This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft File: RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft (raw, json) Hash identifier: FyvfkiT5XopaihaYYmUmQDsGjsUt6L2Oepd1M5truL4= Subject key identifier: F1:22:DA:26:17:2E:61:92:A1:E1:78:9C:AE:6C:EB:DB:85:4D:99:66 Authority key identifier: 44:8C:A3:95:37:59:7C:FA:E6:0A:E0:42:1D:B8:E0:98:B4:E2:61:30 Certificate issuer: /CN=448ca39537597cfae60ae0421db8e098b4e26130 Certificate serial: 019AF2766699FD25B96C83F25EA6542C9339 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 07:00:37 +0000 Manifest this update: Sat 06 Dec 2025 07:00:37 +0000 Manifest next update: Sun 07 Dec 2025 07:00:37 +0000 Files and hashes: 1: EXivR_Wvv2aOO3jHO658CAON0No.roa (hash: fh34cv2WRgihe99oCLRpx5puteDZpUePtPBBSbNg/Qg=) 2: RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl (hash: YZTTxF0opQRsNaOPnssLaaTFMnD/A4x3TBBboiTeAXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:66:99:fd:25:b9:6c:83:f2:5e:a6:54:2c:93:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=448ca39537597cfae60ae0421db8e098b4e26130 Validity Not Before: Dec 6 07:00:37 2025 GMT Not After : Dec 7 07:00:37 2025 GMT Subject: CN=f122da26172e6192a1e1789cae6cebdb854d9966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:39:68:c4:6c:d3:74:85:5a:3c:7b:28:88:0b: e2:c6:19:81:70:c6:18:e2:e2:81:8b:72:02:4a:e7: 1e:09:cf:c1:af:46:d4:96:ec:22:d8:6c:bc:59:6d: b7:27:a6:17:b6:46:30:72:22:d1:d6:ea:fb:ea:1e: 00:e1:8f:dc:5a:b4:1e:d3:69:79:9f:ab:84:ab:5a: d3:5f:b3:67:e1:58:e5:50:c4:43:d1:30:63:c6:13: 57:da:89:9b:6f:58:51:2c:ad:90:29:02:a8:63:92: c9:e7:d0:55:2c:74:16:ac:2d:8f:2b:1c:b4:ef:90: ce:94:4d:2d:0a:36:c4:27:89:6d:32:b4:07:98:80: 18:70:4e:35:93:de:25:95:ce:db:d3:cb:83:eb:8c: 2f:da:d8:23:1c:35:6b:48:d6:3e:ef:e3:e7:dd:da: 3f:0f:6a:f5:a7:17:b4:0f:02:7f:0e:59:80:58:e8: 2a:26:28:e3:7c:62:68:e2:10:19:02:76:20:fe:2b: e0:5c:08:cd:7b:88:f8:3e:55:23:7c:69:45:11:65: dc:4f:79:29:47:5e:9f:34:a3:39:e2:15:86:b0:fa: d6:c5:9f:1f:9a:e1:84:dc:e2:87:10:a0:4a:e5:31: 01:4c:a9:26:8c:b0:3e:73:2c:13:b7:bb:fb:04:86: 2d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:22:DA:26:17:2E:61:92:A1:E1:78:9C:AE:6C:EB:DB:85:4D:99:66 X509v3 Authority Key Identifier: keyid:44:8C:A3:95:37:59:7C:FA:E6:0A:E0:42:1D:B8:E0:98:B4:E2:61:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:c9:02:ac:6b:c8:03:b6:f1:1d:74:d1:34:8f:76:e0:82:90: 8c:7a:e8:f7:04:43:4e:e6:2f:87:af:eb:de:5b:47:15:09:0b: 36:77:3f:20:a7:c0:be:52:00:fa:0d:e2:44:56:3f:ae:6b:cb: df:7d:36:c2:95:ae:99:37:30:ce:1a:d7:fb:00:8f:d6:81:cf: b5:71:f7:ea:0c:0f:39:7b:9a:95:22:2b:a5:d8:2a:e4:3a:e0: f5:f5:3d:d0:1c:ff:5b:72:00:2e:48:d6:ce:e2:6a:37:3c:54: f5:35:2f:dc:c1:db:ca:1b:c2:64:0c:c2:00:1e:3d:8b:82:bc: 6b:a9:79:28:0f:9c:f1:39:44:c0:a3:bf:aa:cf:85:08:3b:d4: 1e:06:8e:92:24:8f:87:92:ec:13:30:e2:56:f1:b1:a9:77:fc: 95:d1:44:8b:87:9c:6e:72:4f:3c:5c:1d:29:90:36:66:82:41: 44:04:ab:17:58:3a:9c:6f:6d:d6:b1:8b:51:9c:5b:8d:78:27: bc:dd:e8:73:4c:e7:55:e8:96:3c:86:46:16:bd:7e:1c:70:9b: 32:2d:8e:c9:69:15:54:1e:3a:8e:7d:b6:83:02:69:8f:23:1e: 1e:7b:79:07:c6:3e:71:c4:21:f2:9f:b6:0c:0a:2b:1a:3f:c6: 5a:b6:a1:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmaZ/SW5bIPyXqZULJM5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0OGNhMzk1Mzc1OTdjZmFlNjBhZTA0MjFkYjhlMDk4YjRl MjYxMzAwHhcNMjUxMjA2MDcwMDM3WhcNMjUxMjA3MDcwMDM3WjAzMTEwLwYDVQQD EyhmMTIyZGEyNjE3MmU2MTkyYTFlMTc4OWNhZTZjZWJkYjg1NGQ5OTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzloxGzTdIVaPHsoiAvixhmBcMYY 4uKBi3ICSuceCc/Br0bUluwi2Gy8WW23J6YXtkYwciLR1ur76h4A4Y/cWrQe02l5 n6uEq1rTX7Nn4VjlUMRD0TBjxhNX2ombb1hRLK2QKQKoY5LJ59BVLHQWrC2PKxy0 75DOlE0tCjbEJ4ltMrQHmIAYcE41k94llc7b08uD64wv2tgjHDVrSNY+7+Pn3do/ D2r1pxe0DwJ/DlmAWOgqJijjfGJo4hAZAnYg/ivgXAjNe4j4PlUjfGlFEWXcT3kp R16fNKM54hWGsPrWxZ8fmuGE3OKHEKBK5TEBTKkmjLA+cywTt7v7BIYtjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEi2iYXLmGSoeF4nK5s69uFTZlmMB8GA1UdIwQY MBaAFESMo5U3WXz65grgQh244Ji04mEwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkl5amxUZFpmUHJtQ3VCQ0hiamdtTFRpWVRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kYjA1MTktNGU1YS00Yjc1LTg4ZmQt YmJjMjM5ZTg5N2ViLzEvUkl5amxUZFpmUHJtQ3VCQ0hiamdtTFRpWVRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9kYjA1MTktNGU1YS00Yjc1LTg4ZmQtYmJjMjM5ZTg5N2Vi LzEvUkl5amxUZFpmUHJtQ3VCQ0hiamdtTFRpWVRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMkCrGvI A7bxHXTRNI924IKQjHro9wRDTuYvh6/r3ltHFQkLNnc/IKfAvlIA+g3iRFY/rmvL 3302wpWumTcwzhrX+wCP1oHPtXH36gwPOXualSIrpdgq5Drg9fU90Bz/W3IALkjW zuJqNzxU9TUv3MHbyhvCZAzCAB49i4K8a6l5KA+c8TlEwKO/qs+FCDvUHgaOkiSP h5LsEzDiVvGxqXf8ldFEi4ecbnJPPFwdKZA2ZoJBRASrF1g6nG9t1rGLUZxbjXgn vN3oc0znVeiWPIZGFr1+HHCbMi2OyWkVVB46jn22gwJpjyMeHnt5B8Y+ccQh8p+2 DAorGj/GWrahpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:33:24 2025 by rpki-client