This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft File: _Yk4EweuXjsbqGWM2n7iraQUFEc.mft (raw, json) Hash identifier: jvd+qmHEN4XI5BkyAhE+xfeunX5f+jBTfoDNIuQ7lzo= Subject key identifier: 95:BE:E5:1D:C7:06:64:6C:9C:76:74:F0:8A:CC:CF:EC:E5:28:FC:B8 Authority key identifier: FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47 Certificate issuer: /CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447 Certificate serial: 019B3C7FAD284BFDCE26DF2ADF8A451B2D99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft Manifest number: 12A7 Signing time: Sat 20 Dec 2025 16:02:38 +0000 Manifest this update: Sat 20 Dec 2025 16:02:38 +0000 Manifest next update: Sun 21 Dec 2025 16:02:38 +0000 Files and hashes: 1: Vc2DYnTkl8e6VG_7qyXjn1yvUqg.roa (hash: S5Mw4KsEyV+yIM/8XssJwS1ndxLAY/uwrPjkANgxyb0=) 2: _Yk4EweuXjsbqGWM2n7iraQUFEc.crl (hash: GBsIAAtjvIT5o9iSXgMTJBHaQ0dTnGxVJZi8Cr75KLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:ad:28:4b:fd:ce:26:df:2a:df:8a:45:1b:2d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447 Validity Not Before: Dec 20 16:02:38 2025 GMT Not After : Dec 21 16:02:38 2025 GMT Subject: CN=95bee51dc706646c9c7674f08acccfece528fcb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:af:6b:87:aa:fb:57:20:4a:60:e0:56:cf:17: b9:3d:5a:5a:ca:4d:a6:89:77:e8:b3:a3:4c:3c:54: fb:2e:8f:e5:98:78:93:d8:45:2f:85:b0:4a:7e:26: f0:f7:dd:db:27:7b:e5:03:1f:7d:ab:ea:64:58:44: 02:1d:65:50:56:38:a4:b0:4e:7f:64:a1:22:69:d0: 9c:dd:33:a5:df:e7:bc:9a:1e:4c:0c:9d:b3:f4:7a: fa:fe:0e:56:2d:89:e2:b5:5a:ac:eb:9f:83:d3:0f: 8d:e2:cd:68:8b:c3:3d:ac:72:c1:e0:3d:78:fc:48: a3:07:5f:e7:06:53:2f:de:93:76:bd:fc:ca:b8:86: 8b:9e:b3:de:dc:91:29:18:04:24:78:f2:0c:53:55: b4:05:b7:d9:47:f1:54:35:13:39:3f:0f:a0:f6:42: cd:d8:ac:1c:ac:d0:92:f8:2e:db:22:80:97:45:e1: 03:a9:84:11:12:3b:36:ea:82:a3:2c:d5:20:42:0f: ae:6a:6b:48:16:87:62:6a:73:57:c3:8c:fb:19:20: ef:bd:be:9f:c0:39:b7:49:bc:b5:21:8e:1f:53:86: ae:12:17:45:78:8a:c8:95:7a:ce:c2:32:cd:26:92: ed:a6:ea:30:52:8b:29:cf:85:e3:7f:1b:f9:a3:e6: 59:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BE:E5:1D:C7:06:64:6C:9C:76:74:F0:8A:CC:CF:EC:E5:28:FC:B8 X509v3 Authority Key Identifier: keyid:FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:98:28:fd:8d:6e:8e:bf:a8:c4:d5:c0:d2:0d:70:3d:c9:6a: 41:61:47:03:9a:ab:6c:fb:b5:27:95:ce:3c:40:32:69:b2:95: 7f:ec:e7:56:3b:90:2e:4e:82:25:4a:2b:6f:72:19:8e:b0:7b: 42:c7:5f:93:fe:e7:ac:c8:2f:1e:a5:bf:c2:3e:3e:8b:ca:a6: 7f:58:93:10:af:b5:b2:6b:f5:89:b4:6f:31:79:74:69:f9:b8: b1:e6:27:a4:8d:ef:80:d6:4b:fc:6e:2c:1a:c1:9d:7a:3a:ee: e3:ab:2a:9c:36:60:e9:8f:de:5e:9f:bf:f1:c1:79:54:fc:b6: d8:f7:55:5b:50:28:73:66:93:46:85:99:2d:bb:3e:27:42:b8: 6c:21:0c:a4:f9:44:ff:1b:6c:b7:94:0f:c0:cd:cc:5c:37:e0: 2f:34:e0:09:ae:a2:2f:c4:5a:0d:51:a9:0b:22:f8:b6:07:2d: a1:a5:45:84:4d:ca:ad:78:72:d4:7d:04:69:f4:c2:e7:ff:9e: a3:84:8c:10:98:8e:53:6e:7f:18:6b:b2:ff:55:cd:c6:9d:81: e6:30:62:a5:d4:05:15:32:48:ef:ad:a8:5c:f6:4d:24:69:ee: ac:13:f3:91:5a:a3:62:d5:54:68:92:48:b2:05:7b:2d:ac:13: e5:37:9f:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f60oS/3OJt8q34pFGy2ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkODkzODEzMDdhZTVlM2IxYmE4NjU4Y2RhN2VlMmFkYTQx NDE0NDcwHhcNMjUxMjIwMTYwMjM4WhcNMjUxMjIxMTYwMjM4WjAzMTEwLwYDVQQD Eyg5NWJlZTUxZGM3MDY2NDZjOWM3Njc0ZjA4YWNjY2ZlY2U1MjhmY2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK9rh6r7VyBKYOBWzxe5PVpayk2m iXfos6NMPFT7Lo/lmHiT2EUvhbBKfibw993bJ3vlAx99q+pkWEQCHWVQVjiksE5/ ZKEiadCc3TOl3+e8mh5MDJ2z9Hr6/g5WLYnitVqs65+D0w+N4s1oi8M9rHLB4D14 /EijB1/nBlMv3pN2vfzKuIaLnrPe3JEpGAQkePIMU1W0BbfZR/FUNRM5Pw+g9kLN 2KwcrNCS+C7bIoCXReEDqYQREjs26oKjLNUgQg+uamtIFodianNXw4z7GSDvvb6f wDm3Sby1IY4fU4auEhdFeIrIlXrOwjLNJpLtpuowUospz4Xjfxv5o+ZZNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJW+5R3HBmRsnHZ08IrMz+zlKPy4MB8GA1UdIwQY MBaAFP2JOBMHrl47G6hljNp+4q2kFBRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1lrNEV3ZXVYanNicUdXTTJuN2lyYVFVRkVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kY2Y5YjctNmQ3Mi00NzVhLWJhYTct NjQ2ZWU2ZGZhNmI2LzEvX1lrNEV3ZXVYanNicUdXTTJuN2lyYVFVRkVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9kY2Y5YjctNmQ3Mi00NzVhLWJhYTctNjQ2ZWU2ZGZhNmI2 LzEvX1lrNEV3ZXVYanNicUdXTTJuN2lyYVFVRkVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN5go/Y1u jr+oxNXA0g1wPclqQWFHA5qrbPu1J5XOPEAyabKVf+znVjuQLk6CJUorb3IZjrB7 Qsdfk/7nrMgvHqW/wj4+i8qmf1iTEK+1smv1ibRvMXl0afm4seYnpI3vgNZL/G4s GsGdejru46sqnDZg6Y/eXp+/8cF5VPy22PdVW1Aoc2aTRoWZLbs+J0K4bCEMpPlE /xtst5QPwM3MXDfgLzTgCa6iL8RaDVGpCyL4tgctoaVFhE3KrXhy1H0EafTC5/+e o4SMEJiOU25/GGuy/1XNxp2B5jBipdQFFTJI762oXPZNJGnurBPzkVqjYtVUaJJI sgV7LawT5TefNA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:09:21 2025 by rpki-client