This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft File: r-b4yudJLQZOAwcckUc5Lu3UW8c.mft (raw, json) Hash identifier: /3IkvSGNvxyCsudUjzy15tlPYga0jPy/ejsG6INZub8= Subject key identifier: A6:C2:86:37:4A:AD:35:F2:81:C3:0A:F0:BA:4A:74:A9:0E:51:09:98 Authority key identifier: AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7 Certificate issuer: /CN=afe6f8cae7492d064e03071c9147392eedd45bc7 Certificate serial: 019AF12D83F99EF7447485E4BD1631BD643D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft Manifest number: 1222 Signing time: Sat 06 Dec 2025 01:01:23 +0000 Manifest this update: Sat 06 Dec 2025 01:01:23 +0000 Manifest next update: Sun 07 Dec 2025 01:01:23 +0000 Files and hashes: 1: H4Dt1RaXNjrSuf7dIzKd6HI74Xw.roa (hash: 1FMAIN7AWHSRrarcSi8q0q/CcQ+uq+tcfRyHiGa5Hko=) 2: kemSd2KPq5UUT0EZWa92ek2Cwpc.roa (hash: kh0wd5NltixPwrZZXBgelPgGkebz79/WC48Vz4n628s=) 3: r-b4yudJLQZOAwcckUc5Lu3UW8c.crl (hash: 3j5UrTZssY0PfQ7iKskaQ4yZ1m2Kiw4z60Sc+ILg9NM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:83:f9:9e:f7:44:74:85:e4:bd:16:31:bd:64:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afe6f8cae7492d064e03071c9147392eedd45bc7 Validity Not Before: Dec 6 01:01:23 2025 GMT Not After : Dec 7 01:01:23 2025 GMT Subject: CN=a6c286374aad35f281c30af0ba4a74a90e510998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c3:8b:8d:6d:ad:a5:49:9a:f2:a8:b0:17:86: ae:e8:22:b6:b6:a6:53:d3:86:5d:fa:63:ff:4b:b2: 72:40:b8:c5:a4:e2:f2:18:ec:e1:7e:e4:fb:fa:11: 6e:1c:27:bb:69:39:d2:76:ee:54:df:e0:e9:b0:d8: d3:ca:c2:70:9e:2e:a5:97:ab:34:94:db:5b:98:c1: 6b:62:58:12:44:fa:00:e3:ff:25:ac:fc:9d:e0:01: 65:5b:a1:a2:b5:de:40:1f:3e:e0:7e:2a:5e:00:b9: ac:4a:22:14:47:7b:f7:54:ef:f8:d3:d8:04:54:2c: 04:7b:b4:de:2a:6c:51:bc:11:2c:b9:69:6c:35:30: c6:7f:b6:59:d5:d8:f5:68:d1:f3:12:46:e1:51:ee: a6:d8:fa:83:df:60:c1:76:bc:71:56:cc:d6:f1:ad: 91:97:c0:a6:81:bd:f4:1d:9f:be:ed:68:2a:ef:28: 83:60:0e:25:32:82:8e:28:77:aa:e1:38:ec:c6:7e: bb:78:c5:09:10:89:b3:f0:81:ee:d6:b4:ce:e9:46: 69:b6:93:de:e7:34:f8:d4:f4:76:f4:62:47:14:1b: 33:17:d3:fc:b6:e1:34:c2:09:59:aa:56:d3:89:49: 4a:3c:e4:02:72:37:31:67:77:74:db:76:75:0d:47: f0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C2:86:37:4A:AD:35:F2:81:C3:0A:F0:BA:4A:74:A9:0E:51:09:98 X509v3 Authority Key Identifier: keyid:AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:2e:e8:e5:8c:02:fa:7a:3b:1f:85:6d:56:f3:7b:87:91:2d: d5:6d:5b:9e:67:19:7e:67:48:6b:c5:3b:b0:21:37:0d:f0:21: 58:49:a1:7b:45:f0:18:5e:bd:d4:13:3b:43:86:1a:79:ce:81: fa:dc:b7:9f:35:d1:15:a3:16:97:9e:3f:b2:c5:e3:7b:b9:82: 74:4b:8e:92:f4:b8:70:3b:c6:d2:22:b7:66:02:2a:8e:db:23: b2:89:a9:c7:39:54:a5:61:2e:29:95:3f:35:4e:f7:fb:f4:bd: 11:71:b1:c8:bd:a6:e3:e7:8d:1d:d5:1b:b4:09:ed:a8:4f:c0: d1:83:7e:8d:36:e5:ae:e3:fb:0b:bb:6b:7f:7c:7e:60:b1:2f: 31:e8:08:a5:e7:50:d8:8e:aa:80:3f:08:b6:ed:75:36:4f:2b: 98:73:8f:16:7a:ba:ec:e0:8c:e4:fd:83:86:a5:ef:7b:21:3f: 6b:26:a0:e0:8d:b3:50:24:8c:c6:f5:40:87:cd:68:3f:e6:e4: a7:9b:05:97:59:61:ca:aa:71:c5:12:50:d2:02:04:1c:c1:f2: 11:75:22:f8:1c:68:c8:72:e1:2b:f6:e1:54:63:01:fb:2c:f8: d0:7e:35:36:21:40:a6:fe:8f:c2:de:7b:ee:da:99:06:94:2e: 51:f1:d5:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYP5nvdEdIXkvRYxvWQ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZTZmOGNhZTc0OTJkMDY0ZTAzMDcxYzkxNDczOTJlZWRk NDViYzcwHhcNMjUxMjA2MDEwMTIzWhcNMjUxMjA3MDEwMTIzWjAzMTEwLwYDVQQD EyhhNmMyODYzNzRhYWQzNWYyODFjMzBhZjBiYTRhNzRhOTBlNTEwOTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocOLjW2tpUma8qiwF4au6CK2tqZT 04Zd+mP/S7JyQLjFpOLyGOzhfuT7+hFuHCe7aTnSdu5U3+DpsNjTysJwni6ll6s0 lNtbmMFrYlgSRPoA4/8lrPyd4AFlW6Gitd5AHz7gfipeALmsSiIUR3v3VO/409gE VCwEe7TeKmxRvBEsuWlsNTDGf7ZZ1dj1aNHzEkbhUe6m2PqD32DBdrxxVszW8a2R l8Cmgb30HZ++7Wgq7yiDYA4lMoKOKHeq4Tjsxn67eMUJEImz8IHu1rTO6UZptpPe 5zT41PR29GJHFBszF9P8tuE0wglZqlbTiUlKPOQCcjcxZ3d023Z1DUfwAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbChjdKrTXygcMK8LpKdKkOUQmYMB8GA1UdIwQY MBaAFK/m+MrnSS0GTgMHHJFHOS7t1FvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvci1iNHl1ZEpMUVpPQXdjY2tVYzVMdTNVVzhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jOTg3YjYtZWYwMC00ZDI4LWE0YWUt NjU0OWNkNTlhYTRmLzEvci1iNHl1ZEpMUVpPQXdjY2tVYzVMdTNVVzhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9jOTg3YjYtZWYwMC00ZDI4LWE0YWUtNjU0OWNkNTlhYTRm LzEvci1iNHl1ZEpMUVpPQXdjY2tVYzVMdTNVVzhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdy7o5YwC +no7H4VtVvN7h5Et1W1bnmcZfmdIa8U7sCE3DfAhWEmhe0XwGF691BM7Q4Yaec6B +ty3nzXRFaMWl54/ssXje7mCdEuOkvS4cDvG0iK3ZgIqjtsjsompxzlUpWEuKZU/ NU73+/S9EXGxyL2m4+eNHdUbtAntqE/A0YN+jTblruP7C7trf3x+YLEvMegIpedQ 2I6qgD8Itu11Nk8rmHOPFnq67OCM5P2DhqXveyE/ayag4I2zUCSMxvVAh81oP+bk p5sFl1lhyqpxxRJQ0gIEHMHyEXUi+BxoyHLhK/bhVGMB+yz40H41NiFApv6Pwt57 7tqZBpQuUfHVOw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:10 2025 by rpki-client