This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft File: aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft (raw, json) Hash identifier: f2AHoIEMqrKgcBIsbwiSi8qZSFwIT/0jHcZhgk70A1Y= Subject key identifier: 16:B4:D7:59:FB:90:BB:B3:80:56:AE:ED:09:5E:79:F4:DC:E4:8E:A0 Authority key identifier: 69:87:D0:04:7F:B1:D8:91:2C:63:F9:11:30:5A:71:4F:43:8B:1E:71 Certificate issuer: /CN=6987d0047fb1d8912c63f911305a714f438b1e71 Certificate serial: 019AF578778EFAE316989109FBF984B782A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYfQBH-x2JEsY_kRMFpxT0OLHnE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 21:01:44 +0000 Manifest this update: Sat 06 Dec 2025 21:01:44 +0000 Manifest next update: Sun 07 Dec 2025 21:01:44 +0000 Files and hashes: 1: Atkr4h8_-iWKS-lQ1C-yvRl84ME.roa (hash: 2T7HRH5eHvmAemXfiDHO7EMODqi7SWlhFBBbiZ8y44c=) 2: aYfQBH-x2JEsY_kRMFpxT0OLHnE.crl (hash: 6OSfHKZezjME78oqXLDfO4Z/uXhBzHptKW0r9HfJYAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft rsync://rpki.ripe.net/repository/DEFAULT/aYfQBH-x2JEsY_kRMFpxT0OLHnE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:77:8e:fa:e3:16:98:91:09:fb:f9:84:b7:82:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6987d0047fb1d8912c63f911305a714f438b1e71 Validity Not Before: Dec 6 21:01:44 2025 GMT Not After : Dec 7 21:01:44 2025 GMT Subject: CN=16b4d759fb90bbb38056aeed095e79f4dce48ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:af:78:02:4b:c5:05:df:f4:0b:49:cf:09:35: 28:34:a6:01:71:e9:bd:0f:17:44:c1:ca:47:b3:96: e6:4a:3d:ac:7b:83:a8:ec:ae:68:9c:22:2c:5e:87: 2a:8a:80:02:7f:58:2e:95:5a:72:50:16:32:6a:0f: bf:b4:3f:42:ab:a9:ac:c6:3f:c4:fb:be:37:7b:b3: 33:f6:d2:12:a2:fd:4a:6b:23:a3:21:f4:de:ed:c0: 2d:26:b4:4c:f2:1e:09:b1:b5:40:dd:d5:e2:f9:d9: 10:cb:2e:b7:06:b0:1d:67:93:51:da:2a:c1:cd:44: d9:af:d5:2d:16:e7:27:74:f8:cc:7e:59:56:72:e9: 00:d9:7b:38:03:ff:93:fc:98:1f:a1:7c:9d:17:06: 62:a6:00:77:fa:9d:4e:92:4d:54:29:57:0e:c2:36: e3:5a:73:12:c9:55:27:ff:74:a8:a3:76:34:14:7b: af:1a:1d:cd:64:1b:bc:9c:1e:a5:e4:3c:8f:9c:69: 07:a4:de:76:04:f6:cf:7e:7d:7c:1f:8e:d3:dc:5d: 5b:70:fd:9f:38:e9:8a:f6:b9:44:ac:cf:7c:1a:80: fb:1f:4b:6e:ff:5b:b2:7d:0d:89:6a:bd:c9:b3:1c: 8e:4b:4f:47:91:9a:8f:ce:a2:30:fe:f5:99:96:ba: a4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B4:D7:59:FB:90:BB:B3:80:56:AE:ED:09:5E:79:F4:DC:E4:8E:A0 X509v3 Authority Key Identifier: keyid:69:87:D0:04:7F:B1:D8:91:2C:63:F9:11:30:5A:71:4F:43:8B:1E:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYfQBH-x2JEsY_kRMFpxT0OLHnE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:bf:64:6a:db:68:54:60:ac:46:41:11:86:71:e7:ff:e7:8c: 76:31:56:87:e7:7e:65:aa:15:d2:f9:0d:16:c6:a2:2b:93:d1: c8:4f:2e:da:c8:bb:ef:9d:08:40:f1:b8:a2:e5:7c:9e:f5:0c: 88:39:05:65:50:3a:82:d6:f5:89:39:25:ee:70:b5:14:5b:5f: 87:4f:84:2b:71:ff:d6:64:99:93:9e:f0:d5:d7:ce:64:da:30: 6c:b1:07:95:d8:b0:fb:23:ed:61:c7:8f:f4:90:81:bf:26:4f: 58:f0:fd:8f:88:c9:d1:d6:3c:7a:86:dc:8a:18:87:0f:94:a0: 89:48:08:38:16:3e:ba:06:2e:d8:7e:5c:76:4f:2b:45:cd:4e: 62:3b:b9:03:4e:39:3c:42:07:1f:0e:3d:f2:26:0c:59:ce:36: 0e:d2:b7:a1:db:cb:33:68:90:46:bc:75:5f:9d:8d:10:23:d4: 54:f6:29:82:47:ec:b3:ec:c4:2e:b8:f7:de:f3:13:f9:0d:d7: b0:f2:9b:68:23:3b:8c:99:f5:54:cd:46:e7:5f:43:64:5a:4a: 72:9e:4b:c6:07:a8:da:63:e4:b5:12:94:42:3e:7c:63:b3:63: ac:fb:6d:d4:2d:67:25:cc:33:0c:5e:fc:6e:a0:7b:e2:f4:86: 42:e6:7a:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eHeO+uMWmJEJ+/mEt4KmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ODdkMDA0N2ZiMWQ4OTEyYzYzZjkxMTMwNWE3MTRmNDM4 YjFlNzEwHhcNMjUxMjA2MjEwMTQ0WhcNMjUxMjA3MjEwMTQ0WjAzMTEwLwYDVQQD EygxNmI0ZDc1OWZiOTBiYmIzODA1NmFlZWQwOTVlNzlmNGRjZTQ4ZWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv694AkvFBd/0C0nPCTUoNKYBcem9 DxdEwcpHs5bmSj2se4Oo7K5onCIsXocqioACf1gulVpyUBYyag+/tD9Cq6msxj/E +743e7Mz9tISov1KayOjIfTe7cAtJrRM8h4JsbVA3dXi+dkQyy63BrAdZ5NR2irB zUTZr9UtFucndPjMfllWcukA2Xs4A/+T/JgfoXydFwZipgB3+p1Okk1UKVcOwjbj WnMSyVUn/3Soo3Y0FHuvGh3NZBu8nB6l5DyPnGkHpN52BPbPfn18H47T3F1bcP2f OOmK9rlErM98GoD7H0tu/1uyfQ2Jar3JsxyOS09HkZqPzqIw/vWZlrqkjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBa011n7kLuzgFau7QleefTc5I6gMB8GA1UdIwQY MBaAFGmH0AR/sdiRLGP5ETBacU9Dix5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVlmUUJILXgySkVzWV9rUk1GcHhUME9MSG5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9kODM0NTQtZDM1OS00ZTllLTg0MWMt NDI5MTRiZTBhYTA0LzEvYVlmUUJILXgySkVzWV9rUk1GcHhUME9MSG5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9kODM0NTQtZDM1OS00ZTllLTg0MWMtNDI5MTRiZTBhYTA0 LzEvYVlmUUJILXgySkVzWV9rUk1GcHhUME9MSG5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3r9katto VGCsRkERhnHn/+eMdjFWh+d+ZaoV0vkNFsaiK5PRyE8u2si7750IQPG4ouV8nvUM iDkFZVA6gtb1iTkl7nC1FFtfh0+EK3H/1mSZk57w1dfOZNowbLEHldiw+yPtYceP 9JCBvyZPWPD9j4jJ0dY8eobcihiHD5SgiUgIOBY+ugYu2H5cdk8rRc1OYju5A045 PEIHHw498iYMWc42DtK3odvLM2iQRrx1X52NECPUVPYpgkfss+zELrj33vMT+Q3X sPKbaCM7jJn1VM1G519DZFpKcp5Lxgeo2mPktRKUQj58Y7NjrPtt1C1nJcwzDF78 bqB74vSGQuZ6fg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:55 2025 by rpki-client