This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft File: 1YghK_XazhCA3EXixVuS_4XGwZI.mft (raw, json) Hash identifier: abwYbcCoYhOq2AFKV0ogxswSr9WZqur7+xFlW2cW86Q= Subject key identifier: 3E:17:AC:7B:59:BC:1E:44:80:C1:01:2A:BE:6C:03:DE:1D:0B:FC:7E Authority key identifier: D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92 Certificate issuer: /CN=d588212bf5dace1080dc45e2c55b92ff85c6c192 Certificate serial: 019AF12DE25E7FD06B5873EA2D2063A304C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft Manifest number: 036B Signing time: Sat 06 Dec 2025 01:01:47 +0000 Manifest this update: Sat 06 Dec 2025 01:01:47 +0000 Manifest next update: Sun 07 Dec 2025 01:01:47 +0000 Files and hashes: 1: 0pHcVGxKroxOni6LgFtqt0banSw.roa (hash: Q40CZpsU0+RiU4O4YQFtbp1L/7Yepswrm+UiOB95fSM=) 2: 1YghK_XazhCA3EXixVuS_4XGwZI.crl (hash: cYTTP/pkgQFh0Fn0ZT6KV846MI9XK77DCbCIH7RSoqw=) 3: 26q3cQXk1JIbUGq9qjqXDYQ7nXU.roa (hash: GrMn4526qMwkAR8eWiH8KdtkWVvMHZrGjP3wqdNDQ50=) 4: 5O6iyLYqjxgK3EFjvB7TPec4vNc.roa (hash: +zN5xcfrGyrSvPX2aPdQntXT/Zvfyz7ULplVdMhrq7w=) 5: BnL626pcSJW84hvMFQ1G4Qrz04U.roa (hash: 3us+txzDTK3Uzjb5+hEvvCFMUnMHD1ygkmUal1BKvv4=) 6: DJsHawN4UfC7y3M-cvB8yQD8M34.roa (hash: 7erERMTFq4HfOI3TzB2K6MSVRmBE9HH5uCjfWAVLlJk=) 7: QjojGFow0Vpe3_AWaTD7e7dWICs.roa (hash: azKbcXaFk37HPIXqgZTrsiA6Aj4W7zGHRG5fz7k2ea4=) 8: XcKo7ctmpUBqVfx0JPs9RsSZGCs.roa (hash: 1T8ZHVnMW4fbGLyFMTAkhaxOama9czmojEH2rCd/x6I=) 9: Y6_ZV6NF7RoiWmbFLBxE7pMgIPU.roa (hash: ZuhCYbtUpHTYiqCVZqHt+pgHRUwBZmO0POksb2R5n14=) 10: g31y-rKLvjosua_ERt6smuGZVHc.roa (hash: Hy8hOW+cMn+xBbfHloAf3HNQIZw1e0uLWvV6liqhbxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:e2:5e:7f:d0:6b:58:73:ea:2d:20:63:a3:04:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d588212bf5dace1080dc45e2c55b92ff85c6c192 Validity Not Before: Dec 6 01:01:47 2025 GMT Not After : Dec 7 01:01:47 2025 GMT Subject: CN=3e17ac7b59bc1e4480c1012abe6c03de1d0bfc7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:77:da:20:f8:1c:e2:49:68:cf:af:67:8d:54: 3a:87:ae:28:d5:7a:f6:b8:5c:6f:cf:3b:5e:da:72: 22:73:5f:67:90:9c:c7:a4:8a:fd:8d:cb:4d:84:d4: 0e:5c:e7:e0:40:ad:61:b6:aa:0f:6e:2d:cf:00:76: 87:c0:f6:83:ad:ff:bf:12:e4:7e:d5:5c:b8:5d:13: 45:6d:4a:62:01:57:7d:13:46:d1:73:74:84:8d:56: 10:51:9f:82:4c:b9:52:ec:eb:5c:dd:ea:34:df:ab: 5d:6a:85:2d:af:cc:cd:e3:cd:e4:c0:0f:7a:78:98: da:8e:58:16:5b:03:a1:25:da:32:3d:28:27:ab:3c: 54:04:e2:9d:fe:8a:88:d2:9e:47:06:71:5d:54:78: dd:ba:20:fa:b4:31:6c:3c:ff:8e:d5:48:25:7a:51: ed:3d:9d:70:d1:dc:6d:62:51:90:11:71:48:cf:84: c4:e1:8e:89:25:52:cc:c0:b2:02:1d:e3:3f:75:7b: 83:36:65:04:88:68:3c:92:2b:e6:88:28:f5:15:b8: 2a:8f:72:e8:12:2f:62:1f:7e:96:94:0f:6f:63:26: e5:e0:f2:fb:7e:91:89:97:77:e3:02:7f:08:53:64: b5:1f:b9:aa:e8:b8:81:fa:00:ad:85:e7:df:2b:5d: a8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:17:AC:7B:59:BC:1E:44:80:C1:01:2A:BE:6C:03:DE:1D:0B:FC:7E X509v3 Authority Key Identifier: keyid:D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e7:61:af:2d:6a:51:e6:cf:f9:9d:06:13:30:32:d0:69:40:a1: d8:d2:22:15:90:a0:7f:b9:e4:f6:75:26:7b:fc:b7:8c:dd:43: cf:47:10:98:d4:5e:ba:a2:1b:78:a3:a0:20:4e:c1:a9:d0:a2: 3d:54:65:da:82:01:fd:f3:d6:2c:f6:1e:fe:68:85:57:70:31: fa:e4:7f:1c:95:26:94:1a:17:88:35:c4:c7:82:18:50:54:37: f8:c7:02:3b:81:8b:6f:2c:7b:b8:0c:22:82:39:7a:db:c9:f4: db:10:f7:9d:73:a1:87:45:af:b0:f9:12:76:34:a9:90:d6:1a: 5e:89:7f:d2:e5:9e:c4:a8:e3:55:c8:df:b2:71:e3:58:48:f0: 0a:c3:c2:02:e7:9d:42:9e:a6:f7:d5:3c:7a:81:45:0f:b3:27: 82:ea:84:96:0d:8d:5f:d6:40:d0:3e:24:96:6a:54:fc:05:d0: 88:dd:83:79:b5:1a:c3:a2:12:de:c2:69:c5:82:a4:90:32:16: 08:37:23:73:b8:65:cd:c2:4f:81:07:dd:8b:d7:b4:0d:af:df: 0b:34:25:4d:76:cf:56:f1:bf:2a:83:32:59:59:90:e7:1c:b9: cb:25:9b:61:ca:4f:81:1c:e5:0b:73:44:bf:c4:b9:2d:79:69: 97:58:39:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLeJef9BrWHPqLSBjowTAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ODgyMTJiZjVkYWNlMTA4MGRjNDVlMmM1NWI5MmZmODVj NmMxOTIwHhcNMjUxMjA2MDEwMTQ3WhcNMjUxMjA3MDEwMTQ3WjAzMTEwLwYDVQQD EygzZTE3YWM3YjU5YmMxZTQ0ODBjMTAxMmFiZTZjMDNkZTFkMGJmYzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXfaIPgc4kloz69njVQ6h64o1Xr2 uFxvzzte2nIic19nkJzHpIr9jctNhNQOXOfgQK1htqoPbi3PAHaHwPaDrf+/EuR+ 1Vy4XRNFbUpiAVd9E0bRc3SEjVYQUZ+CTLlS7Otc3eo036tdaoUtr8zN483kwA96 eJjajlgWWwOhJdoyPSgnqzxUBOKd/oqI0p5HBnFdVHjduiD6tDFsPP+O1UglelHt PZ1w0dxtYlGQEXFIz4TE4Y6JJVLMwLICHeM/dXuDNmUEiGg8kivmiCj1Fbgqj3Lo Ei9iH36WlA9vYybl4PL7fpGJl3fjAn8IU2S1H7mq6LiB+gCtheffK12oNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4XrHtZvB5EgMEBKr5sA94dC/x+MB8GA1UdIwQY MBaAFNWIISv12s4QgNxF4sVbkv+FxsGSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8yMTEzNTQtZWJlNC00Nzk3LTk4ZjMt MWIyYWMzNWMwOWFhLzEvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8yMTEzNTQtZWJlNC00Nzk3LTk4ZjMtMWIyYWMzNWMwOWFh LzEvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA52GvLWpR 5s/5nQYTMDLQaUCh2NIiFZCgf7nk9nUme/y3jN1Dz0cQmNReuqIbeKOgIE7BqdCi PVRl2oIB/fPWLPYe/miFV3Ax+uR/HJUmlBoXiDXEx4IYUFQ3+McCO4GLbyx7uAwi gjl628n02xD3nXOhh0WvsPkSdjSpkNYaXol/0uWexKjjVcjfsnHjWEjwCsPCAued Qp6m99U8eoFFD7MnguqElg2NX9ZA0D4klmpU/AXQiN2DebUaw6IS3sJpxYKkkDIW CDcjc7hlzcJPgQfdi9e0Da/fCzQlTXbPVvG/KoMyWVmQ5xy5yyWbYcpPgRzlC3NE v8S5LXlpl1g5/A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:47:11 2025 by rpki-client