This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft File: fYx0FDwic-IBpnVxVDHfryj-F7I.mft (raw, json) Hash identifier: iGuflA1Oj1fJYXzX+m/BAlBo+c1d52+GegfQBjj2Zas= Subject key identifier: 10:DE:33:81:26:D3:00:36:CF:62:D6:1B:CA:40:F0:0C:80:5E:5A:A6 Authority key identifier: 7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2 Certificate issuer: /CN=7d8c74143c2273e201a675715431dfaf28fe17b2 Certificate serial: 019B5306172943DE5BED30C027EBAD64A5B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft Manifest number: 0C1E Signing time: Thu 25 Dec 2025 01:01:06 +0000 Manifest this update: Thu 25 Dec 2025 01:01:06 +0000 Manifest next update: Fri 26 Dec 2025 01:01:06 +0000 Files and hashes: 1: Xrjs-S2RSbrZu3yjzq9Uz6FE53U.roa (hash: BOs1xZvMppiPo1LljXNukiOUbDIO0taZ6bkmR9k5vfQ=) 2: fYx0FDwic-IBpnVxVDHfryj-F7I.crl (hash: KKQbeDaNQoUCRIQO2OQEdXfj44L1KBKlhnWvhS+HcRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:06:17:29:43:de:5b:ed:30:c0:27:eb:ad:64:a5:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d8c74143c2273e201a675715431dfaf28fe17b2 Validity Not Before: Dec 25 01:01:06 2025 GMT Not After : Dec 26 01:01:06 2025 GMT Subject: CN=10de338126d30036cf62d61bca40f00c805e5aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:50:66:05:60:c0:78:6d:8d:db:5d:07:fc:c3: 3a:85:62:38:4b:dc:5e:9a:2a:47:82:9a:12:f7:04: 08:49:e8:81:ad:0f:52:95:31:07:0d:87:18:29:14: 42:96:4f:25:dd:13:b6:58:8e:a0:99:51:93:53:8d: 5d:d1:cb:f2:87:9f:46:61:76:93:8f:1a:63:72:9b: e7:d3:b4:a8:b9:fc:47:75:17:ef:3b:26:13:8a:b9: dd:60:c5:5f:9a:23:09:58:68:80:e3:1f:bc:2a:e3: 6f:c5:89:4b:ea:6d:1a:36:2b:a0:ba:cb:8c:c1:9e: 57:55:84:14:1b:20:51:9e:92:a0:61:9f:5b:d6:4f: f2:57:36:51:ce:fd:24:36:ea:9d:b8:eb:9d:3b:eb: 35:dc:1e:1d:f6:40:c9:41:a7:99:7e:a0:89:c9:38: cb:fa:54:af:1c:0c:2a:b8:34:7c:82:a8:ef:71:cc: 77:ca:3a:6d:0e:60:76:bc:30:32:ba:fd:03:78:d5: 12:a4:60:fa:18:a8:17:ab:c9:7b:e9:a3:2b:c2:5a: 72:08:8a:e6:5a:1a:1b:1f:77:24:9b:19:fb:37:92: 7d:e9:c7:8f:32:a5:b7:34:13:3e:50:3a:25:52:45: 31:b1:14:f0:5b:cd:b5:f3:ee:74:ff:19:86:b0:1e: 21:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DE:33:81:26:D3:00:36:CF:62:D6:1B:CA:40:F0:0C:80:5E:5A:A6 X509v3 Authority Key Identifier: keyid:7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:11:57:15:62:68:6a:d9:54:da:e4:6c:84:38:e0:be:ab:8a: 62:cb:06:de:e0:79:a8:7d:d4:98:56:35:33:d9:b4:59:54:b4: 18:9c:5d:5e:74:c6:07:03:f7:d5:06:21:58:22:44:03:09:4d: 97:3a:3c:75:f6:e4:3b:0b:74:93:22:80:e2:ce:3b:8e:60:ad: e8:2b:66:ca:7a:fd:86:38:e4:f3:8e:52:1d:63:33:c6:8a:cc: d3:fa:e9:37:a0:28:90:e2:b5:9b:56:c9:4e:3b:19:7b:f4:4f: 06:15:0f:b2:97:97:d7:4a:45:1b:ea:09:d8:0d:22:93:a4:ab: 1f:9a:39:c0:fa:45:dd:80:64:5a:eb:d5:48:8a:3d:53:cc:cc: ab:c8:c3:76:62:0d:4b:f2:a3:56:79:44:e2:49:4f:82:be:05: 85:d3:ef:6f:82:40:dd:93:73:bf:7e:a8:43:51:0e:4a:cc:5c: a8:0e:2f:fb:c4:6b:0d:87:04:8c:9f:13:ab:90:7c:c2:96:88: cb:b5:a6:27:e5:6b:bf:38:7f:f4:c7:c4:93:da:6a:6e:d3:8a: 91:58:9a:a1:d0:e3:9d:d2:48:f2:bd:e5:40:77:26:25:15:06: f7:d6:69:7c:fc:73:4c:44:96:96:a0:9e:0c:b2:e4:00:ff:36: c7:71:91:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBhcpQ95b7TDAJ+utZKW3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkOGM3NDE0M2MyMjczZTIwMWE2NzU3MTU0MzFkZmFmMjhm ZTE3YjIwHhcNMjUxMjI1MDEwMTA2WhcNMjUxMjI2MDEwMTA2WjAzMTEwLwYDVQQD EygxMGRlMzM4MTI2ZDMwMDM2Y2Y2MmQ2MWJjYTQwZjAwYzgwNWU1YWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolBmBWDAeG2N210H/MM6hWI4S9xe mipHgpoS9wQISeiBrQ9SlTEHDYcYKRRClk8l3RO2WI6gmVGTU41d0cvyh59GYXaT jxpjcpvn07SoufxHdRfvOyYTirndYMVfmiMJWGiA4x+8KuNvxYlL6m0aNiugusuM wZ5XVYQUGyBRnpKgYZ9b1k/yVzZRzv0kNuqduOudO+s13B4d9kDJQaeZfqCJyTjL +lSvHAwquDR8gqjvccx3yjptDmB2vDAyuv0DeNUSpGD6GKgXq8l76aMrwlpyCIrm WhobH3ckmxn7N5J96cePMqW3NBM+UDolUkUxsRTwW8218+50/xmGsB4hfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDeM4Em0wA2z2LWG8pA8AyAXlqmMB8GA1UdIwQY MBaAFH2MdBQ8InPiAaZ1cVQx368o/heyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZll4MEZEd2ljLUlCcG5WeFZESGZyeWotRjdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81YzNhNGMtOTg0My00YmVjLWExNjIt MThjMDM2NTMwN2JmLzEvZll4MEZEd2ljLUlCcG5WeFZESGZyeWotRjdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS81YzNhNGMtOTg0My00YmVjLWExNjItMThjMDM2NTMwN2Jm LzEvZll4MEZEd2ljLUlCcG5WeFZESGZyeWotRjdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAshFXFWJo atlU2uRshDjgvquKYssG3uB5qH3UmFY1M9m0WVS0GJxdXnTGBwP31QYhWCJEAwlN lzo8dfbkOwt0kyKA4s47jmCt6Ctmynr9hjjk845SHWMzxorM0/rpN6AokOK1m1bJ TjsZe/RPBhUPspeX10pFG+oJ2A0ik6SrH5o5wPpF3YBkWuvVSIo9U8zMq8jDdmIN S/KjVnlE4klPgr4FhdPvb4JA3ZNzv36oQ1EOSsxcqA4v+8RrDYcEjJ8Tq5B8wpaI y7WmJ+Vrvzh/9MfEk9pqbtOKkViaodDjndJI8r3lQHcmJRUG99ZpfPxzTESWlqCe DLLkAP82x3GR5g== -----END CERTIFICATE-----Generated at Thu Dec 25 05:15:26 2025 by rpki-client