This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft File: YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft (raw, json) Hash identifier: M9S9jaosRznUo8wPeNDTvkvnc1ESscn3bbGIqaD4JGk= Subject key identifier: F9:B0:8C:9E:1E:7B:0A:CB:13:DE:70:6A:DC:AF:D0:4C:36:7F:9D:93 Authority key identifier: 63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE Certificate issuer: /CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe Certificate serial: 019B5CAE41B9E7E4552C8A910A368468B136 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 22:01:22 +0000 Manifest this update: Fri 26 Dec 2025 22:01:22 +0000 Manifest next update: Sat 27 Dec 2025 22:01:22 +0000 Files and hashes: 1: YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl (hash: yyr6o3eYOXpZt0HV7hJ/7fmOyK6ZqLS+P1rQXFcdC2k=) 2: i1y7TAu4eZuINLnbMHWhraWkV7Q.roa (hash: 5W2nC+zCGbvk80Gay8OtFwwtbb47Ru26+BBu/lW2iZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:ae:41:b9:e7:e4:55:2c:8a:91:0a:36:84:68:b1:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe Validity Not Before: Dec 26 22:01:22 2025 GMT Not After : Dec 27 22:01:22 2025 GMT Subject: CN=f9b08c9e1e7b0acb13de706adcafd04c367f9d93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1e:4d:4b:53:08:dd:35:3c:ce:3d:18:0a:f8: 3f:f4:ef:54:48:75:6a:21:72:ec:49:d5:c6:f2:0e: 3a:10:30:1c:12:74:b0:16:73:d4:08:76:17:a6:f1: 3b:c3:14:58:51:ab:0f:b3:54:1c:71:38:d5:22:50: 7f:0e:35:65:3e:e6:ee:f9:84:e6:58:93:b6:6f:4e: 3d:19:d2:fb:7b:8b:ab:be:00:68:fa:b2:88:5b:5d: 2c:d4:0d:9d:ae:45:cf:bd:44:9e:4f:5b:88:58:ff: 02:12:2a:47:e2:a3:71:5f:3f:75:d2:f4:b0:df:25: 93:14:60:c4:2e:99:01:1e:34:86:f0:86:2f:ac:d4: b4:18:11:0d:08:4d:da:0e:cf:f0:17:30:cb:a3:47: 5a:e2:b5:97:78:57:7e:41:d9:df:e5:2a:ce:18:2b: 1f:f4:b8:ea:b8:08:44:0a:31:62:8a:38:f5:6b:85: 5c:3a:b9:c2:a0:b4:2a:99:f0:63:a4:ce:90:d1:1b: fd:be:23:39:c1:4f:ba:90:42:97:03:ea:a9:db:02: fb:0d:fc:a7:ed:13:16:53:cf:a8:c3:7e:16:93:62: d7:12:6d:1f:d8:ed:b6:f5:69:09:b6:50:a4:71:ab: 3c:92:96:2b:60:b3:6a:df:44:65:5d:9a:f5:95:8d: 55:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B0:8C:9E:1E:7B:0A:CB:13:DE:70:6A:DC:AF:D0:4C:36:7F:9D:93 X509v3 Authority Key Identifier: keyid:63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:46:9d:4e:19:e2:a8:dd:9f:08:8d:39:c7:66:79:bf:ab:c5: fa:c1:47:76:07:9e:f0:35:1a:a4:fe:47:00:77:20:8c:b3:73: a5:44:17:44:20:4f:bd:9f:40:8e:77:f1:8d:5d:88:88:08:3c: 9b:89:a8:83:2e:3c:1a:9d:fd:25:28:c0:0c:66:20:44:ad:1c: 65:94:56:e2:b8:6a:20:61:48:21:ff:ad:33:8d:1c:08:7d:dd: c9:4b:20:1d:6a:68:9b:00:67:97:b0:ab:a5:5f:b2:7e:73:43: 5c:70:45:66:ab:70:38:8d:c0:50:35:62:69:3e:43:db:db:dd: 7b:e9:06:23:ef:22:cc:58:18:77:0b:e8:53:55:d1:a2:15:7c: 4f:31:ac:76:34:f2:d5:84:ed:76:a0:64:8a:b7:f0:aa:33:f0: 6c:f5:d8:6a:38:9e:5a:1f:ef:42:7d:02:08:df:a5:54:96:92: bb:dc:22:3e:73:53:06:43:15:c6:30:9f:56:ff:b0:0d:eb:6e: 77:b7:e1:c6:65:9c:c6:51:0e:79:0b:7a:22:23:d3:f1:cb:09: b4:4d:82:bf:3b:3a:8a:e4:0c:ed:be:88:5e:ff:59:4b:ba:69: 62:76:50:92:07:cb:41:77:9c:97:5a:bf:03:b5:6e:77:80:24: 22:43:99:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcrkG55+RVLIqRCjaEaLE2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMTVkZDBiYTExZmRhZjc0ZDUzYjk1NmZjMWM4NDZhN2Uy ZjYxZmUwHhcNMjUxMjI2MjIwMTIyWhcNMjUxMjI3MjIwMTIyWjAzMTEwLwYDVQQD EyhmOWIwOGM5ZTFlN2IwYWNiMTNkZTcwNmFkY2FmZDA0YzM2N2Y5ZDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx5NS1MI3TU8zj0YCvg/9O9USHVq IXLsSdXG8g46EDAcEnSwFnPUCHYXpvE7wxRYUasPs1QccTjVIlB/DjVlPubu+YTm WJO2b049GdL7e4urvgBo+rKIW10s1A2drkXPvUSeT1uIWP8CEipH4qNxXz910vSw 3yWTFGDELpkBHjSG8IYvrNS0GBENCE3aDs/wFzDLo0da4rWXeFd+Qdnf5SrOGCsf 9LjquAhECjFiijj1a4VcOrnCoLQqmfBjpM6Q0Rv9viM5wU+6kEKXA+qp2wL7Dfyn 7RMWU8+ow34Wk2LXEm0f2O229WkJtlCkcas8kpYrYLNq30RlXZr1lY1VAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmwjJ4eewrLE95watyv0Ew2f52TMB8GA1UdIwQY MBaAFGMV3QuhH9r3TVO5VvwchGp+L2H+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXhYZEM2RWYydmROVTdsV19CeUVhbjR2WWY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kYWNiOTItZmY3MC00OWZlLWI0Yjgt ODk4OWI0Y2FhMjA2LzEvWXhYZEM2RWYydmROVTdsV19CeUVhbjR2WWY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9kYWNiOTItZmY3MC00OWZlLWI0YjgtODk4OWI0Y2FhMjA2 LzEvWXhYZEM2RWYydmROVTdsV19CeUVhbjR2WWY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqUadThni qN2fCI05x2Z5v6vF+sFHdgee8DUapP5HAHcgjLNzpUQXRCBPvZ9AjnfxjV2IiAg8 m4mogy48Gp39JSjADGYgRK0cZZRW4rhqIGFIIf+tM40cCH3dyUsgHWpomwBnl7Cr pV+yfnNDXHBFZqtwOI3AUDViaT5D29vde+kGI+8izFgYdwvoU1XRohV8TzGsdjTy 1YTtdqBkirfwqjPwbPXYajieWh/vQn0CCN+lVJaSu9wiPnNTBkMVxjCfVv+wDetu d7fhxmWcxlEOeQt6IiPT8csJtE2Cvzs6iuQM7b6IXv9ZS7ppYnZQkgfLQXecl1q/ A7Vud4AkIkOZIQ== -----END CERTIFICATE-----Generated at Sat Dec 27 00:42:02 2025 by rpki-client