This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft File: rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft (raw, json) Hash identifier: KscC2/8zIhAVTRFpPEXrJvvzuVTX3ha/qSbYqHZutCA= Subject key identifier: 3F:E8:73:0A:CC:04:88:11:31:45:48:0C:AE:72:18:D9:EA:AA:06:1F Authority key identifier: AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8 Certificate issuer: /CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8 Certificate serial: 019B40C94A22A88774679CE27C4D374F0F98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft Manifest number: 1404 Signing time: Sun 21 Dec 2025 12:01:32 +0000 Manifest this update: Sun 21 Dec 2025 12:01:32 +0000 Manifest next update: Mon 22 Dec 2025 12:01:32 +0000 Files and hashes: 1: r6C99vK2TllFCTWcqpJRSg5MRPM.roa (hash: 3+br3Wh/zPJPiW24ubp7XOxLj4qW7AeahE4kU9GEl1U=) 2: rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl (hash: ghInLpWuoQC5PvrFJoGHjpTFoIt1+9/2gBl0Al9ZOk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:4a:22:a8:87:74:67:9c:e2:7c:4d:37:4f:0f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8 Validity Not Before: Dec 21 12:01:32 2025 GMT Not After : Dec 22 12:01:32 2025 GMT Subject: CN=3fe8730acc0488113145480cae7218d9eaaa061f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4e:45:7b:b5:51:6f:b2:cb:ee:94:1d:47:fe: 75:f6:d1:06:9c:d7:e0:05:97:91:ed:83:38:b3:e3: 95:55:c4:e2:47:21:8a:e0:ed:34:63:6b:4c:ef:c1: fe:b4:ba:c0:e1:58:74:09:1a:19:15:89:31:27:fc: 81:67:8f:55:52:26:d7:3d:ae:d3:f6:4e:ff:6c:9a: 82:af:0f:05:86:e5:06:e0:eb:39:c8:fc:85:82:6f: 61:da:93:2b:59:54:4b:f5:4d:f5:57:64:9b:a4:b4: 1c:3b:a5:24:14:35:21:d4:5e:74:80:df:29:a6:4c: a8:51:91:99:46:1d:94:8d:ab:65:b6:80:77:22:f4: 5c:5b:a3:bd:df:33:db:7e:10:44:0b:92:98:f7:31: 95:91:69:1b:0c:e3:8d:90:93:7f:b4:57:40:a4:eb: 05:38:2a:44:4b:d8:c1:2d:9c:ba:a8:2c:5b:d4:f6: 17:fc:5d:fa:45:33:41:d4:d2:12:70:2c:06:80:9b: b5:97:32:44:5e:9c:df:a9:8f:a3:7e:e7:52:45:1d: 95:62:89:1d:f3:40:72:7a:f9:05:5b:c9:ed:8c:ff: 8f:55:b1:ae:4c:c8:78:55:ee:29:a2:5c:de:c4:72: 18:8d:5e:da:a8:c6:fc:49:ac:48:00:cd:1c:88:c9: e5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E8:73:0A:CC:04:88:11:31:45:48:0C:AE:72:18:D9:EA:AA:06:1F X509v3 Authority Key Identifier: keyid:AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:f5:b1:53:8d:bd:7f:ce:d5:23:58:2d:33:b1:bc:30:fe:2b: 59:4f:1d:27:ad:21:44:98:c1:9d:b3:27:5e:af:82:3c:f6:b5: c5:38:8c:25:98:81:ec:2b:d9:55:fb:46:9b:2f:95:06:12:e6: 44:49:37:c9:ea:57:12:ba:52:0b:e1:bc:47:42:d0:dc:61:9c: 46:2a:89:7f:84:41:b4:3b:96:86:1d:bf:35:0d:cf:e8:45:4e: 89:d4:47:aa:84:a0:c8:37:cd:84:26:48:69:e0:70:90:c5:c9: f3:29:93:76:15:80:b8:4e:e4:23:3c:85:c2:20:21:9e:cb:c9: 71:53:64:58:83:e9:5e:f3:c1:a1:18:d6:59:d2:d2:94:fe:c2: 43:a3:c5:ee:ef:87:c0:f7:29:d9:f2:24:b1:e6:f4:87:cd:34: d5:2c:c6:8c:e7:40:2c:b6:5c:26:c9:fa:a8:e8:9b:9d:e9:d3: 90:83:f0:19:d1:00:15:8a:f7:48:b3:48:0b:f4:86:42:09:30: 2e:76:d7:cc:71:80:88:6b:18:73:2a:f4:ee:a0:cc:42:fb:59: 53:79:e1:73:fa:74:78:29:d3:40:81:d2:ba:a1:3f:1c:70:d2: 7d:bf:13:cd:d4:7f:22:f8:9c:aa:56:ee:09:b6:9c:2b:a9:ec: 20:9d:7b:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyUoiqId0Z5zifE03Tw+YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkOGRkMTdhNzY4ZTNiNmZiZmE3YTcwMDlhNzAwN2ViZTY1 YjQ1YzgwHhcNMjUxMjIxMTIwMTMyWhcNMjUxMjIyMTIwMTMyWjAzMTEwLwYDVQQD EygzZmU4NzMwYWNjMDQ4ODExMzE0NTQ4MGNhZTcyMThkOWVhYWEwNjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE5Fe7VRb7LL7pQdR/519tEGnNfg BZeR7YM4s+OVVcTiRyGK4O00Y2tM78H+tLrA4Vh0CRoZFYkxJ/yBZ49VUibXPa7T 9k7/bJqCrw8FhuUG4Os5yPyFgm9h2pMrWVRL9U31V2SbpLQcO6UkFDUh1F50gN8p pkyoUZGZRh2UjatltoB3IvRcW6O93zPbfhBEC5KY9zGVkWkbDOONkJN/tFdApOsF OCpES9jBLZy6qCxb1PYX/F36RTNB1NIScCwGgJu1lzJEXpzfqY+jfudSRR2VYokd 80ByevkFW8ntjP+PVbGuTMh4Ve4polzexHIYjV7aqMb8SaxIAM0ciMnl/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/ocwrMBIgRMUVIDK5yGNnqqgYfMB8GA1UdIwQY MBaAFK2N0Xp2jjtvv6enAJpwB+vmW0XIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclkzUmVuYU9PMi1fcDZjQW1uQUg2LVpiUmNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy85OGIzNWItOTQ1ZS00MGM1LWJiOTUt OWVhZGQzNTFmYzc5LzEvclkzUmVuYU9PMi1fcDZjQW1uQUg2LVpiUmNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy85OGIzNWItOTQ1ZS00MGM1LWJiOTUtOWVhZGQzNTFmYzc5 LzEvclkzUmVuYU9PMi1fcDZjQW1uQUg2LVpiUmNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAfWxU429 f87VI1gtM7G8MP4rWU8dJ60hRJjBnbMnXq+CPPa1xTiMJZiB7CvZVftGmy+VBhLm REk3yepXErpSC+G8R0LQ3GGcRiqJf4RBtDuWhh2/NQ3P6EVOidRHqoSgyDfNhCZI aeBwkMXJ8ymTdhWAuE7kIzyFwiAhnsvJcVNkWIPpXvPBoRjWWdLSlP7CQ6PF7u+H wPcp2fIkseb0h8001SzGjOdALLZcJsn6qOibnenTkIPwGdEAFYr3SLNIC/SGQgkw LnbXzHGAiGsYcyr07qDMQvtZU3nhc/p0eCnTQIHSuqE/HHDSfb8TzdR/Ivicqlbu CbacK6nsIJ17kg== -----END CERTIFICATE-----Generated at Sun Dec 21 15:49:46 2025 by rpki-client