This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft File: fYx0FDwic-IBpnVxVDHfryj-F7I.mft (raw, json) Hash identifier: IZBF/Y5k+qnEfGDDqHr0PUOsqvazodHBRtZLhHUH4hE= Subject key identifier: 87:58:14:60:6F:46:1D:C5:70:A9:35:A4:0D:2D:2C:05:76:C5:C4:54 Authority key identifier: 7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2 Certificate issuer: /CN=7d8c74143c2273e201a675715431dfaf28fe17b2 Certificate serial: 019B495E1DE02045EE456E805AC65609DADC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft Manifest number: 0C19 Signing time: Tue 23 Dec 2025 04:01:03 +0000 Manifest this update: Tue 23 Dec 2025 04:01:03 +0000 Manifest next update: Wed 24 Dec 2025 04:01:03 +0000 Files and hashes: 1: Xrjs-S2RSbrZu3yjzq9Uz6FE53U.roa (hash: BOs1xZvMppiPo1LljXNukiOUbDIO0taZ6bkmR9k5vfQ=) 2: fYx0FDwic-IBpnVxVDHfryj-F7I.crl (hash: I5T9RME4P8vgzO3sZNB9zf23LYpmxBojwJ8WNrDiiVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5e:1d:e0:20:45:ee:45:6e:80:5a:c6:56:09:da:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d8c74143c2273e201a675715431dfaf28fe17b2 Validity Not Before: Dec 23 04:01:03 2025 GMT Not After : Dec 24 04:01:03 2025 GMT Subject: CN=875814606f461dc570a935a40d2d2c0576c5c454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:42:2d:2c:52:f8:37:88:dd:82:03:f1:f6:49: cd:54:56:d0:93:09:b0:ea:7a:fa:af:54:f3:ea:86: 8d:60:7e:a9:bd:7c:f4:dd:8b:dd:e0:64:38:c0:4d: ab:34:72:f1:47:cc:c7:09:9b:77:0a:ab:56:49:1d: ce:48:5b:42:c9:fe:71:6e:71:26:c1:c7:60:34:05: 1d:64:b3:f7:a8:6e:74:8d:c8:00:e2:e2:e6:1e:f6: c0:be:56:b8:92:39:b0:95:e1:08:20:56:ae:35:eb: 69:9e:36:6c:60:f3:c3:aa:4d:f0:d4:da:35:4c:ef: a2:f3:4f:a7:31:32:b1:37:b9:19:16:9d:fe:f2:e5: d7:7d:a1:6e:8b:2e:8f:a2:fd:e9:e1:32:84:ae:fb: 3d:0e:d3:3c:1b:61:2d:b4:67:f3:8e:da:77:ae:08: af:fb:09:c6:81:ca:26:18:84:41:3e:94:34:b6:38: cf:e5:80:ae:f4:f0:66:05:03:68:d0:24:1a:dd:7e: fa:bf:10:10:0f:6a:73:d2:a2:f2:46:e2:36:09:0f: ca:10:bc:e5:b3:6f:e9:ee:e7:d6:3f:0b:c8:9d:d7: 89:8c:63:91:4a:fb:f9:8a:c0:13:27:c9:6b:74:b0: 5a:ba:f1:ee:99:47:07:dd:6e:27:b5:96:e8:66:b3: b3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:58:14:60:6F:46:1D:C5:70:A9:35:A4:0D:2D:2C:05:76:C5:C4:54 X509v3 Authority Key Identifier: keyid:7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:9c:ae:de:23:c4:8f:55:73:42:51:db:d2:82:6e:6c:35:df: 93:d8:fc:06:d0:b0:db:6a:83:1b:2a:33:39:ca:47:1f:9c:7b: ec:39:c5:d7:a1:4c:c2:a2:a5:1a:12:df:b1:81:eb:6f:a2:a5: f4:23:8e:0b:e9:c2:6a:e8:34:68:ea:5d:71:1b:ad:a1:8f:8d: 38:d8:59:7b:b6:72:7d:b1:a8:1e:cc:6f:f3:89:a6:20:0c:9a: ac:7e:52:f9:09:7f:c9:0d:87:49:72:b4:74:d4:1d:2c:7a:28: b0:8e:6d:76:65:d2:18:3b:69:0e:1a:d4:54:14:a7:68:2e:35: 40:42:94:1e:2f:c4:ed:b5:94:dd:63:bf:29:bd:5c:36:5a:be: 25:db:b8:e7:a6:9a:9e:67:62:e5:e2:6a:d9:af:92:9d:94:6d: 39:0a:46:2f:96:f2:42:d3:44:d6:6a:d0:6b:15:0b:41:8e:f5: ff:71:8f:ac:91:02:96:c5:dc:9f:d9:92:a2:b7:75:64:27:f4: 20:01:ae:e9:6a:70:fc:da:fe:e5:61:bc:47:70:33:ba:b6:78: e8:7a:31:53:12:b3:69:9b:bd:bf:ad:d2:84:1d:81:3c:9e:d3: 33:55:ff:7a:13:ae:4c:89:96:24:2e:fb:b7:ee:47:b0:95:42: 9d:94:dc:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXh3gIEXuRW6AWsZWCdrcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkOGM3NDE0M2MyMjczZTIwMWE2NzU3MTU0MzFkZmFmMjhm ZTE3YjIwHhcNMjUxMjIzMDQwMTAzWhcNMjUxMjI0MDQwMTAzWjAzMTEwLwYDVQQD Eyg4NzU4MTQ2MDZmNDYxZGM1NzBhOTM1YTQwZDJkMmMwNTc2YzVjNDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0ItLFL4N4jdggPx9knNVFbQkwmw 6nr6r1Tz6oaNYH6pvXz03Yvd4GQ4wE2rNHLxR8zHCZt3CqtWSR3OSFtCyf5xbnEm wcdgNAUdZLP3qG50jcgA4uLmHvbAvla4kjmwleEIIFauNetpnjZsYPPDqk3w1No1 TO+i80+nMTKxN7kZFp3+8uXXfaFuiy6Pov3p4TKErvs9DtM8G2EttGfzjtp3rgiv +wnGgcomGIRBPpQ0tjjP5YCu9PBmBQNo0CQa3X76vxAQD2pz0qLyRuI2CQ/KELzl s2/p7ufWPwvIndeJjGORSvv5isATJ8lrdLBauvHumUcH3W4ntZboZrOzRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdYFGBvRh3FcKk1pA0tLAV2xcRUMB8GA1UdIwQY MBaAFH2MdBQ8InPiAaZ1cVQx368o/heyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZll4MEZEd2ljLUlCcG5WeFZESGZyeWotRjdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81YzNhNGMtOTg0My00YmVjLWExNjIt MThjMDM2NTMwN2JmLzEvZll4MEZEd2ljLUlCcG5WeFZESGZyeWotRjdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS81YzNhNGMtOTg0My00YmVjLWExNjItMThjMDM2NTMwN2Jm LzEvZll4MEZEd2ljLUlCcG5WeFZESGZyeWotRjdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwZyu3iPE j1VzQlHb0oJubDXfk9j8BtCw22qDGyozOcpHH5x77DnF16FMwqKlGhLfsYHrb6Kl 9COOC+nCaug0aOpdcRutoY+NONhZe7ZyfbGoHsxv84mmIAyarH5S+Ql/yQ2HSXK0 dNQdLHoosI5tdmXSGDtpDhrUVBSnaC41QEKUHi/E7bWU3WO/Kb1cNlq+Jdu456aa nmdi5eJq2a+SnZRtOQpGL5byQtNE1mrQaxULQY71/3GPrJEClsXcn9mSord1ZCf0 IAGu6Wpw/Nr+5WG8R3AzurZ46HoxUxKzaZu9v63ShB2BPJ7TM1X/ehOuTImWJC77 t+5HsJVCnZTcBw== -----END CERTIFICATE-----Generated at Tue Dec 23 06:49:22 2025 by rpki-client