This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft File: 1-_YvdgYnP0GmzMjilWB288Ch61Q.mft (raw, json) Hash identifier: z3LCoGtMgwKjzjwvLx02i9rErtR+/hvLf9DnoKmfuJM= Subject key identifier: 20:20:71:7B:03:EF:17:60:4C:AD:DA:A7:59:48:11:CB:98:11:20:F8 Authority key identifier: FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54 Certificate issuer: /CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54 Certificate serial: 019B3A910C32291FB7565A4AB38E71F634DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft Manifest number: 17A9 Signing time: Sat 20 Dec 2025 07:02:22 +0000 Manifest this update: Sat 20 Dec 2025 07:02:22 +0000 Manifest next update: Sun 21 Dec 2025 07:02:22 +0000 Files and hashes: 1: 1-_YvdgYnP0GmzMjilWB288Ch61Q.crl (hash: HbUA/V5foZUYvP0o9rXCbK6mEKHNPz7za5GSyQZxK8E=) 2: gVx18rt52MyPf0oqDqUou5AuUBM.roa (hash: vA3SGzj0FAH1RwjbpG6kC2zF7wZB8RzhXo7xrGq4Z4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:0c:32:29:1f:b7:56:5a:4a:b3:8e:71:f6:34:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54 Validity Not Before: Dec 20 07:02:22 2025 GMT Not After : Dec 21 07:02:22 2025 GMT Subject: CN=2020717b03ef17604caddaa7594811cb981120f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ff:eb:cf:fa:3f:88:a2:74:ba:51:da:f9:e0: fb:cc:35:17:5f:95:9b:25:b5:09:86:3d:f2:a1:44: d2:53:32:42:3b:6b:0e:38:1f:e7:2a:44:d6:6a:71: 1b:3f:1d:07:8e:9d:ed:1d:8b:bd:fe:32:c0:b6:47: ef:d1:cb:61:08:bd:2f:30:10:f2:e0:9f:4f:95:71: e4:4a:6c:95:2a:58:a6:fe:cd:f8:2c:33:97:05:58: c7:20:af:24:f5:08:50:59:fb:15:0f:1c:06:d6:4d: cc:e8:6d:5f:99:3f:0d:d7:3e:a9:3e:6f:a3:5d:77: a2:58:3d:9e:0a:e6:de:ee:3b:b5:43:8e:03:d4:f3: 0e:8a:ad:24:0b:66:7b:4a:e6:64:dc:f6:3b:8e:a6: 5e:9e:7a:54:92:d6:14:ce:08:14:52:03:80:10:fb: 61:18:9d:60:d2:f8:30:83:63:2f:a4:f0:2a:bf:cf: 92:2d:92:a4:6f:66:8c:bb:a7:0f:e9:1f:84:29:4c: 4c:5f:c5:fa:a7:16:5e:a6:62:3f:15:a6:b4:63:37: 08:70:b2:39:09:40:87:6e:5f:c6:cd:7b:1b:38:be: 23:d2:4d:e4:d0:9e:af:b0:94:2b:06:24:9b:06:90: fa:a6:e7:16:3b:49:89:aa:54:17:df:72:e1:59:a4: 2d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:20:71:7B:03:EF:17:60:4C:AD:DA:A7:59:48:11:CB:98:11:20:F8 X509v3 Authority Key Identifier: keyid:FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:db:38:31:06:f0:98:c1:ce:a3:39:34:3a:0b:cc:4d:90:30: 25:83:f1:57:c7:ec:50:4c:d0:f1:e9:27:91:fa:15:c1:37:5e: d4:b3:a6:cd:a8:dc:35:6b:10:47:d4:8f:7e:75:61:7f:da:b7: 19:5a:33:c4:fb:22:eb:94:4c:40:9c:99:c3:a4:2f:2a:2e:56: 66:61:cf:20:e3:db:52:a5:58:41:18:c5:db:95:0d:fb:49:bd: 6c:76:98:ce:89:4a:3d:fb:9b:bd:3d:7e:c9:c3:34:1b:c0:c7: 6f:a1:23:ae:1f:9b:2f:d1:e3:1c:34:52:09:e5:f4:46:28:12: 7f:93:1c:91:63:09:41:f4:1a:04:5a:e3:58:31:31:7d:52:13: 87:19:73:36:4f:9f:79:15:ed:8b:08:bd:41:24:2f:16:21:b3: b7:f1:11:fd:14:18:30:91:81:a5:e7:26:2a:fb:d3:f4:ac:ec: cd:6b:da:62:9e:70:a6:af:a2:dc:bf:0a:e6:34:24:71:68:80: 5f:93:05:6d:5b:4c:36:fc:e7:09:84:1b:65:17:b9:0f:7b:6e: 6a:b5:51:57:81:2a:00:e4:69:21:a4:4e:b3:05:9c:1c:66:fe: 18:b8:ee:59:42:c0:e9:2e:84:e9:4f:66:3f:00:d2:f5:b4:c2: a2:76:cb:6c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs6kQwyKR+3VlpKs45x9jTdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZjYyZjc2MDYyNzNmNDFhNmNjYzhlMjk1NjA3NmYzYzBh MWViNTQwHhcNMjUxMjIwMDcwMjIyWhcNMjUxMjIxMDcwMjIyWjAzMTEwLwYDVQQD EygyMDIwNzE3YjAzZWYxNzYwNGNhZGRhYTc1OTQ4MTFjYjk4MTEyMGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf/rz/o/iKJ0ulHa+eD7zDUXX5Wb JbUJhj3yoUTSUzJCO2sOOB/nKkTWanEbPx0Hjp3tHYu9/jLAtkfv0cthCL0vMBDy 4J9PlXHkSmyVKlim/s34LDOXBVjHIK8k9QhQWfsVDxwG1k3M6G1fmT8N1z6pPm+j XXeiWD2eCube7ju1Q44D1PMOiq0kC2Z7SuZk3PY7jqZennpUktYUzggUUgOAEPth GJ1g0vgwg2MvpPAqv8+SLZKkb2aMu6cP6R+EKUxMX8X6pxZepmI/Faa0YzcIcLI5 CUCHbl/GzXsbOL4j0k3k0J6vsJQrBiSbBpD6pucWO0mJqlQX33LhWaQtswIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCAgcXsD7xdgTK3ap1lIEcuYESD4MB8GA1UdIwQY MBaAFPv2L3YGJz9BpszI4pVgdvPAoetUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1fWXZkZ1luUDBHbXpNamlsV0IyODhDaDYxUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvOTVlZWJiLTBhOWQtNGY3MS1iM2Y5 LTU2NDllMWIxOTJiYi8xLzEtX1l2ZGdZblAwR216TWppbFdCMjg4Q2g2MVEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzIzLzk1ZWViYi0wYTlkLTRmNzEtYjNmOS01NjQ5ZTFiMTky YmIvMS8xLV9ZdmRnWW5QMEdtek1qaWxXQjI4OENoNjFRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsNs4 MQbwmMHOozk0OgvMTZAwJYPxV8fsUEzQ8eknkfoVwTde1LOmzajcNWsQR9SPfnVh f9q3GVozxPsi65RMQJyZw6QvKi5WZmHPIOPbUqVYQRjF25UN+0m9bHaYzolKPfub vT1+ycM0G8DHb6Ejrh+bL9HjHDRSCeX0RigSf5MckWMJQfQaBFrjWDExfVIThxlz Nk+feRXtiwi9QSQvFiGzt/ER/RQYMJGBpecmKvvT9KzszWvaYp5wpq+i3L8K5jQk cWiAX5MFbVtMNvznCYQbZRe5D3tuarVRV4EqAORpIaROswWcHGb+GLjuWULA6S6E 6U9mPwDS9bTConbLbA== -----END CERTIFICATE-----Generated at Sat Dec 20 13:18:53 2025 by rpki-client