This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft File: dYib2lT4hX2kKQxnebwAYR5z4hI.mft (raw, json) Hash identifier: I0BTZh7c+bdXty6haWauQSLSXb0L6Vh5/i6imYyYGgg= Subject key identifier: 16:B5:B4:05:4B:AE:F8:4A:E6:10:00:02:96:9F:60:2E:88:71:5F:C3 Authority key identifier: 75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12 Certificate issuer: /CN=75889bda54f8857da4290c6779bc00611e73e212 Certificate serial: 019B58637516E7B2CF3C53AB1C337E3C6803 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 02:01:11 +0000 Manifest this update: Fri 26 Dec 2025 02:01:11 +0000 Manifest next update: Sat 27 Dec 2025 02:01:11 +0000 Files and hashes: 1: T_e8rESGCEo93LhSN21hTfmrTUk.roa (hash: atiJpHuf3SkNFx9qJY7AqgXkIGShTie6KIKrkLdR6O0=) 2: dYib2lT4hX2kKQxnebwAYR5z4hI.crl (hash: wmPjCFRt2YXq/zboTV91lkC1MPUbKxM7KfUGqNhmPM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 02:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:63:75:16:e7:b2:cf:3c:53:ab:1c:33:7e:3c:68:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75889bda54f8857da4290c6779bc00611e73e212 Validity Not Before: Dec 26 02:01:11 2025 GMT Not After : Dec 27 02:01:11 2025 GMT Subject: CN=16b5b4054baef84ae6100002969f602e88715fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d8:93:8f:d3:ab:8f:ea:61:ea:04:24:a1:5f: e4:28:2a:2e:6f:b7:7c:70:2a:3f:99:ef:60:a4:49: c9:c8:db:6e:c4:e3:f4:c5:2c:0e:76:a2:f8:6c:22: af:98:a8:0f:e7:07:e1:19:e1:cc:e3:e2:4d:01:4c: 90:94:14:11:29:78:76:2a:11:a9:c2:ed:5e:d7:14: 56:bc:bf:58:94:e1:15:76:81:f1:0e:83:00:47:26: 72:48:d4:aa:7f:6d:21:2c:4d:d9:4e:77:11:0d:3f: f7:49:fe:42:0b:2a:0d:09:18:4b:ed:fb:ec:22:f8: a9:0d:71:28:36:02:00:5f:ae:e1:fc:ca:b3:7d:48: e3:ea:28:e4:28:e6:cc:65:ec:1a:d5:55:50:e8:dd: f8:dd:5d:32:28:0b:61:08:71:05:ba:a9:21:93:81: 86:b2:38:77:bf:5b:2c:e4:9a:b4:81:52:61:0e:5a: 94:31:77:1c:50:75:68:6f:61:b0:f1:d4:44:40:63: d7:47:57:b4:b5:09:3e:ae:2c:d0:d0:7f:a9:14:96: ef:1a:c0:e8:b0:58:f9:9e:94:44:b3:98:7c:87:f1: 42:9d:29:55:fa:24:5d:24:35:0e:d5:48:30:3f:e1: 37:7f:97:cc:c2:99:ce:4e:b4:7c:6b:a2:64:44:b4: f2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B5:B4:05:4B:AE:F8:4A:E6:10:00:02:96:9F:60:2E:88:71:5F:C3 X509v3 Authority Key Identifier: keyid:75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d7:62:d4:94:f4:8a:56:0e:f5:dd:bf:d6:64:21:aa:49:e0: 20:2c:44:f1:fc:d5:f7:b1:00:45:68:c3:89:77:e6:6f:e7:34: f3:a2:ee:1e:6d:00:03:04:dc:0d:01:2e:af:5f:0d:56:15:5f: 43:dd:94:f9:a2:ad:9c:f2:5a:c9:4d:fd:24:8c:a3:32:df:09: 6f:80:a5:f0:5d:c2:04:94:97:d9:53:7e:81:d6:55:02:15:0d: 43:ba:0c:df:97:9e:41:64:be:7e:5c:a4:8c:27:ea:d9:93:dc: d2:c9:48:20:a8:97:ec:fd:c4:ac:e6:3d:6f:ee:f0:85:04:2b: e2:4a:38:92:32:97:e2:f6:e6:45:ee:dd:6d:3a:3a:87:f5:60: c0:78:c8:1e:ed:c3:5a:b0:38:51:2f:53:87:3e:3c:4e:d3:62: 70:56:e5:22:30:98:aa:a5:d2:fb:cf:cc:df:6d:4f:2b:24:57: 8f:42:8a:18:de:32:68:e1:96:70:a4:ff:00:de:c6:8a:28:49: 34:1d:36:8f:06:aa:0f:32:56:80:d3:b9:1e:75:0d:63:37:ca: f7:0d:c6:e5:24:ca:1b:1e:eb:e0:fd:3d:8b:3f:5c:16:3c:7f: ce:d1:51:dd:5e:5e:a6:0f:00:89:9d:11:92:af:8b:46:5a:05: 80:8c:ed:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtYY3UW57LPPFOrHDN+PGgDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ODg5YmRhNTRmODg1N2RhNDI5MGM2Nzc5YmMwMDYxMWU3 M2UyMTIwHhcNMjUxMjI2MDIwMTExWhcNMjUxMjI3MDIwMTExWjAzMTEwLwYDVQQD EygxNmI1YjQwNTRiYWVmODRhZTYxMDAwMDI5NjlmNjAyZTg4NzE1ZmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89iTj9Orj+ph6gQkoV/kKCoub7d8 cCo/me9gpEnJyNtuxOP0xSwOdqL4bCKvmKgP5wfhGeHM4+JNAUyQlBQRKXh2KhGp wu1e1xRWvL9YlOEVdoHxDoMARyZySNSqf20hLE3ZTncRDT/3Sf5CCyoNCRhL7fvs IvipDXEoNgIAX67h/MqzfUjj6ijkKObMZewa1VVQ6N343V0yKAthCHEFuqkhk4GG sjh3v1ss5Jq0gVJhDlqUMXccUHVob2Gw8dREQGPXR1e0tQk+rizQ0H+pFJbvGsDo sFj5npREs5h8h/FCnSlV+iRdJDUO1UgwP+E3f5fMwpnOTrR8a6JkRLTyLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBa1tAVLrvhK5hAAApafYC6IcV/DMB8GA1UdIwQY MBaAFHWIm9pU+IV9pCkMZ3m8AGEec+ISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFlpYjJsVDRoWDJrS1F4bmVid0FZUjV6NGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82ZGIyZjYtZTg3Yi00ZTFjLTgyYzct ZTc4NTUzYTAzN2JkLzEvZFlpYjJsVDRoWDJrS1F4bmVid0FZUjV6NGhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82ZGIyZjYtZTg3Yi00ZTFjLTgyYzctZTc4NTUzYTAzN2Jk LzEvZFlpYjJsVDRoWDJrS1F4bmVid0FZUjV6NGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9di1JT0 ilYO9d2/1mQhqkngICxE8fzV97EARWjDiXfmb+c086LuHm0AAwTcDQEur18NVhVf Q92U+aKtnPJayU39JIyjMt8Jb4Cl8F3CBJSX2VN+gdZVAhUNQ7oM35eeQWS+flyk jCfq2ZPc0slIIKiX7P3ErOY9b+7whQQr4ko4kjKX4vbmRe7dbTo6h/VgwHjIHu3D WrA4US9Thz48TtNicFblIjCYqqXS+8/M321PKyRXj0KKGN4yaOGWcKT/AN7GiihJ NB02jwaqDzJWgNO5HnUNYzfK9w3G5STKGx7r4P09iz9cFjx/ztFR3V5epg8AiZ0R kq+LRloFgIztvg== -----END CERTIFICATE-----Generated at Fri Dec 26 09:21:58 2025 by rpki-client