6:83:4a:66:5c:ca:4f:d9:22:73: 9a:d4:d1:c3:08:0a:07:23:0a:fe:9e:45:99:80:3f:0c:41:00: e8:e0:86:da:ca:ea:7c:62:99:aa:87:aa:fc:bc:a5:04:15:e7: 31:66:4b:89:1f:c1:4d:59:af:1f:06:57:39:ee:25:a7:a7:df: 01:0f:4b:fb:d9:09:20:24:d7:99:dc:9f:e4:52:1b:1f:d3:ff: b6:7d:73:2d:cc:05:e9:94:e8:93:94:b4:cb:89:4a:15:79:40: f4:88:3b:65:7b:9c:01:b1:d2:58:6d:d4:11:f6:69:cd:7b:24: 42:d4:67:e7:02:42:ae:cb:dc:6e:55:91:05:a3:6f:d2:d0:04: af:02:4d:84:8a:f0:85:5c:a6:5f:21:64:97:82:12:d2:f6:ab: fe:1a:83:e1:71:67:9b:1d:31:0d:1b:56:92:53:c1:de:e5:57: 0d:ca:51:57:fb:6f:26:e4:36:ca:eb:dc:79:b5:55:a7:4e:3f: 34:a6:e0:ad:af:a4:ff:70:46:e1:40:4e:28:8f:e5:e5:87:ad: 43:44:31:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMKDkkqsjlaF3nJ0GIfmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MDYyMGVhNWRhZjhhNTRhYWVhMTdmMmNiOWVjZGYzNWQ3 ODUzMDYwHhcNMjUxMjA2MDEwMDMzWhcNMjUxMjA3MDEwMDMzWjAzMTEwLwYDVQQD Eyg2MzRkMmMzOGVjOTNkZTIzZDc5ZDQwYzAzZGRiYjczMTBjM2RiOWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNemvXlxgaYaclK8Y3Vu8bqBNBMZ hL5VKIYI6+t4lbVLUp6BS7wDrEJSHm9oGJGk34J/v8wLuThcALt1l/PquxUZW18T njLmKFOOGyS2wnRu21XjbwmU87rQ22gPBHKhemRpikUx8dyktruMHVKJI2ymM1GJ MP2YhEzecfJqURo82uwZxQ7L2XoPj6kp5e1fen8vhlTGk53jN0Pgh13/FzUaHAXa cDtO5Td70kWJXV/v7Xp8M7NY+I+EaCF7wACO27eq5g/i1H1Zx/X9t9OTVfdcjBxB jpXEpEq89slCyc/7XUXVQkm6Q3CfszUx1Y+R9/jKWOAtxcnzCNZEBGhsbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNNLDjsk94j151AwD3btzEMPbnHMB8GA1UdIwQY MBaAFNQGIOpdr4pUquoX8suezfNdeFMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUFZZzZsMnZpbFNxNmhmeXk1N044MTE0VXdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi83OThmYzUtYjU0Yy00MWMxLThhZmUt ZjA5ZTQ2YzY5YmY4LzEvMUFZZzZsMnZpbFNxNmhmeXk1N044MTE0VXdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi83OThmYzUtYjU0Yy00MWMxLThhZmUtZjA5ZTQ2YzY5YmY4 LzEvMUFZZzZsMnZpbFNxNmhmeXk1N044MTE0VXdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF5ezj2tM WWc6zz3nyx1sJkgpAYFkaXPWaNoTCEekrehoF30HZcTv5wFipfXGg0pmXMpP2SJz mtTRwwgKByMK/p5FmYA/DEEA6OCG2srqfGKZqoeq/LylBBXnMWZLiR/BTVmvHwZX Oe4lp6ffAQ9L+9kJICTXmdyf5FIbH9P/tn1zLcwF6ZTok5S0y4lKFXlA9Ig7ZXuc AbHSWG3UEfZpzXskQtRn5wJCrsvcblWRBaNv0tAErwJNhIrwhVymXyFkl4IS0var /hqD4XFnmx0xDRtWklPB3uVXDcpRV/tvJuQ2yuvcebVVp04/NKbgra+k/3BG4UBO KI/l5YetQ0Qx8w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:17 2025 by rpki-client