This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft File: 1QYosB6kR3GDy_-S23oMWBRRlaQ.mft (raw, json) Hash identifier: U9/JqEd+A1drKCitF3HpJ1TGGx7CgiO4IM298tUoIX4= Subject key identifier: 63:53:AC:7F:60:98:D5:A1:E3:14:B5:28:E8:BB:59:30:37:70:BB:FB Authority key identifier: D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4 Certificate issuer: /CN=d50628b01ea4477183cbff92db7a0c58145195a4 Certificate serial: 019AF19B9ACDF0ECE4717956DEE3C67913DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft Manifest number: 0C07 Signing time: Sat 06 Dec 2025 03:01:38 +0000 Manifest this update: Sat 06 Dec 2025 03:01:38 +0000 Manifest next update: Sun 07 Dec 2025 03:01:38 +0000 Files and hashes: 1: 1QYosB6kR3GDy_-S23oMWBRRlaQ.crl (hash: +jkUifnhXYPvATuaDOCCiRWNEI1dqn31r59pXBaMLZ8=) 2: _pIpWC2mISR6dq-6G_9xF8Tberk.roa (hash: AVYabGQyAC/dt95JDDKLIXfkPwJWf47FBbAQTadMiJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:9a:cd:f0:ec:e4:71:79:56:de:e3:c6:79:13:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d50628b01ea4477183cbff92db7a0c58145195a4 Validity Not Before: Dec 6 03:01:38 2025 GMT Not After : Dec 7 03:01:38 2025 GMT Subject: CN=6353ac7f6098d5a1e314b528e8bb59303770bbfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5a:fe:95:fb:68:68:19:39:90:41:d2:d0:d2: 63:14:cf:3b:98:e3:50:91:15:7f:cb:94:b8:78:d8: 89:7b:6a:80:ae:c6:c8:45:d3:24:2d:4c:05:53:d9: e3:ee:8c:a8:92:8f:98:fd:43:de:d4:31:ee:c6:d3: 78:10:74:2e:f2:76:f7:8e:47:4e:79:89:11:bf:66: a5:2d:c5:03:f1:3f:f7:d9:b6:73:df:92:be:cd:8b: 7a:bc:de:07:49:5e:df:15:27:50:31:63:41:92:56: c6:4d:23:0a:b1:0d:3c:42:43:12:a4:b1:15:9e:fb: c8:78:20:db:8b:11:5f:ce:48:90:11:29:5e:3c:ee: b2:ee:25:85:5e:cb:c5:b4:0c:ff:65:84:6f:75:72: 61:b6:c2:c0:d4:88:0f:15:75:7b:9a:e6:70:0a:49: 1b:e3:3a:03:6b:f5:6c:07:a9:79:30:95:28:af:5f: a5:a6:2e:33:26:50:62:0a:4a:6e:37:f1:17:a3:22: 9a:91:3d:90:7c:f5:b7:2c:fd:62:f3:cc:04:95:ea: fe:c4:d8:2a:44:2b:82:ac:20:d5:b2:bc:e2:1a:ff: 28:6b:c9:a9:fd:f2:e5:f2:ec:04:11:69:dc:30:5b: bd:05:57:46:e9:2c:8f:81:be:c0:3d:0f:a9:3b:97: 98:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:53:AC:7F:60:98:D5:A1:E3:14:B5:28:E8:BB:59:30:37:70:BB:FB X509v3 Authority Key Identifier: keyid:D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:0e:12:01:f1:4e:30:3a:69:a1:89:f7:d7:6e:29:b7:6c:15: 18:98:f3:72:a8:05:78:d9:37:d7:64:d4:46:ef:18:a9:ab:bd: 0c:ab:ef:87:80:a5:c7:7d:ff:b2:ba:d6:51:fc:44:38:67:c9: 65:a7:b9:67:d2:f8:a0:0e:ec:f5:f2:83:c5:cb:61:a3:dd:60: c6:0d:e6:1a:8d:0f:c7:ed:70:a5:e7:4e:15:20:f7:7c:4c:2e: c1:cd:64:67:89:26:a3:fd:5e:a6:17:a2:d3:ee:6d:96:fd:14: 68:3a:d8:e2:33:ef:0c:71:11:9f:61:7b:e8:91:39:11:f7:81: 15:0d:26:cd:16:9a:69:bf:2a:47:59:4a:91:82:18:e7:f0:06: fc:62:16:ee:95:a9:a4:55:69:c5:f0:3a:83:bd:01:15:6c:14: 30:2b:49:2b:7a:64:bb:42:61:f3:ef:b5:2a:31:34:b7:61:4e: 0b:17:54:c7:41:80:76:3a:dc:d0:b9:66:6b:1f:22:79:0c:e0: 2f:dc:a6:7d:0f:dd:2c:9d:ec:25:47:b6:fe:ef:d3:d3:b0:be: 5f:59:75:63:47:67:d7:f1:24:14:59:7b:f3:fe:13:d4:11:aa: 0e:77:0c:28:9c:c4:67:f4:22:ed:f8:cc:31:0e:3c:a9:ea:75: 98:62:3b:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5rN8OzkcXlW3uPGeRPfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MDYyOGIwMWVhNDQ3NzE4M2NiZmY5MmRiN2EwYzU4MTQ1 MTk1YTQwHhcNMjUxMjA2MDMwMTM4WhcNMjUxMjA3MDMwMTM4WjAzMTEwLwYDVQQD Eyg2MzUzYWM3ZjYwOThkNWExZTMxNGI1MjhlOGJiNTkzMDM3NzBiYmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulr+lftoaBk5kEHS0NJjFM87mONQ kRV/y5S4eNiJe2qArsbIRdMkLUwFU9nj7oyoko+Y/UPe1DHuxtN4EHQu8nb3jkdO eYkRv2alLcUD8T/32bZz35K+zYt6vN4HSV7fFSdQMWNBklbGTSMKsQ08QkMSpLEV nvvIeCDbixFfzkiQESlePO6y7iWFXsvFtAz/ZYRvdXJhtsLA1IgPFXV7muZwCkkb 4zoDa/VsB6l5MJUor1+lpi4zJlBiCkpuN/EXoyKakT2QfPW3LP1i88wEler+xNgq RCuCrCDVsrziGv8oa8mp/fLl8uwEEWncMFu9BVdG6SyPgb7APQ+pO5eYdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNTrH9gmNWh4xS1KOi7WTA3cLv7MB8GA1UdIwQY MBaAFNUGKLAepEdxg8v/ktt6DFgUUZWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVFZb3NCNmtSM0dEeV8tUzIzb01XQlJSbGFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hODA5NmMtOTUyNy00OWNjLTk0Y2Qt ODNlNGJhZTM3NTViLzEvMVFZb3NCNmtSM0dEeV8tUzIzb01XQlJSbGFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9hODA5NmMtOTUyNy00OWNjLTk0Y2QtODNlNGJhZTM3NTVi LzEvMVFZb3NCNmtSM0dEeV8tUzIzb01XQlJSbGFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALg4SAfFO MDppoYn3124pt2wVGJjzcqgFeNk312TURu8Yqau9DKvvh4Clx33/srrWUfxEOGfJ Zae5Z9L4oA7s9fKDxctho91gxg3mGo0Px+1wpedOFSD3fEwuwc1kZ4kmo/1ephei 0+5tlv0UaDrY4jPvDHERn2F76JE5EfeBFQ0mzRaaab8qR1lKkYIY5/AG/GIW7pWp pFVpxfA6g70BFWwUMCtJK3pku0Jh8++1KjE0t2FOCxdUx0GAdjrc0Llmax8ieQzg L9ymfQ/dLJ3sJUe2/u/T07C+X1l1Y0dn1/EkFFl78/4T1BGqDncMKJzEZ/Qi7fjM MQ48qep1mGI75g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:17:56 2025 by rpki-client