This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft File: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft (raw, json) Hash identifier: VcCl6t0ghuhRbYBd4+bfoHRzLfpoSw/BHiyoMMqssbE= Subject key identifier: 72:8F:4A:0A:FC:9E:74:16:10:B8:4A:5C:82:13:07:3F:88:80:4F:38 Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85 Certificate issuer: /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885 Certificate serial: 019AF08865CFFCC8D548D9E741C379E6318F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft Manifest number: 0A2B Signing time: Fri 05 Dec 2025 22:01:01 +0000 Manifest this update: Fri 05 Dec 2025 22:01:01 +0000 Manifest next update: Sat 06 Dec 2025 22:01:01 +0000 Files and hashes: 1: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl (hash: Nv1qym/2GGx1+dwyQ4vNHiMSZnKNIOeU0Y4DH1rgWi4=) 2: 9z9dKpnx6EzUcHVGNf_uGpVw9Os.roa (hash: a0dVE6vpgZW3UUjOxu/nfSbGxvoPx4y2RaBLkZkeRbc=) 3: NAkfZdC-lHIooI3gKnWXiaH-HsE.roa (hash: w3/vlIu5NjwEAa3XQiOFjmWkJL3BENVNbQUqUr266qk=) 4: tHjmQ9NOKNWbyApXtXSEVz3gkFM.roa (hash: SBZ1boxaRQZqnvXhV5a0MuSyAE629IVLf7UqxBja6yQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:65:cf:fc:c8:d5:48:d9:e7:41:c3:79:e6:31:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885 Validity Not Before: Dec 5 22:01:01 2025 GMT Not After : Dec 6 22:01:01 2025 GMT Subject: CN=728f4a0afc9e741610b84a5c8213073f88804f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:87:5d:60:38:45:78:f7:fa:1e:f1:ea:2e:46: f3:bb:21:ca:fe:5e:0b:4e:4e:66:34:95:f8:99:f1: 84:6d:e0:e0:36:71:53:0d:c4:91:9b:8e:a3:af:7b: be:3a:ba:6a:cf:45:c8:7d:05:f4:b9:0e:15:44:90: ec:68:a4:4c:d2:09:cf:61:97:09:2f:3c:eb:c2:2b: ee:b9:db:4a:66:bb:5b:b3:f3:6a:0d:64:1e:cd:e8: ff:a6:e1:1a:96:35:ba:19:b3:95:8c:9b:03:7b:ac: 61:e0:c5:17:c7:22:e8:2d:41:04:26:34:42:63:18: ef:d1:3d:55:c1:e7:52:c8:35:e4:21:6f:a6:4d:eb: 4c:7f:1d:73:93:03:7b:e7:9b:55:e4:bf:d6:53:45: 4f:f3:b7:50:b0:2a:bf:c2:76:3f:00:54:3c:ae:e8: 1f:c0:51:9f:bf:23:26:60:e2:25:0b:13:db:c0:76: e7:1f:51:ec:d3:ff:ba:38:7b:06:9d:39:a9:d8:32: 1d:0b:05:86:76:a2:91:73:de:51:0c:d9:07:aa:f8: dc:3a:3b:c0:93:11:11:06:ba:11:ba:72:c0:67:3d: 45:41:be:b0:09:bd:fe:d4:60:a4:62:8d:2b:c2:96: 1c:1d:34:b0:e7:b3:d2:f0:c3:a1:5d:cd:45:1d:53: ca:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8F:4A:0A:FC:9E:74:16:10:B8:4A:5C:82:13:07:3F:88:80:4F:38 X509v3 Authority Key Identifier: keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:cd:c5:cd:d6:15:7a:e9:37:ba:f1:8a:d8:10:93:4e:af:c0: e0:d6:e4:48:1c:3d:7e:15:7e:43:bd:59:92:0e:f2:14:dd:2b: c3:cc:54:99:5f:fa:50:64:10:df:29:8f:4f:4b:2b:0d:45:db: 4f:14:01:5b:10:42:ec:89:44:21:b9:2e:c3:b9:ef:c5:47:4a: fb:92:2b:a0:64:cb:19:d2:90:df:0f:d2:cc:ab:74:e7:03:18: f1:ac:88:8d:ae:93:ed:d5:41:20:c8:38:25:e5:90:60:5d:ae: 55:66:a1:f4:07:b6:a0:be:ee:4b:54:aa:91:1c:53:23:fd:bb: bc:85:5e:87:ab:9c:60:34:46:80:29:1c:37:a4:34:ae:04:77: ea:cf:9b:8d:82:be:86:d5:74:79:f5:d8:8c:52:17:a9:5c:a6: 20:aa:a1:63:0f:ae:cf:92:fe:fa:bd:6c:de:1c:d6:74:5b:7c: 95:e5:d8:54:71:bf:bb:4d:02:b4:af:e3:f9:cf:f9:1b:fe:26: 3b:ea:2b:4a:25:9a:84:8c:70:26:4e:26:f2:46:72:2d:ae:8c: f5:f2:38:53:9e:ab:59:8a:2f:53:cb:9c:5f:7d:9b:06:c9:9c: e6:0e:c3:f2:61:01:3c:17:23:7b:ee:90:9d:86:d5:15:f4:9d: cc:c1:b1:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiGXP/MjVSNnnQcN55jGPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MzAxZjc3Mjc1M2Q4MGE3YjYyYzJkMjEzZDM0N2EzYjll YmU4ODUwHhcNMjUxMjA1MjIwMTAxWhcNMjUxMjA2MjIwMTAxWjAzMTEwLwYDVQQD Eyg3MjhmNGEwYWZjOWU3NDE2MTBiODRhNWM4MjEzMDczZjg4ODA0ZjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YddYDhFePf6HvHqLkbzuyHK/l4L Tk5mNJX4mfGEbeDgNnFTDcSRm46jr3u+Orpqz0XIfQX0uQ4VRJDsaKRM0gnPYZcJ LzzrwivuudtKZrtbs/NqDWQezej/puEaljW6GbOVjJsDe6xh4MUXxyLoLUEEJjRC Yxjv0T1VwedSyDXkIW+mTetMfx1zkwN755tV5L/WU0VP87dQsCq/wnY/AFQ8rugf wFGfvyMmYOIlCxPbwHbnH1Hs0/+6OHsGnTmp2DIdCwWGdqKRc95RDNkHqvjcOjvA kxERBroRunLAZz1FQb6wCb3+1GCkYo0rwpYcHTSw57PS8MOhXc1FHVPKWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKPSgr8nnQWELhKXIITBz+IgE84MB8GA1UdIwQY MBaAFNcwH3cnU9gKe2LC0hPTR6O56+iFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83N2Q2ZWUtYThlMS00YjAxLTgzY2It MmY2NzY5ZTc1ZjI0LzEvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy83N2Q2ZWUtYThlMS00YjAxLTgzY2ItMmY2NzY5ZTc1ZjI0 LzEvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK83FzdYV euk3uvGK2BCTTq/A4NbkSBw9fhV+Q71Zkg7yFN0rw8xUmV/6UGQQ3ymPT0srDUXb TxQBWxBC7IlEIbkuw7nvxUdK+5IroGTLGdKQ3w/SzKt05wMY8ayIja6T7dVBIMg4 JeWQYF2uVWah9Ae2oL7uS1SqkRxTI/27vIVeh6ucYDRGgCkcN6Q0rgR36s+bjYK+ htV0efXYjFIXqVymIKqhYw+uz5L++r1s3hzWdFt8leXYVHG/u00CtK/j+c/5G/4m O+orSiWahIxwJk4m8kZyLa6M9fI4U56rWYovU8ucX32bBsmc5g7D8mEBPBcje+6Q nYbVFfSdzMGxpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:40 2025 by rpki-client