This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft File: 1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft (raw, json) Hash identifier: NVQymmkcXE4X1jBXjriFaOAnluWjZjEya5GIuE4LE6s= Subject key identifier: 5A:43:B8:A4:9F:96:DD:D0:A7:30:58:D2:67:6F:7E:DD:CE:5A:6D:A8 Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E Certificate issuer: /CN=d716209d7def98a2bb34977f65009b3520da256e Certificate serial: 019B1B3C0E691B018EB87766FBC11136DE66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft Manifest number: 0566 Signing time: Sun 14 Dec 2025 05:01:19 +0000 Manifest this update: Sun 14 Dec 2025 05:01:19 +0000 Manifest next update: Mon 15 Dec 2025 05:01:19 +0000 Files and hashes: 1: 1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl (hash: geCtVyVzxtHqXD500xdPj7PQbCL9plBnMmnguIRBoLc=) 2: OWBphSnGzM3NfjUoWcPjDVRSYgc.roa (hash: Z7ei4v1I8GPTdYYpZ1qHi9JiBDA34PMAtoRsAnkH2B0=) 3: kzYheyB05Pvpsc4ix4Izryfmbz0.roa (hash: A3y4lNt6nN7xPVe27KF9Y5oCZLSjeXLrJOtKSedFf+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3c:0e:69:1b:01:8e:b8:77:66:fb:c1:11:36:de:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e Validity Not Before: Dec 14 05:01:19 2025 GMT Not After : Dec 15 05:01:19 2025 GMT Subject: CN=5a43b8a49f96ddd0a73058d2676f7eddce5a6da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:48:84:a3:06:f4:42:7b:04:04:ef:4d:bc:92: 26:b3:c2:61:54:84:b1:ce:0b:63:28:a9:a6:2f:8b: 75:bc:7e:e4:78:7c:d4:f6:e3:59:30:f9:6f:f6:18: 73:4d:90:66:31:00:56:47:9d:c6:88:7f:c2:05:69: 7c:d3:88:4c:be:99:94:70:63:f6:4c:91:e0:c2:d9: 49:aa:99:2e:c9:fd:a9:51:e3:c2:41:62:70:bf:04: ac:a4:ab:b1:65:aa:1d:a4:2d:21:20:62:2c:8b:73: 18:73:11:a4:fe:0b:73:30:29:d3:59:b8:4b:99:c1: 6a:ad:04:23:5a:bf:ff:4a:fb:83:fc:0b:ab:ae:34: 09:27:3c:a3:e2:5b:fb:61:11:cd:bd:5d:2b:1a:85: d9:48:9c:57:4a:be:d6:c1:ae:3a:5b:cd:ef:38:a3: f9:97:78:a1:9c:d0:a2:dc:6b:1a:52:27:4d:a4:91: d0:d5:c3:7a:89:8d:be:5a:e8:ea:2c:1f:cb:36:13: 75:fc:06:72:82:e2:bb:23:2f:0f:0f:f1:12:84:a5: 55:9c:66:0a:54:c7:57:94:24:e1:a9:3c:96:67:98: 1f:f3:60:a2:ae:60:1b:b6:32:96:cf:12:dd:a1:bf: 9a:d7:66:8c:7a:66:80:3c:44:cc:ce:2b:2e:9f:07: 7e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:43:B8:A4:9F:96:DD:D0:A7:30:58:D2:67:6F:7E:DD:CE:5A:6D:A8 X509v3 Authority Key Identifier: keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:7b:21:78:bf:e1:4e:23:94:54:64:53:f0:64:95:c0:c3:d9: 72:c3:e5:bd:3c:c2:a0:90:fc:6e:03:75:8b:aa:98:4c:50:79: cb:e1:d9:c3:80:5e:d7:8b:da:2c:0b:aa:28:1b:fc:f5:2f:08: b3:ab:d7:d4:43:45:b9:7e:97:91:45:85:1c:50:ad:1b:43:97: e8:dc:12:bc:50:e9:7d:88:0d:e1:6a:59:b6:18:19:89:24:3b: 51:72:b2:3c:87:f3:a2:59:48:f4:bc:83:bb:f8:b2:7b:6c:29: e7:8b:a0:2b:27:7e:c2:7c:8d:72:99:a4:ca:54:f0:bf:6d:cd: 45:b4:e7:82:65:25:9b:bf:d1:15:f4:9c:c9:62:c7:8a:cb:ab: e1:ce:08:8b:47:10:f6:fe:b3:ef:31:d7:2c:ac:54:24:d1:d9: 23:76:48:42:be:2f:4a:bc:5c:52:c5:fa:cc:82:1c:2e:37:11: 3c:5a:94:69:7a:6c:6b:4c:ac:41:ee:d5:d9:90:77:fa:77:ad: ac:6a:29:32:d1:a0:53:de:71:01:e0:ba:e4:ea:eb:7a:78:48: 40:f8:c7:e4:71:f2:cb:7a:4b:60:a1:4d:88:07:05:d4:47:13: 2f:63:cc:90:26:8f:98:1d:ec:79:4a:67:33:39:16:2b:96:70: aa:10:e7:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbPA5pGwGOuHdm+8ERNt5mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MTYyMDlkN2RlZjk4YTJiYjM0OTc3ZjY1MDA5YjM1MjBk YTI1NmUwHhcNMjUxMjE0MDUwMTE5WhcNMjUxMjE1MDUwMTE5WjAzMTEwLwYDVQQD Eyg1YTQzYjhhNDlmOTZkZGQwYTczMDU4ZDI2NzZmN2VkZGNlNWE2ZGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEiEowb0QnsEBO9NvJIms8JhVISx zgtjKKmmL4t1vH7keHzU9uNZMPlv9hhzTZBmMQBWR53GiH/CBWl804hMvpmUcGP2 TJHgwtlJqpkuyf2pUePCQWJwvwSspKuxZaodpC0hIGIsi3MYcxGk/gtzMCnTWbhL mcFqrQQjWr//SvuD/AurrjQJJzyj4lv7YRHNvV0rGoXZSJxXSr7Wwa46W83vOKP5 l3ihnNCi3GsaUidNpJHQ1cN6iY2+WujqLB/LNhN1/AZyguK7Iy8PD/EShKVVnGYK VMdXlCThqTyWZ5gf82CirmAbtjKWzxLdob+a12aMemaAPETMzisunwd+0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpDuKSflt3QpzBY0mdvft3OWm2oMB8GA1UdIwQY MBaAFNcWIJ1975iiuzSXf2UAmzUg2iVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXhZZ25YM3ZtS0s3TkpkX1pRQ2JOU0RhSlc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iNTJlMDItM2FmOC00ZWJiLTk5ZDMt ODUxZDljMDQ0ZTcwLzEvMXhZZ25YM3ZtS0s3TkpkX1pRQ2JOU0RhSlc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9iNTJlMDItM2FmOC00ZWJiLTk5ZDMtODUxZDljMDQ0ZTcw LzEvMXhZZ25YM3ZtS0s3TkpkX1pRQ2JOU0RhSlc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAansheL/h TiOUVGRT8GSVwMPZcsPlvTzCoJD8bgN1i6qYTFB5y+HZw4Be14vaLAuqKBv89S8I s6vX1ENFuX6XkUWFHFCtG0OX6NwSvFDpfYgN4WpZthgZiSQ7UXKyPIfzollI9LyD u/iye2wp54ugKyd+wnyNcpmkylTwv23NRbTngmUlm7/RFfScyWLHisur4c4Ii0cQ 9v6z7zHXLKxUJNHZI3ZIQr4vSrxcUsX6zIIcLjcRPFqUaXpsa0ysQe7V2ZB3+net rGopMtGgU95xAeC65OrrenhIQPjH5HHyy3pLYKFNiAcF1EcTL2PMkCaPmB3seUpn MzkWK5ZwqhDn8Q== -----END CERTIFICATE-----Generated at Sun Dec 14 11:44:44 2025 by rpki-client