This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft File: f1byiUjIMvLUNLtE1d4OoSJgGwU.mft (raw, json) Hash identifier: LYHVRoj5d2b7Ue0/BMYTh0cf7QkGz8HCAkB4F9qMhJc= Subject key identifier: A6:F8:10:9C:2E:47:E6:E9:48:86:D0:0C:36:41:CA:2E:22:F5:4B:3A Authority key identifier: 7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05 Certificate issuer: /CN=7f56f28948c832f2d434bb44d5de0ea122601b05 Certificate serial: 019B405ABBCBD977FD20EF37C0D25A705E6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 10:00:46 +0000 Manifest this update: Sun 21 Dec 2025 10:00:46 +0000 Manifest next update: Mon 22 Dec 2025 10:00:46 +0000 Files and hashes: 1: NvmfsV1sm7XmyjVKzPOWhb7earQ.roa (hash: r7bWWSDXyiXMj/Swi3flONfAIYfEqRkATWw60gas71A=) 2: WPpLjvv6YbGI7GsTe1ygm0Vy3Lk.roa (hash: N+pPrOkjdISbUNAALF5nqmKzIaYbhj0lt6NwOuwgniw=) 3: f1byiUjIMvLUNLtE1d4OoSJgGwU.crl (hash: TrmxSHhQyhIQBVDgfEacyw79k5O9R50RO+qau2HAK38=) 4: tLoY5nfmVJWTJGYh886gVbz0Hf0.roa (hash: g2GCG3am8xDu8ahhY94JoBYaTCS9zIT5JVCSvfgRMSE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:bb:cb:d9:77:fd:20:ef:37:c0:d2:5a:70:5e:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f56f28948c832f2d434bb44d5de0ea122601b05 Validity Not Before: Dec 21 10:00:46 2025 GMT Not After : Dec 22 10:00:46 2025 GMT Subject: CN=a6f8109c2e47e6e94886d00c3641ca2e22f54b3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9f:d2:06:d7:c2:24:e8:28:d8:53:c3:d4:0e: 04:db:e0:cb:66:ba:55:c9:6b:51:d5:28:74:f5:63: 28:39:7f:c1:7b:6d:a7:3d:57:e7:65:74:e4:fc:23: 28:94:1b:97:d9:13:9d:a4:40:7a:4b:60:21:b8:19: bf:be:fd:8c:e7:21:7d:65:76:2c:20:23:5d:27:f2: 16:50:2c:3d:6c:9a:46:e9:27:b1:4c:7e:d2:73:df: 00:f8:fd:11:69:67:2a:04:b6:dc:4e:f5:f6:b5:c7: d0:14:9a:59:bd:a8:9b:a1:74:93:8e:12:4d:82:56: 97:9a:2c:f7:c5:2a:4b:5f:d1:73:65:c9:16:4e:6e: 24:e8:3c:5d:b6:4d:b8:41:d7:05:72:63:e6:11:09: 50:2e:8e:81:08:10:5d:f5:92:15:a2:98:f4:a7:77: c5:ad:34:eb:51:7d:2d:8a:80:07:f6:42:4e:25:e2: ae:71:73:7b:7e:36:67:a5:5f:cd:51:f9:ba:63:b6: 8c:3f:c4:68:28:4a:30:db:4b:9c:81:dd:0e:e3:fe: ae:f3:a5:38:08:ea:f6:4e:24:c6:e8:b5:5c:85:92: ba:b2:b9:8b:a4:d3:5d:46:a2:58:30:07:d6:8a:0d: ad:7b:09:ee:3e:53:26:e6:4a:9b:82:ae:18:3e:df: 0c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F8:10:9C:2E:47:E6:E9:48:86:D0:0C:36:41:CA:2E:22:F5:4B:3A X509v3 Authority Key Identifier: keyid:7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:1a:99:27:5c:e0:49:43:4a:9c:b5:9c:fc:c9:66:6d:64:9a: 67:9f:ca:bf:4e:85:22:12:2d:ce:c7:d6:09:3f:3f:d9:2f:e9: 21:71:3b:89:15:49:00:cb:07:99:49:13:e0:24:14:95:fe:75: 5d:f8:51:5c:45:aa:d5:a6:53:bb:0f:14:e1:5f:be:a9:1d:05: 46:b9:5f:c2:75:a5:af:02:c1:0e:ca:39:b2:cd:76:ff:6c:02: a7:70:06:f0:ae:6a:ba:54:03:a8:de:f1:7f:7d:7e:50:45:d5: 9c:be:18:0b:44:30:5b:81:16:7c:bf:66:16:e3:97:6b:9a:cf: 25:c1:20:09:06:ed:27:b9:5f:ad:2d:a2:98:60:b0:d6:b2:6c: 4b:80:f4:86:95:67:73:a4:6f:f9:50:b7:b5:ad:fa:4f:c1:90: 82:79:d3:f5:24:62:05:37:79:41:59:fa:c9:ed:0b:c6:04:2f: 39:c0:b7:a9:35:83:29:8b:7f:2f:c0:86:69:75:b1:4b:df:d5: fc:a2:ef:86:2d:2e:52:a2:d3:a0:86:d4:08:a6:7b:b2:9c:ea: b9:96:f8:75:f6:20:e5:9a:3e:d1:77:14:56:36:a1:4c:d9:9b: 04:6d:67:cb:e0:80:d1:f0:d3:91:ca:8e:86:83:c6:ff:c5:ae: 4d:c4:b5:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWrvL2Xf9IO83wNJacF5qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNTZmMjg5NDhjODMyZjJkNDM0YmI0NGQ1ZGUwZWExMjI2 MDFiMDUwHhcNMjUxMjIxMTAwMDQ2WhcNMjUxMjIyMTAwMDQ2WjAzMTEwLwYDVQQD EyhhNmY4MTA5YzJlNDdlNmU5NDg4NmQwMGMzNjQxY2EyZTIyZjU0YjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp/SBtfCJOgo2FPD1A4E2+DLZrpV yWtR1Sh09WMoOX/Be22nPVfnZXTk/CMolBuX2ROdpEB6S2AhuBm/vv2M5yF9ZXYs ICNdJ/IWUCw9bJpG6SexTH7Sc98A+P0RaWcqBLbcTvX2tcfQFJpZvaiboXSTjhJN glaXmiz3xSpLX9FzZckWTm4k6Dxdtk24QdcFcmPmEQlQLo6BCBBd9ZIVopj0p3fF rTTrUX0tioAH9kJOJeKucXN7fjZnpV/NUfm6Y7aMP8RoKEow20ucgd0O4/6u86U4 COr2TiTG6LVchZK6srmLpNNdRqJYMAfWig2tewnuPlMm5kqbgq4YPt8M1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKb4EJwuR+bpSIbQDDZByi4i9Us6MB8GA1UdIwQY MBaAFH9W8olIyDLy1DS7RNXeDqEiYBsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjFieWlVaklNdkxVTkx0RTFkNE9vU0pnR3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yMWZiY2EtODBlMC00YjhjLTg2MjIt NGU4NmFkNjRmNzc0LzEvZjFieWlVaklNdkxVTkx0RTFkNE9vU0pnR3dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yMWZiY2EtODBlMC00YjhjLTg2MjItNGU4NmFkNjRmNzc0 LzEvZjFieWlVaklNdkxVTkx0RTFkNE9vU0pnR3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchqZJ1zg SUNKnLWc/MlmbWSaZ5/Kv06FIhItzsfWCT8/2S/pIXE7iRVJAMsHmUkT4CQUlf51 XfhRXEWq1aZTuw8U4V++qR0FRrlfwnWlrwLBDso5ss12/2wCp3AG8K5qulQDqN7x f31+UEXVnL4YC0QwW4EWfL9mFuOXa5rPJcEgCQbtJ7lfrS2imGCw1rJsS4D0hpVn c6Rv+VC3ta36T8GQgnnT9SRiBTd5QVn6ye0LxgQvOcC3qTWDKYt/L8CGaXWxS9/V /KLvhi0uUqLToIbUCKZ7spzquZb4dfYg5Zo+0XcUVjahTNmbBG1ny+CA0fDTkcqO hoPG/8WuTcS1jQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:01:01 2025 by rpki-client