This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft File: rY6Ff8AL4U7ZK554zDymm4rcJIU.mft (raw, json) Hash identifier: p4JjJh4w9QWuL+2A1oQHLz6BEFutyrO9sQ1/iQim33Y= Subject key identifier: 57:67:46:15:A7:63:45:5A:77:2E:65:19:DB:E8:35:0D:4C:70:F9:56 Authority key identifier: AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85 Certificate issuer: /CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485 Certificate serial: 019B23D0B48C642B2B86D02A4C73C4BE8A0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft Manifest number: 1775 Signing time: Mon 15 Dec 2025 21:00:38 +0000 Manifest this update: Mon 15 Dec 2025 21:00:38 +0000 Manifest next update: Tue 16 Dec 2025 21:00:38 +0000 Files and hashes: 1: OJD8WtNdD2Fkoa1-b6aE9G3M64k.roa (hash: EhOploeWX4IzgMSZUmJHUcObR1oyvr4q2CNLTcIgD8g=) 2: rY6Ff8AL4U7ZK554zDymm4rcJIU.crl (hash: 2nauLoy+i2bnT0aaaos11SCRI0T8vDeZEVGQBrQjZjs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.crl rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 21:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d0:b4:8c:64:2b:2b:86:d0:2a:4c:73:c4:be:8a:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485 Validity Not Before: Dec 15 21:00:38 2025 GMT Not After : Dec 16 21:00:38 2025 GMT Subject: CN=57674615a763455a772e6519dbe8350d4c70f956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4c:ba:de:2e:60:6e:3d:4a:fd:fb:74:a7:5b: a8:55:11:6c:12:72:ee:90:02:6f:64:b0:c4:ee:81: 1d:42:1e:ed:c6:09:9c:2f:16:0c:f6:1f:be:fa:7f: 08:32:5f:5f:e8:42:a9:df:f8:a0:bc:d7:6f:ba:34: f8:dd:42:93:69:b3:5f:16:04:9f:c1:b2:01:cf:90: 48:98:53:55:bb:c3:69:cd:ce:bb:72:53:44:8d:bc: 93:43:94:27:c0:3b:74:4d:f2:aa:19:e4:7d:75:c2: 41:e6:42:11:15:cd:c7:51:70:6d:53:46:64:70:ab: 29:93:48:9c:85:d2:4e:77:07:1a:c9:ed:9f:db:02: 5d:85:81:a1:79:a4:8e:a3:fa:fe:8a:d9:f3:c3:75: 36:54:74:fa:66:7b:f6:64:f5:c0:fa:89:43:b5:8b: 91:50:81:4e:58:cf:06:3b:b8:74:78:61:44:f7:d3: ee:4f:d8:90:25:b0:62:64:cb:35:1b:9b:b2:9e:8b: 2c:aa:df:78:fd:de:76:9a:de:80:c3:91:0f:56:49: e4:03:8d:d3:eb:96:32:5d:32:80:7b:3c:45:4b:27: 77:bb:f2:56:59:1b:6e:89:50:05:9f:05:12:49:cd: f9:d7:93:1a:a0:b3:ac:0d:ee:ff:f6:8b:41:99:b8: 3a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:67:46:15:A7:63:45:5A:77:2E:65:19:DB:E8:35:0D:4C:70:F9:56 X509v3 Authority Key Identifier: keyid:AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:68:6a:64:54:a1:8e:e6:19:f3:8d:4b:4d:1d:13:fe:6f:99: 74:00:c3:0e:56:a4:0b:df:32:34:a1:ae:15:e2:b5:4d:34:75: d9:15:77:4b:62:01:11:91:bc:a0:25:fa:a1:d8:96:d9:72:9a: 30:26:30:3c:07:cd:4d:43:98:e7:09:4f:d2:2c:df:90:45:6f: 86:6c:e6:b0:24:e6:c7:bd:7b:9c:f2:c3:57:95:4d:80:f6:3b: 39:bb:a0:a4:df:b7:05:8d:83:35:f6:3e:8f:3b:43:35:2a:0d: f2:f0:2d:30:bd:b2:50:4b:80:11:84:bc:0f:af:40:00:c6:cd: 94:d2:f5:9a:bd:1d:a3:99:86:0b:3d:6e:71:bb:a9:64:41:9b: 50:47:ba:d8:6d:b7:c3:38:86:80:e5:d4:de:9e:4d:c5:8a:a2: aa:da:b6:f0:96:91:10:ea:9f:6e:f9:11:41:18:8f:a6:b8:e3: 5a:6f:ac:d8:ae:a7:27:47:7f:7b:b3:cb:2b:57:3d:1b:46:22: 84:0a:50:31:62:8c:90:9a:57:55:ae:69:99:f4:25:9a:c0:58: ff:bf:57:45:f7:ce:0c:6e:c9:5c:f3:47:f7:13:55:7b:54:de: da:9d:f3:7f:56:e1:55:76:fe:b6:ea:e3:77:69:83:a3:5d:47: e0:af:a0:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0LSMZCsrhtAqTHPEvooPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkOGU4NTdmYzAwYmUxNGVkOTJiOWU3OGNjM2NhNjliOGFk YzI0ODUwHhcNMjUxMjE1MjEwMDM4WhcNMjUxMjE2MjEwMDM4WjAzMTEwLwYDVQQD Eyg1NzY3NDYxNWE3NjM0NTVhNzcyZTY1MTlkYmU4MzUwZDRjNzBmOTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEy63i5gbj1K/ft0p1uoVRFsEnLu kAJvZLDE7oEdQh7txgmcLxYM9h+++n8IMl9f6EKp3/igvNdvujT43UKTabNfFgSf wbIBz5BImFNVu8Npzc67clNEjbyTQ5QnwDt0TfKqGeR9dcJB5kIRFc3HUXBtU0Zk cKspk0ichdJOdwcaye2f2wJdhYGheaSOo/r+itnzw3U2VHT6Znv2ZPXA+olDtYuR UIFOWM8GO7h0eGFE99PuT9iQJbBiZMs1G5uynossqt94/d52mt6Aw5EPVknkA43T 65YyXTKAezxFSyd3u/JWWRtuiVAFnwUSSc3515MaoLOsDe7/9otBmbg60QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdnRhWnY0Vady5lGdvoNQ1McPlWMB8GA1UdIwQY MBaAFK2OhX/AC+FO2SueeMw8ppuK3CSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclk2RmY4QUw0VTdaSzU1NHpEeW1tNHJjSklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9iOGMzYmQtMTZlZi00ZjJjLTk0MDAt ZGIwOTllNTg1ZTRiLzEvclk2RmY4QUw0VTdaSzU1NHpEeW1tNHJjSklVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9iOGMzYmQtMTZlZi00ZjJjLTk0MDAtZGIwOTllNTg1ZTRi LzEvclk2RmY4QUw0VTdaSzU1NHpEeW1tNHJjSklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnmhqZFSh juYZ841LTR0T/m+ZdADDDlakC98yNKGuFeK1TTR12RV3S2IBEZG8oCX6odiW2XKa MCYwPAfNTUOY5wlP0izfkEVvhmzmsCTmx717nPLDV5VNgPY7ObugpN+3BY2DNfY+ jztDNSoN8vAtML2yUEuAEYS8D69AAMbNlNL1mr0do5mGCz1ucbupZEGbUEe62G23 wziGgOXU3p5NxYqiqtq28JaREOqfbvkRQRiPprjjWm+s2K6nJ0d/e7PLK1c9G0Yi hApQMWKMkJpXVa5pmfQlmsBY/79XRffODG7JXPNH9xNVe1Te2p3zf1bhVXb+turj d2mDo11H4K+grQ== -----END CERTIFICATE-----Generated at Tue Dec 16 07:00:02 2025 by rpki-client