This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft File: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft (raw, json) Hash identifier: Q8XKOZPv453jxX/kP6Ep4fsqRCmIwxJ9FLuBCQU0G04= Subject key identifier: BD:50:F2:22:8C:DD:ED:CD:44:A4:06:C9:2C:35:A6:F6:F3:C2:08:FB Authority key identifier: F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8 Certificate issuer: /CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8 Certificate serial: 019AF31C8AEC15D8AD24755B9C785482BFFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 10:02:05 +0000 Manifest this update: Sat 06 Dec 2025 10:02:05 +0000 Manifest next update: Sun 07 Dec 2025 10:02:05 +0000 Files and hashes: 1: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl (hash: Aq6+FKgSAE42PmLuKPBZECQSu3q9SQnZMi8P6rzdOzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:8a:ec:15:d8:ad:24:75:5b:9c:78:54:82:bf:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8 Validity Not Before: Dec 6 10:02:05 2025 GMT Not After : Dec 7 10:02:05 2025 GMT Subject: CN=bd50f2228cddedcd44a406c92c35a6f6f3c208fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a4:ed:c4:34:e9:cc:93:ac:50:5d:23:41:09: 43:73:fd:c1:a3:e2:d9:3e:60:89:75:c1:ac:97:8b: 10:a6:06:98:da:86:88:8e:48:fa:30:bf:f6:fd:6a: e5:de:0f:b8:d5:43:0d:31:b8:7b:ba:3b:ed:1f:e6: f8:48:3a:1a:89:bd:ac:da:fc:4c:0b:1c:e9:dc:ac: 65:de:7d:ef:a1:82:29:fb:e5:0c:e7:22:03:1b:fd: 05:57:b1:01:bc:f5:ad:b2:98:82:1a:aa:4e:de:4e: 1c:d4:3b:02:5a:9a:25:01:c5:9e:32:9e:03:2f:1f: ca:82:a2:91:c4:67:0f:d5:29:3e:49:45:bf:75:6d: 8c:bc:38:fb:cb:6a:78:8d:f0:b5:33:5d:e4:1d:10: 78:04:14:5d:ae:51:a6:86:8c:88:25:49:87:3a:83: 40:85:6f:f6:e5:c1:86:8d:77:7f:2c:8b:64:eb:63: 75:a1:95:50:44:d3:e7:75:c9:a0:a4:15:8b:74:22: af:b1:d0:f4:b0:67:d6:cd:e8:b6:2a:69:48:9e:2f: 84:98:c1:48:58:42:fc:8c:10:4a:7c:10:9d:f5:c3: 5f:34:41:7c:fa:3c:fe:49:f2:29:ec:5c:7d:f9:cb: 91:88:ea:15:d9:cf:80:b7:65:52:6c:e2:2c:0e:ca: 23:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:50:F2:22:8C:DD:ED:CD:44:A4:06:C9:2C:35:A6:F6:F3:C2:08:FB X509v3 Authority Key Identifier: keyid:F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:84:4a:8c:81:1f:85:7c:4d:fc:8a:66:48:52:7b:a6:51:ee: 37:f8:02:56:ef:02:7d:40:9e:00:68:29:e8:f6:b1:74:dc:e5: 29:2b:43:fb:85:c4:26:9d:e9:3e:18:f7:e4:b8:77:df:75:34: 28:13:4f:60:7a:8a:ee:43:0c:58:4f:46:04:ef:0d:3b:d8:12: dc:50:88:9e:0e:fa:a0:1b:38:ff:3e:f6:42:e8:1c:d3:dc:a1: f0:63:76:f6:77:da:c2:69:cf:30:56:63:b7:46:7b:c8:75:74: 44:8d:30:4d:d2:87:95:cc:8e:2b:7e:7f:38:1a:14:b1:9b:b2: ec:fe:a4:c5:9e:d5:1e:1f:10:8d:c3:9d:ff:a3:f4:24:9a:08: de:f0:61:60:40:8c:a5:e9:8b:b8:a9:11:b2:c5:b9:15:3c:88: 7f:82:ea:e6:19:c1:70:30:b7:20:a3:80:fb:0d:6c:65:89:cf: 62:99:62:65:88:f8:25:a7:26:f2:7c:db:e8:09:b9:df:ba:99: b8:3d:65:0d:f1:f7:1e:22:e3:08:8b:f5:bd:4c:b2:96:75:af: 7b:7c:21:15:29:f9:1e:96:44:b3:44:67:f6:0d:4a:43:be:23: 12:87:6c:14:ef:0b:37:6d:88:08:cd:12:42:c0:8e:55:2f:ca: 5b:20:a5:7c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrzHIrsFditJHVbnHhUgr/6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4OWM5YTY5MjM0NTI3Yjc4Njk0OGIyZWI0YzY1MDlkYjBh NGQ1YTgwHhcNMjUxMjA2MTAwMjA1WhcNMjUxMjA3MTAwMjA1WjAzMTEwLwYDVQQD EyhiZDUwZjIyMjhjZGRlZGNkNDRhNDA2YzkyYzM1YTZmNmYzYzIwOGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqTtxDTpzJOsUF0jQQlDc/3Bo+LZ PmCJdcGsl4sQpgaY2oaIjkj6ML/2/Wrl3g+41UMNMbh7ujvtH+b4SDoaib2s2vxM Cxzp3Kxl3n3voYIp++UM5yIDG/0FV7EBvPWtspiCGqpO3k4c1DsCWpolAcWeMp4D Lx/KgqKRxGcP1Sk+SUW/dW2MvDj7y2p4jfC1M13kHRB4BBRdrlGmhoyIJUmHOoNA hW/25cGGjXd/LItk62N1oZVQRNPndcmgpBWLdCKvsdD0sGfWzei2KmlIni+EmMFI WEL8jBBKfBCd9cNfNEF8+jz+SfIp7Fx9+cuRiOoV2c+At2VSbOIsDsojYwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFL1Q8iKM3e3NRKQGySw1pvbzwgj7MB8GA1UdIwQY MBaAFPicmmkjRSe3hpSLLrTGUJ2wpNWoMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1KeWFhU05GSjdlR2xJc3V0TVpRbmJDazFhZy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvOTk5MmMyLTBjZGQtNDM2MS05YzAz LWMyY2NjZTZjNDdhNC8xLzEtSnlhYVNORko3ZUdsSXN1dE1aUW5iQ2sxYWcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2IxLzk5OTJjMi0wY2RkLTQzNjEtOWMwMy1jMmNjY2U2YzQ3 YTQvMS8xLUp5YWFTTkZKN2VHbElzdXRNWlFuYkNrMWFnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXIRK jIEfhXxN/IpmSFJ7plHuN/gCVu8CfUCeAGgp6PaxdNzlKStD+4XEJp3pPhj35Lh3 33U0KBNPYHqK7kMMWE9GBO8NO9gS3FCIng76oBs4/z72Qugc09yh8GN29nfawmnP MFZjt0Z7yHV0RI0wTdKHlcyOK35/OBoUsZuy7P6kxZ7VHh8QjcOd/6P0JJoI3vBh YECMpemLuKkRssW5FTyIf4Lq5hnBcDC3IKOA+w1sZYnPYpliZYj4Jacm8nzb6Am5 37qZuD1lDfH3HiLjCIv1vUyylnWve3whFSn5HpZEs0Rn9g1KQ74jEodsFO8LN22I CM0SQsCOVS/KWyClfA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:52:37 2025 by rpki-client