This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft File: 1YzIUG_tu1Bh3pklsH1kmRihmSY.mft (raw, json) Hash identifier: Q6jfk0bG/W5RTiA/J+7OVRxSSO3OIqOm66n0FgTKWE8= Subject key identifier: 05:40:E7:EE:85:7F:C2:50:56:91:8C:94:DB:52:37:62:2B:5D:77:86 Authority key identifier: D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26 Certificate issuer: /CN=d58cc8506fedbb5061de9925b07d649918a19926 Certificate serial: 019AF208BAA48700EE2A85E6035A54D3F377 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft Manifest number: 1243 Signing time: Sat 06 Dec 2025 05:00:49 +0000 Manifest this update: Sat 06 Dec 2025 05:00:49 +0000 Manifest next update: Sun 07 Dec 2025 05:00:49 +0000 Files and hashes: 1: 1YzIUG_tu1Bh3pklsH1kmRihmSY.crl (hash: XgJwGeTptfU6gljTKOKARlhC2DvEq48M/cgHHKS6Z+I=) 2: DniqmtindUam8vj_sVzvh8icBDA.roa (hash: ta5Hj3U5JYOoiYd4yiO8g7IzMIhuCaznIwtfzYiosBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ba:a4:87:00:ee:2a:85:e6:03:5a:54:d3:f3:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58cc8506fedbb5061de9925b07d649918a19926 Validity Not Before: Dec 6 05:00:49 2025 GMT Not After : Dec 7 05:00:49 2025 GMT Subject: CN=0540e7ee857fc25056918c94db5237622b5d7786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f1:0b:20:89:c3:97:3c:5d:f0:bf:ef:cd:aa: e8:86:c2:a5:f4:e6:3a:1f:4f:1c:24:e6:66:1f:88: 99:00:2c:ad:6e:da:3d:bd:70:a5:f8:4d:a8:6a:61: ab:6d:be:11:2b:10:0f:9d:0b:36:46:75:4d:20:29: 77:ea:8b:53:3b:4d:5d:ef:72:be:9c:3e:0e:8c:e9: 8c:19:bd:ad:85:4f:f5:09:e5:86:ad:b7:86:2b:d3: 04:77:63:f6:02:e1:f4:f5:ed:3d:7f:fc:7a:3b:5f: c6:3a:fc:8b:e5:45:8c:f1:e1:3f:a0:21:00:a7:a5: 17:4c:81:c2:db:24:6a:81:c3:b8:12:25:b8:98:85: 37:f4:6c:82:bc:79:20:08:45:e1:29:ab:81:3d:ac: 2e:3d:8c:4f:94:ba:fc:f4:95:2e:66:6a:c2:91:ed: e1:b6:73:f3:89:60:33:aa:ac:3b:8f:02:33:47:17: 48:05:0c:7d:c1:5b:b6:28:2c:fb:96:9a:29:ae:40: 4b:37:71:de:07:6a:61:c4:01:e8:e1:e3:47:32:4a: 2d:9d:f1:aa:20:62:6b:0f:3a:c0:65:27:14:3c:13: 96:76:26:56:4a:53:f5:21:4a:3b:62:b7:53:fc:d6: 20:b8:f3:84:33:5b:06:55:c8:98:68:e0:8d:a8:1c: d6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:40:E7:EE:85:7F:C2:50:56:91:8C:94:DB:52:37:62:2B:5D:77:86 X509v3 Authority Key Identifier: keyid:D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:a5:01:a8:b8:f4:ef:55:50:af:be:4f:f7:ef:56:29:66:68: 1d:5c:d1:0f:01:b2:b4:74:07:ca:d6:42:71:8a:56:ac:f3:9d: 86:dd:ee:43:3f:8f:d1:78:ca:f2:15:95:5e:5c:d9:15:e7:28: dc:ac:89:90:28:49:30:15:ba:76:ae:a7:e1:2c:ad:ff:30:2a: 81:9c:8f:be:dd:75:67:22:a5:78:c6:76:44:6f:86:e5:12:ca: 82:2c:0b:73:ea:f1:13:96:4d:e5:47:4c:ab:e6:a7:b9:e8:9d: 7b:a7:07:8e:b7:bd:e6:77:14:b8:57:93:05:e3:2d:13:cd:9c: 49:cc:59:8a:d5:8b:26:34:ba:7b:35:00:6c:41:79:b9:39:e4: 24:72:02:1b:08:fe:5a:f2:d9:3e:64:cc:e0:aa:0e:73:e8:23: 7d:81:90:8d:3d:4e:6c:87:38:f4:20:15:9d:5b:1a:8e:15:80: 84:c8:00:76:ea:1f:60:79:b9:f8:36:bd:7c:e3:50:f0:0f:92: 40:39:45:80:83:48:01:7f:0a:65:55:cb:21:74:0f:bf:b9:d1: 85:8d:65:fd:08:da:ad:db:9a:ec:6a:95:47:c5:6b:4e:68:de: 1a:1a:1b:67:db:3f:17:1f:f1:bd:1b:dd:82:72:a6:0a:9b:f3: c8:81:d8:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLqkhwDuKoXmA1pU0/N3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1OGNjODUwNmZlZGJiNTA2MWRlOTkyNWIwN2Q2NDk5MThh MTk5MjYwHhcNMjUxMjA2MDUwMDQ5WhcNMjUxMjA3MDUwMDQ5WjAzMTEwLwYDVQQD EygwNTQwZTdlZTg1N2ZjMjUwNTY5MThjOTRkYjUyMzc2MjJiNWQ3Nzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fELIInDlzxd8L/vzarohsKl9OY6 H08cJOZmH4iZACytbto9vXCl+E2oamGrbb4RKxAPnQs2RnVNICl36otTO01d73K+ nD4OjOmMGb2thU/1CeWGrbeGK9MEd2P2AuH09e09f/x6O1/GOvyL5UWM8eE/oCEA p6UXTIHC2yRqgcO4EiW4mIU39GyCvHkgCEXhKauBPawuPYxPlLr89JUuZmrCke3h tnPziWAzqqw7jwIzRxdIBQx9wVu2KCz7lpoprkBLN3HeB2phxAHo4eNHMkotnfGq IGJrDzrAZScUPBOWdiZWSlP1IUo7YrdT/NYguPOEM1sGVciYaOCNqBzW0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVA5+6Ff8JQVpGMlNtSN2IrXXeGMB8GA1UdIwQY MBaAFNWMyFBv7btQYd6ZJbB9ZJkYoZkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVl6SVVHX3R1MUJoM3BrbHNIMWttUmlobVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy80NmVmYjUtYzllNy00ZjA4LWJjNmEt YmIzZTgxOWYzZGRjLzEvMVl6SVVHX3R1MUJoM3BrbHNIMWttUmlobVNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy80NmVmYjUtYzllNy00ZjA4LWJjNmEtYmIzZTgxOWYzZGRj LzEvMVl6SVVHX3R1MUJoM3BrbHNIMWttUmlobVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqqUBqLj0 71VQr75P9+9WKWZoHVzRDwGytHQHytZCcYpWrPOdht3uQz+P0XjK8hWVXlzZFeco 3KyJkChJMBW6dq6n4Syt/zAqgZyPvt11ZyKleMZ2RG+G5RLKgiwLc+rxE5ZN5UdM q+anueide6cHjre95ncUuFeTBeMtE82cScxZitWLJjS6ezUAbEF5uTnkJHICGwj+ WvLZPmTM4KoOc+gjfYGQjT1ObIc49CAVnVsajhWAhMgAduofYHm5+Da9fONQ8A+S QDlFgINIAX8KZVXLIXQPv7nRhY1l/Qjardua7GqVR8VrTmjeGhobZ9s/Fx/xvRvd gnKmCpvzyIHYcA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:39:51 2025 by rpki-client