This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft File: a0yzzTXvvITyqJovXSwWLD184Vs.mft (raw, json) Hash identifier: u5YvxIOb21BIYD0O2daTD+Nx5Pq3RLNlYKKO+acWKcc= Subject key identifier: AE:E9:17:DE:F3:69:34:48:C7:CA:16:A9:6E:8D:7F:BF:1E:6B:A2:A5 Authority key identifier: 6B:4C:B3:CD:35:EF:BC:84:F2:A8:9A:2F:5D:2C:16:2C:3D:7C:E1:5B Certificate issuer: /CN=6b4cb3cd35efbc84f2a89a2f5d2c162c3d7ce15b Certificate serial: 019B3EA3BD010D27BB1154EE1D8C79161171 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 02:01:16 +0000 Manifest this update: Sun 21 Dec 2025 02:01:16 +0000 Manifest next update: Mon 22 Dec 2025 02:01:16 +0000 Files and hashes: 1: WW1zYqOtAv6xpztxCe41pJBmBcI.roa (hash: ANkEAvSjUZh7Q55af7iPjLdQ2+UV7wXRW5HhuWBQ4lo=) 2: a0yzzTXvvITyqJovXSwWLD184Vs.crl (hash: fAjXQZM0ezzgB2LZ0L0okyAJK8Eq9SVBANUu04rxQWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 02:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:bd:01:0d:27:bb:11:54:ee:1d:8c:79:16:11:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b4cb3cd35efbc84f2a89a2f5d2c162c3d7ce15b Validity Not Before: Dec 21 02:01:16 2025 GMT Not After : Dec 22 02:01:16 2025 GMT Subject: CN=aee917def3693448c7ca16a96e8d7fbf1e6ba2a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:eb:8d:4c:7f:7e:3a:13:70:8e:bc:a7:58:c8: 8b:71:15:a8:57:d7:5e:9f:63:ba:b4:f4:51:cc:ea: 01:55:48:6a:dc:0c:3e:53:d7:05:c6:75:ca:8a:eb: 74:78:d0:a2:00:27:8a:76:7b:81:2b:d5:74:44:44: 8a:f6:ff:50:33:98:e8:ce:27:0b:4d:85:4e:2b:8e: 51:52:29:5c:00:e1:ed:df:60:c9:97:ca:a1:8c:00: 55:d6:4d:fa:8a:a2:c2:06:76:45:5d:8c:8c:41:56: a0:2c:20:05:ca:a0:f6:44:14:e7:29:4a:bd:eb:a4: 49:c9:01:50:f7:15:f1:28:85:1d:a0:55:f1:9e:5f: 3a:75:84:75:1e:92:a1:b5:23:81:b8:8d:01:58:80: 3d:e9:76:8a:44:63:22:85:8d:f7:9b:9c:c5:4b:d1: 5d:43:d3:b8:7c:37:f7:d0:26:84:fb:4a:a2:62:ee: 10:c8:a4:2f:73:3a:0e:fa:b3:dc:64:d4:38:63:cc: 6d:e7:e1:66:13:cc:57:f1:7a:86:55:50:e5:d0:1d: 7b:29:78:9f:c3:a1:7f:1e:56:0c:4f:49:01:aa:4e: f2:70:cd:9d:a6:f4:60:96:80:30:6c:a1:b3:40:ed: 2a:fd:ac:ca:fa:4f:06:4a:5f:0a:79:2f:44:3d:b5: 8f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E9:17:DE:F3:69:34:48:C7:CA:16:A9:6E:8D:7F:BF:1E:6B:A2:A5 X509v3 Authority Key Identifier: keyid:6B:4C:B3:CD:35:EF:BC:84:F2:A8:9A:2F:5D:2C:16:2C:3D:7C:E1:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:b0:28:ed:49:ea:28:63:7a:2d:20:c7:d2:46:65:24:80:f4: 6b:30:76:9c:46:07:2c:3a:ed:a9:f0:97:fc:33:c0:4b:58:6f: 5f:e9:26:0c:5c:da:01:4e:6c:44:90:c5:69:cb:05:ee:34:9b: fa:5a:16:54:6e:eb:40:70:ba:6e:1b:c4:e5:a5:36:2a:44:c5: e5:38:43:6e:64:e9:c9:27:1d:57:8f:f1:f3:20:b6:2d:b9:5a: 45:f7:84:8b:10:2b:ce:45:a2:48:58:8a:c2:f8:f9:d4:2c:8f: 20:70:7a:07:21:11:ef:5c:5d:ea:2c:26:1e:0c:fb:c1:ca:18: 29:21:92:57:94:64:fe:5c:e2:2d:72:eb:f5:6d:f6:76:11:7a: eb:87:7a:d6:01:38:39:2d:98:53:51:24:15:5b:f0:ed:0d:ac: 86:ca:ed:df:6f:95:3f:6f:59:e4:1a:56:8c:14:98:65:c4:b6: 02:90:25:bb:44:50:32:6e:5c:8e:0e:c7:7f:72:37:5c:de:71: ea:0b:7b:d8:7a:e0:50:b0:ab:49:45:ae:ed:62:4c:14:70:62: 47:89:ac:07:74:b9:c8:56:b0:29:ea:6a:07:63:94:95:90:98: 1a:1d:af:90:51:0f:db:a8:33:ff:2c:98:87:ff:69:72:ec:f7: f2:7d:a8:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o70BDSe7EVTuHYx5FhFxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNGNiM2NkMzVlZmJjODRmMmE4OWEyZjVkMmMxNjJjM2Q3 Y2UxNWIwHhcNMjUxMjIxMDIwMTE2WhcNMjUxMjIyMDIwMTE2WjAzMTEwLwYDVQQD EyhhZWU5MTdkZWYzNjkzNDQ4YzdjYTE2YTk2ZThkN2ZiZjFlNmJhMmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeuNTH9+OhNwjrynWMiLcRWoV9de n2O6tPRRzOoBVUhq3Aw+U9cFxnXKiut0eNCiACeKdnuBK9V0RESK9v9QM5jozicL TYVOK45RUilcAOHt32DJl8qhjABV1k36iqLCBnZFXYyMQVagLCAFyqD2RBTnKUq9 66RJyQFQ9xXxKIUdoFXxnl86dYR1HpKhtSOBuI0BWIA96XaKRGMihY33m5zFS9Fd Q9O4fDf30CaE+0qiYu4QyKQvczoO+rPcZNQ4Y8xt5+FmE8xX8XqGVVDl0B17KXif w6F/HlYMT0kBqk7ycM2dpvRgloAwbKGzQO0q/azK+k8GSl8KeS9EPbWPQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7pF97zaTRIx8oWqW6Nf78ea6KlMB8GA1UdIwQY MBaAFGtMs80177yE8qiaL10sFiw9fOFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTB5enpUWHZ2SVR5cUpvdlhTd1dMRDE4NFZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jNjk0OTMtNTI2NC00OWE0LWI0ZGEt NjNhZTc0YmIyMDNiLzEvYTB5enpUWHZ2SVR5cUpvdlhTd1dMRDE4NFZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jNjk0OTMtNTI2NC00OWE0LWI0ZGEtNjNhZTc0YmIyMDNi LzEvYTB5enpUWHZ2SVR5cUpvdlhTd1dMRDE4NFZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLAo7Unq KGN6LSDH0kZlJID0azB2nEYHLDrtqfCX/DPAS1hvX+kmDFzaAU5sRJDFacsF7jSb +loWVG7rQHC6bhvE5aU2KkTF5ThDbmTpyScdV4/x8yC2LblaRfeEixArzkWiSFiK wvj51CyPIHB6ByER71xd6iwmHgz7wcoYKSGSV5Rk/lziLXLr9W32dhF664d61gE4 OS2YU1EkFVvw7Q2shsrt32+VP29Z5BpWjBSYZcS2ApAlu0RQMm5cjg7Hf3I3XN5x 6gt72HrgULCrSUWu7WJMFHBiR4msB3S5yFawKepqB2OUlZCYGh2vkFEP26gz/yyY h/9pcuz38n2oZg== -----END CERTIFICATE-----Generated at Sun Dec 21 11:24:36 2025 by rpki-client