This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft File: rYg6hugtDZEPz1n4_5978aZxSHA.mft (raw, json) Hash identifier: J9yuF+z7Wyx8lZD5NmvB0hbhDyXxSxGV67lmrEcQcTA= Subject key identifier: 0B:54:9B:39:B8:DD:95:1C:E2:84:D7:2A:B1:92:B7:1C:C8:BC:F2:73 Authority key identifier: AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70 Certificate issuer: /CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870 Certificate serial: 019B2174FF3CF8E319008EADA7306E29ECC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft Manifest number: 09C9 Signing time: Mon 15 Dec 2025 10:01:14 +0000 Manifest this update: Mon 15 Dec 2025 10:01:14 +0000 Manifest next update: Tue 16 Dec 2025 10:01:14 +0000 Files and hashes: 1: od7ExObCxDqzHqRis0nMtXmus2Y.roa (hash: WoaJOBOnB6iTsR77zkPSuoVOWwQU/LjcUNKKgIIFfv0=) 2: rYg6hugtDZEPz1n4_5978aZxSHA.crl (hash: 5Et9wWcnyK7QhD9GhEdmLQz12b2LoJCQgPDzgYP5l5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:74:ff:3c:f8:e3:19:00:8e:ad:a7:30:6e:29:ec:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870 Validity Not Before: Dec 15 10:01:14 2025 GMT Not After : Dec 16 10:01:14 2025 GMT Subject: CN=0b549b39b8dd951ce284d72ab192b71cc8bcf273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:85:5e:7f:5d:b3:27:e2:9a:4b:82:db:e5:6f: 0b:83:6d:1b:0d:e3:39:fd:50:13:fc:08:92:a0:c3: 3f:37:22:ce:e4:bc:64:14:16:ff:03:9f:e7:5d:69: 10:bc:7f:97:74:15:e4:55:bf:f7:e5:10:91:65:4e: 9b:f2:b4:43:05:0b:e6:3f:25:b2:39:2b:64:9c:aa: e9:19:c6:70:0f:12:2e:26:f3:8d:1c:4f:60:71:34: df:02:8a:f7:71:f1:a9:09:1c:75:fa:8b:a9:85:03: f8:63:b1:8c:e8:7a:20:f6:95:12:66:89:84:60:a8: 25:52:09:5b:1f:db:a0:32:50:38:24:ec:7b:7f:d5: f8:84:66:ea:9c:67:74:45:ef:5a:ee:c2:f1:33:cf: 4a:2a:4d:ef:1c:42:5f:b4:1f:b3:e9:4f:0a:4f:f8: f1:72:e7:bb:c9:ff:11:74:fe:d4:33:75:54:e1:6f: 2f:bd:88:4b:55:a8:67:fb:26:28:e5:69:78:ee:48: f0:da:7c:b4:7f:c3:6f:ad:62:12:15:ef:19:03:d8: 97:44:8e:24:b3:8c:ef:3a:86:21:d3:93:b9:49:1a: d6:d0:c0:0a:0d:7d:b7:2a:0f:c8:bd:e5:32:67:38: 13:db:ca:7d:b2:b7:51:8c:91:6f:cc:ce:e2:fa:24: 1d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:54:9B:39:B8:DD:95:1C:E2:84:D7:2A:B1:92:B7:1C:C8:BC:F2:73 X509v3 Authority Key Identifier: keyid:AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:4f:43:1a:a3:d9:1f:e1:83:72:d3:be:7b:f8:36:20:63:be: 17:f0:18:28:79:38:87:90:fe:ed:ed:1c:23:a3:7e:41:d9:15: 0d:59:72:99:22:94:b0:35:47:aa:fc:17:60:f4:b0:1a:84:74: 9b:36:58:10:f1:56:28:00:e1:7a:71:3c:a9:0a:c7:e2:73:9a: 23:f2:73:51:3a:15:32:11:ba:7f:2d:1e:0c:dc:bb:8c:d7:c1: e4:33:2d:b1:1e:30:25:3a:0e:75:cd:2f:18:49:56:31:7b:cf: ee:41:bd:74:85:aa:51:36:52:04:c1:90:9c:18:4e:3f:90:64: 23:77:b5:40:9b:c8:82:e1:33:60:c7:91:22:82:fe:ed:99:43: 7d:67:7e:77:e9:e1:83:c7:7f:db:ae:b1:b6:4f:df:cd:b8:84: ca:d6:2f:6b:9a:e5:22:ee:ad:78:2a:69:27:46:88:0e:3b:e7: 76:6c:69:a6:b3:52:bb:d2:04:4f:34:c9:98:ac:6a:da:78:92: 7e:c8:32:3b:3a:7c:b3:72:ca:1a:ff:03:ae:a4:03:b1:5d:02: b6:29:ef:7f:94:3c:66:fe:05:f0:64:28:76:bd:52:11:64:ec: 8c:a3:c8:b2:62:92:75:b2:f2:14:d2:84:e2:ca:22:35:2a:18: 28:99:e2:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdP88+OMZAI6tpzBuKezBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkODgzYTg2ZTgyZDBkOTEwZmNmNTlmOGZmOWY3YmYxYTY3 MTQ4NzAwHhcNMjUxMjE1MTAwMTE0WhcNMjUxMjE2MTAwMTE0WjAzMTEwLwYDVQQD EygwYjU0OWIzOWI4ZGQ5NTFjZTI4NGQ3MmFiMTkyYjcxY2M4YmNmMjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4Vef12zJ+KaS4Lb5W8Lg20bDeM5 /VAT/AiSoMM/NyLO5LxkFBb/A5/nXWkQvH+XdBXkVb/35RCRZU6b8rRDBQvmPyWy OStknKrpGcZwDxIuJvONHE9gcTTfAor3cfGpCRx1+ouphQP4Y7GM6Hog9pUSZomE YKglUglbH9ugMlA4JOx7f9X4hGbqnGd0Re9a7sLxM89KKk3vHEJftB+z6U8KT/jx cue7yf8RdP7UM3VU4W8vvYhLVahn+yYo5Wl47kjw2ny0f8NvrWISFe8ZA9iXRI4k s4zvOoYh05O5SRrW0MAKDX23Kg/IveUyZzgT28p9srdRjJFvzM7i+iQdPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtUmzm43ZUc4oTXKrGStxzIvPJzMB8GA1UdIwQY MBaAFK2IOoboLQ2RD89Z+P+fe/GmcUhwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcllnNmh1Z3REWkVQejFuNF81OTc4YVp4U0hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83YjA1NmQtMDlmNy00ZjEyLWIxYTIt YTU2YmYwY2Y0Y2JlLzEvcllnNmh1Z3REWkVQejFuNF81OTc4YVp4U0hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni83YjA1NmQtMDlmNy00ZjEyLWIxYTItYTU2YmYwY2Y0Y2Jl LzEvcllnNmh1Z3REWkVQejFuNF81OTc4YVp4U0hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB09DGqPZ H+GDctO+e/g2IGO+F/AYKHk4h5D+7e0cI6N+QdkVDVlymSKUsDVHqvwXYPSwGoR0 mzZYEPFWKADhenE8qQrH4nOaI/JzUToVMhG6fy0eDNy7jNfB5DMtsR4wJToOdc0v GElWMXvP7kG9dIWqUTZSBMGQnBhOP5BkI3e1QJvIguEzYMeRIoL+7ZlDfWd+d+nh g8d/266xtk/fzbiEytYva5rlIu6teCppJ0aIDjvndmxpprNSu9IETzTJmKxq2niS fsgyOzp8s3LKGv8DrqQDsV0Ctinvf5Q8Zv4F8GQodr1SEWTsjKPIsmKSdbLyFNKE 4soiNSoYKJnihQ== -----END CERTIFICATE-----Generated at Mon Dec 15 16:56:20 2025 by rpki-client