This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.mft File: fYtUoMG_jx-cTJVpuXXKRuuobOc.mft (raw, json) Hash identifier: MTcSI8+dLpxNJ612L7vZnCgdvb5uqVsNJlqnAeaufVs= Subject key identifier: AF:E3:A2:39:73:CC:6F:F5:A5:BF:89:57:3D:F6:E2:93:2B:C6:46:56 Authority key identifier: 7D:8B:54:A0:C1:BF:8F:1F:9C:4C:95:69:B9:75:CA:46:EB:A8:6C:E7 Certificate issuer: /CN=7d8b54a0c1bf8f1f9c4c9569b975ca46eba86ce7 Certificate serial: 019B5A5179A0650512BCA60065F43AAF00E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fYtUoMG_jx-cTJVpuXXKRuuobOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.mft Manifest number: 1F Signing time: Fri 26 Dec 2025 11:00:47 +0000 Manifest this update: Fri 26 Dec 2025 11:00:47 +0000 Manifest next update: Sat 27 Dec 2025 11:00:47 +0000 Files and hashes: 1: AXRVN_DR5BycQVCdRUvhSmejAc8.asa (hash: W8JeQq9+EkgLaIUZ5BFcb8k9jWkbcN2YzZXMIaK67Sg=) 2: fYtUoMG_jx-cTJVpuXXKRuuobOc.crl (hash: e5X5LZadW+/ggkGHVcoDCzL1VrE4ubIlL4Su2E1Z93Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.mft rsync://rpki.ripe.net/repository/DEFAULT/fYtUoMG_jx-cTJVpuXXKRuuobOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:79:a0:65:05:12:bc:a6:00:65:f4:3a:af:00:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d8b54a0c1bf8f1f9c4c9569b975ca46eba86ce7 Validity Not Before: Dec 26 11:00:47 2025 GMT Not After : Dec 27 11:00:47 2025 GMT Subject: CN=afe3a23973cc6ff5a5bf89573df6e2932bc64656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:09:e1:a9:00:8c:cf:b3:41:67:12:38:e0:56: 16:50:ed:f2:e7:7d:b6:b1:b0:78:35:d0:b9:7d:5c: b7:5c:ff:da:16:a8:26:f4:a4:ef:5d:96:18:44:53: 5f:ad:97:77:f1:77:6f:bd:ca:5f:9a:e9:1e:42:02: 42:f0:1d:3e:1e:b7:f8:00:ab:4d:01:4c:19:0a:f5: f4:f5:76:2b:6e:1c:f9:a9:00:43:f0:5c:c8:bd:a2: 76:ae:cc:7c:40:79:7e:7e:ab:24:db:c1:1a:6c:27: 38:6c:26:74:77:57:c6:f0:d3:96:d9:98:b9:34:e7: d4:8e:1c:7c:f4:32:d9:7b:a8:d8:17:4b:29:0f:3b: f0:6c:c7:8b:0b:45:e2:18:73:05:3f:87:69:1f:32: 09:1c:9e:27:6c:11:ca:53:b0:d4:9e:1b:54:f2:67: 52:d7:0b:8e:30:c6:ee:69:e2:ff:8e:fb:09:6b:28: 84:77:03:d4:70:72:e8:80:37:a4:ed:eb:79:24:f8: 60:96:a7:6c:fb:c5:b8:8e:86:ea:e8:4e:46:e5:ee: 31:8f:57:77:d8:e4:4f:ab:85:d0:da:88:e8:1e:0d: 4e:34:a7:52:0f:27:41:83:85:f3:d3:a7:9f:2a:6e: 93:10:3a:ae:7f:d2:98:7e:f4:88:81:17:82:aa:00: 6b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E3:A2:39:73:CC:6F:F5:A5:BF:89:57:3D:F6:E2:93:2B:C6:46:56 X509v3 Authority Key Identifier: keyid:7D:8B:54:A0:C1:BF:8F:1F:9C:4C:95:69:B9:75:CA:46:EB:A8:6C:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYtUoMG_jx-cTJVpuXXKRuuobOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:df:d0:b7:3e:ce:53:46:fe:66:db:be:fb:62:99:ae:40:54: 72:cb:2f:da:3f:54:97:b5:bd:2e:18:eb:a3:5b:56:43:d7:81: 7a:3d:71:80:cb:a0:8f:a2:e4:b5:91:8f:b9:22:65:be:a9:0d: 7e:43:7e:0b:bc:f7:94:53:fc:08:d4:63:6e:38:14:27:73:61: 9e:69:b4:3d:f3:dc:26:c9:04:41:2f:ad:98:00:67:c4:0c:32: 3f:c0:96:82:42:39:76:9b:2b:e8:ea:aa:27:b5:f3:ca:4b:28: c5:bd:67:f3:50:e2:ae:35:bb:f4:b2:ec:84:c4:14:4f:70:7a: 2e:e9:41:3d:33:6c:51:6a:00:a5:d6:bd:75:84:61:0a:63:f1: c7:80:57:1d:af:a8:23:1d:5e:7c:b8:10:f9:e5:56:cf:f8:eb: 4c:df:56:02:2a:8d:c4:e6:7f:01:94:78:cb:9f:b5:86:be:6a: 4d:bd:33:ee:6c:c5:21:d3:ef:19:10:cc:b4:45:3f:9e:7f:a8: b9:c5:e5:59:e3:1c:9d:4f:cb:e5:2b:29:83:3d:6f:2c:6d:63: b3:56:4a:3d:f8:65:26:fd:f0:89:ae:12:36:6a:8a:d3:47:4f: 46:77:15:05:d6:ba:81:e9:a4:a8:94:bd:e4:86:68:7e:ff:24: d1:a6:98:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUXmgZQUSvKYAZfQ6rwDpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkOGI1NGEwYzFiZjhmMWY5YzRjOTU2OWI5NzVjYTQ2ZWJh ODZjZTcwHhcNMjUxMjI2MTEwMDQ3WhcNMjUxMjI3MTEwMDQ3WjAzMTEwLwYDVQQD EyhhZmUzYTIzOTczY2M2ZmY1YTViZjg5NTczZGY2ZTI5MzJiYzY0NjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAnhqQCMz7NBZxI44FYWUO3y5322 sbB4NdC5fVy3XP/aFqgm9KTvXZYYRFNfrZd38XdvvcpfmukeQgJC8B0+Hrf4AKtN AUwZCvX09XYrbhz5qQBD8FzIvaJ2rsx8QHl+fqsk28EabCc4bCZ0d1fG8NOW2Zi5 NOfUjhx89DLZe6jYF0spDzvwbMeLC0XiGHMFP4dpHzIJHJ4nbBHKU7DUnhtU8mdS 1wuOMMbuaeL/jvsJayiEdwPUcHLogDek7et5JPhglqds+8W4jobq6E5G5e4xj1d3 2ORPq4XQ2ojoHg1ONKdSDydBg4Xz06efKm6TEDquf9KYfvSIgReCqgBrNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/jojlzzG/1pb+JVz324pMrxkZWMB8GA1UdIwQY MBaAFH2LVKDBv48fnEyVabl1ykbrqGznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZll0VW9NR19qeC1jVEpWcHVYWEtSdXVvYk9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS82NTFmYWUtYjIwYS00YThlLTlhM2Mt ZjUyMjc2YmU5ZTFlLzEvZll0VW9NR19qeC1jVEpWcHVYWEtSdXVvYk9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS82NTFmYWUtYjIwYS00YThlLTlhM2MtZjUyMjc2YmU5ZTFl LzEvZll0VW9NR19qeC1jVEpWcHVYWEtSdXVvYk9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASt/Qtz7O U0b+Ztu++2KZrkBUcssv2j9Ul7W9Lhjro1tWQ9eBej1xgMugj6LktZGPuSJlvqkN fkN+C7z3lFP8CNRjbjgUJ3Nhnmm0PfPcJskEQS+tmABnxAwyP8CWgkI5dpsr6Oqq J7Xzyksoxb1n81DirjW79LLshMQUT3B6LulBPTNsUWoApda9dYRhCmPxx4BXHa+o Ix1efLgQ+eVWz/jrTN9WAiqNxOZ/AZR4y5+1hr5qTb0z7mzFIdPvGRDMtEU/nn+o ucXlWeMcnU/L5Sspgz1vLG1js1ZKPfhlJv3wia4SNmqK00dPRncVBda6gemkqJS9 5IZofv8k0aaYCg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:37 2025 by rpki-client