This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft File: rYg6hugtDZEPz1n4_5978aZxSHA.mft (raw, json) Hash identifier: ILJnGnF9VnxRoQp8EF8T8Vj8RG3bqJRUb8jEeiSFxmE= Subject key identifier: 40:07:8B:5A:2F:6B:48:35:1F:04:F5:F0:DD:5B:44:94:31:4C:32:1C Authority key identifier: AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70 Certificate issuer: /CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870 Certificate serial: 019AF31B8E1D543C8ED228AE638B141C2817 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft Manifest number: 09B1 Signing time: Sat 06 Dec 2025 10:01:00 +0000 Manifest this update: Sat 06 Dec 2025 10:01:00 +0000 Manifest next update: Sun 07 Dec 2025 10:01:00 +0000 Files and hashes: 1: od7ExObCxDqzHqRis0nMtXmus2Y.roa (hash: WoaJOBOnB6iTsR77zkPSuoVOWwQU/LjcUNKKgIIFfv0=) 2: rYg6hugtDZEPz1n4_5978aZxSHA.crl (hash: 0LerjQSy6Ky7qyABQw2GK7T/J3seH4ePOgfNqrYkod0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:8e:1d:54:3c:8e:d2:28:ae:63:8b:14:1c:28:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870 Validity Not Before: Dec 6 10:01:00 2025 GMT Not After : Dec 7 10:01:00 2025 GMT Subject: CN=40078b5a2f6b48351f04f5f0dd5b4494314c321c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5e:b2:15:2d:dc:a2:08:42:e0:9f:c6:82:46: 37:66:e5:89:de:43:50:e1:1d:4e:d2:f9:13:4f:1a: e7:56:1d:b2:1c:f9:1d:1b:09:fd:12:56:90:b7:2b: d1:35:cb:68:68:2c:2d:17:9e:a2:9f:aa:30:b4:e4: 45:62:ae:68:99:f6:f3:23:5d:7e:ea:cc:02:60:3f: 82:c0:5c:0c:46:65:eb:3c:bb:fc:45:6f:e5:e7:30: 44:7a:74:b6:47:1c:06:46:ab:85:d4:be:19:39:5d: a6:9d:6c:e9:2f:92:28:7c:77:cb:e8:dd:c8:05:11: aa:64:49:ab:c7:b4:40:9c:3b:33:ee:86:29:ab:98: a1:06:d0:15:44:da:f0:02:e7:06:64:e4:07:fa:9b: db:c5:07:9a:80:d7:b3:3c:97:6a:4c:20:b3:d0:cb: 8c:f6:da:49:63:bb:80:26:21:bf:92:d1:43:ba:fd: 06:b9:29:bf:7a:68:0a:49:26:b6:f6:b5:17:1f:ac: b3:93:20:66:a3:8c:60:a7:13:04:81:bc:02:0b:01: 4d:e0:4f:e2:d0:51:59:60:05:18:12:ad:0b:32:41: c5:dd:66:15:ad:3d:ef:d1:8c:b4:d7:a9:6e:67:1e: 1f:f0:a3:94:bd:4c:89:79:09:fb:47:04:bc:d2:6e: f6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:07:8B:5A:2F:6B:48:35:1F:04:F5:F0:DD:5B:44:94:31:4C:32:1C X509v3 Authority Key Identifier: keyid:AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:1e:70:dc:85:0f:cf:c3:bd:93:3d:79:a1:c1:a6:fa:99:72: fa:f3:7b:ed:8a:1e:6f:ad:65:57:66:fc:e5:96:a4:96:8c:3c: 9a:10:33:3e:5b:77:4b:30:54:44:83:e5:b6:50:49:38:41:cd: 25:b1:fb:1e:e8:f3:7d:8e:6e:91:bd:f0:77:fa:d2:c9:8c:23: f7:b7:8e:d2:bd:60:4b:fb:56:c4:3f:50:0b:83:cd:c1:d9:ac: 89:68:d2:d2:d2:dc:eb:dc:65:1d:29:13:29:de:56:8d:e3:49: 9a:9e:66:d3:b4:bb:84:35:a4:e8:77:24:d2:f3:f7:be:60:bf: ad:61:bb:33:6a:14:23:e1:07:46:0a:08:db:ed:1c:7c:15:05: 11:e7:3f:24:6e:92:46:c1:19:c8:23:5d:b8:8a:58:2f:29:18: ad:c8:df:f9:df:73:49:8e:b8:f5:9c:34:5d:5f:ce:d9:f2:1d: 97:3e:b2:76:1b:78:47:25:77:eb:e7:52:4d:56:28:72:56:bb: c8:eb:f1:07:c7:c6:aa:ce:37:fc:b5:aa:f0:0e:08:c4:fb:63: 31:33:96:43:28:d2:3b:c2:b7:c7:17:29:d4:9d:90:ae:5d:66: 8a:1d:0e:40:01:45:58:12:0e:62:49:9a:41:9d:e7:78:b2:91: db:ea:7d:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG44dVDyO0iiuY4sUHCgXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkODgzYTg2ZTgyZDBkOTEwZmNmNTlmOGZmOWY3YmYxYTY3 MTQ4NzAwHhcNMjUxMjA2MTAwMTAwWhcNMjUxMjA3MTAwMTAwWjAzMTEwLwYDVQQD Eyg0MDA3OGI1YTJmNmI0ODM1MWYwNGY1ZjBkZDViNDQ5NDMxNGMzMjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl6yFS3coghC4J/GgkY3ZuWJ3kNQ 4R1O0vkTTxrnVh2yHPkdGwn9ElaQtyvRNctoaCwtF56in6owtORFYq5omfbzI11+ 6swCYD+CwFwMRmXrPLv8RW/l5zBEenS2RxwGRquF1L4ZOV2mnWzpL5IofHfL6N3I BRGqZEmrx7RAnDsz7oYpq5ihBtAVRNrwAucGZOQH+pvbxQeagNezPJdqTCCz0MuM 9tpJY7uAJiG/ktFDuv0GuSm/emgKSSa29rUXH6yzkyBmo4xgpxMEgbwCCwFN4E/i 0FFZYAUYEq0LMkHF3WYVrT3v0Yy016luZx4f8KOUvUyJeQn7RwS80m72owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEAHi1ova0g1HwT18N1bRJQxTDIcMB8GA1UdIwQY MBaAFK2IOoboLQ2RD89Z+P+fe/GmcUhwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcllnNmh1Z3REWkVQejFuNF81OTc4YVp4U0hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83YjA1NmQtMDlmNy00ZjEyLWIxYTIt YTU2YmYwY2Y0Y2JlLzEvcllnNmh1Z3REWkVQejFuNF81OTc4YVp4U0hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni83YjA1NmQtMDlmNy00ZjEyLWIxYTItYTU2YmYwY2Y0Y2Jl LzEvcllnNmh1Z3REWkVQejFuNF81OTc4YVp4U0hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdB5w3IUP z8O9kz15ocGm+ply+vN77Yoeb61lV2b85Zaklow8mhAzPlt3SzBURIPltlBJOEHN JbH7HujzfY5ukb3wd/rSyYwj97eO0r1gS/tWxD9QC4PNwdmsiWjS0tLc69xlHSkT Kd5WjeNJmp5m07S7hDWk6Hck0vP3vmC/rWG7M2oUI+EHRgoI2+0cfBUFEec/JG6S RsEZyCNduIpYLykYrcjf+d9zSY649Zw0XV/O2fIdlz6ydht4RyV36+dSTVYocla7 yOvxB8fGqs43/LWq8A4IxPtjMTOWQyjSO8K3xxcp1J2Qrl1mih0OQAFFWBIOYkma QZ3neLKR2+p9gw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:32 2025 by rpki-client