This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft File: fYx0FDwic-IBpnVxVDHfryj-F7I.mft (raw, json) Hash identifier: kSO582SZNgEAMxnlyniWs4kMe2Xyi7Vrg6jxEktE6Lg= Subject key identifier: 21:51:30:5E:DE:68:3B:58:1A:DB:59:B4:A1:7D:8D:31:20:47:56:0B Authority key identifier: 7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2 Certificate issuer: /CN=7d8c74143c2273e201a675715431dfaf28fe17b2 Certificate serial: 019AF0885DDDCE8E0DB3BD4AD07AEF28EE0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft Manifest number: 0BEB Signing time: Fri 05 Dec 2025 22:00:59 +0000 Manifest this update: Fri 05 Dec 2025 22:00:59 +0000 Manifest next update: Sat 06 Dec 2025 22:00:59 +0000 Files and hashes: 1: Xrjs-S2RSbrZu3yjzq9Uz6FE53U.roa (hash: BOs1xZvMppiPo1LljXNukiOUbDIO0taZ6bkmR9k5vfQ=) 2: fYx0FDwic-IBpnVxVDHfryj-F7I.crl (hash: S6XWkmm3l43EPXUU+abbTFuKFn00Lyabwedf8a+wsjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:5d:dd:ce:8e:0d:b3:bd:4a:d0:7a:ef:28:ee:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d8c74143c2273e201a675715431dfaf28fe17b2 Validity Not Before: Dec 5 22:00:59 2025 GMT Not After : Dec 6 22:00:59 2025 GMT Subject: CN=2151305ede683b581adb59b4a17d8d312047560b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ae:ed:9c:0a:04:58:de:04:74:51:18:aa:bf: 4b:f6:37:3b:83:7f:97:f8:ac:2c:fe:4e:fd:75:8f: f3:2b:8c:ea:68:bc:93:af:3a:ae:3c:7b:5e:0d:5b: 58:25:ee:40:03:cb:31:b7:e4:e8:77:c0:d5:40:ca: 1b:1a:e5:3f:86:9e:e2:da:d5:21:c8:1b:f4:19:0e: dd:cf:aa:69:45:7b:c7:c2:72:ec:37:6d:5d:5d:ae: 4c:45:d3:45:67:ae:49:a0:6c:db:75:49:5a:39:19: be:e4:1c:12:19:b4:bb:a9:ef:51:63:a5:03:62:3d: f9:81:16:5c:aa:4c:16:b2:2b:f2:36:1e:b5:c8:c0: 59:21:c4:2c:cc:73:2c:e0:cd:e1:49:00:12:c9:37: 19:53:30:e4:e1:ba:4a:a4:20:41:14:ec:8c:cb:37: 25:6a:60:62:67:df:e4:73:c0:c1:57:8e:13:2f:2a: e0:24:62:e9:be:4c:8a:8e:ba:e6:2b:8c:f4:26:f8: 7d:20:6b:f3:be:9c:b5:af:d7:a7:e6:4d:4b:f8:9d: 83:45:27:ff:63:1f:4d:9f:30:4e:0e:83:02:e9:2b: dd:3e:50:e5:f9:66:cc:e3:be:c1:70:18:ba:8a:e9: 8e:47:44:56:ce:8d:ea:b2:e0:8c:08:d3:1d:5e:98: aa:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:51:30:5E:DE:68:3B:58:1A:DB:59:B4:A1:7D:8D:31:20:47:56:0B X509v3 Authority Key Identifier: keyid:7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:f2:41:a8:3f:5a:d3:70:30:2b:ef:08:a7:5b:af:ab:62:4a: bd:0f:db:da:25:c9:31:3e:3a:bc:08:2d:76:24:b8:91:3a:30: e4:33:9b:63:63:03:d7:6f:e2:57:14:f9:29:53:32:9a:0a:27: ac:c2:ad:54:b3:b4:7c:6a:16:3c:f0:39:7b:33:a1:85:a1:df: ee:e5:bd:8e:9b:b7:fb:98:3d:f6:56:52:e0:dc:3c:58:04:6b: c5:ba:f2:c7:1e:20:ac:bd:21:b5:ab:ab:e6:09:e5:f0:79:d2: 71:33:76:af:54:b7:3a:86:e3:13:56:8b:c8:e4:8d:08:0e:14: 25:5c:cb:70:00:1f:23:ab:40:9d:5d:f4:36:c8:9a:22:fd:9b: 6b:68:a6:01:78:10:06:7c:63:17:2b:dc:c0:89:3a:0e:50:30: 11:d0:cf:1b:aa:08:6c:d1:5a:48:92:c3:28:b9:ed:98:e8:c3: 8f:ae:10:e6:c4:f6:9a:a9:94:1e:83:ff:73:67:1f:bd:c9:d1: af:4d:d1:9e:a8:a8:69:1d:37:2c:b0:a6:bd:f3:c4:13:f1:bf: d1:c3:da:83:4d:c7:f8:4f:99:c3:b6:9a:a8:05:92:4d:52:a3: 45:f6:81:f2:96:19:63:a4:21:61:fb:d2:b2:63:72:59:ea:41: 58:28:57:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiF3dzo4Ns71K0HrvKO4LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkOGM3NDE0M2MyMjczZTIwMWE2NzU3MTU0MzFkZmFmMjhm ZTE3YjIwHhcNMjUxMjA1MjIwMDU5WhcNMjUxMjA2MjIwMDU5WjAzMTEwLwYDVQQD EygyMTUxMzA1ZWRlNjgzYjU4MWFkYjU5YjRhMTdkOGQzMTIwNDc1NjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK7tnAoEWN4EdFEYqr9L9jc7g3+X +Kws/k79dY/zK4zqaLyTrzquPHteDVtYJe5AA8sxt+Tod8DVQMobGuU/hp7i2tUh yBv0GQ7dz6ppRXvHwnLsN21dXa5MRdNFZ65JoGzbdUlaORm+5BwSGbS7qe9RY6UD Yj35gRZcqkwWsivyNh61yMBZIcQszHMs4M3hSQASyTcZUzDk4bpKpCBBFOyMyzcl amBiZ9/kc8DBV44TLyrgJGLpvkyKjrrmK4z0Jvh9IGvzvpy1r9en5k1L+J2DRSf/ Yx9NnzBODoMC6SvdPlDl+WbM477BcBi6iumOR0RWzo3qsuCMCNMdXpiqowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFRMF7eaDtYGttZtKF9jTEgR1YLMB8GA1UdIwQY MBaAFH2MdBQ8InPiAaZ1cVQx368o/heyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZll4MEZEd2ljLUlCcG5WeFZESGZyeWotRjdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81YzNhNGMtOTg0My00YmVjLWExNjIt MThjMDM2NTMwN2JmLzEvZll4MEZEd2ljLUlCcG5WeFZESGZyeWotRjdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS81YzNhNGMtOTg0My00YmVjLWExNjItMThjMDM2NTMwN2Jm LzEvZll4MEZEd2ljLUlCcG5WeFZESGZyeWotRjdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfJBqD9a 03AwK+8Ip1uvq2JKvQ/b2iXJMT46vAgtdiS4kTow5DObY2MD12/iVxT5KVMymgon rMKtVLO0fGoWPPA5ezOhhaHf7uW9jpu3+5g99lZS4Nw8WARrxbryxx4grL0htaur 5gnl8HnScTN2r1S3OobjE1aLyOSNCA4UJVzLcAAfI6tAnV30NsiaIv2ba2imAXgQ BnxjFyvcwIk6DlAwEdDPG6oIbNFaSJLDKLntmOjDj64Q5sT2mqmUHoP/c2cfvcnR r03RnqioaR03LLCmvfPEE/G/0cPag03H+E+Zw7aaqAWSTVKjRfaB8pYZY6QhYfvS smNyWepBWChXww== -----END CERTIFICATE-----Generated at Sat Dec 6 08:12:57 2025 by rpki-client