This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft File: YzCxTOdPYKjqSrtuqmDuRHD0On8.mft (raw, json) Hash identifier: 0m2OLiohuxmJuDb3pFIQtIixetgVnf27MLuOvibqiZk= Subject key identifier: 81:BF:59:44:51:A7:3C:BE:03:06:7F:74:C2:B6:30:A7:54:CE:8E:E8 Authority key identifier: 63:30:B1:4C:E7:4F:60:A8:EA:4A:BB:6E:AA:60:EE:44:70:F4:3A:7F Certificate issuer: /CN=6330b14ce74f60a8ea4abb6eaa60ee4470f43a7f Certificate serial: 019B59AC90F74698C69DE13E0849865EE26B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft Manifest number: F7 Signing time: Fri 26 Dec 2025 08:00:40 +0000 Manifest this update: Fri 26 Dec 2025 08:00:40 +0000 Manifest next update: Sat 27 Dec 2025 08:00:40 +0000 Files and hashes: 1: R3nIJXfkLuuHtzC01LNQ4csbV9c.roa (hash: 2UAzqJkEQaJ/zes9bFjleD0zd5Rzn35uxEBaqQdnoYo=) 2: YzCxTOdPYKjqSrtuqmDuRHD0On8.crl (hash: RVYAhzMbNu/Y7R4coOh29n7xqEgt9PjEvyiwwT6Yk7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:90:f7:46:98:c6:9d:e1:3e:08:49:86:5e:e2:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6330b14ce74f60a8ea4abb6eaa60ee4470f43a7f Validity Not Before: Dec 26 08:00:40 2025 GMT Not After : Dec 27 08:00:40 2025 GMT Subject: CN=81bf594451a73cbe03067f74c2b630a754ce8ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f4:a4:92:e7:00:5d:eb:5b:27:db:7a:e6:b2: 0a:a8:4b:c0:fd:01:79:21:8d:03:94:97:62:27:73: 5c:86:fa:0b:9f:6d:25:13:77:b7:1a:63:b1:53:f8: ae:1c:25:d7:3a:7e:6c:0e:d5:8f:c7:7b:bf:ce:c4: dc:be:87:20:97:df:58:72:2c:8d:dc:d0:88:40:c2: 1b:b4:c8:4a:9f:61:cf:19:40:ed:f6:2b:f4:f7:42: 51:b8:be:26:d7:86:e4:cb:26:7a:74:d0:16:16:93: 55:d2:9a:cd:ed:61:c2:f5:50:4b:f7:32:87:95:55: c7:dc:0e:26:26:02:ba:71:44:cf:ec:4b:ee:63:3a: 72:ff:bb:02:16:89:08:1f:88:40:77:99:1e:34:10: 0c:9e:99:7a:11:5f:f7:92:cc:24:ca:f7:27:c8:7a: 7f:66:fb:85:08:4a:8f:3a:05:65:07:00:d2:12:ac: 0c:e2:5b:b3:0c:38:ed:73:21:46:9a:50:84:e6:49: 65:18:7d:96:57:31:67:8d:f9:24:22:a5:29:70:87: 2e:4c:47:7f:0d:4e:47:1d:e9:09:8d:09:71:9f:eb: 04:8a:b2:5e:ea:27:82:e5:28:78:80:52:d4:99:7e: c8:c9:3b:d2:13:70:41:d6:01:32:ce:65:7a:a2:d7: c0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:BF:59:44:51:A7:3C:BE:03:06:7F:74:C2:B6:30:A7:54:CE:8E:E8 X509v3 Authority Key Identifier: keyid:63:30:B1:4C:E7:4F:60:A8:EA:4A:BB:6E:AA:60:EE:44:70:F4:3A:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:1a:a5:78:3e:10:49:24:c1:e5:ec:45:89:26:56:80:4e:6d: f7:e6:51:5d:25:38:b9:cf:f3:5f:4f:6c:4e:af:fb:b2:20:fe: 34:ea:62:9b:22:e8:6a:db:98:7d:45:cb:dd:ce:71:d3:d9:aa: 5c:16:55:7e:e6:e5:fa:d3:b2:56:d3:c6:60:07:ec:50:dd:9f: dd:fb:1f:24:fd:91:02:06:86:75:3c:3a:f2:ad:35:8e:d9:11: c2:78:3b:79:39:3a:84:81:5e:40:5f:a9:33:8c:4b:72:91:37: ca:fd:c5:fe:dc:3e:db:12:14:07:b2:76:05:4b:06:c6:55:f0: 94:0d:a9:fd:5c:32:a8:41:08:44:45:64:90:9e:95:c7:de:1e: 05:a3:8a:d1:d6:47:b9:a2:00:3e:49:cf:f9:32:b1:2d:97:ff: f5:e3:e7:44:8f:89:f3:ba:c9:ed:6c:71:1b:49:53:c4:40:50: d7:a0:24:8a:e3:5a:9f:5a:26:cd:c9:87:08:12:50:25:5b:86: 43:83:48:1e:47:b4:d3:81:ab:c9:37:cc:63:37:fc:2c:e6:4f: 16:f4:c1:13:99:e7:88:35:fb:31:1f:9e:e6:82:34:79:2a:e2: 38:0e:26:36:91:02:a5:ab:52:be:c3:80:69:42:6b:10:8b:73: 0a:51:42:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrJD3RpjGneE+CEmGXuJrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMzBiMTRjZTc0ZjYwYThlYTRhYmI2ZWFhNjBlZTQ0NzBm NDNhN2YwHhcNMjUxMjI2MDgwMDQwWhcNMjUxMjI3MDgwMDQwWjAzMTEwLwYDVQQD Eyg4MWJmNTk0NDUxYTczY2JlMDMwNjdmNzRjMmI2MzBhNzU0Y2U4ZWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/SkkucAXetbJ9t65rIKqEvA/QF5 IY0DlJdiJ3NchvoLn20lE3e3GmOxU/iuHCXXOn5sDtWPx3u/zsTcvocgl99YciyN 3NCIQMIbtMhKn2HPGUDt9iv090JRuL4m14bkyyZ6dNAWFpNV0prN7WHC9VBL9zKH lVXH3A4mJgK6cUTP7EvuYzpy/7sCFokIH4hAd5keNBAMnpl6EV/3kswkyvcnyHp/ ZvuFCEqPOgVlBwDSEqwM4luzDDjtcyFGmlCE5kllGH2WVzFnjfkkIqUpcIcuTEd/ DU5HHekJjQlxn+sEirJe6ieC5Sh4gFLUmX7IyTvSE3BB1gEyzmV6otfARQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIG/WURRpzy+AwZ/dMK2MKdUzo7oMB8GA1UdIwQY MBaAFGMwsUznT2Co6kq7bqpg7kRw9Dp/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXpDeFRPZFBZS2pxU3J0dXFtRHVSSEQwT244LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81NmZjYWYtYzJkMC00MWZhLTllMzMt ZjEwYWQ4MmM4NTU3LzEvWXpDeFRPZFBZS2pxU3J0dXFtRHVSSEQwT244Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81NmZjYWYtYzJkMC00MWZhLTllMzMtZjEwYWQ4MmM4NTU3 LzEvWXpDeFRPZFBZS2pxU3J0dXFtRHVSSEQwT244LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARBqleD4Q SSTB5exFiSZWgE5t9+ZRXSU4uc/zX09sTq/7siD+NOpimyLoatuYfUXL3c5x09mq XBZVfubl+tOyVtPGYAfsUN2f3fsfJP2RAgaGdTw68q01jtkRwng7eTk6hIFeQF+p M4xLcpE3yv3F/tw+2xIUB7J2BUsGxlXwlA2p/VwyqEEIREVkkJ6Vx94eBaOK0dZH uaIAPknP+TKxLZf/9ePnRI+J87rJ7WxxG0lTxEBQ16AkiuNan1omzcmHCBJQJVuG Q4NIHke004GryTfMYzf8LOZPFvTBE5nniDX7MR+e5oI0eSriOA4mNpECpatSvsOA aUJrEItzClFChA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:51 2025 by rpki-client