This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft File: rYg6hugtDZEPz1n4_5978aZxSHA.mft (raw, json) Hash identifier: UW6M3w4YzQ+eOUVD85JNhE+ymbxnJPgIojcBDTpP7us= Subject key identifier: 0E:06:87:CA:18:07:AC:B5:3E:75:34:24:EC:D2:2F:90:7F:B7:0D:EE Authority key identifier: AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70 Certificate issuer: /CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870 Certificate serial: 019B405AF33261E122D802E3C7FA5FEE50CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft Manifest number: 09D9 Signing time: Sun 21 Dec 2025 10:01:00 +0000 Manifest this update: Sun 21 Dec 2025 10:01:00 +0000 Manifest next update: Mon 22 Dec 2025 10:01:00 +0000 Files and hashes: 1: od7ExObCxDqzHqRis0nMtXmus2Y.roa (hash: WoaJOBOnB6iTsR77zkPSuoVOWwQU/LjcUNKKgIIFfv0=) 2: rYg6hugtDZEPz1n4_5978aZxSHA.crl (hash: 6vhxhbIg3w2uFONlHR2hHOZN5mWXgPYVLoz4XGjGJzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:f3:32:61:e1:22:d8:02:e3:c7:fa:5f:ee:50:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870 Validity Not Before: Dec 21 10:01:00 2025 GMT Not After : Dec 22 10:01:00 2025 GMT Subject: CN=0e0687ca1807acb53e753424ecd22f907fb70dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5b:d0:81:44:69:7a:cf:77:d1:de:ac:5b:40: 0d:b1:ab:45:39:d0:01:62:34:da:45:8e:d8:a7:a6: 76:60:02:27:7f:5a:d1:6b:30:e2:b0:66:6c:89:a3: f7:da:0c:21:40:e0:d0:53:ce:a1:33:9b:73:85:71: eb:34:21:79:11:90:8d:2d:d9:16:07:9b:3a:33:81: 1e:e8:e7:74:83:eb:43:f0:06:7e:96:2d:f9:9a:5f: d1:9e:8c:cd:ef:34:62:5e:3c:d5:4d:8d:8d:85:b7: 41:17:dd:dc:e0:a2:b7:97:75:90:93:85:d6:6f:66: a2:1d:58:ff:58:d9:4f:6d:64:15:88:03:1f:47:23: 3e:04:4d:dc:8e:86:52:0c:1d:20:23:58:35:79:f4: ab:92:db:e2:5e:2a:6d:2d:38:c2:59:32:da:f2:f1: b0:14:77:4c:50:89:19:3e:21:73:44:27:b2:2f:b8: 8f:d7:67:e1:9d:97:41:ee:a6:7c:48:23:f6:44:5f: 39:45:d1:c9:a1:00:d4:e0:1a:24:b7:c3:26:bf:e3: 3a:99:44:8f:6b:53:7b:40:4a:2f:84:06:19:71:2d: 85:9e:c5:15:9b:a5:bb:b8:cf:91:0a:20:2c:02:1c: 14:d8:88:38:7a:38:83:e9:2f:ca:b0:76:90:8c:65: 0c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:06:87:CA:18:07:AC:B5:3E:75:34:24:EC:D2:2F:90:7F:B7:0D:EE X509v3 Authority Key Identifier: keyid:AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:33:ba:bf:48:c6:a4:a5:35:8e:42:31:6e:e4:78:1e:11:40: 42:5e:15:b4:a2:59:5a:c3:f7:b4:27:3c:c4:b6:c3:70:91:06: 0c:30:f0:fd:80:fd:74:b0:5e:22:d3:ac:f2:23:a0:b0:b3:af: d2:98:b6:11:56:ff:cc:d3:a3:ad:7f:de:ae:fd:ae:9a:f3:b4: 36:9b:ad:35:f0:eb:92:74:cb:c3:7e:a0:4c:8c:8e:f2:7f:3a: ff:76:80:f3:5e:63:a9:f6:94:5b:a5:35:eb:66:05:c2:bf:ff: bb:eb:c4:50:25:16:3c:23:63:4f:5a:77:6d:58:9e:a8:38:28: 23:a3:e5:c9:58:28:7c:9f:0f:62:bc:62:ac:d6:91:ed:19:14: 5b:5b:41:72:d8:3b:fc:1b:3a:90:b2:99:71:7a:bd:f3:90:bb: 46:1a:c1:8b:46:5a:62:3e:74:d7:d8:a4:21:69:a1:69:ed:52: 0e:7c:aa:1b:5c:36:72:93:24:00:d9:98:25:e1:64:eb:02:09: 11:c6:09:40:9e:af:b8:93:06:49:9e:41:e8:e6:7c:b4:6a:03: 5b:ed:14:9d:4a:d5:4d:5f:28:24:b6:e6:a5:3e:07:43:7f:eb: 69:9d:4c:b2:9c:02:c7:c7:c3:39:c9:36:d4:8a:67:fc:97:57: c0:98:4d:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWvMyYeEi2ALjx/pf7lDKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkODgzYTg2ZTgyZDBkOTEwZmNmNTlmOGZmOWY3YmYxYTY3 MTQ4NzAwHhcNMjUxMjIxMTAwMTAwWhcNMjUxMjIyMTAwMTAwWjAzMTEwLwYDVQQD EygwZTA2ODdjYTE4MDdhY2I1M2U3NTM0MjRlY2QyMmY5MDdmYjcwZGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1vQgURpes930d6sW0ANsatFOdAB YjTaRY7Yp6Z2YAInf1rRazDisGZsiaP32gwhQODQU86hM5tzhXHrNCF5EZCNLdkW B5s6M4Ee6Od0g+tD8AZ+li35ml/RnozN7zRiXjzVTY2NhbdBF93c4KK3l3WQk4XW b2aiHVj/WNlPbWQViAMfRyM+BE3cjoZSDB0gI1g1efSrktviXiptLTjCWTLa8vGw FHdMUIkZPiFzRCeyL7iP12fhnZdB7qZ8SCP2RF85RdHJoQDU4Bokt8Mmv+M6mUSP a1N7QEovhAYZcS2FnsUVm6W7uM+RCiAsAhwU2Ig4ejiD6S/KsHaQjGUMDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4Gh8oYB6y1PnU0JOzSL5B/tw3uMB8GA1UdIwQY MBaAFK2IOoboLQ2RD89Z+P+fe/GmcUhwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcllnNmh1Z3REWkVQejFuNF81OTc4YVp4U0hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83YjA1NmQtMDlmNy00ZjEyLWIxYTIt YTU2YmYwY2Y0Y2JlLzEvcllnNmh1Z3REWkVQejFuNF81OTc4YVp4U0hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni83YjA1NmQtMDlmNy00ZjEyLWIxYTItYTU2YmYwY2Y0Y2Jl LzEvcllnNmh1Z3REWkVQejFuNF81OTc4YVp4U0hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTO6v0jG pKU1jkIxbuR4HhFAQl4VtKJZWsP3tCc8xLbDcJEGDDDw/YD9dLBeItOs8iOgsLOv 0pi2EVb/zNOjrX/erv2umvO0NputNfDrknTLw36gTIyO8n86/3aA815jqfaUW6U1 62YFwr//u+vEUCUWPCNjT1p3bVieqDgoI6PlyVgofJ8PYrxirNaR7RkUW1tBctg7 /Bs6kLKZcXq985C7RhrBi0ZaYj5019ikIWmhae1SDnyqG1w2cpMkANmYJeFk6wIJ EcYJQJ6vuJMGSZ5B6OZ8tGoDW+0UnUrVTV8oJLbmpT4HQ3/raZ1MspwCx8fDOck2 1Ipn/JdXwJhNDA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:44:58 2025 by rpki-client