This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft File: yE1hzRftkuVLszl_HlprOQSsbwU.mft (raw, json) Hash identifier: wwH9XY+a1aoQeWFUm/id28RN7x+e2kS3Jn3p6kBqU2E= Subject key identifier: 91:6D:0C:76:F0:C2:2C:E3:89:E4:EF:48:BC:09:4F:22:35:72:24:FB Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05 Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05 Certificate serial: 019B3CB5484E62EEDDEE6C4BFA1629598F09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft Manifest number: 1793 Signing time: Sat 20 Dec 2025 17:01:12 +0000 Manifest this update: Sat 20 Dec 2025 17:01:12 +0000 Manifest next update: Sun 21 Dec 2025 17:01:12 +0000 Files and hashes: 1: 7lgq0ctAzIlTDcpOLaQGdaGThZk.roa (hash: e5z2Mfd4VCKCw2JmNleVEdAAScHXO8Xd9p2GShP5Y6E=) 2: L_lziZvf0rcW2nhVL69U2cxHt5E.roa (hash: pANePALmK/hOXRwbvUEA/qtpc0qlGhfdWdBBREZqc1k=) 3: YtSu06eBvsaI_VOFmqz1IslXnNc.roa (hash: 0dn7VD8ICYAbfWAEObXxBVJEjbsCWfJ8U7nwROGAGsU=) 4: ckan5dvz7J1ZSK30Drxlo4PWhMs.roa (hash: F1BRb89WpgPtx0JUztwDXeDnh4+IrOFx75odNR04usQ=) 5: dLz_hs_QORbsBLSIa-GqwYxnFoY.roa (hash: +fTN+O03RfwmbM+R0hQdMI6NFyRIvlQwmN4JSANhNh0=) 6: flXkvhrZJ0ZeBKtpmmtVGzFsQKI.roa (hash: Y9UGCFlpeU/Vq7d3cJo997/pq2lWNIQ3AFJn/rIco44=) 7: ikN4SSSIJdpATfbTuF1aqPVQm8w.roa (hash: gunzQ7zSHNaZSvXp8QC6wdbsRU0gF2fXQubVjTHi9K8=) 8: nBGnunXHIlzfqmh1yvjBYc2bnwI.roa (hash: AE0YoKWgcnhxm5wM19OntmREG6LsPgDjKTOjRjiZyzs=) 9: yE1hzRftkuVLszl_HlprOQSsbwU.crl (hash: RxxsaXGRBK7Ice2bKOhrCZGGdbNVzbSXfwfJrCBdSAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:48:4e:62:ee:dd:ee:6c:4b:fa:16:29:59:8f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05 Validity Not Before: Dec 20 17:01:12 2025 GMT Not After : Dec 21 17:01:12 2025 GMT Subject: CN=916d0c76f0c22ce389e4ef48bc094f22357224fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:12:bd:33:b3:01:a1:fb:eb:de:b2:1e:a3:42: 02:65:60:2e:9c:82:c2:58:bb:6a:23:fe:24:c2:38: cb:6b:91:98:7e:8a:f8:23:f7:cf:fa:e3:4c:6f:82: ab:36:c4:4b:55:29:17:47:e6:b3:c8:91:f2:21:19: c5:2b:cf:5f:7c:6b:15:8a:70:a1:1e:3b:a9:42:a0: 79:6b:1a:5a:2d:19:4c:8f:14:d1:29:d6:74:fc:67: 6b:49:87:72:f0:87:17:ba:59:ed:42:44:28:88:90: 44:bf:72:61:88:35:32:f1:7b:4c:54:34:b3:6f:a8: 6c:cb:b2:5f:13:29:bc:30:4c:af:26:9b:7e:7e:44: 85:a8:e9:8f:df:44:36:5d:a4:68:bc:df:bd:bc:45: 4b:41:0c:39:df:e1:59:54:b0:20:5e:db:e4:7b:b9: 9b:1d:c4:0a:db:39:86:9c:18:9e:11:f5:c4:cd:1c: 4e:d3:d8:af:f5:dc:e8:55:1a:19:d7:b6:c5:73:75: 78:ff:61:64:43:1d:dd:04:95:6a:58:93:42:b4:66: 3c:c1:56:c2:9b:eb:1e:68:74:51:a5:2c:19:a7:be: 2a:91:eb:b9:11:85:f0:ea:a2:a9:17:74:c9:91:88: 75:c6:f0:32:22:ec:59:e3:ef:f9:b7:f0:df:47:b5: 9e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6D:0C:76:F0:C2:2C:E3:89:E4:EF:48:BC:09:4F:22:35:72:24:FB X509v3 Authority Key Identifier: keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:bb:1d:b3:f0:79:9b:fc:77:0c:e2:c5:7b:79:3e:4c:52:34: be:26:5f:b2:66:99:08:b6:1c:19:51:f5:bc:8e:7c:06:23:f7: a7:aa:76:c1:28:22:b9:dd:09:6c:2b:bd:c0:69:2a:f3:86:17: ad:22:84:cb:84:00:bb:7c:6f:cf:d8:2f:1c:67:51:3c:d6:c1: 0e:83:c8:91:e0:95:a3:e8:d7:e3:4f:ca:4b:91:ad:ff:79:70: 6a:e8:6a:30:09:f0:ee:87:46:7e:fe:14:33:26:66:bd:b0:b1: 90:1c:db:84:d8:95:29:b2:a0:21:a2:06:7f:39:f4:9e:0c:ee: 6e:f5:3a:2d:a8:eb:bc:a8:22:a6:7f:f1:1f:a2:89:38:7e:0a: 0a:ac:c6:c7:90:ed:ac:8c:38:91:27:05:01:76:b0:f4:f2:04: 27:bb:81:46:f1:4f:8a:e1:54:e3:00:96:d4:ee:bf:76:c6:74: 0f:ea:fd:bf:86:e6:0d:1b:64:52:7f:49:b8:82:95:77:32:15: 90:bc:79:05:5f:e0:ff:b9:50:23:9c:73:e4:1a:6c:e5:ac:08: 2c:b3:9e:25:16:8d:58:bc:ec:cb:b8:cb:95:79:72:a2:8a:8f: fd:7d:30:74:c3:c0:96:09:7c:6c:3f:3b:9b:a3:08:ae:8b:b0: f8:79:eb:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tUhOYu7d7mxL+hYpWY8JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NGQ2MWNkMTdlZDkyZTU0YmIzMzk3ZjFlNWE2YjM5MDRh YzZmMDUwHhcNMjUxMjIwMTcwMTEyWhcNMjUxMjIxMTcwMTEyWjAzMTEwLwYDVQQD Eyg5MTZkMGM3NmYwYzIyY2UzODllNGVmNDhiYzA5NGYyMjM1NzIyNGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBK9M7MBofvr3rIeo0ICZWAunILC WLtqI/4kwjjLa5GYfor4I/fP+uNMb4KrNsRLVSkXR+azyJHyIRnFK89ffGsVinCh HjupQqB5axpaLRlMjxTRKdZ0/GdrSYdy8IcXulntQkQoiJBEv3JhiDUy8XtMVDSz b6hsy7JfEym8MEyvJpt+fkSFqOmP30Q2XaRovN+9vEVLQQw53+FZVLAgXtvke7mb HcQK2zmGnBieEfXEzRxO09iv9dzoVRoZ17bFc3V4/2FkQx3dBJVqWJNCtGY8wVbC m+seaHRRpSwZp74qkeu5EYXw6qKpF3TJkYh1xvAyIuxZ4+/5t/DfR7WegwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFtDHbwwizjieTvSLwJTyI1ciT7MB8GA1UdIwQY MBaAFMhNYc0X7ZLlS7M5fx5aazkErG8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGIt YzI1Nzc5MmRhZGM0LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGItYzI1Nzc5MmRhZGM0 LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLsds/B5 m/x3DOLFe3k+TFI0viZfsmaZCLYcGVH1vI58BiP3p6p2wSgiud0JbCu9wGkq84YX rSKEy4QAu3xvz9gvHGdRPNbBDoPIkeCVo+jX40/KS5Gt/3lwauhqMAnw7odGfv4U MyZmvbCxkBzbhNiVKbKgIaIGfzn0ngzubvU6LajrvKgipn/xH6KJOH4KCqzGx5Dt rIw4kScFAXaw9PIEJ7uBRvFPiuFU4wCW1O6/dsZ0D+r9v4bmDRtkUn9JuIKVdzIV kLx5BV/g/7lQI5xz5Bps5awILLOeJRaNWLzsy7jLlXlyooqP/X0wdMPAlgl8bD87 m6MIrouw+Hnriw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:16:12 2025 by rpki-client