This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft File: _sY8Uk5V3zS_dYKCd1PnenaZx6I.mft (raw, json) Hash identifier: REdxj0r/LZnwvaAEcveLq/79x4tat9T8HgYEoOGEAWA= Subject key identifier: B5:96:D3:FA:EC:1B:98:64:9A:E5:0C:4D:24:8C:40:62:63:F6:60:3D Authority key identifier: FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2 Certificate issuer: /CN=fec63c524e55df34bf7582827753e77a7699c7a2 Certificate serial: 019AF38981DCD9DEC2B64BC8DAAFEEC34369 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft Manifest number: 1368 Signing time: Sat 06 Dec 2025 12:01:06 +0000 Manifest this update: Sat 06 Dec 2025 12:01:06 +0000 Manifest next update: Sun 07 Dec 2025 12:01:06 +0000 Files and hashes: 1: _sY8Uk5V3zS_dYKCd1PnenaZx6I.crl (hash: oLMS+kmVpQUBjqljlcOomfx/wIxs9afpDc44RjzQOc0=) 2: yueP6aik06BPwcnmsnEIlj3ek5g.roa (hash: ouDcttk3dQ7QbY0vNsL4yJQH9X2H2u4pj98A+2ZbC4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:81:dc:d9:de:c2:b6:4b:c8:da:af:ee:c3:43:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fec63c524e55df34bf7582827753e77a7699c7a2 Validity Not Before: Dec 6 12:01:06 2025 GMT Not After : Dec 7 12:01:06 2025 GMT Subject: CN=b596d3faec1b98649ae50c4d248c406263f6603d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4f:f9:77:20:7d:e2:4e:f4:b1:73:9a:84:62: 0a:e5:a0:2e:ba:af:4a:6d:16:16:70:ea:9e:9a:e9: e2:46:88:70:55:e1:75:eb:7e:41:d2:c3:f6:5c:3f: 17:7c:2c:0a:45:fb:1f:ec:1f:98:0e:ae:d1:04:d0: 92:fa:fe:47:44:5d:70:b7:01:c5:d1:20:e3:70:bb: 11:1d:b3:0d:75:bb:15:c1:c5:5e:df:96:5f:ed:a0: ad:d9:15:67:f8:58:76:b7:93:23:5b:9b:3e:97:1a: ef:a9:a8:06:a9:c9:84:4a:16:24:24:cc:98:32:ea: 47:89:83:ee:04:5d:6c:6a:68:20:8a:a8:b3:07:20: c6:96:42:e6:50:20:f8:f8:ce:23:e7:c5:e4:e7:6d: 6b:1f:56:17:c6:d2:c2:e0:2c:a5:65:c4:d5:94:fd: 0c:d6:1f:6f:5b:08:af:6d:1e:8b:78:0b:ab:9b:4b: a0:a5:b7:bc:6e:29:47:4b:61:96:27:8e:23:46:b7: 21:db:58:85:0a:c8:ce:1f:2e:44:fe:a8:e5:04:ad: 0a:28:3a:ab:d7:86:2f:36:dd:c3:5a:9c:25:57:95: 6e:cd:c7:03:a9:f8:be:90:f7:8e:87:33:14:8d:bf: 15:f1:5b:84:6c:24:31:e3:8f:1d:3c:0e:f6:7d:22: 30:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:96:D3:FA:EC:1B:98:64:9A:E5:0C:4D:24:8C:40:62:63:F6:60:3D X509v3 Authority Key Identifier: keyid:FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:96:c2:da:b4:6e:67:da:ec:40:10:f9:31:02:a2:45:c5:42: c1:1b:d4:49:20:5d:d9:ad:3c:f3:00:86:87:aa:08:fa:e1:f2: df:d0:4d:08:40:4a:e0:47:9e:9d:1e:a3:68:3d:c1:df:1a:f7: 45:47:cc:52:f0:ed:8b:f3:f2:4a:17:02:1a:c6:e6:12:04:6b: bc:04:2c:60:5a:6b:10:f4:00:fb:40:b8:2e:0a:89:3f:05:cc: f4:2d:b8:2f:b9:ae:a1:3b:75:92:43:44:91:0a:1c:c2:ab:26: f4:27:61:ec:dd:ba:8e:aa:d0:af:84:9d:c6:4b:c9:a3:86:e3: f9:8e:6e:2f:84:2b:bb:b6:34:51:6f:41:74:bb:23:25:23:52: 12:ef:33:f5:7c:87:74:e1:f8:76:39:13:12:e5:c0:a5:77:b8: a1:4c:50:49:6a:e7:70:f7:4b:ef:77:3c:e5:5d:e6:ee:3a:a7: 4e:a1:6b:ae:75:a3:23:fe:29:a2:4e:55:1c:b4:7d:80:f4:a0: 46:56:7f:8f:09:a5:db:83:22:d6:0e:d7:1a:c9:08:14:7f:b5: cb:78:16:34:c5:81:61:69:88:43:db:86:8d:71:e1:02:6c:71: 95:f7:b9:9c:21:a2:ba:4f:34:6b:bf:af:bf:b0:72:79:7e:dc: bd:90:73:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziYHc2d7CtkvI2q/uw0NpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYzYzYzUyNGU1NWRmMzRiZjc1ODI4Mjc3NTNlNzdhNzY5 OWM3YTIwHhcNMjUxMjA2MTIwMTA2WhcNMjUxMjA3MTIwMTA2WjAzMTEwLwYDVQQD EyhiNTk2ZDNmYWVjMWI5ODY0OWFlNTBjNGQyNDhjNDA2MjYzZjY2MDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU/5dyB94k70sXOahGIK5aAuuq9K bRYWcOqemuniRohwVeF1635B0sP2XD8XfCwKRfsf7B+YDq7RBNCS+v5HRF1wtwHF 0SDjcLsRHbMNdbsVwcVe35Zf7aCt2RVn+Fh2t5MjW5s+lxrvqagGqcmEShYkJMyY MupHiYPuBF1samggiqizByDGlkLmUCD4+M4j58Xk521rH1YXxtLC4CylZcTVlP0M 1h9vWwivbR6LeAurm0ugpbe8bilHS2GWJ44jRrch21iFCsjOHy5E/qjlBK0KKDqr 14YvNt3DWpwlV5VuzccDqfi+kPeOhzMUjb8V8VuEbCQx448dPA72fSIwWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWW0/rsG5hkmuUMTSSMQGJj9mA9MB8GA1UdIwQY MBaAFP7GPFJOVd80v3WCgndT53p2mceiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3NZOFVrNVYzelNfZFlLQ2QxUG5lbmFaeDZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jY2ExMTUtMmI5My00YWZkLWFkMDIt YjMxZGY3MTE3NzE1LzEvX3NZOFVrNVYzelNfZFlLQ2QxUG5lbmFaeDZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9jY2ExMTUtMmI5My00YWZkLWFkMDItYjMxZGY3MTE3NzE1 LzEvX3NZOFVrNVYzelNfZFlLQ2QxUG5lbmFaeDZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZbC2rRu Z9rsQBD5MQKiRcVCwRvUSSBd2a088wCGh6oI+uHy39BNCEBK4EeenR6jaD3B3xr3 RUfMUvDti/PyShcCGsbmEgRrvAQsYFprEPQA+0C4LgqJPwXM9C24L7muoTt1kkNE kQocwqsm9Cdh7N26jqrQr4SdxkvJo4bj+Y5uL4Qru7Y0UW9BdLsjJSNSEu8z9XyH dOH4djkTEuXApXe4oUxQSWrncPdL73c85V3m7jqnTqFrrnWjI/4pok5VHLR9gPSg RlZ/jwml24Mi1g7XGskIFH+1y3gWNMWBYWmIQ9uGjXHhAmxxlfe5nCGiuk80a7+v v7ByeX7cvZBzHg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:08:17 2025 by rpki-client