This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft File: _7yuKykMgB1X0J0CWpNI4WcG8YI.mft (raw, json) Hash identifier: nNAETxWvkU175LnNzryArOyb7HFjllIYF68UHpFmLXI= Subject key identifier: 96:9D:47:81:39:0C:8B:53:F0:64:87:AB:40:D1:1C:1C:50:15:8E:66 Authority key identifier: FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82 Certificate issuer: /CN=ffbcae2b290c801d57d09d025a9348e16706f182 Certificate serial: 019B74ED239D408366A421918A732F3DA035 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft Manifest number: 1706 Signing time: Wed 31 Dec 2025 15:00:56 +0000 Manifest this update: Wed 31 Dec 2025 15:00:56 +0000 Manifest next update: Thu 01 Jan 2026 15:00:56 +0000 Files and hashes: 1: 8wTHmWo4SSJsVc0t3sJFniZg3X0.roa (hash: nwCEElQrpQEsbcFPrYoePVQv66vMAWow/x3hFkCdNgc=) 2: BS9tKB-yEzTuSlcr0sNlNMplJ-U.roa (hash: +wyGsgZf3mkT04YYiaLjKGX/U5oOsHBvxk3RajkpCvY=) 3: _7yuKykMgB1X0J0CWpNI4WcG8YI.crl (hash: 6w9itvrHvv9LMg8KoedAomFpTAYpo9Cy6lGvvXHMuHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 15:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:ed:23:9d:40:83:66:a4:21:91:8a:73:2f:3d:a0:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffbcae2b290c801d57d09d025a9348e16706f182 Validity Not Before: Dec 31 15:00:56 2025 GMT Not After : Jan 1 15:00:56 2026 GMT Subject: CN=969d4781390c8b53f06487ab40d11c1c50158e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fe:ff:df:7e:90:82:e1:34:b0:e4:97:cf:55: 11:1d:8c:34:84:e5:7b:a0:3a:61:e4:b4:90:a6:86: 87:f6:76:5f:b5:e9:25:f5:29:7c:5a:a8:0d:e4:ca: 24:57:b0:e8:01:e0:cf:54:8d:40:6d:17:bf:7d:00: 2b:fb:7d:a2:00:96:44:83:4d:71:9e:96:b7:f4:0d: 23:11:66:4e:18:9e:aa:27:fd:1e:70:a0:85:95:dd: 11:15:9c:8c:66:c4:14:0f:4b:61:5e:e8:fb:88:6d: 46:3a:97:70:3e:fd:d4:1c:9b:3c:52:63:02:fa:45: d9:82:06:32:21:01:29:46:86:73:d8:12:7b:16:01: 89:45:70:ca:78:d8:df:15:f3:91:27:7c:07:2f:c9: c1:17:bc:0e:ff:f5:7e:ac:14:8f:d9:0c:29:f0:e5: 92:51:90:ae:24:8b:69:af:1f:35:10:09:65:63:27: 41:26:ca:7d:d2:15:49:6a:6f:71:db:5c:19:d8:0b: 3e:d9:e4:74:8d:29:a4:85:6d:a5:39:aa:e8:96:77: 9a:86:c3:f1:14:fc:c3:3c:e6:d1:34:08:fc:d1:f8: cc:ea:ef:a9:34:18:fb:9b:f3:4f:b9:81:6a:97:cf: b9:0f:80:e1:64:c9:05:29:ea:f7:b9:62:e5:bf:ec: 97:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9D:47:81:39:0C:8B:53:F0:64:87:AB:40:D1:1C:1C:50:15:8E:66 X509v3 Authority Key Identifier: keyid:FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:84:88:d5:05:9d:49:a5:ab:61:ae:93:e9:0b:31:1f:70:45: 83:41:64:4e:9e:68:e9:56:c7:2c:05:ca:8e:0b:3b:1d:dc:f1: e2:00:31:dd:4f:24:78:22:3f:65:d2:d0:c3:85:73:25:8c:b6: 31:93:f6:f5:76:f4:83:ed:8c:29:2b:10:e7:31:75:b7:c6:d1: 04:7d:90:5a:e8:00:07:9f:d4:93:56:7c:96:78:6e:3b:fb:4f: 38:d1:50:df:d0:ec:eb:03:41:7f:ab:62:b1:ff:e1:68:b5:21: e5:3d:5d:c9:c1:05:76:c2:1b:8d:e3:46:5e:e1:52:87:7d:b9: b3:b1:4e:9d:e4:4e:36:3c:90:95:40:4a:9d:8e:6d:55:c9:88: 1a:33:a0:fb:10:40:1f:0e:7e:84:01:ce:28:e4:6e:a8:ae:84: 42:d1:92:55:fc:f2:89:8b:79:f9:98:89:89:ea:f9:b5:18:25: 11:6c:de:49:24:7a:b7:e6:75:3f:fe:82:3f:92:f2:47:ba:35: fc:72:e8:3b:92:3d:29:34:57:b5:af:f4:e6:79:67:e7:08:1d: a6:ff:b9:82:da:85:06:67:4d:e4:87:bc:0c:79:73:e1:ee:7b: ba:a8:11:1f:18:ff:5f:c1:de:d6:ed:50:7f:58:3d:41:33:ea: 88:26:1f:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt07SOdQINmpCGRinMvPaA1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYmNhZTJiMjkwYzgwMWQ1N2QwOWQwMjVhOTM0OGUxNjcw NmYxODIwHhcNMjUxMjMxMTUwMDU2WhcNMjYwMTAxMTUwMDU2WjAzMTEwLwYDVQQD Eyg5NjlkNDc4MTM5MGM4YjUzZjA2NDg3YWI0MGQxMWMxYzUwMTU4ZTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv7/336QguE0sOSXz1URHYw0hOV7 oDph5LSQpoaH9nZftekl9Sl8WqgN5MokV7DoAeDPVI1AbRe/fQAr+32iAJZEg01x npa39A0jEWZOGJ6qJ/0ecKCFld0RFZyMZsQUD0thXuj7iG1GOpdwPv3UHJs8UmMC +kXZggYyIQEpRoZz2BJ7FgGJRXDKeNjfFfORJ3wHL8nBF7wO//V+rBSP2Qwp8OWS UZCuJItprx81EAllYydBJsp90hVJam9x21wZ2As+2eR0jSmkhW2lOarolneahsPx FPzDPObRNAj80fjM6u+pNBj7m/NPuYFql8+5D4DhZMkFKer3uWLlv+yXDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJadR4E5DItT8GSHq0DRHBxQFY5mMB8GA1UdIwQY MBaAFP+8rispDIAdV9CdAlqTSOFnBvGCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzd5dUt5a01nQjFYMEowQ1dwTkk0V2NHOFlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81OWJjZDEtMWUwYi00ODVkLTk1MTAt MDk2YWY0NzhmMDRiLzEvXzd5dUt5a01nQjFYMEowQ1dwTkk0V2NHOFlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81OWJjZDEtMWUwYi00ODVkLTk1MTAtMDk2YWY0NzhmMDRi LzEvXzd5dUt5a01nQjFYMEowQ1dwTkk0V2NHOFlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYSI1QWd SaWrYa6T6QsxH3BFg0FkTp5o6VbHLAXKjgs7Hdzx4gAx3U8keCI/ZdLQw4VzJYy2 MZP29Xb0g+2MKSsQ5zF1t8bRBH2QWugAB5/Uk1Z8lnhuO/tPONFQ39Ds6wNBf6ti sf/haLUh5T1dycEFdsIbjeNGXuFSh325s7FOneRONjyQlUBKnY5tVcmIGjOg+xBA Hw5+hAHOKORuqK6EQtGSVfzyiYt5+ZiJier5tRglEWzeSSR6t+Z1P/6CP5LyR7o1 /HLoO5I9KTRXta/05nln5wgdpv+5gtqFBmdN5Ie8DHlz4e57uqgRHxj/X8He1u1Q f1g9QTPqiCYf+w== -----END CERTIFICATE-----Generated at Wed Dec 31 21:06:16 2025 by rpki-client