This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft File: riYajfUykscw4q4d_PxP4_92sdA.mft (raw, json) Hash identifier: yizLktCwYiIM+VYWR/7cEokzjjCJwVCS//xF9ew6skM= Subject key identifier: A4:EB:1A:3C:B1:C6:77:FB:01:FF:65:4F:DA:CD:F4:44:82:83:65:E4 Authority key identifier: AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0 Certificate issuer: /CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0 Certificate serial: 019AF1D24677E7F0BA88352AE4115CC9DFC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 04:01:20 +0000 Manifest this update: Sat 06 Dec 2025 04:01:20 +0000 Manifest next update: Sun 07 Dec 2025 04:01:20 +0000 Files and hashes: 1: riYajfUykscw4q4d_PxP4_92sdA.crl (hash: tFkQNBQlWixFEH1ul/I1CF4V/2HLlRf9kSUQnYQ1F1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:46:77:e7:f0:ba:88:35:2a:e4:11:5c:c9:df:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0 Validity Not Before: Dec 6 04:01:20 2025 GMT Not After : Dec 7 04:01:20 2025 GMT Subject: CN=a4eb1a3cb1c677fb01ff654fdacdf444828365e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b4:7c:66:f2:54:39:65:1a:c6:cd:df:8c:aa: 4e:8d:c1:1a:1e:c0:e9:b1:7f:04:0b:4e:e0:cc:34: 51:75:ba:c0:d0:39:31:00:b2:10:af:42:d4:4a:e9: c7:99:e8:e3:a0:2a:df:42:cc:27:e5:ab:f0:2e:28: 61:04:f5:66:b7:be:ee:ad:be:44:84:4f:bf:0f:f3: 9e:71:59:07:c9:a6:63:48:b3:72:36:1f:35:2b:ea: ea:15:d4:9d:c1:ba:f8:82:f7:5d:1d:b9:2c:58:06: f9:d3:6d:a7:0e:2f:d3:7a:c8:5d:e9:11:cf:a9:fc: 48:58:a0:2d:a7:08:de:12:98:64:75:e5:8f:5d:0f: 03:7c:95:dd:43:5d:bc:82:fd:9c:87:13:b5:41:4b: 6f:d3:c5:3b:a3:f0:75:c3:55:a6:78:82:ac:30:9e: 7c:15:e9:f3:b3:f5:90:f5:aa:0a:c4:05:fd:c6:18: 06:7c:95:20:f0:21:e8:d3:8e:59:ab:1a:75:57:e4: 39:c9:26:d1:fc:1c:52:04:7f:33:9e:70:f6:f0:de: eb:fe:b5:29:e3:b0:d5:28:9a:4d:57:b9:75:d4:45: f8:46:95:a8:c4:d1:f5:db:f0:f1:d5:42:bd:e2:30: e1:f4:3f:d3:91:11:33:77:fb:c6:6c:d5:b6:b6:96: 5a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:EB:1A:3C:B1:C6:77:FB:01:FF:65:4F:DA:CD:F4:44:82:83:65:E4 X509v3 Authority Key Identifier: keyid:AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:1b:0e:e6:85:42:8c:bd:e6:31:c6:c1:9b:1e:56:df:86:6f: 45:0f:88:08:e5:32:6c:fb:df:46:93:99:73:54:50:fd:d0:4b: fa:3d:71:7f:b5:e3:ca:8e:f2:3d:15:fb:30:a4:d7:f2:23:b9: c8:c5:c1:5b:d2:9a:d1:f3:62:1e:14:e9:1e:70:f8:de:39:d4: b6:34:0e:58:c0:ef:8a:95:9d:5b:f5:fc:83:c2:a8:3f:6d:0c: 6d:d6:2c:de:6d:e4:5d:90:06:7a:c2:52:4d:71:ce:96:92:bf: 51:bc:d2:8a:85:55:c5:b1:89:d6:08:6e:6d:82:dc:a4:df:d4: ba:d5:ae:39:dc:3a:ba:c2:db:1f:f5:1e:06:92:9a:dd:32:da: 24:f6:9f:5a:3f:11:12:7f:d2:6a:d2:49:3f:02:4e:d0:89:1b: 49:e5:41:40:8f:13:8d:6a:95:e6:6c:64:3d:ab:c4:46:cb:f6: e8:cc:f0:ed:8e:58:26:3d:26:db:1c:26:8a:4b:a1:71:9b:ea: b6:66:a3:8d:58:b7:f9:5c:97:73:7f:7f:d3:a0:1a:fd:11:fa: 3b:51:e3:39:67:a9:03:f8:37:64:69:66:09:f0:aa:40:e1:f3: 56:fc:6b:30:90:51:34:e0:72:29:44:0b:e7:49:16:52:35:ea: 26:5a:b3:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kZ35/C6iDUq5BFcyd/DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMjYxYThkZjUzMjkyYzczMGUyYWUxZGZjZmM0ZmUzZmY3 NmIxZDAwHhcNMjUxMjA2MDQwMTIwWhcNMjUxMjA3MDQwMTIwWjAzMTEwLwYDVQQD EyhhNGViMWEzY2IxYzY3N2ZiMDFmZjY1NGZkYWNkZjQ0NDgyODM2NWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbR8ZvJUOWUaxs3fjKpOjcEaHsDp sX8EC07gzDRRdbrA0DkxALIQr0LUSunHmejjoCrfQswn5avwLihhBPVmt77urb5E hE+/D/OecVkHyaZjSLNyNh81K+rqFdSdwbr4gvddHbksWAb5022nDi/Teshd6RHP qfxIWKAtpwjeEphkdeWPXQ8DfJXdQ128gv2chxO1QUtv08U7o/B1w1WmeIKsMJ58 Fenzs/WQ9aoKxAX9xhgGfJUg8CHo045Zqxp1V+Q5ySbR/BxSBH8znnD28N7r/rUp 47DVKJpNV7l11EX4RpWoxNH12/Dx1UK94jDh9D/TkREzd/vGbNW2tpZa1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTrGjyxxnf7Af9lT9rN9ESCg2XkMB8GA1UdIwQY MBaAFK4mGo31MpLHMOKuHfz8T+P/drHQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmlZYWpmVXlrc2N3NHE0ZF9QeFA0Xzkyc2RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xYTg0OWUtODYxYy00YzRkLWJjZjQt NTY5NWQ4OWQ3YjM2LzEvcmlZYWpmVXlrc2N3NHE0ZF9QeFA0Xzkyc2RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8xYTg0OWUtODYxYy00YzRkLWJjZjQtNTY5NWQ4OWQ3YjM2 LzEvcmlZYWpmVXlrc2N3NHE0ZF9QeFA0Xzkyc2RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvRsO5oVC jL3mMcbBmx5W34ZvRQ+ICOUybPvfRpOZc1RQ/dBL+j1xf7Xjyo7yPRX7MKTX8iO5 yMXBW9Ka0fNiHhTpHnD43jnUtjQOWMDvipWdW/X8g8KoP20MbdYs3m3kXZAGesJS TXHOlpK/UbzSioVVxbGJ1ghubYLcpN/UutWuOdw6usLbH/UeBpKa3TLaJPafWj8R En/SatJJPwJO0IkbSeVBQI8TjWqV5mxkPavERsv26Mzw7Y5YJj0m2xwmikuhcZvq tmajjVi3+VyXc39/06Aa/RH6O1HjOWepA/g3ZGlmCfCqQOHzVvxrMJBRNOByKUQL 50kWUjXqJlqzvw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:22 2025 by rpki-client