This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft File: 1-yNrIT1WST87B35rQfQuTz34zc4.mft (raw, json) Hash identifier: dQYWc/qRPZm/fzFr4BYqwGhc1vKEUis/gcahWVhkH9k= Subject key identifier: D0:94:3E:F9:C0:3E:41:EB:70:72:CD:FA:87:74:BD:E1:4A:23:51:A3 Authority key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE Certificate issuer: /CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce Certificate serial: 019AF19AA00BFD2896DB42D53F643F28E91A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft Manifest number: 11F1 Signing time: Sat 06 Dec 2025 03:00:33 +0000 Manifest this update: Sat 06 Dec 2025 03:00:33 +0000 Manifest next update: Sun 07 Dec 2025 03:00:33 +0000 Files and hashes: 1: 1-yNrIT1WST87B35rQfQuTz34zc4.crl (hash: iXYI2Isk0FwO3BwICDqDD0BE7lzYYRCQA5DiHBL1Th4=) 2: 3wVT7ByFOgSRbNZYozrG_4k5Lf4.roa (hash: nWjMCvThnl/TirQoWGzb1aGz9gls9gsUGL9UH7UK99U=) 3: b4xGcgRXbZTm92PK-63-hJMR7i4.roa (hash: NbuD2qXzwa42L7iqCKP9Yf7x1Mko0nN5lZkpDNpT+YA=) 4: eBGWGs2DIykcACC-Vm8Am4_ZkLo.roa (hash: M61tw2NaptcB9SBNpEgNYdj/+3K2KnHR73k/O/VkAl4=) 5: qX47TfZ7U-VCDd8K_2PnZDbaW7U.roa (hash: AWzPY4ofax8Hh97c3nb596ilyxymid/EIQcHBQfpPr4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a0:0b:fd:28:96:db:42:d5:3f:64:3f:28:e9:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce Validity Not Before: Dec 6 03:00:33 2025 GMT Not After : Dec 7 03:00:33 2025 GMT Subject: CN=d0943ef9c03e41eb7072cdfa8774bde14a2351a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:de:09:59:84:88:92:1c:bd:a6:09:b6:4d:21: 2e:91:a7:2f:8f:61:5a:8b:a6:6e:eb:42:80:c6:4d: dd:16:07:d6:fd:37:44:7f:8c:07:57:99:7e:89:de: 9f:fe:2b:da:4e:ea:a0:34:8b:64:e6:a1:fe:ad:05: 83:1e:11:4a:8f:19:3a:cc:bb:4a:31:6d:c0:4a:e8: 6a:71:84:5e:d6:b8:07:8d:d5:28:e9:62:72:72:a6: 39:e4:ba:34:f5:0f:29:6c:25:64:87:6f:a4:5d:bc: b3:97:16:83:83:50:b6:dc:8e:58:80:ad:1b:01:c7: 08:e8:eb:60:09:6e:c1:ac:33:71:c0:7c:a8:f5:ac: 61:59:62:d2:37:1c:dd:d1:cb:a9:7c:39:66:e2:a8: 74:be:9a:ec:97:0b:f6:8c:31:39:87:5a:6d:6b:af: 41:96:c6:9b:f9:16:ce:b9:0d:68:84:f0:55:09:0e: 13:d2:a9:25:75:4a:23:ed:e7:f4:8b:e1:c3:1a:02: 7b:4b:3f:89:7a:d9:61:92:5a:f4:e8:0e:66:4e:bd: 22:e5:70:d3:2b:e2:d8:c1:54:a4:ac:35:62:ba:03: 4c:82:19:43:c0:1e:61:41:02:72:de:89:a0:1a:27: fe:22:00:65:72:91:48:65:ef:69:37:9a:88:fb:fc: db:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:94:3E:F9:C0:3E:41:EB:70:72:CD:FA:87:74:BD:E1:4A:23:51:A3 X509v3 Authority Key Identifier: keyid:FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:20:ed:27:14:5c:b4:3e:c8:40:ac:9e:aa:e6:07:16:53:f1: 46:ad:93:4d:45:c0:d5:e3:29:73:61:de:70:09:d1:5e:90:39: 28:31:dc:06:ed:f9:76:39:74:0c:47:e3:ec:3f:90:cc:fa:b4: 75:62:14:0a:59:a4:a3:9d:cb:90:7a:7f:2d:ba:43:6a:01:08: 49:b3:7a:3c:2c:6b:6c:1d:bc:22:66:1c:08:a4:4e:70:f2:34: 88:7e:3d:f9:54:d4:21:fd:da:6f:e1:07:18:7c:fb:77:85:5e: 3b:6e:27:97:a1:b6:c4:7a:49:87:e7:22:14:1d:d0:e6:aa:3b: 53:6f:62:d0:6f:1a:df:7a:54:c8:8b:0b:b1:8c:b0:bd:21:ea: 49:ac:28:a0:f5:12:23:61:75:35:6d:bc:4c:14:60:2f:34:b4: 29:3d:79:4c:62:f2:55:58:1a:c9:e2:46:1f:65:69:51:01:98: 23:e5:84:3c:45:2f:0c:f1:cb:91:b0:cd:f9:e2:c1:98:dc:f5: 38:67:4a:53:61:17:8a:bc:16:4b:57:b8:ac:e7:b0:9b:39:04: 16:84:1f:3a:e7:18:8f:ef:24:a9:85:80:69:f6:cf:3f:ac:22: 90:0b:bc:58:cc:95:0e:87:cb:0d:35:7c:ff:e1:a2:6e:2b:32: b5:c0:e4:ac -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxmqAL/SiW20LVP2Q/KOkaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMjM2YjIxM2Q1NjQ5M2YzYjA3N2U2YjQxZjQyZTRmM2Rm OGNkY2UwHhcNMjUxMjA2MDMwMDMzWhcNMjUxMjA3MDMwMDMzWjAzMTEwLwYDVQQD EyhkMDk0M2VmOWMwM2U0MWViNzA3MmNkZmE4Nzc0YmRlMTRhMjM1MWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd4JWYSIkhy9pgm2TSEukacvj2Fa i6Zu60KAxk3dFgfW/TdEf4wHV5l+id6f/ivaTuqgNItk5qH+rQWDHhFKjxk6zLtK MW3ASuhqcYRe1rgHjdUo6WJycqY55Lo09Q8pbCVkh2+kXbyzlxaDg1C23I5YgK0b AccI6OtgCW7BrDNxwHyo9axhWWLSNxzd0cupfDlm4qh0vprslwv2jDE5h1pta69B lsab+RbOuQ1ohPBVCQ4T0qkldUoj7ef0i+HDGgJ7Sz+Jetlhklr06A5mTr0i5XDT K+LYwVSkrDViugNMghlDwB5hQQJy3omgGif+IgBlcpFIZe9pN5qI+/zbYQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNCUPvnAPkHrcHLN+od0veFKI1GjMB8GA1UdIwQY MBaAFPsjayE9Vkk/Owd+a0H0Lk89+M3OMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS15TnJJVDFXU1Q4N0IzNXJRZlF1VHozNHpjNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvMjBmNGFjLTgwZDktNDBlMi1hOWU2 LTFjODhlZWJlYjI5My8xLzEteU5ySVQxV1NUODdCMzVyUWZRdVR6MzR6YzQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzg1LzIwZjRhYy04MGQ5LTQwZTItYTllNi0xYzg4ZWViZWIy OTMvMS8xLXlOcklUMVdTVDg3QjM1clFmUXVUejM0emM0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtCDt JxRctD7IQKyequYHFlPxRq2TTUXA1eMpc2HecAnRXpA5KDHcBu35djl0DEfj7D+Q zPq0dWIUClmko53LkHp/LbpDagEISbN6PCxrbB28ImYcCKROcPI0iH49+VTUIf3a b+EHGHz7d4VeO24nl6G2xHpJh+ciFB3Q5qo7U29i0G8a33pUyIsLsYywvSHqSawo oPUSI2F1NW28TBRgLzS0KT15TGLyVVgayeJGH2VpUQGYI+WEPEUvDPHLkbDN+eLB mNz1OGdKU2EXirwWS1e4rOewmzkEFoQfOucYj+8kqYWAafbPP6wikAu8WMyVDofL DTV8/+GibisytcDkrA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:20:18 2025 by rpki-client