This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft File: dYib2lT4hX2kKQxnebwAYR5z4hI.mft (raw, json) Hash identifier: SudY+4bwXdqOREgMabb8E4xWw+/pOJ1ynJlz/UYuF1M= Subject key identifier: 6D:8C:6B:CB:13:ED:0B:F6:49:1C:68:BF:80:FB:4C:58:5B:06:87:A7 Authority key identifier: 75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12 Certificate issuer: /CN=75889bda54f8857da4290c6779bc00611e73e212 Certificate serial: 019B4EBB84633289B706DDD955E2DA1317B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 05:01:10 +0000 Manifest this update: Wed 24 Dec 2025 05:01:10 +0000 Manifest next update: Thu 25 Dec 2025 05:01:10 +0000 Files and hashes: 1: T_e8rESGCEo93LhSN21hTfmrTUk.roa (hash: atiJpHuf3SkNFx9qJY7AqgXkIGShTie6KIKrkLdR6O0=) 2: dYib2lT4hX2kKQxnebwAYR5z4hI.crl (hash: qsjTOjk/Vpz30r2cRKGiEMbQEGMRCklsMCbC1bsPHXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:84:63:32:89:b7:06:dd:d9:55:e2:da:13:17:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75889bda54f8857da4290c6779bc00611e73e212 Validity Not Before: Dec 24 05:01:10 2025 GMT Not After : Dec 25 05:01:10 2025 GMT Subject: CN=6d8c6bcb13ed0bf6491c68bf80fb4c585b0687a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fb:95:db:43:59:33:c2:3f:27:cc:b1:dc:7c: 31:c0:01:80:27:7e:6d:57:93:af:dd:69:ba:72:ea: 0d:f6:80:cd:7c:9f:f2:4e:7e:c2:78:06:44:80:47: bb:f2:4e:59:b6:4e:64:4b:46:62:db:71:94:c3:83: 7e:f5:58:3b:83:b4:11:21:0b:a7:65:56:47:05:34: 9c:6b:2e:79:96:d5:7a:f6:ba:cc:9f:42:e4:1f:53: 73:c9:d6:99:5d:23:99:0b:3c:ce:7c:e0:7b:6e:0e: 61:42:58:04:66:47:07:78:b7:aa:7d:9a:bb:f0:f5: 14:4c:4d:03:53:12:b9:55:bc:26:59:c0:ee:d6:73: e6:dc:84:6b:66:9b:54:02:11:65:d4:1d:3a:02:36: 0d:83:0a:4c:cf:30:75:35:76:19:35:23:d3:38:79: b2:80:62:57:d3:1e:a1:a8:cf:6d:6b:fb:17:28:08: 5c:da:85:7e:ec:3c:64:d0:3f:2b:2a:5c:11:22:8f: f0:f6:da:bb:2b:10:37:05:61:2c:85:21:95:a5:01: ce:d2:b8:48:1a:ed:1e:57:43:2c:17:dc:89:88:da: cf:a9:27:a7:86:a2:69:17:26:26:76:0b:d4:bb:a1: f3:a3:3b:86:b2:64:c8:43:f0:e6:fe:03:20:48:f7: 2b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:8C:6B:CB:13:ED:0B:F6:49:1C:68:BF:80:FB:4C:58:5B:06:87:A7 X509v3 Authority Key Identifier: keyid:75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e6:05:2a:f3:c7:3c:af:a2:ea:79:9e:9c:31:4c:76:fd:b8: 6a:a8:76:d9:a7:05:82:f1:37:cb:f2:e3:45:41:d0:c3:5d:ab: 20:ee:00:72:5c:5a:e3:f9:45:83:65:9e:a3:18:6b:52:ff:ea: db:f1:a4:c1:a7:97:e1:d7:b6:ba:6f:2b:b6:34:ba:fa:db:71: d8:31:6f:4f:3d:49:a8:a1:d1:50:9f:de:e5:d9:ec:c0:f1:0b: 0f:f2:01:b4:c7:9a:8d:28:09:48:f6:66:d2:dd:46:18:cf:e1: a8:96:12:8b:19:84:c1:a5:b4:d6:23:4c:70:75:8a:ec:be:ee: 5a:4c:99:44:61:f6:09:a2:8f:a7:d2:85:2b:86:97:a0:8f:31: 75:b8:ef:9c:f1:98:31:5f:4e:af:7c:9d:a3:e1:24:f4:a3:2c: 4c:5b:0b:62:43:1e:50:e5:dd:5e:74:be:12:f4:45:da:d6:73: 73:ce:a3:fb:77:44:9b:a8:69:0b:77:83:c8:2a:c5:55:13:91: 95:e5:35:e8:57:95:62:7d:f5:ba:66:9e:53:62:bc:03:88:ef: ac:e1:76:51:f1:52:d3:b4:10:9a:8a:81:45:0a:17:e4:9c:ff: a2:ea:18:8d:f1:bb:74:45:3e:c8:2a:85:4b:63:16:9f:dd:98: 74:d8:ca:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu4RjMom3Bt3ZVeLaExe4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ODg5YmRhNTRmODg1N2RhNDI5MGM2Nzc5YmMwMDYxMWU3 M2UyMTIwHhcNMjUxMjI0MDUwMTEwWhcNMjUxMjI1MDUwMTEwWjAzMTEwLwYDVQQD Eyg2ZDhjNmJjYjEzZWQwYmY2NDkxYzY4YmY4MGZiNGM1ODViMDY4N2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvuV20NZM8I/J8yx3HwxwAGAJ35t V5Ov3Wm6cuoN9oDNfJ/yTn7CeAZEgEe78k5Ztk5kS0Zi23GUw4N+9Vg7g7QRIQun ZVZHBTScay55ltV69rrMn0LkH1NzydaZXSOZCzzOfOB7bg5hQlgEZkcHeLeqfZq7 8PUUTE0DUxK5VbwmWcDu1nPm3IRrZptUAhFl1B06AjYNgwpMzzB1NXYZNSPTOHmy gGJX0x6hqM9ta/sXKAhc2oV+7Dxk0D8rKlwRIo/w9tq7KxA3BWEshSGVpQHO0rhI Gu0eV0MsF9yJiNrPqSenhqJpFyYmdgvUu6HzozuGsmTIQ/Dm/gMgSPcrzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2Ma8sT7Qv2SRxov4D7TFhbBoenMB8GA1UdIwQY MBaAFHWIm9pU+IV9pCkMZ3m8AGEec+ISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFlpYjJsVDRoWDJrS1F4bmVid0FZUjV6NGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82ZGIyZjYtZTg3Yi00ZTFjLTgyYzct ZTc4NTUzYTAzN2JkLzEvZFlpYjJsVDRoWDJrS1F4bmVid0FZUjV6NGhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82ZGIyZjYtZTg3Yi00ZTFjLTgyYzctZTc4NTUzYTAzN2Jk LzEvZFlpYjJsVDRoWDJrS1F4bmVid0FZUjV6NGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuYFKvPH PK+i6nmenDFMdv24aqh22acFgvE3y/LjRUHQw12rIO4Aclxa4/lFg2WeoxhrUv/q 2/GkwaeX4de2um8rtjS6+ttx2DFvTz1JqKHRUJ/e5dnswPELD/IBtMeajSgJSPZm 0t1GGM/hqJYSixmEwaW01iNMcHWK7L7uWkyZRGH2CaKPp9KFK4aXoI8xdbjvnPGY MV9Or3ydo+Ek9KMsTFsLYkMeUOXdXnS+EvRF2tZzc86j+3dEm6hpC3eDyCrFVROR leU16FeVYn31umaeU2K8A4jvrOF2UfFS07QQmoqBRQoX5Jz/ouoYjfG7dEU+yCqF S2MWn92YdNjKTA== -----END CERTIFICATE-----Generated at Wed Dec 24 10:55:11 2025 by rpki-client