This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft File: 1-YoC0gxrfeNXEl84sXNcobkfh7M.mft (raw, json) Hash identifier: cmZd53Eq82KJa5MK4nFlHl4hqxnNPvysHeGDhINnSqU= Subject key identifier: C5:BA:31:88:EF:BA:BC:48:29:AA:33:20:3A:CC:E8:6B:CB:B7:6E:9D Authority key identifier: F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3 Certificate issuer: /CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3 Certificate serial: 019AF2E443AE876EC78B26ECC1478E9DA396 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft Manifest number: 1540 Signing time: Sat 06 Dec 2025 09:00:37 +0000 Manifest this update: Sat 06 Dec 2025 09:00:37 +0000 Manifest next update: Sun 07 Dec 2025 09:00:37 +0000 Files and hashes: 1: 1-YoC0gxrfeNXEl84sXNcobkfh7M.crl (hash: JBbcTRZH/TqWRV2MeUIvdRbJUTck7EWAPycbPXBFAz4=) 2: KOw7xMKHlQCXW_5gRyvKjG3BAa4.roa (hash: lL3/S+AcvkiAqiXw9PyhHyyK0CE6Zf/JEzIe2/vsusg=) 3: NleaA2dNW39O_bLmPG6btbUsU3Y.roa (hash: sf3a501O0GUvM+JaIfyUft8SNLFrIk6yXA4pjHEA8yc=) 4: VXuZkRLoEcdAW1J7RtAxdgrcSzo.roa (hash: dJX4lpj20W+7pafsIHml8SOFrK8bjcSrzM7WjN8BZk8=) 5: hlJjKHJFeD3j4Nr8Kn0Ft2J4O1E.roa (hash: Fv/393RUKDmiuBI9kyyedtNaYIDs37je0cMv9FMaRSg=) 6: zTw4UgDwTum-l_h9WbH_dREg6CQ.roa (hash: b7idLBgnKlFBdz/jKpa7Hm7iiMdE241Sp7LHy9Qhpzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:43:ae:87:6e:c7:8b:26:ec:c1:47:8e:9d:a3:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3 Validity Not Before: Dec 6 09:00:37 2025 GMT Not After : Dec 7 09:00:37 2025 GMT Subject: CN=c5ba3188efbabc4829aa33203acce86bcbb76e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5a:13:88:b6:3f:a1:5e:74:95:97:16:46:21: 68:e8:85:91:0c:dc:63:5b:c6:cb:f8:39:e5:73:32: fd:4f:fb:ff:5e:c4:3c:08:f7:f1:c5:c7:76:8c:71: 72:18:65:5f:e7:67:e6:a0:df:39:d3:63:b4:15:c6: e3:5e:7d:29:57:3b:95:d5:84:c2:3b:b1:21:bd:b6: a9:c7:11:31:e9:c2:93:ba:0e:24:a6:ca:56:b8:ff: e6:4c:cc:09:75:78:a6:43:97:5f:fe:b0:dc:05:80: 12:72:71:da:f2:49:be:50:2e:0b:f3:2c:60:68:bd: e3:19:6d:8a:e1:29:d4:e3:8c:9b:fe:0f:de:1b:5f: 1e:82:be:2b:84:cb:92:69:28:54:69:aa:af:5e:40: 64:87:bb:ce:70:a4:c8:37:b3:c1:62:99:bd:93:52: 07:8a:43:d9:48:61:ed:af:1d:a3:b2:d6:62:67:d8: b1:20:d3:7c:43:7e:0c:d3:6f:72:22:7f:61:bd:4c: 0d:97:4b:6b:b7:56:5e:11:0e:32:9d:62:c3:cc:41: 54:9b:7d:4c:4a:a7:e5:5a:70:ca:ac:be:2c:2e:ba: dc:a6:62:55:12:54:51:99:b7:94:8d:d0:84:73:7d: 53:e0:20:62:a3:42:12:8f:ca:65:06:76:31:66:1b: f2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:BA:31:88:EF:BA:BC:48:29:AA:33:20:3A:CC:E8:6B:CB:B7:6E:9D X509v3 Authority Key Identifier: keyid:F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:81:f6:2c:86:c6:3d:2b:76:76:02:0e:4a:77:00:68:b9:1d: e6:8a:bc:f5:37:82:32:ef:15:e6:8f:be:45:a0:53:5d:21:85: 58:52:21:78:2c:2c:1d:7c:4e:10:b8:16:57:60:55:27:9d:e0: 69:2f:fa:bb:9f:51:d6:62:cf:18:e9:ca:e3:c1:57:a9:3d:97: 19:d1:c0:d0:ab:52:66:61:93:8d:3c:83:56:dd:60:71:19:c9: e6:e5:95:52:b4:09:48:72:77:37:8b:0b:7b:b6:90:28:ca:e2: e7:04:8b:3e:bc:78:92:97:ae:91:ec:a2:6c:c4:f2:1d:64:0b: 1e:50:be:43:e4:44:7f:3d:9c:e2:8b:8c:88:99:25:03:b2:12: e3:f8:81:8e:58:ae:ee:38:ab:db:d2:05:32:9d:98:74:e5:cf: b1:a0:b5:10:c8:c1:22:d9:d7:3d:2d:18:7e:d1:61:78:1a:54: 19:ae:43:cf:39:84:8b:59:b8:f8:a2:9d:49:ea:57:fa:64:cc: 13:3b:4d:50:8d:8d:b4:45:30:32:ad:89:e0:f5:c3:c1:61:ee: 7b:5e:de:c5:89:12:b2:f1:7b:2b:8e:52:3b:87:9f:f1:10:17: 31:2b:9c:ae:5f:1e:8e:b8:31:c5:34:46:ca:d4:18:3d:92:4c: c7:aa:92:1e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZry5EOuh27HiybswUeOnaOWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5OGEwMmQyMGM2YjdkZTM1NzEyNWYzOGIxNzM1Y2ExYjkx Zjg3YjMwHhcNMjUxMjA2MDkwMDM3WhcNMjUxMjA3MDkwMDM3WjAzMTEwLwYDVQQD EyhjNWJhMzE4OGVmYmFiYzQ4MjlhYTMzMjAzYWNjZTg2YmNiYjc2ZTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuloTiLY/oV50lZcWRiFo6IWRDNxj W8bL+DnlczL9T/v/XsQ8CPfxxcd2jHFyGGVf52fmoN8502O0FcbjXn0pVzuV1YTC O7EhvbapxxEx6cKTug4kpspWuP/mTMwJdXimQ5df/rDcBYAScnHa8km+UC4L8yxg aL3jGW2K4SnU44yb/g/eG18egr4rhMuSaShUaaqvXkBkh7vOcKTIN7PBYpm9k1IH ikPZSGHtrx2jstZiZ9ixINN8Q34M029yIn9hvUwNl0trt1ZeEQ4ynWLDzEFUm31M SqflWnDKrL4sLrrcpmJVElRRmbeUjdCEc31T4CBio0ISj8plBnYxZhvyOwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMW6MYjvurxIKaozIDrM6GvLt26dMB8GA1UdIwQY MBaAFPmKAtIMa33jVxJfOLFzXKG5H4ezMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Zb0MwZ3hyZmVOWEVsODRzWE5jb2JrZmg3TS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvYTkyMDZlLWMxZTEtNGMxNS05NTMz LWFjZTNkNjc1ZDNjZC8xLzEtWW9DMGd4cmZlTlhFbDg0c1hOY29ia2ZoN00ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzdiL2E5MjA2ZS1jMWUxLTRjMTUtOTUzMy1hY2UzZDY3NWQz Y2QvMS8xLVlvQzBneHJmZU5YRWw4NHNYTmNvYmtmaDdNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYH2 LIbGPSt2dgIOSncAaLkd5oq89TeCMu8V5o++RaBTXSGFWFIheCwsHXxOELgWV2BV J53gaS/6u59R1mLPGOnK48FXqT2XGdHA0KtSZmGTjTyDVt1gcRnJ5uWVUrQJSHJ3 N4sLe7aQKMri5wSLPrx4kpeukeyibMTyHWQLHlC+Q+REfz2c4ouMiJklA7IS4/iB jliu7jir29IFMp2YdOXPsaC1EMjBItnXPS0YftFheBpUGa5DzzmEi1m4+KKdSepX +mTMEztNUI2NtEUwMq2J4PXDwWHue17exYkSsvF7K45SO4ef8RAXMSucrl8ejrgx xTRGytQYPZJMx6qSHg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:41:39 2025 by rpki-client