This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.mft File: fYtUoMG_jx-cTJVpuXXKRuuobOc.mft (raw, json) Hash identifier: fKvIrSt5f9fTHMZ5GusFz81t3Wb2eKb5P9wuD5fV9+o= Subject key identifier: 11:2B:EB:66:7E:F6:1E:60:41:EA:CE:55:BF:CE:D2:22:7E:A3:CC:DB Authority key identifier: 7D:8B:54:A0:C1:BF:8F:1F:9C:4C:95:69:B9:75:CA:46:EB:A8:6C:E7 Certificate issuer: /CN=7d8b54a0c1bf8f1f9c4c9569b975ca46eba86ce7 Certificate serial: 019B3B6B1C687927475B1BB7520ED7FD19B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fYtUoMG_jx-cTJVpuXXKRuuobOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.mft Manifest number: 0F Signing time: Sat 20 Dec 2025 11:00:33 +0000 Manifest this update: Sat 20 Dec 2025 11:00:33 +0000 Manifest next update: Sun 21 Dec 2025 11:00:33 +0000 Files and hashes: 1: AXRVN_DR5BycQVCdRUvhSmejAc8.asa (hash: W8JeQq9+EkgLaIUZ5BFcb8k9jWkbcN2YzZXMIaK67Sg=) 2: fYtUoMG_jx-cTJVpuXXKRuuobOc.crl (hash: FLnH509iGLPR80toZx8lvg/aMrq1k5cZdRHu0jqBEQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.mft rsync://rpki.ripe.net/repository/DEFAULT/fYtUoMG_jx-cTJVpuXXKRuuobOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:1c:68:79:27:47:5b:1b:b7:52:0e:d7:fd:19:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d8b54a0c1bf8f1f9c4c9569b975ca46eba86ce7 Validity Not Before: Dec 20 11:00:33 2025 GMT Not After : Dec 21 11:00:33 2025 GMT Subject: CN=112beb667ef61e6041eace55bfced2227ea3ccdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c4:b9:6a:b7:02:76:a7:30:ed:31:17:16:75: 96:6f:83:62:9a:80:1b:6f:45:19:bf:4b:64:85:97: 47:3a:ca:8d:ea:4d:e8:10:af:31:d4:fc:6c:a8:0b: ad:89:68:57:fb:84:36:cf:f4:18:dd:4c:f5:a9:b9: 69:89:8d:95:9a:53:de:70:0b:e3:f7:54:fd:cd:ee: d9:ca:fc:84:94:f6:69:5d:db:84:8f:fd:50:3a:d5: ac:e6:ca:12:aa:1d:a4:d5:47:e9:be:d2:f9:17:f0: 35:a6:a7:e0:9b:7f:ce:d4:37:e7:de:d3:5e:13:2f: 2d:20:cb:c6:9e:78:23:f1:4d:8f:52:36:0f:6a:9d: 17:86:a4:b4:5c:ad:8b:24:3c:c7:6d:90:b5:31:7b: f7:d7:6d:dc:4b:89:4f:d4:da:d0:f9:77:fe:42:e8: 79:b5:59:a9:a5:9e:b6:6a:a0:eb:bf:b9:0c:2a:57: 1e:0f:ed:5b:15:2c:20:3b:97:8b:da:53:ae:33:13: 92:d3:71:66:3c:a9:35:2c:c4:de:a9:a4:ee:7e:7b: 53:42:57:a9:a7:f6:f8:42:70:35:4d:d3:69:3a:12: ae:fc:cb:8c:f4:ef:3e:13:52:3f:1a:9f:db:ad:bc: be:f7:66:cf:cd:f8:d5:15:4c:b5:7c:78:34:0d:0c: d6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:2B:EB:66:7E:F6:1E:60:41:EA:CE:55:BF:CE:D2:22:7E:A3:CC:DB X509v3 Authority Key Identifier: keyid:7D:8B:54:A0:C1:BF:8F:1F:9C:4C:95:69:B9:75:CA:46:EB:A8:6C:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYtUoMG_jx-cTJVpuXXKRuuobOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:ae:a7:f3:46:31:46:59:61:e6:91:dc:f1:40:d3:50:1a:8b: f6:6a:ee:06:68:d2:2c:d5:94:48:0f:7e:1c:6c:16:54:5a:b6: 9d:3d:40:98:28:f9:c9:81:ff:90:fe:09:04:a4:9a:88:74:c0: b7:a6:e3:59:0e:8b:09:05:64:2a:f1:5e:ce:7f:d2:66:97:e0: ca:21:59:86:68:6e:d6:92:ba:a7:5c:52:00:47:9b:41:dc:c6: f3:d5:5c:62:c1:b9:95:67:0a:bd:8b:5c:3c:4d:3b:1c:30:d6: cd:8f:52:86:8e:2f:07:ba:0f:51:3f:74:6c:55:06:ac:e1:c6: 0b:c9:db:4b:26:c7:dd:f7:13:af:cd:b8:15:76:9b:f0:f2:2a: 9b:40:9d:c1:f9:f7:ea:54:48:28:a6:06:6a:ea:7e:d0:0d:14: 41:16:2a:3b:c2:16:dd:c6:7b:60:45:5e:cc:00:c1:49:25:45: fb:b1:c4:62:73:28:72:d3:ed:1c:c6:88:9f:0a:57:55:d2:cc: e0:ad:a6:cc:cf:33:b6:f9:f5:13:e1:fa:ca:d9:09:3a:1b:37: 76:c0:90:b8:18:b6:d7:8d:88:b7:e7:f0:25:fc:a0:26:9d:98: d9:a5:07:70:02:aa:ab:bf:33:65:f7:38:7a:be:af:e0:9f:bb: 4f:d3:c0:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7axxoeSdHWxu3Ug7X/Rm1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkOGI1NGEwYzFiZjhmMWY5YzRjOTU2OWI5NzVjYTQ2ZWJh ODZjZTcwHhcNMjUxMjIwMTEwMDMzWhcNMjUxMjIxMTEwMDMzWjAzMTEwLwYDVQQD EygxMTJiZWI2NjdlZjYxZTYwNDFlYWNlNTViZmNlZDIyMjdlYTNjY2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8S5arcCdqcw7TEXFnWWb4NimoAb b0UZv0tkhZdHOsqN6k3oEK8x1PxsqAutiWhX+4Q2z/QY3Uz1qblpiY2VmlPecAvj 91T9ze7ZyvyElPZpXduEj/1QOtWs5soSqh2k1UfpvtL5F/A1pqfgm3/O1Dfn3tNe Ey8tIMvGnngj8U2PUjYPap0XhqS0XK2LJDzHbZC1MXv3123cS4lP1NrQ+Xf+Quh5 tVmppZ62aqDrv7kMKlceD+1bFSwgO5eL2lOuMxOS03FmPKk1LMTeqaTufntTQlep p/b4QnA1TdNpOhKu/MuM9O8+E1I/Gp/brby+92bPzfjVFUy1fHg0DQzWAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEr62Z+9h5gQerOVb/O0iJ+o8zbMB8GA1UdIwQY MBaAFH2LVKDBv48fnEyVabl1ykbrqGznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZll0VW9NR19qeC1jVEpWcHVYWEtSdXVvYk9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS82NTFmYWUtYjIwYS00YThlLTlhM2Mt ZjUyMjc2YmU5ZTFlLzEvZll0VW9NR19qeC1jVEpWcHVYWEtSdXVvYk9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS82NTFmYWUtYjIwYS00YThlLTlhM2MtZjUyMjc2YmU5ZTFl LzEvZll0VW9NR19qeC1jVEpWcHVYWEtSdXVvYk9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOK6n80Yx Rllh5pHc8UDTUBqL9mruBmjSLNWUSA9+HGwWVFq2nT1AmCj5yYH/kP4JBKSaiHTA t6bjWQ6LCQVkKvFezn/SZpfgyiFZhmhu1pK6p1xSAEebQdzG89VcYsG5lWcKvYtc PE07HDDWzY9Sho4vB7oPUT90bFUGrOHGC8nbSybH3fcTr824FXab8PIqm0Cdwfn3 6lRIKKYGaup+0A0UQRYqO8IW3cZ7YEVezADBSSVF+7HEYnMoctPtHMaInwpXVdLM 4K2mzM8ztvn1E+H6ytkJOhs3dsCQuBi2142It+fwJfygJp2Y2aUHcAKqq78zZfc4 er6v4J+7T9PA4g== -----END CERTIFICATE-----Generated at Sat Dec 20 16:07:03 2025 by rpki-client