This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft File: brYQV7gmVB0hbNWVz4bGoG-yrhE.mft (raw, json) Hash identifier: EbiYNiPYWV5rZnwJWar2r482dC3VSiYZZ1UlOQ+rlis= Subject key identifier: FE:F1:E5:35:0E:BF:CC:19:30:46:A2:82:67:E6:ED:4C:48:79:96:8D Authority key identifier: 6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11 Certificate issuer: /CN=6eb61057b826541d216cd595cf86c6a06fb2ae11 Certificate serial: 019B3BD8ED2494AB9D665ECC86AF7F1E33DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 13:00:30 +0000 Manifest this update: Sat 20 Dec 2025 13:00:30 +0000 Manifest next update: Sun 21 Dec 2025 13:00:30 +0000 Files and hashes: 1: brYQV7gmVB0hbNWVz4bGoG-yrhE.crl (hash: 4xDlR86kwTjz6RRXnOM5uANaOwCqxx1yDfhrXt+JFx8=) 2: g-B5ZnHLRqZwnUDKx8sxkqLeq8E.roa (hash: 8/pCEAAfgXJlCEBGR3f8pKtVLnpOv7/3Vi60Zm9zN6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d8:ed:24:94:ab:9d:66:5e:cc:86:af:7f:1e:33:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb61057b826541d216cd595cf86c6a06fb2ae11 Validity Not Before: Dec 20 13:00:30 2025 GMT Not After : Dec 21 13:00:30 2025 GMT Subject: CN=fef1e5350ebfcc193046a28267e6ed4c4879968d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:03:33:2f:bb:a4:2c:be:80:3e:1e:ab:fd:d7: 2a:14:9f:89:4b:69:ce:6c:8e:15:ac:e0:3b:a3:76: e2:df:cc:fb:74:6f:75:72:f6:50:57:3b:ed:fd:5e: 3d:1f:e2:bf:14:cf:8c:94:56:ca:5f:7a:d6:f6:5f: f7:60:ef:66:bb:ef:d4:05:9c:a8:62:80:d3:36:b1: ee:71:f1:e2:de:48:f3:93:e7:3f:dd:b7:0c:2f:23: 35:b2:46:a6:10:18:fc:59:8c:75:ce:b2:55:2b:1c: 42:b0:ba:0c:15:3e:25:ce:13:ba:eb:90:c6:89:8f: 06:65:e2:3a:2e:ce:23:f4:f9:20:2b:f4:92:42:91: b4:f7:63:21:95:51:e1:da:d4:90:f8:ca:55:21:4c: a5:4e:df:f7:98:02:fc:e8:40:c4:fb:c5:dc:14:49: 4e:e0:70:06:e4:df:8d:65:d9:48:f2:45:0f:79:57: 2c:89:66:c8:da:dd:c7:20:82:8c:1b:2a:d9:a1:d7: 79:e0:9b:3b:83:1f:2b:59:7a:f4:e5:36:1a:bd:f2: 61:51:a2:d7:9b:80:b7:90:fe:24:be:09:20:59:4f: 45:bf:66:86:56:cd:64:61:a6:ac:18:44:8a:e2:7b: 44:2d:4a:b4:be:54:a8:da:08:b1:8c:b0:cf:36:03: 75:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F1:E5:35:0E:BF:CC:19:30:46:A2:82:67:E6:ED:4C:48:79:96:8D X509v3 Authority Key Identifier: keyid:6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:77:16:c3:95:d7:c9:74:cc:4b:4b:8d:1c:5c:5d:d9:7b:d3: b6:df:61:11:cc:0e:12:b8:32:1d:07:8c:04:d2:34:cc:11:51: 0b:eb:e8:44:75:2d:64:d9:39:3e:3e:ca:d8:ab:a9:4c:e4:5e: be:bb:08:7f:30:ba:5d:7c:6d:2c:7f:13:12:06:cd:8a:f4:b7: f0:d1:8a:c5:6b:5d:77:f4:9e:ba:94:3e:84:2f:9e:26:0a:59: a5:55:da:de:9f:8a:0d:a4:23:4d:bc:c8:2c:91:af:3f:f7:ce: 01:bf:00:7e:83:02:33:03:c5:47:29:80:f7:32:26:59:86:e8: 93:69:66:ee:84:3f:54:3d:a8:e7:6f:1c:73:c9:84:66:37:c7: 50:e4:22:1b:57:5b:24:02:08:8e:78:3d:4e:81:a1:8e:68:3f: bf:6c:82:f4:54:53:c3:f0:fd:c1:ca:58:08:0a:3b:8d:85:36: ca:bb:a6:8f:0f:40:86:bf:16:d2:75:34:37:35:2e:0e:24:cc: 3f:bc:23:99:4f:82:38:8e:f6:7b:86:c6:5a:0e:92:97:12:cb: 88:22:50:fb:bb:d9:b9:39:05:d1:c3:e6:8c:c2:54:a7:68:90: 75:32:0e:d4:66:82:ab:a4:ba:b9:67:df:5f:71:8b:41:7a:7c: 1f:c7:b3:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72O0klKudZl7Mhq9/HjPeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYjYxMDU3YjgyNjU0MWQyMTZjZDU5NWNmODZjNmEwNmZi MmFlMTEwHhcNMjUxMjIwMTMwMDMwWhcNMjUxMjIxMTMwMDMwWjAzMTEwLwYDVQQD EyhmZWYxZTUzNTBlYmZjYzE5MzA0NmEyODI2N2U2ZWQ0YzQ4Nzk5NjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQMzL7ukLL6APh6r/dcqFJ+JS2nO bI4VrOA7o3bi38z7dG91cvZQVzvt/V49H+K/FM+MlFbKX3rW9l/3YO9mu+/UBZyo YoDTNrHucfHi3kjzk+c/3bcMLyM1skamEBj8WYx1zrJVKxxCsLoMFT4lzhO665DG iY8GZeI6Ls4j9PkgK/SSQpG092MhlVHh2tSQ+MpVIUylTt/3mAL86EDE+8XcFElO 4HAG5N+NZdlI8kUPeVcsiWbI2t3HIIKMGyrZodd54Js7gx8rWXr05TYavfJhUaLX m4C3kP4kvgkgWU9Fv2aGVs1kYaasGESK4ntELUq0vlSo2gixjLDPNgN1XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7x5TUOv8wZMEaigmfm7UxIeZaNMB8GA1UdIwQY MBaAFG62EFe4JlQdIWzVlc+GxqBvsq4RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnJZUVY3Z21WQjBoYk5XVno0YkdvRy15cmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My82NmNhNjQtNmZjZS00Yjg0LThjMTUt Y2I4NjgxMjdhOWIxLzEvYnJZUVY3Z21WQjBoYk5XVno0YkdvRy15cmhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My82NmNhNjQtNmZjZS00Yjg0LThjMTUtY2I4NjgxMjdhOWIx LzEvYnJZUVY3Z21WQjBoYk5XVno0YkdvRy15cmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXcWw5XX yXTMS0uNHFxd2XvTtt9hEcwOErgyHQeMBNI0zBFRC+voRHUtZNk5Pj7K2KupTORe vrsIfzC6XXxtLH8TEgbNivS38NGKxWtdd/SeupQ+hC+eJgpZpVXa3p+KDaQjTbzI LJGvP/fOAb8AfoMCMwPFRymA9zImWYbok2lm7oQ/VD2o528cc8mEZjfHUOQiG1db JAIIjng9ToGhjmg/v2yC9FRTw/D9wcpYCAo7jYU2yrumjw9Ahr8W0nU0NzUuDiTM P7wjmU+COI72e4bGWg6SlxLLiCJQ+7vZuTkF0cPmjMJUp2iQdTIO1GaCq6S6uWff X3GLQXp8H8ezLQ== -----END CERTIFICATE-----Generated at Sat Dec 20 14:13:47 2025 by rpki-client