This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft File: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft (raw, json) Hash identifier: iPjbdkOu7p5+yohlem+qBA0FHUW5FFDYq4mWiOXH3Vw= Subject key identifier: 27:0B:23:D4:97:5E:32:79:47:F3:E3:26:EA:94:94:82:AC:7E:90:E5 Authority key identifier: F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71 Certificate issuer: /CN=f83faec93d403f3713823fa39c7d27c62e921471 Certificate serial: 019AF19AA4DE301C51CA8E4A23888D6E315B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:00:34 +0000 Manifest this update: Sat 06 Dec 2025 03:00:34 +0000 Manifest next update: Sun 07 Dec 2025 03:00:34 +0000 Files and hashes: 1: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl (hash: vfgJ4LH7KadEMlZInL6od3NyiHDC40xzKKBNxU45GAY=) 2: 72LdJQQ_XzgvUHseE2sST5RXq_4.roa (hash: kR5iFtf9EPBMZTsPkYiIRyrCHP6r5lMPF7yM/ECFgng=) 3: lput6Z6vJPdy08jemWLG6WZi0oE.roa (hash: muWWXK/VbX5K0RlIXjBqeo4nzxA9w0OVj29rsOGgE/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a4:de:30:1c:51:ca:8e:4a:23:88:8d:6e:31:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f83faec93d403f3713823fa39c7d27c62e921471 Validity Not Before: Dec 6 03:00:34 2025 GMT Not After : Dec 7 03:00:34 2025 GMT Subject: CN=270b23d4975e327947f3e326ea949482ac7e90e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:71:95:95:62:c2:95:7b:20:ff:e8:5d:6f:4d: 53:5d:f7:7b:4f:76:73:d3:1a:93:44:8b:cd:f2:60: 52:de:0f:64:ec:f7:44:c9:e7:77:18:0f:e0:aa:5e: d0:53:7f:56:10:1d:4c:b4:db:65:5e:93:07:53:99: fd:2f:ee:1b:4f:43:42:08:ee:51:e6:1a:d7:86:82: 95:1d:96:4f:66:9b:8e:4b:27:4d:d2:27:0d:97:a0: 7d:3b:52:f3:33:5a:2c:9d:b6:01:e5:47:64:42:79: 96:cf:5a:cc:ec:e3:53:4d:55:15:ee:2b:83:1a:dc: 3e:04:60:bf:84:07:a5:22:93:34:36:51:97:0b:b3: f2:aa:94:58:81:4d:22:94:9d:c6:9f:b0:c1:60:4c: 1d:2f:74:56:03:e9:bd:1a:85:fe:83:39:b7:0d:30: f1:ee:b7:42:d3:c8:6b:b1:34:b9:43:3a:7f:f5:eb: 48:98:e5:c1:50:25:59:26:f6:f0:d5:4a:08:ac:d2: 17:8b:6c:38:d9:bb:d3:35:13:b6:ac:38:98:4d:59: 43:ce:ca:27:df:1a:3c:39:66:7c:90:32:07:5f:18: f7:77:37:b2:4c:29:d8:f1:71:92:cb:6d:6f:ca:05: da:e8:7b:1d:66:20:b4:02:bc:c0:c4:f2:25:a0:79: f6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0B:23:D4:97:5E:32:79:47:F3:E3:26:EA:94:94:82:AC:7E:90:E5 X509v3 Authority Key Identifier: keyid:F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:76:16:df:e6:de:5b:4b:e5:cd:d2:e6:5b:0d:48:aa:4c:f6: aa:24:aa:f9:7b:14:0c:bf:45:49:27:fa:81:d2:1c:cf:a8:22: cf:bb:e7:16:59:cd:54:4d:9c:c3:d2:fc:7a:b4:65:6d:c1:cf: fc:a8:6e:c7:c2:4a:d8:a9:46:e4:3d:b6:72:ec:6a:46:4e:bf: 5d:2c:ce:93:81:05:37:7c:62:9c:40:fe:51:c7:e1:9d:8f:5a: 86:e6:b9:d2:d9:b4:9a:d3:49:e9:60:95:8f:f2:9f:55:63:ad: b8:b8:52:12:e7:f2:75:76:c0:0b:49:fb:60:df:b4:2d:b2:44: 55:52:71:64:28:75:97:be:38:bd:50:91:27:e8:9d:44:33:ef: 67:03:8e:80:da:93:14:d9:c0:6a:1a:ee:ff:81:c1:32:63:9b: a1:cd:87:ae:79:cd:c8:e5:8d:02:e0:46:e3:e7:9c:14:be:19: 8c:d2:49:39:59:be:b5:e6:9b:28:a8:f4:e9:f3:05:fe:29:2c: fa:e3:9a:2d:7a:e3:bd:f1:74:d2:02:9f:77:0b:cb:01:32:c9: b5:f1:47:f3:17:18:c0:17:fe:0e:c0:e1:fc:30:95:d7:c0:90: 4f:95:3c:c3:77:1d:d6:7a:39:6d:4a:a6:25:e7:8f:5a:97:9a: 47:36:7e:c7 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxmqTeMBxRyo5KI4iNbjFbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4M2ZhZWM5M2Q0MDNmMzcxMzgyM2ZhMzljN2QyN2M2MmU5 MjE0NzEwHhcNMjUxMjA2MDMwMDM0WhcNMjUxMjA3MDMwMDM0WjAzMTEwLwYDVQQD EygyNzBiMjNkNDk3NWUzMjc5NDdmM2UzMjZlYTk0OTQ4MmFjN2U5MGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunGVlWLClXsg/+hdb01TXfd7T3Zz 0xqTRIvN8mBS3g9k7PdEyed3GA/gql7QU39WEB1MtNtlXpMHU5n9L+4bT0NCCO5R 5hrXhoKVHZZPZpuOSydN0icNl6B9O1LzM1osnbYB5UdkQnmWz1rM7ONTTVUV7iuD Gtw+BGC/hAelIpM0NlGXC7PyqpRYgU0ilJ3Gn7DBYEwdL3RWA+m9GoX+gzm3DTDx 7rdC08hrsTS5Qzp/9etImOXBUCVZJvbw1UoIrNIXi2w42bvTNRO2rDiYTVlDzson 3xo8OWZ8kDIHXxj3dzeyTCnY8XGSy21vygXa6HsdZiC0ArzAxPIloHn2SwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCcLI9SXXjJ5R/PjJuqUlIKsfpDlMB8GA1UdIwQY MBaAFPg/rsk9QD83E4I/o5x9J8YukhRxMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ELXV5VDFBUHpjVGdqLWpuSDBueGk2U0ZIRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkvOTcwY2YwLTkyOTgtNGZmMC1iYWY1 LTIxMGFlMDU2OWE0NS8xLzEtRC11eVQxQVB6Y1Rnai1qbkgwbnhpNlNGSEUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2I5Lzk3MGNmMC05Mjk4LTRmZjAtYmFmNS0yMTBhZTA1Njlh NDUvMS8xLUQtdXlUMUFQemNUZ2otam5IMG54aTZTRkhFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3YW 3+beW0vlzdLmWw1Iqkz2qiSq+XsUDL9FSSf6gdIcz6giz7vnFlnNVE2cw9L8erRl bcHP/Khux8JK2KlG5D22cuxqRk6/XSzOk4EFN3xinED+UcfhnY9ahua50tm0mtNJ 6WCVj/KfVWOtuLhSEufydXbAC0n7YN+0LbJEVVJxZCh1l744vVCRJ+idRDPvZwOO gNqTFNnAahru/4HBMmOboc2HrnnNyOWNAuBG4+ecFL4ZjNJJOVm+teabKKj06fMF /iks+uOaLXrjvfF00gKfdwvLATLJtfFH8xcYwBf+DsDh/DCV18CQT5U8w3cd1no5 bUqmJeePWpeaRzZ+xw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:10 2025 by rpki-client