This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft File: ya74cWdYXSiYMVqjdT8_po2tLG0.mft (raw, json) Hash identifier: wZez/hAc134MLnF1xUDlEIMrEpw7B6uU6jccvQQs7R4= Subject key identifier: BC:80:BE:AC:EE:3E:0E:FC:50:2D:94:97:F7:BE:DA:06:46:65:F4:FB Authority key identifier: C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D Certificate issuer: /CN=c9aef87167585d2898315aa3753f3fa68dad2c6d Certificate serial: 019B44DC7D3B18AF62835263649E08030376 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft Manifest number: 0456 Signing time: Mon 22 Dec 2025 07:00:59 +0000 Manifest this update: Mon 22 Dec 2025 07:00:59 +0000 Manifest next update: Tue 23 Dec 2025 07:00:59 +0000 Files and hashes: 1: SSBMzkm-jf_y5E7eeLfr40dA4CE.roa (hash: 46QdoM079olXIRvtJI0XHjDc3RUOZR3rP6kBJA82cO8=) 2: ya74cWdYXSiYMVqjdT8_po2tLG0.crl (hash: 89R+TRgJQhoesDlelMMLnvmdvvV7g4nb/pk1bdWS3+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:7d:3b:18:af:62:83:52:63:64:9e:08:03:03:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9aef87167585d2898315aa3753f3fa68dad2c6d Validity Not Before: Dec 22 07:00:59 2025 GMT Not After : Dec 23 07:00:59 2025 GMT Subject: CN=bc80beacee3e0efc502d9497f7beda064665f4fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cc:5f:3c:ae:74:ae:23:c8:3b:e6:50:eb:a9: 0a:c1:bc:d6:e3:b3:99:ba:7e:ed:21:cc:fd:6c:80: f8:f7:f2:74:e9:5e:5b:0e:4d:87:7f:97:cb:22:23: 01:6c:e7:3f:7d:93:6e:97:79:65:ee:99:1a:a5:06: ca:11:49:6e:e9:d6:a1:08:a5:dd:d2:35:78:ee:29: 0c:38:2c:01:1d:3b:58:86:7f:af:5b:1c:5f:8f:d3: 59:85:d5:58:e3:98:48:14:ce:42:1b:27:84:2d:aa: 23:cd:ce:cc:0a:9e:60:37:3d:04:03:53:05:2b:fd: 20:54:cb:15:91:8d:2b:d1:8a:1c:b4:f0:74:d2:3e: 16:98:f7:eb:5e:ac:97:ad:dd:7f:fc:b3:df:cf:93: 42:6b:ca:28:67:b9:b3:62:2a:d0:26:00:2d:34:d4: a0:1a:fd:b7:0c:81:79:4f:d2:d8:8c:21:3b:39:24: 39:74:5c:2f:07:f5:10:bd:7f:09:c5:72:9d:15:05: cf:bf:46:af:22:b3:cf:2a:32:5d:9c:89:5e:0e:80: bd:81:2b:24:dd:f7:28:1f:28:e5:de:00:55:99:d0: 28:ad:e8:bd:45:e0:2b:b6:e1:a9:3c:7a:23:56:8e: 9b:d8:db:0b:fa:11:11:a3:8e:06:85:99:2f:10:47: 24:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:80:BE:AC:EE:3E:0E:FC:50:2D:94:97:F7:BE:DA:06:46:65:F4:FB X509v3 Authority Key Identifier: keyid:C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:cb:6c:32:2b:95:ec:bc:72:94:3b:4d:9b:11:93:da:10:d9: da:28:2f:24:62:74:d6:ae:43:25:30:c6:79:4c:39:40:ce:4c: b2:43:ec:40:9c:bd:e1:5e:68:0b:8e:bb:12:29:d6:8c:af:8e: d2:a3:52:50:75:ec:8e:e1:1e:ba:40:1b:11:3d:b1:22:05:16: e0:0b:a5:76:e9:c0:4f:e9:8f:85:6b:b3:3a:59:de:8c:0e:08: c0:93:46:3f:f7:8d:d6:d1:38:9f:cf:82:f6:d3:af:88:bc:d8: b6:1f:e1:a0:b5:7d:ad:7c:b4:71:25:81:71:62:78:bf:e7:dc: a0:da:c7:af:8b:9e:45:a8:32:6b:76:b8:4f:ed:b6:1b:9a:f3: 66:87:09:05:7f:fa:9a:87:bb:5f:6f:f0:4a:21:3c:32:96:21: 13:31:62:c6:43:cb:8d:e7:fe:72:c3:cf:1a:e7:8c:c5:80:5b: c6:64:30:9d:cd:6f:42:75:8e:a6:84:8c:63:0d:81:50:a4:3d: 3e:43:da:41:f7:df:14:2f:d8:6f:c5:8b:2a:28:3c:a5:e4:86: 86:32:2b:0b:0b:d0:de:f2:08:54:d1:7d:11:12:0e:1f:5d:16: 2e:66:66:72:96:b4:26:31:98:1e:96:06:a7:51:96:c7:ef:35: 45:34:4e:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3H07GK9ig1JjZJ4IAwN2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YWVmODcxNjc1ODVkMjg5ODMxNWFhMzc1M2YzZmE2OGRh ZDJjNmQwHhcNMjUxMjIyMDcwMDU5WhcNMjUxMjIzMDcwMDU5WjAzMTEwLwYDVQQD EyhiYzgwYmVhY2VlM2UwZWZjNTAyZDk0OTdmN2JlZGEwNjQ2NjVmNGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMxfPK50riPIO+ZQ66kKwbzW47OZ un7tIcz9bID49/J06V5bDk2Hf5fLIiMBbOc/fZNul3ll7pkapQbKEUlu6dahCKXd 0jV47ikMOCwBHTtYhn+vWxxfj9NZhdVY45hIFM5CGyeELaojzc7MCp5gNz0EA1MF K/0gVMsVkY0r0YoctPB00j4WmPfrXqyXrd1//LPfz5NCa8ooZ7mzYirQJgAtNNSg Gv23DIF5T9LYjCE7OSQ5dFwvB/UQvX8JxXKdFQXPv0avIrPPKjJdnIleDoC9gSsk 3fcoHyjl3gBVmdAorei9ReArtuGpPHojVo6b2NsL+hERo44GhZkvEEckqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyAvqzuPg78UC2Ul/e+2gZGZfT7MB8GA1UdIwQY MBaAFMmu+HFnWF0omDFao3U/P6aNrSxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWE3NGNXZFlYU2lZTVZxamRUOF9wbzJ0TEcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84NWNlODItZGQwNi00OTU4LTllODIt ZGIxMGRjZmVjNGJmLzEveWE3NGNXZFlYU2lZTVZxamRUOF9wbzJ0TEcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi84NWNlODItZGQwNi00OTU4LTllODItZGIxMGRjZmVjNGJm LzEveWE3NGNXZFlYU2lZTVZxamRUOF9wbzJ0TEcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8tsMiuV 7LxylDtNmxGT2hDZ2igvJGJ01q5DJTDGeUw5QM5MskPsQJy94V5oC467EinWjK+O 0qNSUHXsjuEeukAbET2xIgUW4AuldunAT+mPhWuzOlnejA4IwJNGP/eN1tE4n8+C 9tOviLzYth/hoLV9rXy0cSWBcWJ4v+fcoNrHr4ueRagya3a4T+22G5rzZocJBX/6 moe7X2/wSiE8MpYhEzFixkPLjef+csPPGueMxYBbxmQwnc1vQnWOpoSMYw2BUKQ9 PkPaQfffFC/Yb8WLKig8peSGhjIrCwvQ3vIIVNF9ERIOH10WLmZmcpa0JjGYHpYG p1GWx+81RTROhA== -----END CERTIFICATE-----Generated at Mon Dec 22 09:41:24 2025 by rpki-client