This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft File: yE1hzRftkuVLszl_HlprOQSsbwU.mft (raw, json) Hash identifier: 7UlYHNnMO9mgOhPYW+5Y7oY9GmaUOaeh/aEawCM0Nvo= Subject key identifier: F6:84:26:D0:8F:B9:46:96:89:A9:1C:76:C8:0F:85:81:D7:66:16:01 Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05 Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05 Certificate serial: 019B72C7DBC7647240563A569ED6EC5EC842 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft Manifest number: 17AF Signing time: Wed 31 Dec 2025 05:00:58 +0000 Manifest this update: Wed 31 Dec 2025 05:00:58 +0000 Manifest next update: Thu 01 Jan 2026 05:00:58 +0000 Files and hashes: 1: 7lgq0ctAzIlTDcpOLaQGdaGThZk.roa (hash: e5z2Mfd4VCKCw2JmNleVEdAAScHXO8Xd9p2GShP5Y6E=) 2: L_lziZvf0rcW2nhVL69U2cxHt5E.roa (hash: pANePALmK/hOXRwbvUEA/qtpc0qlGhfdWdBBREZqc1k=) 3: YtSu06eBvsaI_VOFmqz1IslXnNc.roa (hash: 0dn7VD8ICYAbfWAEObXxBVJEjbsCWfJ8U7nwROGAGsU=) 4: ckan5dvz7J1ZSK30Drxlo4PWhMs.roa (hash: F1BRb89WpgPtx0JUztwDXeDnh4+IrOFx75odNR04usQ=) 5: dLz_hs_QORbsBLSIa-GqwYxnFoY.roa (hash: +fTN+O03RfwmbM+R0hQdMI6NFyRIvlQwmN4JSANhNh0=) 6: flXkvhrZJ0ZeBKtpmmtVGzFsQKI.roa (hash: Y9UGCFlpeU/Vq7d3cJo997/pq2lWNIQ3AFJn/rIco44=) 7: ikN4SSSIJdpATfbTuF1aqPVQm8w.roa (hash: gunzQ7zSHNaZSvXp8QC6wdbsRU0gF2fXQubVjTHi9K8=) 8: nBGnunXHIlzfqmh1yvjBYc2bnwI.roa (hash: AE0YoKWgcnhxm5wM19OntmREG6LsPgDjKTOjRjiZyzs=) 9: yE1hzRftkuVLszl_HlprOQSsbwU.crl (hash: B5mLeRP/zwKps2Cldjgvoo6qRFdcoKAWBAQiOC+HeZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:c7:db:c7:64:72:40:56:3a:56:9e:d6:ec:5e:c8:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05 Validity Not Before: Dec 31 05:00:58 2025 GMT Not After : Jan 1 05:00:58 2026 GMT Subject: CN=f68426d08fb9469689a91c76c80f8581d7661601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a8:09:78:3d:b5:b0:d9:c8:ab:62:79:1a:ff: 10:4b:ba:42:f9:d9:38:cd:2c:31:f1:a6:4a:d2:df: 56:f9:9c:8e:09:16:f7:eb:b9:9e:d0:70:c0:c5:e9: 99:bc:a8:d8:ef:0f:a9:75:23:b2:05:90:57:91:29: 51:a3:10:96:0b:a0:62:1c:b5:eb:4f:d5:7a:43:05: 5d:59:05:fc:fd:e1:2c:e1:54:17:fa:21:c4:e6:b2: b2:02:e8:06:60:1b:9e:3d:db:2e:78:88:a7:df:b7: ed:01:2e:ef:29:5a:34:2c:c7:20:d3:b9:07:40:61: 2e:31:1a:6c:0b:dd:73:41:68:81:6f:7a:1d:8c:6a: fc:09:8f:0c:a5:ab:d0:91:76:fd:d5:4c:75:63:ed: 7a:a1:15:c8:fa:88:03:fa:9c:fc:fb:26:c4:63:8b: 7b:12:07:b5:03:e9:59:89:1d:0c:b5:71:df:14:45: c2:ea:14:1d:83:03:bb:d2:f5:2e:35:f0:00:5f:e2: d6:1a:c9:23:1f:12:5a:73:50:5e:9a:a2:95:de:15: 19:5a:26:3f:34:54:fa:4b:d0:bd:79:ee:57:a0:c8: 18:3e:5c:70:64:7c:bf:22:4d:e3:0b:af:1f:a7:28: 8b:35:e9:c6:1a:75:52:d7:6b:81:ed:1c:3f:eb:24: 5f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:84:26:D0:8F:B9:46:96:89:A9:1C:76:C8:0F:85:81:D7:66:16:01 X509v3 Authority Key Identifier: keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:63:ca:65:48:ca:ad:bd:f7:e6:38:20:83:75:5b:b9:00:e5: 72:94:07:84:82:d4:f2:e9:8d:9f:7b:2c:cd:5d:52:1e:5e:9b: 25:00:66:53:2a:56:a4:d4:93:8c:a2:fd:af:52:26:59:02:2b: 1f:12:45:23:31:75:51:a4:d6:d6:5a:fd:cb:9b:17:74:ce:c5: 96:12:a0:d4:28:ba:7e:4a:6f:75:55:26:5a:44:1f:19:cc:3a: 65:7d:6f:aa:d6:2c:05:69:f5:b8:a1:f8:93:36:5f:a3:7e:5c: 47:90:a1:ca:e4:d2:3f:9b:f2:2e:24:4e:28:7d:98:cb:b9:dd: 1f:ac:63:6d:7a:e0:95:5e:76:d2:96:97:77:41:a5:b7:6a:c0: 75:24:ba:0a:c7:b8:77:06:39:d7:de:aa:e6:c7:a3:bb:06:eb: eb:27:81:cb:bb:91:5a:17:31:24:34:55:1e:87:14:84:7c:3a: d5:80:9c:03:78:d3:89:da:a0:8d:d7:f3:2e:f3:3f:f9:a3:0f: 96:a2:a3:f4:7f:8b:f0:50:b1:38:12:a2:a8:d6:97:f6:4f:05: ca:de:cd:40:ce:37:a6:ad:b8:c5:1a:9a:c3:34:0e:e8:f3:d0: e1:72:1c:9b:c0:a7:e1:3f:47:4a:bd:cd:95:a4:30:1c:c7:2e: 98:81:35:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtyx9vHZHJAVjpWntbsXshCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NGQ2MWNkMTdlZDkyZTU0YmIzMzk3ZjFlNWE2YjM5MDRh YzZmMDUwHhcNMjUxMjMxMDUwMDU4WhcNMjYwMTAxMDUwMDU4WjAzMTEwLwYDVQQD EyhmNjg0MjZkMDhmYjk0Njk2ODlhOTFjNzZjODBmODU4MWQ3NjYxNjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qgJeD21sNnIq2J5Gv8QS7pC+dk4 zSwx8aZK0t9W+ZyOCRb367me0HDAxemZvKjY7w+pdSOyBZBXkSlRoxCWC6BiHLXr T9V6QwVdWQX8/eEs4VQX+iHE5rKyAugGYBuePdsueIin37ftAS7vKVo0LMcg07kH QGEuMRpsC91zQWiBb3odjGr8CY8MpavQkXb91Ux1Y+16oRXI+ogD+pz8+ybEY4t7 Ege1A+lZiR0MtXHfFEXC6hQdgwO70vUuNfAAX+LWGskjHxJac1BemqKV3hUZWiY/ NFT6S9C9ee5XoMgYPlxwZHy/Ik3jC68fpyiLNenGGnVS12uB7Rw/6yRfRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPaEJtCPuUaWiakcdsgPhYHXZhYBMB8GA1UdIwQY MBaAFMhNYc0X7ZLlS7M5fx5aazkErG8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGIt YzI1Nzc5MmRhZGM0LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGItYzI1Nzc5MmRhZGM0 LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGPKZUjK rb335jggg3VbuQDlcpQHhILU8umNn3sszV1SHl6bJQBmUypWpNSTjKL9r1ImWQIr HxJFIzF1UaTW1lr9y5sXdM7FlhKg1Ci6fkpvdVUmWkQfGcw6ZX1vqtYsBWn1uKH4 kzZfo35cR5ChyuTSP5vyLiROKH2Yy7ndH6xjbXrglV520paXd0Glt2rAdSS6Cse4 dwY5196q5sejuwbr6yeBy7uRWhcxJDRVHocUhHw61YCcA3jTidqgjdfzLvM/+aMP lqKj9H+L8FCxOBKiqNaX9k8Fyt7NQM43pq24xRqawzQO6PPQ4XIcm8Cn4T9HSr3N laQwHMcumIE14Q== -----END CERTIFICATE-----Generated at Wed Dec 31 08:01:52 2025 by rpki-client