This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft File: 1-_YvdgYnP0GmzMjilWB288Ch61Q.mft (raw, json) Hash identifier: Jp+54FwUY8RaFPNPvKlEMRzpiE98wb4rZ0rjvMkQCzk= Subject key identifier: 6B:DE:0D:85:0F:60:09:31:54:84:44:4D:20:DD:6C:B2:CA:35:91:74 Authority key identifier: FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54 Certificate issuer: /CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54 Certificate serial: 019B405C6595C8F2A857BB163D0B775449CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft Manifest number: 17AC Signing time: Sun 21 Dec 2025 10:02:35 +0000 Manifest this update: Sun 21 Dec 2025 10:02:35 +0000 Manifest next update: Mon 22 Dec 2025 10:02:35 +0000 Files and hashes: 1: 1-_YvdgYnP0GmzMjilWB288Ch61Q.crl (hash: cBQhY7Sm6y4lIbEvqAi/tI0OXWfkpVk6dB9hoJAvc5k=) 2: gVx18rt52MyPf0oqDqUou5AuUBM.roa (hash: vA3SGzj0FAH1RwjbpG6kC2zF7wZB8RzhXo7xrGq4Z4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:65:95:c8:f2:a8:57:bb:16:3d:0b:77:54:49:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54 Validity Not Before: Dec 21 10:02:35 2025 GMT Not After : Dec 22 10:02:35 2025 GMT Subject: CN=6bde0d850f6009315484444d20dd6cb2ca359174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:54:8c:d9:83:d4:14:22:0a:6a:87:03:b2:ed: cc:6c:2c:76:db:6a:bb:3c:b8:bb:50:40:bd:1f:9c: 9c:24:fa:96:f2:15:15:d8:a7:23:9c:5b:24:a8:e2: a8:24:ca:70:2e:55:3f:7a:51:74:89:00:40:9c:10: ae:2c:ae:30:b7:b7:d9:ed:a0:64:8b:31:58:4a:fd: 2e:4a:2c:83:95:38:e5:8b:68:9a:97:72:8a:43:af: 9e:fe:c3:95:20:f8:94:77:16:71:59:c0:fb:17:ff: 4d:7f:72:33:7f:80:f7:4f:f9:0b:6f:93:b5:d2:8b: 4c:b6:62:71:75:d0:22:97:1f:07:95:18:4d:a5:88: f7:bc:54:70:1f:97:8e:ae:fd:78:a5:b8:8b:7a:df: c1:84:e6:48:28:38:f8:90:7a:1f:3a:f5:da:b8:fb: bd:a4:b9:e6:30:1d:06:f6:0d:79:1d:c8:fb:2f:98: 0c:87:ae:9c:be:79:09:4a:b6:69:f8:ca:c9:6a:2c: 03:d7:a5:a2:5e:ef:89:be:a5:5f:b8:f2:4e:80:03: dd:b0:db:96:bc:71:2d:5c:32:af:1e:c2:2d:06:6d: f9:ff:87:8e:ca:4b:d1:1a:9e:75:2e:a8:6a:9f:fe: ea:3c:10:3b:15:3a:74:de:8b:e7:35:a0:44:e7:15: e2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:DE:0D:85:0F:60:09:31:54:84:44:4D:20:DD:6C:B2:CA:35:91:74 X509v3 Authority Key Identifier: keyid:FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:e5:0f:65:12:32:18:eb:52:71:80:e5:46:9c:90:9c:e9:93: ff:ea:d0:3d:6c:ad:fc:02:0b:18:dd:d2:38:23:2d:61:ad:4d: fe:a8:af:40:d2:7b:c2:6e:d2:83:80:f4:78:ac:0d:ab:8c:41: 0c:7a:a9:be:7c:2e:a2:93:2c:b8:04:58:60:71:29:1b:a1:60: fc:da:86:d4:ee:f4:bf:89:c8:b4:cd:bd:b9:1d:22:7f:27:e6: f5:be:a1:f6:e0:f3:22:2e:80:b0:5c:84:dc:1b:cc:99:c5:2d: e9:8f:7b:70:a7:4b:8e:8f:c1:bf:9f:50:52:ac:fd:10:bf:e1: 0f:d8:df:b6:86:f1:af:a5:39:be:33:28:b3:ba:e5:4b:76:af: 9c:df:6a:00:db:fb:54:4e:29:52:b2:ee:2c:94:b2:c6:db:f1: 17:69:e1:eb:86:f7:0c:fa:79:fb:b7:c6:ed:c4:42:9c:f6:31: 16:7e:b6:f9:1c:64:b8:89:f6:49:11:02:0d:64:b9:c1:28:96: 42:7b:3b:81:aa:ea:11:e2:25:d2:a7:aa:1e:c2:57:bd:48:65: 90:68:58:34:4d:51:a6:7f:6c:28:cd:80:f1:8d:20:88:b2:5b: 5e:e2:0a:6e:51:45:c6:1c:5a:13:59:0b:59:23:70:ee:9e:bb: 77:a2:43:f8 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtAXGWVyPKoV7sWPQt3VEnMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZjYyZjc2MDYyNzNmNDFhNmNjYzhlMjk1NjA3NmYzYzBh MWViNTQwHhcNMjUxMjIxMTAwMjM1WhcNMjUxMjIyMTAwMjM1WjAzMTEwLwYDVQQD Eyg2YmRlMGQ4NTBmNjAwOTMxNTQ4NDQ0NGQyMGRkNmNiMmNhMzU5MTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllSM2YPUFCIKaocDsu3MbCx222q7 PLi7UEC9H5ycJPqW8hUV2KcjnFskqOKoJMpwLlU/elF0iQBAnBCuLK4wt7fZ7aBk izFYSv0uSiyDlTjli2ial3KKQ6+e/sOVIPiUdxZxWcD7F/9Nf3Izf4D3T/kLb5O1 0otMtmJxddAilx8HlRhNpYj3vFRwH5eOrv14pbiLet/BhOZIKDj4kHofOvXauPu9 pLnmMB0G9g15Hcj7L5gMh66cvnkJSrZp+MrJaiwD16WiXu+JvqVfuPJOgAPdsNuW vHEtXDKvHsItBm35/4eOykvRGp51Lqhqn/7qPBA7FTp03ovnNaBE5xXi/QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGveDYUPYAkxVIRETSDdbLLKNZF0MB8GA1UdIwQY MBaAFPv2L3YGJz9BpszI4pVgdvPAoetUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1fWXZkZ1luUDBHbXpNamlsV0IyODhDaDYxUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvOTVlZWJiLTBhOWQtNGY3MS1iM2Y5 LTU2NDllMWIxOTJiYi8xLzEtX1l2ZGdZblAwR216TWppbFdCMjg4Q2g2MVEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzIzLzk1ZWViYi0wYTlkLTRmNzEtYjNmOS01NjQ5ZTFiMTky YmIvMS8xLV9ZdmRnWW5QMEdtek1qaWxXQjI4OENoNjFRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARuUP ZRIyGOtScYDlRpyQnOmT/+rQPWyt/AILGN3SOCMtYa1N/qivQNJ7wm7Sg4D0eKwN q4xBDHqpvnwuopMsuARYYHEpG6Fg/NqG1O70v4nItM29uR0ifyfm9b6h9uDzIi6A sFyE3BvMmcUt6Y97cKdLjo/Bv59QUqz9EL/hD9jftobxr6U5vjMos7rlS3avnN9q ANv7VE4pUrLuLJSyxtvxF2nh64b3DPp5+7fG7cRCnPYxFn62+RxkuIn2SRECDWS5 wSiWQns7garqEeIl0qeqHsJXvUhlkGhYNE1Rpn9sKM2A8Y0giLJbXuIKblFFxhxa E1kLWSNw7p67d6JD+A== -----END CERTIFICATE-----Generated at Sun Dec 21 19:31:08 2025 by rpki-client