This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft File: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft (raw, json) Hash identifier: jNAPyEB7nwLi7ycBlFrLaOs7O9KgN+o0HvDm5pNK8Uk= Subject key identifier: A3:D6:D7:F9:DD:3F:79:41:FA:00:37:D7:34:D4:D5:6D:EF:85:2A:9A Authority key identifier: D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7 Certificate issuer: /CN=d588db17666fa9515af31dba095d0f250f84bdf7 Certificate serial: 019AF2AD7618C9CF26D2E01EB4130EB51AF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 08:00:45 +0000 Manifest this update: Sat 06 Dec 2025 08:00:45 +0000 Manifest next update: Sun 07 Dec 2025 08:00:45 +0000 Files and hashes: 1: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl (hash: LazcakcX00dMKdXQebnTbO4wL95jKvwYRsIFMTMkCyc=) 2: bGf4cCRG9dkpmbXoKNR-wNn-qNk.roa (hash: Cp+HX5WugU73QzyqqCmrt27DN2j3Lyp2sZVezzd5Obc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:76:18:c9:cf:26:d2:e0:1e:b4:13:0e:b5:1a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d588db17666fa9515af31dba095d0f250f84bdf7 Validity Not Before: Dec 6 08:00:45 2025 GMT Not After : Dec 7 08:00:45 2025 GMT Subject: CN=a3d6d7f9dd3f7941fa0037d734d4d56def852a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:54:ce:79:d0:2e:24:0a:ce:b5:5f:a7:9a:43: 29:bf:e9:3d:14:38:8d:66:e0:45:ec:01:06:aa:6c: 17:e6:17:68:aa:48:99:70:ae:27:9e:30:ba:24:0d: 7c:6b:50:d4:ad:29:a5:1c:86:66:b2:41:69:10:ff: 36:43:0d:79:eb:58:bb:ba:67:d9:18:e4:16:15:57: e9:31:c8:2e:d0:40:60:44:b3:a5:b2:47:d6:95:d2: 6b:53:36:d3:47:92:a3:64:af:78:aa:ad:ff:73:4f: 4c:ef:79:75:43:32:a5:f9:01:ef:17:17:ee:ec:be: 78:87:1c:dc:f3:5b:7a:86:9b:29:61:fc:93:dc:96: a6:f6:14:97:62:91:60:df:4e:3b:62:63:9e:97:9f: a8:cf:79:4f:b6:36:80:c4:3f:1b:3f:d0:9d:3a:18: ea:69:1d:37:05:14:51:08:34:a3:9e:99:9c:24:19: 64:53:3e:d0:00:05:6c:33:da:8c:ca:d3:d7:fb:08: a7:4a:89:9b:57:3d:3a:22:28:ae:f4:4f:9c:61:47: e7:0f:4b:12:65:32:2e:d6:cb:74:3d:73:f2:cb:e4: 18:8e:46:e9:fd:ae:03:43:c9:41:c4:47:10:09:35: ee:37:78:75:7b:b3:15:14:d8:32:82:52:90:c5:41: 28:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D6:D7:F9:DD:3F:79:41:FA:00:37:D7:34:D4:D5:6D:EF:85:2A:9A X509v3 Authority Key Identifier: keyid:D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ab:a7:62:83:21:cb:08:a3:4f:c4:77:a6:a4:d6:14:e4:2b: c6:9b:79:b5:79:41:71:b1:22:26:64:59:18:7e:69:02:50:d8: 49:42:5a:a6:66:46:8f:42:ce:a9:cc:d8:6f:f3:93:09:48:67: 5c:a5:c3:11:6d:df:e1:2f:f7:49:c4:e1:dc:40:cf:ee:9f:1a: 7c:cf:05:de:47:f1:c5:0f:c0:be:9b:07:c5:8e:bc:f6:ba:0a: 49:8b:ee:8a:cc:a3:67:4c:e9:4f:5c:fd:e0:ee:8c:31:04:26: b5:bf:81:cc:8d:c9:c8:eb:c6:67:e8:53:af:83:9a:85:8a:be: b5:23:ce:af:8e:60:24:f4:49:e9:4c:dd:18:15:56:05:6d:fc: 3a:ae:46:ca:97:89:df:fd:93:d5:83:0f:d4:43:c4:d4:40:a6: 5f:54:6a:75:36:54:df:11:99:ee:77:f1:09:c0:05:ae:67:a2: 4a:8b:da:1e:ea:13:37:28:6b:76:de:b2:95:7b:fa:38:31:ab: 99:f9:82:7f:08:11:17:d9:37:bb:9d:ba:4e:b2:94:3f:5b:cb: 6b:71:6d:5e:7c:74:ef:93:ff:41:57:4b:8c:3b:6c:f2:ca:91: 37:c5:75:be:a9:6c:e1:66:27:7d:71:cf:0e:a5:46:3e:2c:cf: 2e:2c:b4:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrXYYyc8m0uAetBMOtRr1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ODhkYjE3NjY2ZmE5NTE1YWYzMWRiYTA5NWQwZjI1MGY4 NGJkZjcwHhcNMjUxMjA2MDgwMDQ1WhcNMjUxMjA3MDgwMDQ1WjAzMTEwLwYDVQQD EyhhM2Q2ZDdmOWRkM2Y3OTQxZmEwMDM3ZDczNGQ0ZDU2ZGVmODUyYTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11TOedAuJArOtV+nmkMpv+k9FDiN ZuBF7AEGqmwX5hdoqkiZcK4nnjC6JA18a1DUrSmlHIZmskFpEP82Qw1561i7umfZ GOQWFVfpMcgu0EBgRLOlskfWldJrUzbTR5KjZK94qq3/c09M73l1QzKl+QHvFxfu 7L54hxzc81t6hpspYfyT3Jam9hSXYpFg3047YmOel5+oz3lPtjaAxD8bP9CdOhjq aR03BRRRCDSjnpmcJBlkUz7QAAVsM9qMytPX+winSombVz06Iiiu9E+cYUfnD0sS ZTIu1st0PXPyy+QYjkbp/a4DQ8lBxEcQCTXuN3h1e7MVFNgyglKQxUEoMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPW1/ndP3lB+gA31zTU1W3vhSqaMB8GA1UdIwQY MBaAFNWI2xdmb6lRWvMdugldDyUPhL33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVlqYkYyWnZxVkZhOHgyNkNWMFBKUS1FdmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zZDdlMjAtOTAyMi00OTJhLWI4ODIt MzE4OGU5ZDFmNWEwLzEvMVlqYkYyWnZxVkZhOHgyNkNWMFBKUS1FdmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8zZDdlMjAtOTAyMi00OTJhLWI4ODItMzE4OGU5ZDFmNWEw LzEvMVlqYkYyWnZxVkZhOHgyNkNWMFBKUS1FdmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqunYoMh ywijT8R3pqTWFOQrxpt5tXlBcbEiJmRZGH5pAlDYSUJapmZGj0LOqczYb/OTCUhn XKXDEW3f4S/3ScTh3EDP7p8afM8F3kfxxQ/AvpsHxY689roKSYvuisyjZ0zpT1z9 4O6MMQQmtb+BzI3JyOvGZ+hTr4OahYq+tSPOr45gJPRJ6UzdGBVWBW38Oq5GypeJ 3/2T1YMP1EPE1ECmX1RqdTZU3xGZ7nfxCcAFrmeiSovaHuoTNyhrdt6ylXv6ODGr mfmCfwgRF9k3u526TrKUP1vLa3FtXnx075P/QVdLjDts8sqRN8V1vqls4WYnfXHP DqVGPizPLiy0qg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:09:50 2025 by rpki-client