This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft File: rY6Ff8AL4U7ZK554zDymm4rcJIU.mft (raw, json) Hash identifier: vc6bB9CQlReAVNUnJL42M4ewK06nG5Cr+lI5y+NMqyU= Subject key identifier: C2:4B:26:2B:3C:F4:3B:02:93:3F:35:64:0B:63:32:35:63:11:65:08 Authority key identifier: AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85 Certificate issuer: /CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485 Certificate serial: 019B44A5CBB06874CD263429CD98E08A8424 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft Manifest number: 1786 Signing time: Mon 22 Dec 2025 06:01:14 +0000 Manifest this update: Mon 22 Dec 2025 06:01:14 +0000 Manifest next update: Tue 23 Dec 2025 06:01:14 +0000 Files and hashes: 1: OJD8WtNdD2Fkoa1-b6aE9G3M64k.roa (hash: EhOploeWX4IzgMSZUmJHUcObR1oyvr4q2CNLTcIgD8g=) 2: rY6Ff8AL4U7ZK554zDymm4rcJIU.crl (hash: Z9Wi7YygAqdEJsFp0Gtl3iJfGIMO7I4hOqiEqMNQ510=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.crl rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:cb:b0:68:74:cd:26:34:29:cd:98:e0:8a:84:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485 Validity Not Before: Dec 22 06:01:14 2025 GMT Not After : Dec 23 06:01:14 2025 GMT Subject: CN=c24b262b3cf43b02933f35640b63323563116508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5b:05:eb:f0:11:f4:0f:e3:67:85:c4:68:c1: a9:1c:60:2d:44:09:92:90:92:8a:60:e0:ab:2d:61: d5:f7:77:12:69:d9:a5:6f:cb:42:ec:22:70:79:be: c3:66:1d:7d:93:23:59:7f:98:7a:fd:3e:ac:f4:c0: fe:ba:3f:f1:80:b7:2d:c4:32:56:16:08:8c:12:56: 09:c2:9b:30:63:4e:09:8d:25:e6:a5:59:54:72:8c: b6:59:1d:e2:18:69:9c:d3:25:64:ef:ff:5f:4c:d3: 4c:e6:72:c4:9d:4c:b7:c4:21:28:a2:01:35:68:3c: fe:74:2e:f5:a0:cf:d3:38:fe:40:2c:15:e3:bb:71: b6:0f:3f:ef:b3:d4:f7:a5:6a:66:88:a4:9b:07:00: c2:29:60:bd:24:81:fa:9b:cc:5b:3a:4c:d1:7f:b5: eb:41:2c:e2:2a:13:dc:02:14:60:4a:5b:88:1d:7d: 68:73:64:81:d6:4d:6d:39:ef:4e:4e:c3:10:94:b5: a1:33:62:71:50:00:c8:32:f9:de:38:34:c1:41:7a: fc:7e:e5:35:85:39:97:03:be:d3:bf:3a:63:36:2f: 00:64:66:31:59:b0:5c:4f:ce:13:be:2d:e6:f0:c9: f5:ee:d2:43:c0:ef:7f:67:a7:7d:a2:5b:4a:06:62: 7f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4B:26:2B:3C:F4:3B:02:93:3F:35:64:0B:63:32:35:63:11:65:08 X509v3 Authority Key Identifier: keyid:AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:59:3b:d8:fb:2f:a2:b3:66:1b:1b:2a:11:ec:00:93:a1:9a: 4c:e7:15:5f:38:c7:5d:a2:fc:7d:2c:7f:98:da:96:b9:73:c5: 2a:24:dc:15:5c:b1:10:57:cb:74:fd:9c:2f:12:8b:b5:fe:30: 79:07:9a:f9:71:3a:c8:09:fd:89:5a:d8:50:b9:cc:af:04:50: ea:4e:c3:75:9e:08:05:cc:24:91:2d:d4:8e:e1:f1:2d:8e:a2: 0a:bc:a3:91:44:dd:a3:92:ca:83:8f:bc:75:02:73:3c:42:4d: 6d:0b:bc:cc:d2:35:ea:06:54:d1:c7:e8:05:86:8f:4b:2d:35: c0:8d:d6:a4:b5:13:8f:eb:20:9b:69:40:35:e0:c3:88:ae:e6: 41:18:2c:7b:82:2a:00:e5:d5:a6:b8:e1:66:cd:f2:79:7e:ef: 49:3c:1a:85:b9:b4:a2:ae:0e:cf:8c:54:d0:4d:92:8e:21:73: 19:4b:1e:13:cd:94:f1:da:96:d5:59:04:2f:3e:47:ca:75:85: 96:db:e8:15:6a:77:86:b8:bb:ae:e9:92:40:9b:e9:c3:f1:c8: 53:e0:9b:60:d7:b0:6e:57:9b:dc:8d:ab:c8:7f:ab:47:a3:8f: f1:cb:40:5c:9a:9e:d3:c0:c4:ad:b3:ca:b5:73:90:a2:2e:bd: 7f:a5:3a:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpcuwaHTNJjQpzZjgioQkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkOGU4NTdmYzAwYmUxNGVkOTJiOWU3OGNjM2NhNjliOGFk YzI0ODUwHhcNMjUxMjIyMDYwMTE0WhcNMjUxMjIzMDYwMTE0WjAzMTEwLwYDVQQD EyhjMjRiMjYyYjNjZjQzYjAyOTMzZjM1NjQwYjYzMzIzNTYzMTE2NTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1sF6/AR9A/jZ4XEaMGpHGAtRAmS kJKKYOCrLWHV93cSadmlb8tC7CJweb7DZh19kyNZf5h6/T6s9MD+uj/xgLctxDJW FgiMElYJwpswY04JjSXmpVlUcoy2WR3iGGmc0yVk7/9fTNNM5nLEnUy3xCEoogE1 aDz+dC71oM/TOP5ALBXju3G2Dz/vs9T3pWpmiKSbBwDCKWC9JIH6m8xbOkzRf7Xr QSziKhPcAhRgSluIHX1oc2SB1k1tOe9OTsMQlLWhM2JxUADIMvneODTBQXr8fuU1 hTmXA77TvzpjNi8AZGYxWbBcT84Tvi3m8Mn17tJDwO9/Z6d9oltKBmJ/UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJLJis89DsCkz81ZAtjMjVjEWUIMB8GA1UdIwQY MBaAFK2OhX/AC+FO2SueeMw8ppuK3CSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclk2RmY4QUw0VTdaSzU1NHpEeW1tNHJjSklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9iOGMzYmQtMTZlZi00ZjJjLTk0MDAt ZGIwOTllNTg1ZTRiLzEvclk2RmY4QUw0VTdaSzU1NHpEeW1tNHJjSklVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9iOGMzYmQtMTZlZi00ZjJjLTk0MDAtZGIwOTllNTg1ZTRi LzEvclk2RmY4QUw0VTdaSzU1NHpEeW1tNHJjSklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVk72Psv orNmGxsqEewAk6GaTOcVXzjHXaL8fSx/mNqWuXPFKiTcFVyxEFfLdP2cLxKLtf4w eQea+XE6yAn9iVrYULnMrwRQ6k7DdZ4IBcwkkS3UjuHxLY6iCryjkUTdo5LKg4+8 dQJzPEJNbQu8zNI16gZU0cfoBYaPSy01wI3WpLUTj+sgm2lANeDDiK7mQRgse4Iq AOXVprjhZs3yeX7vSTwahbm0oq4Oz4xU0E2SjiFzGUseE82U8dqW1VkELz5HynWF ltvoFWp3hri7rumSQJvpw/HIU+CbYNewbleb3I2ryH+rR6OP8ctAXJqe08DErbPK tXOQoi69f6U6ZA== -----END CERTIFICATE-----Generated at Mon Dec 22 13:55:30 2025 by rpki-client