This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft File: RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft (raw, json) Hash identifier: hwW0R50QtCn4ZXcI8psTpauFdttQL8l4sHFlbG4Vqo8= Subject key identifier: EA:88:17:DC:2D:7E:E7:43:57:E6:E7:D4:03:BF:B5:09:D9:85:15:16 Authority key identifier: 44:8C:A3:95:37:59:7C:FA:E6:0A:E0:42:1D:B8:E0:98:B4:E2:61:30 Certificate issuer: /CN=448ca39537597cfae60ae0421db8e098b4e26130 Certificate serial: 019B58D106BF114C219563D016C605088C89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 04:00:52 +0000 Manifest this update: Fri 26 Dec 2025 04:00:52 +0000 Manifest next update: Sat 27 Dec 2025 04:00:52 +0000 Files and hashes: 1: EXivR_Wvv2aOO3jHO658CAON0No.roa (hash: fh34cv2WRgihe99oCLRpx5puteDZpUePtPBBSbNg/Qg=) 2: RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl (hash: 8Mymj6bNPLtQlBUFCeguZIHzyPIYto6nlpMEVk3wXYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:06:bf:11:4c:21:95:63:d0:16:c6:05:08:8c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=448ca39537597cfae60ae0421db8e098b4e26130 Validity Not Before: Dec 26 04:00:52 2025 GMT Not After : Dec 27 04:00:52 2025 GMT Subject: CN=ea8817dc2d7ee74357e6e7d403bfb509d9851516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:45:01:b0:cd:4d:ed:40:d3:a7:08:27:c0:15: c6:b6:59:9c:3f:ff:65:35:0c:44:3d:76:9b:f9:f4: f5:3e:b6:0c:7c:1d:f9:c8:c1:b9:93:b2:e9:20:bb: 20:45:97:50:a2:c2:f5:29:07:ee:da:ea:43:fa:f2: 71:e7:6c:b8:6d:f5:fa:b8:a7:4c:55:50:37:f9:c0: cd:d1:9e:c2:8b:d7:61:7c:d6:5c:ad:b1:49:56:cc: a2:14:d2:b1:c2:43:12:84:b3:18:86:32:3d:28:57: cf:8d:1c:96:9d:5c:67:c0:c0:cb:89:68:57:64:de: 6e:48:cb:93:fb:04:1a:82:83:37:c9:5d:b1:22:10: 0f:48:29:a8:f0:62:51:cb:f4:d4:a7:6b:78:de:ce: 61:36:fa:16:c1:b8:e6:9e:e7:bb:37:00:61:c2:6e: 94:a1:43:82:9f:d1:6c:cb:27:d2:19:bc:a8:f6:49: 76:c2:ee:ee:a0:a1:c1:b2:f8:94:66:e1:2a:d4:d9: 97:88:3a:dd:aa:ee:77:46:da:d0:00:15:c0:df:62: be:95:7a:61:61:04:98:a3:b1:5a:6f:8a:ea:45:67: 2f:78:9f:d3:79:40:5e:2f:df:49:37:b3:db:d5:96: a4:6d:4b:db:81:68:46:ba:0b:32:d8:25:8e:9a:7c: 3b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:88:17:DC:2D:7E:E7:43:57:E6:E7:D4:03:BF:B5:09:D9:85:15:16 X509v3 Authority Key Identifier: keyid:44:8C:A3:95:37:59:7C:FA:E6:0A:E0:42:1D:B8:E0:98:B4:E2:61:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:dc:4b:10:5d:9d:75:89:50:09:3b:35:cb:43:1b:ec:62:20: da:d9:0b:51:be:69:dc:cc:f9:16:ad:1c:99:57:11:42:72:77: eb:05:10:b6:0b:61:45:f7:ac:39:ea:97:59:ec:12:73:ce:f4: 2d:18:a1:df:91:b9:ca:34:a1:85:8c:d9:08:38:25:cf:1d:fb: f0:85:7b:3b:28:a8:77:b8:64:aa:d1:ff:a1:c3:03:ff:04:28: 26:16:16:19:9e:94:68:cc:36:50:70:d1:ac:c7:d6:b7:79:05: 8d:da:7a:f9:38:b1:ac:4f:dc:42:65:c3:0f:08:9d:4c:fc:03: 56:70:c3:01:3c:c5:a8:d5:de:f7:b3:3b:46:bb:4a:7a:81:2f: b3:d9:a3:74:2e:bb:f9:c7:4a:b5:6e:eb:95:35:0e:5b:fa:43: c9:1a:75:0d:92:d0:1a:44:49:ad:47:ee:cf:9f:54:9a:3f:ff: c1:11:c8:ee:11:6e:c9:02:fb:32:1a:e2:6c:b7:bb:a0:0f:57: d3:ad:f2:c3:bd:7b:3b:5f:6e:c4:27:3f:b2:45:2d:da:a7:6d: 8b:c1:dd:71:9c:7e:d2:6b:a7:73:ac:44:5c:18:6d:2f:98:5d: 08:31:5e:54:7f:88:8d:5f:4b:8a:1a:b3:3b:d3:ca:e5:6a:27: 99:66:9c:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0Qa/EUwhlWPQFsYFCIyJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0OGNhMzk1Mzc1OTdjZmFlNjBhZTA0MjFkYjhlMDk4YjRl MjYxMzAwHhcNMjUxMjI2MDQwMDUyWhcNMjUxMjI3MDQwMDUyWjAzMTEwLwYDVQQD EyhlYTg4MTdkYzJkN2VlNzQzNTdlNmU3ZDQwM2JmYjUwOWQ5ODUxNTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0UBsM1N7UDTpwgnwBXGtlmcP/9l NQxEPXab+fT1PrYMfB35yMG5k7LpILsgRZdQosL1KQfu2upD+vJx52y4bfX6uKdM VVA3+cDN0Z7Ci9dhfNZcrbFJVsyiFNKxwkMShLMYhjI9KFfPjRyWnVxnwMDLiWhX ZN5uSMuT+wQagoM3yV2xIhAPSCmo8GJRy/TUp2t43s5hNvoWwbjmnue7NwBhwm6U oUOCn9FsyyfSGbyo9kl2wu7uoKHBsviUZuEq1NmXiDrdqu53RtrQABXA32K+lXph YQSYo7Fab4rqRWcveJ/TeUBeL99JN7Pb1ZakbUvbgWhGugsy2CWOmnw76QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqIF9wtfudDV+bn1AO/tQnZhRUWMB8GA1UdIwQY MBaAFESMo5U3WXz65grgQh244Ji04mEwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkl5amxUZFpmUHJtQ3VCQ0hiamdtTFRpWVRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kYjA1MTktNGU1YS00Yjc1LTg4ZmQt YmJjMjM5ZTg5N2ViLzEvUkl5amxUZFpmUHJtQ3VCQ0hiamdtTFRpWVRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9kYjA1MTktNGU1YS00Yjc1LTg4ZmQtYmJjMjM5ZTg5N2Vi LzEvUkl5amxUZFpmUHJtQ3VCQ0hiamdtTFRpWVRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADdxLEF2d dYlQCTs1y0Mb7GIg2tkLUb5p3Mz5Fq0cmVcRQnJ36wUQtgthRfesOeqXWewSc870 LRih35G5yjShhYzZCDglzx378IV7Oyiod7hkqtH/ocMD/wQoJhYWGZ6UaMw2UHDR rMfWt3kFjdp6+TixrE/cQmXDDwidTPwDVnDDATzFqNXe97M7RrtKeoEvs9mjdC67 +cdKtW7rlTUOW/pDyRp1DZLQGkRJrUfuz59Umj//wRHI7hFuyQL7MhribLe7oA9X 063yw717O19uxCc/skUt2qdti8HdcZx+0munc6xEXBhtL5hdCDFeVH+IjV9Lihqz O9PK5WonmWaccA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:27 2025 by rpki-client