This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft File: ynRI_Amz9zINqAV7-o7qm6-c7jk.mft (raw, json) Hash identifier: Idm2tw4z0G9GDKCGrmQ+BltfgZ2eQ9TNObq53nQpzrY= Subject key identifier: 0C:96:60:85:17:0B:B0:8A:F1:14:E8:AA:A1:3A:8D:F3:06:EA:C7:0F Authority key identifier: CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39 Certificate issuer: /CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39 Certificate serial: 019B51BCA775EBD7FBA6C46F61E4EB0F1FBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft Manifest number: 178F Signing time: Wed 24 Dec 2025 19:01:16 +0000 Manifest this update: Wed 24 Dec 2025 19:01:16 +0000 Manifest next update: Thu 25 Dec 2025 19:01:16 +0000 Files and hashes: 1: Zz3HiEMl3Xhoe_NeOZYASowUK4I.roa (hash: 0qkYuAOmtXdpU390WKpuoXcdObuMpe6kCjVAADqT7/s=) 2: ynRI_Amz9zINqAV7-o7qm6-c7jk.crl (hash: pSEKUqTR4hdHzdVtxl2ZLu1f1E7D9LcGtpgo4xT5eg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:a7:75:eb:d7:fb:a6:c4:6f:61:e4:eb:0f:1f:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39 Validity Not Before: Dec 24 19:01:16 2025 GMT Not After : Dec 25 19:01:16 2025 GMT Subject: CN=0c966085170bb08af114e8aaa13a8df306eac70f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ed:69:8e:82:d6:68:c2:ba:5d:57:cf:b7:08: 6d:56:0e:ea:e3:c9:b1:ae:d1:ec:c6:f7:47:d8:a8: e9:7f:ac:0e:71:2c:af:c8:37:9b:20:16:0e:0e:3a: db:fc:10:a8:52:e2:4d:0d:29:e0:b0:0e:b2:f4:ad: d5:dd:b1:a0:7b:ef:2c:36:9f:22:59:7d:60:43:e5: 21:0c:bf:92:c8:23:e7:86:09:5a:a0:7d:8b:f8:e6: 80:99:8c:4f:86:88:97:f4:a2:c4:37:7a:ea:9a:0f: 05:29:fb:49:41:33:7a:30:b6:b4:d9:d8:d4:cb:dc: f7:d3:11:4c:0f:b7:a4:c3:b3:cd:6c:9b:0e:54:3b: 03:15:a6:a8:13:be:35:a2:ce:7b:f0:c4:f7:b4:6b: d8:b1:21:96:99:5e:0d:eb:00:72:4b:5b:f5:8d:1a: fc:80:a0:dd:a2:3a:22:fd:90:56:58:06:94:5f:7a: 62:c5:86:54:a6:fb:4e:75:e6:4c:ba:ed:a0:1e:a7: 09:17:4a:85:64:0e:6b:51:df:18:5e:e0:72:a3:67: 82:94:18:6d:fb:2a:57:4d:16:21:56:c2:dc:93:5c: ba:00:ff:0b:37:c0:30:61:6d:7d:3f:65:65:5a:1f: 23:fa:69:78:78:95:56:21:95:0a:65:89:c9:e7:10: e2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:96:60:85:17:0B:B0:8A:F1:14:E8:AA:A1:3A:8D:F3:06:EA:C7:0F X509v3 Authority Key Identifier: keyid:CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:a0:16:35:45:db:31:ad:e3:54:6d:d7:f0:69:9f:0d:72:38: dc:f2:24:e8:a8:88:d0:9a:4e:d1:66:8c:a5:24:fd:2b:40:a9: ad:84:9a:e4:77:9e:7b:9c:b5:fd:75:75:68:57:21:a5:0f:71: 40:78:9c:fd:80:0f:eb:5f:84:b5:08:31:e4:2f:f6:a2:96:57: 59:6a:6b:72:55:48:71:ec:aa:d7:ab:b2:1e:11:44:b4:39:5c: 67:de:85:ed:b5:71:96:30:bb:68:0e:5d:2e:5e:5a:5a:d2:06: 30:38:b0:3b:05:e2:57:0b:ce:da:86:48:c0:b9:b8:3c:a6:dc: 5b:9a:b4:43:14:3a:34:ef:7d:17:bf:05:10:a8:be:66:db:24: df:05:59:50:85:10:06:43:f4:14:3a:a3:f6:6d:78:aa:5a:16: d6:5d:10:f5:17:f8:ff:70:28:25:bc:ce:7e:0e:8b:12:1e:ce: b9:9c:d1:71:5c:3c:dd:b0:35:bd:48:a6:d9:d2:5f:cc:d3:92: c8:de:00:5f:90:37:67:dd:e7:8f:7e:af:84:1f:88:45:2e:d6: 7e:82:8a:d4:e5:d7:3b:ef:a9:25:27:70:b5:3c:5e:0c:2a:b0: a7:76:10:d0:49:46:21:1f:98:1a:58:f8:17:90:13:7d:e7:83: 32:4e:d7:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvKd169f7psRvYeTrDx+7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNzQ0OGZjMDliM2Y3MzIwZGE4MDU3YmZhOGVlYTliYWY5 Y2VlMzkwHhcNMjUxMjI0MTkwMTE2WhcNMjUxMjI1MTkwMTE2WjAzMTEwLwYDVQQD EygwYzk2NjA4NTE3MGJiMDhhZjExNGU4YWFhMTNhOGRmMzA2ZWFjNzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO1pjoLWaMK6XVfPtwhtVg7q48mx rtHsxvdH2Kjpf6wOcSyvyDebIBYODjrb/BCoUuJNDSngsA6y9K3V3bGge+8sNp8i WX1gQ+UhDL+SyCPnhglaoH2L+OaAmYxPhoiX9KLEN3rqmg8FKftJQTN6MLa02djU y9z30xFMD7ekw7PNbJsOVDsDFaaoE741os578MT3tGvYsSGWmV4N6wByS1v1jRr8 gKDdojoi/ZBWWAaUX3pixYZUpvtOdeZMuu2gHqcJF0qFZA5rUd8YXuByo2eClBht +ypXTRYhVsLck1y6AP8LN8AwYW19P2VlWh8j+ml4eJVWIZUKZYnJ5xDiuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAyWYIUXC7CK8RToqqE6jfMG6scPMB8GA1UdIwQY MBaAFMp0SPwJs/cyDagFe/qO6puvnO45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW5SSV9BbXo5eklOcUFWNy1vN3FtNi1jN2prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80NGNlMDEtZDQ1MS00ZDczLWE2ZTQt MzgwMmZmNGVjMTU5LzEveW5SSV9BbXo5eklOcUFWNy1vN3FtNi1jN2prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC80NGNlMDEtZDQ1MS00ZDczLWE2ZTQtMzgwMmZmNGVjMTU5 LzEveW5SSV9BbXo5eklOcUFWNy1vN3FtNi1jN2prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiaAWNUXb Ma3jVG3X8GmfDXI43PIk6KiI0JpO0WaMpST9K0CprYSa5Heee5y1/XV1aFchpQ9x QHic/YAP61+EtQgx5C/2opZXWWprclVIceyq16uyHhFEtDlcZ96F7bVxljC7aA5d Ll5aWtIGMDiwOwXiVwvO2oZIwLm4PKbcW5q0QxQ6NO99F78FEKi+Ztsk3wVZUIUQ BkP0FDqj9m14qloW1l0Q9Rf4/3AoJbzOfg6LEh7OuZzRcVw83bA1vUim2dJfzNOS yN4AX5A3Z93nj36vhB+IRS7WfoKK1OXXO++pJSdwtTxeDCqwp3YQ0ElGIR+YGlj4 F5ATfeeDMk7Xpg== -----END CERTIFICATE-----Generated at Wed Dec 24 21:53:50 2025 by rpki-client