This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft File: BrjtmF7yA06OMHxEfzSWwyra0sg.mft (raw, json) Hash identifier: 2J/NSj12ZsHFpD7BNBJ7v3rpAOB/V4rkWdQ22BzSeuM= Subject key identifier: FC:FF:ED:AA:53:A0:1E:BA:C9:5F:F1:41:70:19:08:47:86:33:0E:89 Authority key identifier: 06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8 Certificate issuer: /CN=06b8ed985ef2034e8e307c447f3496c32adad2c8 Certificate serial: 019B5AF65C292A137375D4DC8B010D63E5FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 14:00:53 +0000 Manifest this update: Fri 26 Dec 2025 14:00:53 +0000 Manifest next update: Sat 27 Dec 2025 14:00:53 +0000 Files and hashes: 1: BrjtmF7yA06OMHxEfzSWwyra0sg.crl (hash: F51Sn3YrKuw+GSOBlVPmh4NR/RYY6WwUI+OC9dGEJh8=) 2: NqaLmcA0hS3kbvvGXTMO3PSyQ-c.roa (hash: /fpzuan/b2/lZgMGOV41W9znkrskBH2VUdOsvVz//ik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:5c:29:2a:13:73:75:d4:dc:8b:01:0d:63:e5:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06b8ed985ef2034e8e307c447f3496c32adad2c8 Validity Not Before: Dec 26 14:00:53 2025 GMT Not After : Dec 27 14:00:53 2025 GMT Subject: CN=fcffedaa53a01ebac95ff1417019084786330e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:dd:f5:c9:6f:86:08:f2:b7:dc:40:92:c5:b5: 17:a6:2c:1b:2f:d3:07:6d:37:a5:b8:f7:9c:d5:dd: e5:2a:87:b8:6a:ff:7c:f5:fc:07:68:6e:db:57:d7: b2:fe:85:5e:cc:ab:43:88:c9:5c:28:a8:50:04:84: 81:e7:af:d1:bd:85:70:72:e6:af:ab:f9:36:64:24: 37:aa:bb:c8:d4:e3:e3:de:37:67:6a:28:c3:ba:a2: 32:c7:3b:2d:ea:6b:f0:ad:f1:12:75:5e:8a:e4:49: 48:96:de:01:15:d9:96:45:26:b3:ac:b7:bb:af:5a: 0f:3b:4b:e1:19:b4:d2:81:15:c0:fa:c0:47:11:b3: dc:78:b4:c6:7b:89:6a:2f:6c:aa:1d:db:ba:e1:73: 5d:1f:d9:16:d2:4d:0c:60:bf:82:8e:5a:d2:34:d9: 36:de:dd:90:e1:0f:a0:b0:ce:26:ac:a7:10:f8:d9: 21:e0:ba:96:15:93:77:74:ad:85:ac:77:0e:33:f1: 94:a4:ab:b3:44:26:da:cb:52:bd:29:63:b7:54:a9: b4:e6:0a:a9:82:52:68:9a:e4:51:f9:44:4b:c0:2c: 9f:3f:c1:a3:f3:9b:69:ea:ba:f2:8a:8a:8e:63:fc: 7c:da:b5:1e:ad:32:e0:cb:06:81:c7:ab:38:63:c7: de:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FF:ED:AA:53:A0:1E:BA:C9:5F:F1:41:70:19:08:47:86:33:0E:89 X509v3 Authority Key Identifier: keyid:06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:f0:10:e4:5e:ee:af:ad:bf:52:a3:1d:bf:ff:b0:11:e3:37: 1d:30:fb:51:2a:46:16:40:ea:74:d2:8d:b9:a1:2c:86:47:f9: 68:1c:9b:1c:fa:25:80:5a:dc:7e:27:27:0b:a1:12:2b:d9:91: a6:ac:54:5c:f6:9c:7c:ed:97:0c:2b:48:c2:d9:7c:a7:10:65: 0b:d6:93:2e:f7:6d:59:72:7a:2c:9f:c8:84:0b:47:0d:64:9b: a9:ff:fd:e2:e4:ac:f3:e1:79:e2:20:42:94:5c:70:e9:91:c1: f6:ca:38:64:03:ed:66:65:07:12:e3:27:76:92:25:cd:90:6b: f9:8d:8a:46:53:f0:37:b8:f7:c6:0a:9a:67:07:f4:9e:af:0c: 86:f3:0c:3f:f5:14:27:91:48:25:3c:38:24:cb:65:7e:a1:73: e4:95:48:15:03:5f:09:52:28:23:d2:91:09:ed:4e:a1:55:0c: 4e:3b:57:68:79:ae:d5:47:8c:0b:b8:70:91:01:97:38:6e:ac: dd:bd:2f:d3:9c:17:02:88:a6:9b:14:dd:1a:0b:1c:6d:8f:23: ae:c5:6b:c5:64:24:f1:1d:d0:12:0a:01:f4:8c:13:13:8d:da: fe:d2:94:cb:28:77:06:4f:0d:cb:20:63:89:5a:65:22:08:a3: a9:99:c2:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9lwpKhNzddTciwENY+X6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YjhlZDk4NWVmMjAzNGU4ZTMwN2M0NDdmMzQ5NmMzMmFk YWQyYzgwHhcNMjUxMjI2MTQwMDUzWhcNMjUxMjI3MTQwMDUzWjAzMTEwLwYDVQQD EyhmY2ZmZWRhYTUzYTAxZWJhYzk1ZmYxNDE3MDE5MDg0Nzg2MzMwZTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiN31yW+GCPK33ECSxbUXpiwbL9MH bTeluPec1d3lKoe4av989fwHaG7bV9ey/oVezKtDiMlcKKhQBISB56/RvYVwcuav q/k2ZCQ3qrvI1OPj3jdnaijDuqIyxzst6mvwrfESdV6K5ElIlt4BFdmWRSazrLe7 r1oPO0vhGbTSgRXA+sBHEbPceLTGe4lqL2yqHdu64XNdH9kW0k0MYL+CjlrSNNk2 3t2Q4Q+gsM4mrKcQ+Nkh4LqWFZN3dK2FrHcOM/GUpKuzRCbay1K9KWO3VKm05gqp glJomuRR+URLwCyfP8Gj85tp6rryioqOY/x82rUerTLgywaBx6s4Y8feXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPz/7apToB66yV/xQXAZCEeGMw6JMB8GA1UdIwQY MBaAFAa47Zhe8gNOjjB8RH80lsMq2tLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnJqdG1GN3lBMDZPTUh4RWZ6U1d3eXJhMHNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mYzVhZjUtMGI1MC00NTMxLTkzNzQt ZWJlYjlhOTkxNDg4LzEvQnJqdG1GN3lBMDZPTUh4RWZ6U1d3eXJhMHNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mYzVhZjUtMGI1MC00NTMxLTkzNzQtZWJlYjlhOTkxNDg4 LzEvQnJqdG1GN3lBMDZPTUh4RWZ6U1d3eXJhMHNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARfAQ5F7u r62/UqMdv/+wEeM3HTD7USpGFkDqdNKNuaEshkf5aBybHPolgFrcficnC6ESK9mR pqxUXPacfO2XDCtIwtl8pxBlC9aTLvdtWXJ6LJ/IhAtHDWSbqf/94uSs8+F54iBC lFxw6ZHB9so4ZAPtZmUHEuMndpIlzZBr+Y2KRlPwN7j3xgqaZwf0nq8MhvMMP/UU J5FIJTw4JMtlfqFz5JVIFQNfCVIoI9KRCe1OoVUMTjtXaHmu1UeMC7hwkQGXOG6s 3b0v05wXAoimmxTdGgscbY8jrsVrxWQk8R3QEgoB9IwTE43a/tKUyyh3Bk8NyyBj iVplIgijqZnCKw== -----END CERTIFICATE-----Generated at Fri Dec 26 21:12:59 2025 by rpki-client