This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft File: a0yzzTXvvITyqJovXSwWLD184Vs.mft (raw, json) Hash identifier: blFGNb0hDrDWYM6RmXhRBin8boQFKODCZUQnSZdYey8= Subject key identifier: 4F:47:A4:A0:41:9E:6E:C4:84:18:25:47:94:18:EC:C5:FA:2B:11:3F Authority key identifier: 6B:4C:B3:CD:35:EF:BC:84:F2:A8:9A:2F:5D:2C:16:2C:3D:7C:E1:5B Certificate issuer: /CN=6b4cb3cd35efbc84f2a89a2f5d2c162c3d7ce15b Certificate serial: 019B4A39F7B04D8BF7C3ADDC5E2685675264 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft Manifest number: 1791 Signing time: Tue 23 Dec 2025 08:01:11 +0000 Manifest this update: Tue 23 Dec 2025 08:01:11 +0000 Manifest next update: Wed 24 Dec 2025 08:01:11 +0000 Files and hashes: 1: WW1zYqOtAv6xpztxCe41pJBmBcI.roa (hash: ANkEAvSjUZh7Q55af7iPjLdQ2+UV7wXRW5HhuWBQ4lo=) 2: a0yzzTXvvITyqJovXSwWLD184Vs.crl (hash: Cs60Z2ZWaJsgTBSh5wg6wHJYz8s5iadXl8ZCeHRjGhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 08:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:39:f7:b0:4d:8b:f7:c3:ad:dc:5e:26:85:67:52:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b4cb3cd35efbc84f2a89a2f5d2c162c3d7ce15b Validity Not Before: Dec 23 08:01:11 2025 GMT Not After : Dec 24 08:01:11 2025 GMT Subject: CN=4f47a4a0419e6ec4841825479418ecc5fa2b113f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c3:3a:bf:5c:43:11:a9:6c:77:a0:6d:87:55: 85:8c:98:a4:12:ae:35:42:8b:5c:ad:2f:1a:f4:6d: 10:f9:9b:72:8f:45:10:18:3f:a5:2f:e8:2c:d8:81: 43:b5:ff:ea:f4:28:01:9c:db:6b:db:ca:48:69:c4: 1b:67:e3:15:dc:e9:91:fc:36:05:d4:b1:fc:53:09: d5:f5:a2:eb:11:0f:d2:4b:88:fe:20:a3:4f:2a:66: e2:ea:ba:97:a4:e4:36:46:c4:54:21:5b:08:1e:37: c2:71:27:fb:0e:fc:95:ab:0a:7e:09:ca:2d:3c:78: 82:c0:96:27:99:42:30:e7:26:5c:09:ca:88:49:13: f1:e8:79:ab:be:e0:87:00:63:a6:5d:9e:04:8d:05: 0a:c8:57:e2:44:96:16:d9:ec:a0:d0:03:7e:ba:9a: fe:20:b2:1a:d7:94:2c:6e:b3:ee:c5:61:61:3f:68: 58:26:85:84:4e:5b:c3:e1:d0:5f:64:5d:9e:39:3e: 49:68:67:64:b7:ab:67:d1:4a:cf:45:fa:38:7b:00: 84:ad:d2:42:f7:d9:dd:12:45:b7:3d:d6:9f:d1:35: fc:76:a2:3f:5a:68:a8:cf:72:b1:1f:50:91:5e:07: 88:91:b2:8e:79:78:ba:ee:31:5d:4e:7c:53:9b:84: 72:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:47:A4:A0:41:9E:6E:C4:84:18:25:47:94:18:EC:C5:FA:2B:11:3F X509v3 Authority Key Identifier: keyid:6B:4C:B3:CD:35:EF:BC:84:F2:A8:9A:2F:5D:2C:16:2C:3D:7C:E1:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:14:68:5b:fd:8d:24:81:3f:99:aa:1a:fc:3e:1a:e3:d9:06: 27:af:de:87:07:e7:1a:73:fc:00:da:9c:5f:e9:e5:62:62:10: 86:45:8d:b4:60:b0:43:65:ee:1d:e5:68:e7:90:05:91:44:90: b2:48:0b:16:15:10:39:e0:6c:70:f7:29:57:74:ef:94:cd:46: 85:79:40:10:3f:62:32:70:47:c2:7f:06:7a:5b:4a:cf:e5:91: 07:a8:8a:05:0c:98:89:34:9d:e7:01:f5:4f:fb:a5:11:6a:6a: d5:2e:dd:c2:c9:8b:13:81:89:72:35:aa:a0:40:5a:99:42:a4: 44:d2:d3:c1:96:a8:49:a5:80:43:0a:84:31:63:e1:03:92:67: ef:5b:fd:11:b3:c7:6c:1d:7f:db:a3:15:d1:c6:1f:2a:c9:b1: 95:11:09:50:10:db:43:c3:03:ba:e7:39:2f:a6:1a:fc:ed:db: 82:54:23:f4:ba:2c:7f:16:67:71:3a:4a:94:63:0b:44:f7:52: b0:7a:39:08:7b:61:49:49:7d:60:9d:e3:7a:52:b5:af:07:ef: 48:e5:fa:0d:48:9c:04:e5:4b:ed:67:a9:75:1a:29:09:fd:95: 62:08:6e:87:71:f2:28:39:7f:2a:8d:9e:c1:f9:76:99:58:c0: 03:2f:70:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKOfewTYv3w63cXiaFZ1JkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNGNiM2NkMzVlZmJjODRmMmE4OWEyZjVkMmMxNjJjM2Q3 Y2UxNWIwHhcNMjUxMjIzMDgwMTExWhcNMjUxMjI0MDgwMTExWjAzMTEwLwYDVQQD Eyg0ZjQ3YTRhMDQxOWU2ZWM0ODQxODI1NDc5NDE4ZWNjNWZhMmIxMTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsM6v1xDEalsd6Bth1WFjJikEq41 QotcrS8a9G0Q+Ztyj0UQGD+lL+gs2IFDtf/q9CgBnNtr28pIacQbZ+MV3OmR/DYF 1LH8UwnV9aLrEQ/SS4j+IKNPKmbi6rqXpOQ2RsRUIVsIHjfCcSf7DvyVqwp+Ccot PHiCwJYnmUIw5yZcCcqISRPx6HmrvuCHAGOmXZ4EjQUKyFfiRJYW2eyg0AN+upr+ ILIa15QsbrPuxWFhP2hYJoWETlvD4dBfZF2eOT5JaGdkt6tn0UrPRfo4ewCErdJC 99ndEkW3Pdaf0TX8dqI/Wmioz3KxH1CRXgeIkbKOeXi67jFdTnxTm4RyywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9HpKBBnm7EhBglR5QY7MX6KxE/MB8GA1UdIwQY MBaAFGtMs80177yE8qiaL10sFiw9fOFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTB5enpUWHZ2SVR5cUpvdlhTd1dMRDE4NFZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jNjk0OTMtNTI2NC00OWE0LWI0ZGEt NjNhZTc0YmIyMDNiLzEvYTB5enpUWHZ2SVR5cUpvdlhTd1dMRDE4NFZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jNjk0OTMtNTI2NC00OWE0LWI0ZGEtNjNhZTc0YmIyMDNi LzEvYTB5enpUWHZ2SVR5cUpvdlhTd1dMRDE4NFZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxRoW/2N JIE/maoa/D4a49kGJ6/ehwfnGnP8ANqcX+nlYmIQhkWNtGCwQ2XuHeVo55AFkUSQ skgLFhUQOeBscPcpV3TvlM1GhXlAED9iMnBHwn8GeltKz+WRB6iKBQyYiTSd5wH1 T/ulEWpq1S7dwsmLE4GJcjWqoEBamUKkRNLTwZaoSaWAQwqEMWPhA5Jn71v9EbPH bB1/26MV0cYfKsmxlREJUBDbQ8MDuuc5L6Ya/O3bglQj9LosfxZncTpKlGMLRPdS sHo5CHthSUl9YJ3jelK1rwfvSOX6DUicBOVL7WepdRopCf2VYghuh3HyKDl/Ko2e wfl2mVjAAy9w6Q== -----END CERTIFICATE-----Generated at Tue Dec 23 14:51:02 2025 by rpki-client