This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft File: rY6Ff8AL4U7ZK554zDymm4rcJIU.mft (raw, json) Hash identifier: +oLhOk5v6Wchs6U+9Je/DcCZKths4BMBt2gH42A5ciE= Subject key identifier: 1F:D0:C9:8E:2A:CD:92:46:DF:9A:6B:92:45:6B:AA:E9:87:0C:08:50 Authority key identifier: AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85 Certificate issuer: /CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485 Certificate serial: 019B1A28BD6066F73625E7C972D890E936B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft Manifest number: 1770 Signing time: Sun 14 Dec 2025 00:00:35 +0000 Manifest this update: Sun 14 Dec 2025 00:00:35 +0000 Manifest next update: Mon 15 Dec 2025 00:00:35 +0000 Files and hashes: 1: OJD8WtNdD2Fkoa1-b6aE9G3M64k.roa (hash: EhOploeWX4IzgMSZUmJHUcObR1oyvr4q2CNLTcIgD8g=) 2: rY6Ff8AL4U7ZK554zDymm4rcJIU.crl (hash: fGBZpAMJlIEjRF9/LXvAkVqT6UXt0pYAxo2ZT2oZKOE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.crl rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:28:bd:60:66:f7:36:25:e7:c9:72:d8:90:e9:36:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485 Validity Not Before: Dec 14 00:00:35 2025 GMT Not After : Dec 15 00:00:35 2025 GMT Subject: CN=1fd0c98e2acd9246df9a6b92456baae9870c0850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1c:ea:cf:67:3a:de:b6:f1:1c:73:3c:af:07: 4d:a2:26:57:4f:40:1f:89:5f:cb:62:10:7f:4b:21: a8:98:83:a4:60:be:25:67:8b:21:07:d1:50:23:12: 02:e7:68:c0:88:80:75:6c:18:27:d5:1c:8a:46:8c: b6:81:c6:fd:b4:0e:12:cb:ec:4c:9b:94:43:44:92: 7d:7a:b5:4b:f2:9c:81:2d:97:b8:8b:2d:57:c2:4e: bd:91:28:81:62:28:e2:72:dd:4a:c0:12:31:bb:1a: c0:53:e8:c1:32:22:e0:9d:be:c7:2f:3c:2b:ad:66: 9e:09:78:00:ff:6c:37:a4:68:05:49:d8:81:aa:12: be:f4:38:23:c7:46:fa:01:66:ac:12:0b:0b:2e:73: c9:63:78:1c:8b:71:e2:12:f8:e3:be:0a:18:23:16: 6c:e8:6e:6e:9b:a8:d4:53:0f:bc:e4:f6:fc:dd:a3: 03:41:2a:78:8e:80:62:64:51:ca:6c:7a:6b:45:02: 9e:dc:df:00:21:da:a1:a7:68:88:73:ce:b9:b7:0e: b7:3e:da:8b:15:8d:69:99:d9:93:63:af:2f:f5:f1: 0a:71:a3:51:32:90:ac:27:45:9e:d8:2c:d7:f9:52: 69:2e:14:2d:ea:bb:c1:5c:0c:0e:f0:ef:53:fe:20: f8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D0:C9:8E:2A:CD:92:46:DF:9A:6B:92:45:6B:AA:E9:87:0C:08:50 X509v3 Authority Key Identifier: keyid:AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:47:a5:f8:18:cb:ae:6f:7f:8e:86:3d:e2:20:f5:05:62:a6: 64:22:f2:6d:d6:6a:f0:03:3b:16:55:07:49:53:6e:ee:b9:e1: dc:17:39:06:df:9f:5f:0c:6d:9d:a0:b9:74:ff:34:06:e2:8a: c8:8d:57:21:e7:2d:d4:08:61:8c:f6:71:c3:b3:6e:db:d3:c2: bd:1c:11:0c:ba:64:5c:a9:06:25:c5:9d:3f:f3:d7:27:bb:78: 66:12:86:7b:15:14:80:37:ca:96:d2:b8:62:39:45:10:32:48: 40:99:fd:73:28:ce:5c:1a:0e:36:f1:5c:cc:2c:c1:a8:c1:03: 07:41:ac:ca:e4:00:26:e1:78:53:f3:69:01:04:24:d3:72:10: 49:e2:fa:ce:19:c8:5c:ba:b9:37:c3:5e:da:3f:a9:b1:00:4d: fa:7e:3c:31:d2:c5:cd:cf:44:c0:85:d9:32:6a:4b:bb:ce:65: 1f:d1:89:ea:e7:03:7b:df:08:82:8b:1e:2a:23:8d:1d:fb:6d: ab:2d:c9:f2:64:d3:cc:33:3f:f6:6a:2b:cb:d9:01:36:23:a5: 6b:dd:7a:32:4b:9d:64:22:7e:b3:64:62:1a:58:1a:74:8c:4c: 09:6b:c4:48:21:80:d3:00:cc:b9:eb:5d:53:fc:c7:12:9d:97: b9:65:8e:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKL1gZvc2JefJctiQ6Ta0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkOGU4NTdmYzAwYmUxNGVkOTJiOWU3OGNjM2NhNjliOGFk YzI0ODUwHhcNMjUxMjE0MDAwMDM1WhcNMjUxMjE1MDAwMDM1WjAzMTEwLwYDVQQD EygxZmQwYzk4ZTJhY2Q5MjQ2ZGY5YTZiOTI0NTZiYWFlOTg3MGMwODUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBzqz2c63rbxHHM8rwdNoiZXT0Af iV/LYhB/SyGomIOkYL4lZ4shB9FQIxIC52jAiIB1bBgn1RyKRoy2gcb9tA4Sy+xM m5RDRJJ9erVL8pyBLZe4iy1Xwk69kSiBYijict1KwBIxuxrAU+jBMiLgnb7HLzwr rWaeCXgA/2w3pGgFSdiBqhK+9Dgjx0b6AWasEgsLLnPJY3gci3HiEvjjvgoYIxZs 6G5um6jUUw+85Pb83aMDQSp4joBiZFHKbHprRQKe3N8AIdqhp2iIc865tw63PtqL FY1pmdmTY68v9fEKcaNRMpCsJ0We2CzX+VJpLhQt6rvBXAwO8O9T/iD45wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/QyY4qzZJG35prkkVrqumHDAhQMB8GA1UdIwQY MBaAFK2OhX/AC+FO2SueeMw8ppuK3CSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclk2RmY4QUw0VTdaSzU1NHpEeW1tNHJjSklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9iOGMzYmQtMTZlZi00ZjJjLTk0MDAt ZGIwOTllNTg1ZTRiLzEvclk2RmY4QUw0VTdaSzU1NHpEeW1tNHJjSklVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9iOGMzYmQtMTZlZi00ZjJjLTk0MDAtZGIwOTllNTg1ZTRi LzEvclk2RmY4QUw0VTdaSzU1NHpEeW1tNHJjSklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEel+BjL rm9/joY94iD1BWKmZCLybdZq8AM7FlUHSVNu7rnh3Bc5Bt+fXwxtnaC5dP80BuKK yI1XIect1AhhjPZxw7Nu29PCvRwRDLpkXKkGJcWdP/PXJ7t4ZhKGexUUgDfKltK4 YjlFEDJIQJn9cyjOXBoONvFczCzBqMEDB0GsyuQAJuF4U/NpAQQk03IQSeL6zhnI XLq5N8Ne2j+psQBN+n48MdLFzc9EwIXZMmpLu85lH9GJ6ucDe98IgoseKiONHftt qy3J8mTTzDM/9mory9kBNiOla916MkudZCJ+s2RiGlgadIxMCWvESCGA0wDMuetd U/zHEp2XuWWOUg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:53:18 2025 by rpki-client