This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json) Hash identifier: 3ZvCbxguyVmtz2UjS9QzK17J6JOv3rzsmDOkUZf3dD4= Subject key identifier: C5:84:06:47:34:2A:67:9A:F3:28:35:6C:C4:C7:AF:77:17:6B:D2:86 Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f Certificate serial: 019B2D793F68DC63FD3400D95D19ADA0B3A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft Manifest number: 1260 Signing time: Wed 17 Dec 2025 18:01:19 +0000 Manifest this update: Wed 17 Dec 2025 18:01:19 +0000 Manifest next update: Thu 18 Dec 2025 18:01:19 +0000 Files and hashes: 1: 0SWPLRWTYkJG7421JHXOtiDBZR4.roa (hash: 6unS6vuhfVD53i6+xoXsZBSCsuic5U4lcQX4ccwpcWM=) 2: WbzMJtvriwpBLgG099PPDIe8VG4.roa (hash: Ug409g0I8zLQGsJbLA43Dct7NIITII3VJknFQnHFZYo=) 3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: hnijK1j2pbRdmjYkGosd6xmIlc5UgJQRlTmY5WrOge4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 18:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:79:3f:68:dc:63:fd:34:00:d9:5d:19:ad:a0:b3:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f Validity Not Before: Dec 17 18:01:19 2025 GMT Not After : Dec 18 18:01:19 2025 GMT Subject: CN=c5840647342a679af328356cc4c7af77176bd286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:04:12:b0:57:c1:2e:d4:14:2b:5c:75:0f:49: 6b:9a:bf:4b:58:61:d3:34:46:d8:d5:f8:cc:cf:4a: e4:8d:9e:dc:fb:b0:7d:a4:83:0d:98:39:3c:5d:84: fe:c2:83:81:3f:33:41:63:09:52:00:8e:18:08:0e: e4:50:b5:6c:d8:a6:84:7c:c7:09:3c:19:4f:81:89: eb:85:ec:dc:cf:f3:1e:b8:51:b6:45:c0:6b:3f:f7: 9a:08:ac:cd:ba:23:a6:35:79:7f:8b:04:2d:89:46: 19:6a:19:37:8d:e0:7d:a2:3c:76:92:bb:36:52:1a: 91:76:eb:57:b3:61:17:87:46:03:b8:d1:08:eb:2e: c6:89:a3:80:16:90:9e:3b:40:90:72:1c:4d:e2:24: 52:44:fa:3d:5a:57:08:59:78:3c:7a:34:5e:6e:d3: 06:ec:2e:23:84:c0:33:7f:a3:15:89:02:63:90:67: 45:c5:6a:75:7e:1f:8b:0e:33:ae:db:f7:92:43:9c: 71:12:cf:ea:9e:eb:d1:7d:71:60:b4:4c:63:d5:cc: 4a:31:42:5b:52:43:7c:4b:70:11:7e:7e:21:1f:4d: 30:8e:a1:f5:27:a4:75:2f:7a:12:f6:53:ce:45:e5: 2a:d7:b0:bb:2a:c2:75:de:b1:4c:4b:49:b5:c5:67: 5b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:84:06:47:34:2A:67:9A:F3:28:35:6C:C4:C7:AF:77:17:6B:D2:86 X509v3 Authority Key Identifier: keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:0f:9b:18:6b:a1:8d:80:fb:64:d2:23:d1:77:ff:a2:01:2f: ab:d4:84:c5:c2:66:30:c4:ec:fa:cd:90:51:76:4c:81:37:7e: 98:67:7a:07:53:4e:e5:50:50:9a:a6:9c:95:0f:0a:53:ec:02: 08:8b:71:72:53:97:4c:85:0c:9c:28:1a:51:db:58:6d:3d:f1: f2:cd:53:b5:53:e1:23:94:8d:64:cb:ae:cc:08:29:41:e4:ac: cc:0b:c3:e2:b1:92:fb:07:0a:2f:68:b4:1b:e2:3d:11:e3:8b: e8:b3:7f:d4:50:97:7d:70:a3:93:a4:7b:2a:ed:b3:dd:65:df: a6:db:c7:9d:52:95:46:66:96:3c:d3:4b:84:8e:4b:da:a8:b9: 02:16:e3:07:04:30:f3:2d:23:0a:b2:72:c5:1f:24:26:e6:27: 81:36:d9:73:fb:5e:4b:41:e3:84:04:3d:e0:bb:69:6d:4e:35: 0b:77:12:02:4c:19:40:41:d5:8f:d7:90:8f:a0:2f:a0:d2:88: 2d:a9:15:23:3a:88:0e:77:e8:31:40:64:e3:4a:d1:eb:11:66: 67:8b:6c:c7:3c:01:28:b7:1c:17:4d:b7:29:1c:31:25:ba:48: 70:0b:38:6c:8f:1f:3a:2e:b3:60:0d:1c:7e:7e:b2:ad:37:17: dc:76:ab:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteT9o3GP9NADZXRmtoLOpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZDVhYTcwMzQyNTBhYjFhODc4OWFjODZjYzBlZWYzYmZj OWRiNWYwHhcNMjUxMjE3MTgwMTE5WhcNMjUxMjE4MTgwMTE5WjAzMTEwLwYDVQQD EyhjNTg0MDY0NzM0MmE2NzlhZjMyODM1NmNjNGM3YWY3NzE3NmJkMjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QQSsFfBLtQUK1x1D0lrmr9LWGHT NEbY1fjMz0rkjZ7c+7B9pIMNmDk8XYT+woOBPzNBYwlSAI4YCA7kULVs2KaEfMcJ PBlPgYnrhezcz/MeuFG2RcBrP/eaCKzNuiOmNXl/iwQtiUYZahk3jeB9ojx2krs2 UhqRdutXs2EXh0YDuNEI6y7GiaOAFpCeO0CQchxN4iRSRPo9WlcIWXg8ejRebtMG 7C4jhMAzf6MViQJjkGdFxWp1fh+LDjOu2/eSQ5xxEs/qnuvRfXFgtExj1cxKMUJb UkN8S3ARfn4hH00wjqH1J6R1L3oS9lPOReUq17C7KsJ13rFMS0m1xWdbNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWEBkc0Kmea8yg1bMTHr3cXa9KGMB8GA1UdIwQY MBaAFMjVqnA0JQqxqHiayGzA7vO/ydtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yZDQ5MGMtNmZmOC00NzFkLTk3ZDIt MmQ3MmYyMzE5M2RiLzEveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yZDQ5MGMtNmZmOC00NzFkLTk3ZDItMmQ3MmYyMzE5M2Ri LzEveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOg+bGGuh jYD7ZNIj0Xf/ogEvq9SExcJmMMTs+s2QUXZMgTd+mGd6B1NO5VBQmqaclQ8KU+wC CItxclOXTIUMnCgaUdtYbT3x8s1TtVPhI5SNZMuuzAgpQeSszAvD4rGS+wcKL2i0 G+I9EeOL6LN/1FCXfXCjk6R7Ku2z3WXfptvHnVKVRmaWPNNLhI5L2qi5AhbjBwQw 8y0jCrJyxR8kJuYngTbZc/teS0HjhAQ94LtpbU41C3cSAkwZQEHVj9eQj6AvoNKI LakVIzqIDnfoMUBk40rR6xFmZ4tsxzwBKLccF023KRwxJbpIcAs4bI8fOi6zYA0c fn6yrTcX3HarLA== -----END CERTIFICATE-----Generated at Wed Dec 17 20:46:42 2025 by rpki-client