This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft File: CYsceb-uEqW4fzXJmLtgs_pOZiE.mft (raw, json) Hash identifier: ntQhV6Qdmxr7DVZfXuTHZagAkvG2xNovgTHn9J+05o0= Subject key identifier: FC:35:45:79:92:F3:F7:49:FF:D8:7E:35:57:C7:A7:C6:25:6D:16:13 Authority key identifier: 09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21 Certificate issuer: /CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621 Certificate serial: 019B5975B18172A88C4628CBC6DB4DA358FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 07:00:43 +0000 Manifest this update: Fri 26 Dec 2025 07:00:43 +0000 Manifest next update: Sat 27 Dec 2025 07:00:43 +0000 Files and hashes: 1: CYsceb-uEqW4fzXJmLtgs_pOZiE.crl (hash: XaUxRf+BXKCYLqJ1IV3G5Yr0XWiet/zSOpo1+hABWnM=) 2: azMfriENBDiIJYosRP-8DXKTAfY.roa (hash: SyiAg9Yx6L4V6Q7e4+QQHSJOd2fmFI1gwl+oA6hcHVg=) 3: ibvrneMp14yx1aeNF9L_aPTpyR8.roa (hash: VZVseX73bEIVKUE/+ZPW5JNub6b1T9krDYglkTTQtpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:b1:81:72:a8:8c:46:28:cb:c6:db:4d:a3:58:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621 Validity Not Before: Dec 26 07:00:43 2025 GMT Not After : Dec 27 07:00:43 2025 GMT Subject: CN=fc35457992f3f749ffd87e3557c7a7c6256d1613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:57:bc:61:34:ab:85:fc:77:7d:fb:67:74:23: 96:11:89:cb:bf:da:49:78:18:de:9c:4c:e1:4f:53: be:15:ea:75:53:bb:e1:aa:b7:e8:09:f5:6e:7f:56: f2:55:e2:8d:58:41:ea:98:85:e8:f0:46:d4:d1:e8: 19:70:bc:52:72:1a:30:4b:2a:18:6f:d7:d4:6d:20: 15:95:4b:e4:2c:73:bd:9a:c5:63:bd:e7:76:14:b4: b6:43:16:a0:ef:4f:12:87:2a:80:1e:c7:c3:7b:aa: 34:cf:2b:40:85:4c:fe:cd:aa:60:78:3e:34:ca:85: a8:7e:ba:65:b9:02:77:a0:0a:ba:ce:37:cf:64:8c: 38:9d:02:6f:c5:d6:eb:ca:e4:95:66:33:c8:e1:72: 97:fc:c2:30:b1:40:df:8f:8b:b4:6c:d9:8d:58:a0: 66:66:f0:ed:4e:2c:00:90:1c:c5:27:66:0b:73:f7: c1:c8:85:af:df:8f:84:8a:33:9c:51:af:f8:3b:fe: 59:74:0d:27:cf:06:46:04:5b:35:5c:99:24:b4:a5: 99:9c:54:98:cf:2e:ef:f1:32:58:de:37:01:6b:f7: 53:4f:ce:70:3d:80:70:43:63:ed:8a:8e:db:61:7f: dd:8b:39:86:f9:b7:af:26:50:43:a0:c5:43:dd:e8: 0f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:35:45:79:92:F3:F7:49:FF:D8:7E:35:57:C7:A7:C6:25:6D:16:13 X509v3 Authority Key Identifier: keyid:09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:20:de:7b:3f:76:e4:f3:31:28:1d:80:9a:17:13:49:5b:ad: 84:c8:09:ef:b1:3d:04:44:9b:9b:8b:e1:69:e4:67:35:e0:7f: 41:f0:af:0c:ef:cc:24:9f:47:d5:91:b3:53:4b:fd:74:96:50: 16:2e:43:f7:70:3e:27:a6:e5:81:1e:5b:84:bf:17:83:25:13: df:27:98:45:fd:f7:af:83:a0:21:dd:81:d7:90:53:cb:3d:4a: 02:db:0b:4c:17:aa:88:73:fe:50:25:90:5b:0c:0b:43:67:12: af:25:2e:80:b1:f0:e6:37:2b:99:fb:0b:83:21:dc:db:a9:7c: f9:a8:16:1e:46:69:21:1a:2f:b4:3f:f1:b9:4b:a5:4c:d5:02: 22:c1:06:1c:90:7c:3e:cf:7e:5d:7d:ae:58:30:63:1c:8c:47: 21:11:20:be:0d:99:e9:66:4c:e5:96:9c:4f:da:f6:f9:e7:e1: d9:6a:45:e2:a5:42:b5:da:ba:75:38:ec:b7:a7:12:0d:02:2f: b9:57:e7:da:8d:e9:fc:90:77:ff:42:08:2a:11:9e:9b:49:dd: 79:8d:60:98:00:e1:b1:28:fb:3e:e2:9a:22:8c:89:a2:7a:fc: 1e:0c:0e:4b:a5:a0:5f:19:b8:65:22:59:10:91:81:71:e6:95: 14:29:e1:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdbGBcqiMRijLxttNo1j7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OGIxYzc5YmZhZTEyYTViODdmMzVjOTk4YmI2MGIzZmE0 ZTY2MjEwHhcNMjUxMjI2MDcwMDQzWhcNMjUxMjI3MDcwMDQzWjAzMTEwLwYDVQQD EyhmYzM1NDU3OTkyZjNmNzQ5ZmZkODdlMzU1N2M3YTdjNjI1NmQxNjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ve8YTSrhfx3fftndCOWEYnLv9pJ eBjenEzhT1O+Fep1U7vhqrfoCfVuf1byVeKNWEHqmIXo8EbU0egZcLxSchowSyoY b9fUbSAVlUvkLHO9msVjved2FLS2Qxag708ShyqAHsfDe6o0zytAhUz+zapgeD40 yoWofrpluQJ3oAq6zjfPZIw4nQJvxdbryuSVZjPI4XKX/MIwsUDfj4u0bNmNWKBm ZvDtTiwAkBzFJ2YLc/fByIWv34+EijOcUa/4O/5ZdA0nzwZGBFs1XJkktKWZnFSY zy7v8TJY3jcBa/dTT85wPYBwQ2Ptio7bYX/dizmG+bevJlBDoMVD3egPrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPw1RXmS8/dJ/9h+NVfHp8YlbRYTMB8GA1UdIwQY MBaAFAmLHHm/rhKluH81yZi7YLP6TmYhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1lzY2ViLXVFcVc0ZnpYSm1MdGdzX3BPWmlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC84ZGIwMDItOTA4MC00ZjBiLTg0NWIt OWI3YzQ0ZGMxOTNiLzEvQ1lzY2ViLXVFcVc0ZnpYSm1MdGdzX3BPWmlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC84ZGIwMDItOTA4MC00ZjBiLTg0NWItOWI3YzQ0ZGMxOTNi LzEvQ1lzY2ViLXVFcVc0ZnpYSm1MdGdzX3BPWmlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyDeez92 5PMxKB2AmhcTSVuthMgJ77E9BESbm4vhaeRnNeB/QfCvDO/MJJ9H1ZGzU0v9dJZQ Fi5D93A+J6blgR5bhL8XgyUT3yeYRf33r4OgId2B15BTyz1KAtsLTBeqiHP+UCWQ WwwLQ2cSryUugLHw5jcrmfsLgyHc26l8+agWHkZpIRovtD/xuUulTNUCIsEGHJB8 Ps9+XX2uWDBjHIxHIREgvg2Z6WZM5ZacT9r2+efh2WpF4qVCtdq6dTjst6cSDQIv uVfn2o3p/JB3/0IIKhGem0ndeY1gmADhsSj7PuKaIoyJonr8HgwOS6WgXxm4ZSJZ EJGBceaVFCnhBQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:06 2025 by rpki-client