This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft File: rY6Ff8AL4U7ZK554zDymm4rcJIU.mft (raw, json) Hash identifier: sAXI+G5CIrMJfv3BKN8x5rFZxr5MdM0M8UFcHi8zEn0= Subject key identifier: 6D:0E:53:52:54:A3:52:D1:82:5C:0C:F6:AE:BC:A9:61:22:6B:E5:1C Authority key identifier: AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85 Certificate issuer: /CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485 Certificate serial: 019AF19B69FFF8BF0A65D0161F58B439FDD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft Manifest number: 175B Signing time: Sat 06 Dec 2025 03:01:25 +0000 Manifest this update: Sat 06 Dec 2025 03:01:25 +0000 Manifest next update: Sun 07 Dec 2025 03:01:25 +0000 Files and hashes: 1: OJD8WtNdD2Fkoa1-b6aE9G3M64k.roa (hash: EhOploeWX4IzgMSZUmJHUcObR1oyvr4q2CNLTcIgD8g=) 2: rY6Ff8AL4U7ZK554zDymm4rcJIU.crl (hash: VqVWIaKV8lSB8MEvmfp4X01vUxkPsrt1Tgo8ys4v2Ds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.crl rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:69:ff:f8:bf:0a:65:d0:16:1f:58:b4:39:fd:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485 Validity Not Before: Dec 6 03:01:25 2025 GMT Not After : Dec 7 03:01:25 2025 GMT Subject: CN=6d0e535254a352d1825c0cf6aebca961226be51c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e7:d9:ff:aa:b2:2f:67:80:26:99:e6:6e:a7: 65:40:e9:e0:b1:f6:18:57:9c:08:34:da:87:cd:a6: e7:b2:da:93:56:51:fb:4b:da:58:f0:86:f2:82:de: b8:91:39:ca:09:b9:06:0f:d3:b0:28:dc:95:ad:dd: f3:a3:ba:0c:cd:9b:02:1d:5a:c9:e6:d0:16:d2:83: 2e:b1:cf:12:08:61:b9:2e:87:28:ac:39:be:b7:f7: df:da:35:7c:7f:35:3c:e8:ee:63:2d:bb:97:20:1f: 76:d0:18:9b:00:0b:b2:b5:c5:b6:7c:82:6b:6c:d1: cf:72:75:5d:16:15:ca:87:63:de:95:dd:94:fe:7e: db:2b:5e:21:81:fd:5a:82:8e:73:e4:3f:ee:74:49: 99:be:c4:d3:6c:f1:74:ce:1d:c5:0c:05:03:c1:93: f0:51:7b:a8:19:76:ea:35:5f:0b:fd:48:c0:3c:9c: 75:89:ac:51:72:c5:54:44:6e:45:81:ef:33:2f:3c: fa:b8:2d:d6:92:cc:2e:7e:0e:e5:c8:23:1c:a9:d2: 68:29:9d:bb:e5:69:4e:ed:3a:02:0c:a7:b3:95:7e: af:aa:cc:4f:94:fe:2e:c4:bc:d0:b2:ca:95:1a:f8: ef:25:4e:e2:2a:0f:ab:4a:5e:11:d9:78:cb:31:fb: 43:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0E:53:52:54:A3:52:D1:82:5C:0C:F6:AE:BC:A9:61:22:6B:E5:1C X509v3 Authority Key Identifier: keyid:AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:48:b8:49:99:13:a2:11:8c:1c:de:72:8c:25:09:fb:f2:72: c1:51:b3:96:c4:8d:66:d5:c4:65:17:36:fe:d2:fd:0d:36:2e: cf:be:b6:68:c7:f1:30:2b:29:6c:56:ad:62:f9:06:75:c3:61: 0a:43:24:9d:23:95:04:7a:1c:ae:13:bc:af:63:11:17:24:7e: d7:be:6c:19:4f:6e:e5:be:4d:e3:03:74:a9:7f:b7:2e:07:3c: 74:f8:39:c6:b8:c9:42:dd:3e:ee:ff:05:5a:e0:15:d8:9e:32: e1:a6:f0:e7:5d:3d:2e:fb:39:5b:3f:ae:cf:fa:6d:fb:2c:0c: 1d:a6:c3:b0:c9:39:60:8b:f1:b3:4f:6d:33:e9:b6:f7:96:c0: a3:3d:cf:80:28:8b:70:96:12:f0:4d:0e:db:cf:f9:3a:a1:bf: 9d:fc:b5:30:90:27:48:e6:5e:74:e5:e0:e7:fd:11:4a:8a:3c: 8d:58:8d:25:f4:db:87:b0:8f:70:9a:8b:0b:5f:6c:3e:b4:b2: 98:c4:d9:ed:92:cd:f9:22:96:c0:a6:52:9f:33:3a:ae:ef:b4: f3:50:3e:d9:0c:9c:f8:1e:7f:cb:89:83:a6:26:15:39:32:70: 36:39:86:3c:b3:a8:b0:c0:0a:00:52:4b:75:7a:8f:48:96:ce: 3f:2c:fd:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2n/+L8KZdAWH1i0Of3XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkOGU4NTdmYzAwYmUxNGVkOTJiOWU3OGNjM2NhNjliOGFk YzI0ODUwHhcNMjUxMjA2MDMwMTI1WhcNMjUxMjA3MDMwMTI1WjAzMTEwLwYDVQQD Eyg2ZDBlNTM1MjU0YTM1MmQxODI1YzBjZjZhZWJjYTk2MTIyNmJlNTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OfZ/6qyL2eAJpnmbqdlQOngsfYY V5wINNqHzabnstqTVlH7S9pY8Ibygt64kTnKCbkGD9OwKNyVrd3zo7oMzZsCHVrJ 5tAW0oMusc8SCGG5LocorDm+t/ff2jV8fzU86O5jLbuXIB920BibAAuytcW2fIJr bNHPcnVdFhXKh2Peld2U/n7bK14hgf1ago5z5D/udEmZvsTTbPF0zh3FDAUDwZPw UXuoGXbqNV8L/UjAPJx1iaxRcsVURG5Fge8zLzz6uC3Wkswufg7lyCMcqdJoKZ27 5WlO7ToCDKezlX6vqsxPlP4uxLzQssqVGvjvJU7iKg+rSl4R2XjLMftDTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0OU1JUo1LRglwM9q68qWEia+UcMB8GA1UdIwQY MBaAFK2OhX/AC+FO2SueeMw8ppuK3CSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclk2RmY4QUw0VTdaSzU1NHpEeW1tNHJjSklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9iOGMzYmQtMTZlZi00ZjJjLTk0MDAt ZGIwOTllNTg1ZTRiLzEvclk2RmY4QUw0VTdaSzU1NHpEeW1tNHJjSklVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9iOGMzYmQtMTZlZi00ZjJjLTk0MDAtZGIwOTllNTg1ZTRi LzEvclk2RmY4QUw0VTdaSzU1NHpEeW1tNHJjSklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA20i4SZkT ohGMHN5yjCUJ+/JywVGzlsSNZtXEZRc2/tL9DTYuz762aMfxMCspbFatYvkGdcNh CkMknSOVBHocrhO8r2MRFyR+175sGU9u5b5N4wN0qX+3Lgc8dPg5xrjJQt0+7v8F WuAV2J4y4abw5109Lvs5Wz+uz/pt+ywMHabDsMk5YIvxs09tM+m295bAoz3PgCiL cJYS8E0O28/5OqG/nfy1MJAnSOZedOXg5/0RSoo8jViNJfTbh7CPcJqLC19sPrSy mMTZ7ZLN+SKWwKZSnzM6ru+081A+2Qyc+B5/y4mDpiYVOTJwNjmGPLOosMAKAFJL dXqPSJbOPyz9kQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:18 2025 by rpki-client