This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft File: YiJ2252bNM3sJiDHJX3FrUrrgy0.mft (raw, json) Hash identifier: APRnibk99l12ubPLHVyyFTjyvB4AKKt6+UiabF1fXAk= Subject key identifier: A7:0F:08:03:D9:B0:97:EE:C0:C1:F2:83:B9:E9:2F:AD:D6:89:2D:F4 Authority key identifier: 62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D Certificate issuer: /CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d Certificate serial: 019B3DFEE4CF4303C709AB55CEAA16172ADD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 23:01:13 +0000 Manifest this update: Sat 20 Dec 2025 23:01:13 +0000 Manifest next update: Sun 21 Dec 2025 23:01:13 +0000 Files and hashes: 1: XCar8SNrGHj7mUVHaBXEnUvq1KY.roa (hash: p4pcecBBeg+02FW19VP+ZJ5O31/pLj9QyP3szv9c6Sg=) 2: YiJ2252bNM3sJiDHJX3FrUrrgy0.crl (hash: TMHQzEeI0UCqcV16i++/a1Zbq2M0Cs0IAv3y679abQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:e4:cf:43:03:c7:09:ab:55:ce:aa:16:17:2a:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d Validity Not Before: Dec 20 23:01:13 2025 GMT Not After : Dec 21 23:01:13 2025 GMT Subject: CN=a70f0803d9b097eec0c1f283b9e92fadd6892df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e1:71:15:c9:0e:aa:53:ce:27:a6:e0:be:43: 50:c7:66:26:16:5e:8e:56:6e:e7:ba:ab:92:b1:cd: 92:b8:74:e8:9f:98:6a:2a:ae:98:7d:43:7c:d4:ad: 82:da:66:a0:27:d7:fd:44:36:19:83:19:32:57:fe: 34:03:6e:26:54:22:0f:4e:cb:28:36:c3:1f:ba:7f: 1e:e7:21:9e:28:ca:dd:2e:87:c5:ef:81:f1:44:23: bc:a6:ea:03:7b:aa:6c:e7:ff:96:a7:2c:0c:92:ec: 21:85:d9:41:83:36:2b:a4:29:11:8c:66:48:e4:e0: a5:b5:6d:54:f8:6c:9a:13:3a:17:ae:82:7a:88:1b: e5:96:0e:83:8c:60:34:67:55:36:fe:57:e2:72:d4: 6e:f7:5f:db:a1:f8:d1:c6:0a:f0:34:67:85:d6:bd: 39:6e:58:ff:ca:63:12:c4:e9:8a:63:a7:d5:db:26: 76:e8:2f:79:3e:18:e6:4d:d6:64:75:26:73:0f:9c: cf:bf:d0:18:c1:19:0b:51:a8:67:c8:c1:a7:3b:5c: 04:97:52:24:be:f4:12:4d:03:5a:ff:ae:bb:ce:9b: cd:74:d3:21:81:54:e0:c7:d6:20:f5:5d:65:39:9e: 37:61:5e:86:19:de:9c:48:f9:04:08:be:a4:1c:90: 22:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:0F:08:03:D9:B0:97:EE:C0:C1:F2:83:B9:E9:2F:AD:D6:89:2D:F4 X509v3 Authority Key Identifier: keyid:62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:5a:7b:9a:58:ba:25:fd:73:89:19:5e:56:54:a4:9c:2f:76: 1f:34:2c:ad:6e:db:54:eb:4c:88:9b:af:6c:66:26:8d:93:70: 3e:06:c3:67:21:0a:36:91:8e:fc:40:13:ca:e5:c1:de:33:d6: 5c:fe:8e:47:8b:72:d1:2b:02:68:90:d8:a6:64:65:d3:29:f1: 8a:8c:24:5e:9c:48:dc:3d:ed:1f:3b:e0:85:01:f9:4f:53:12: c1:00:97:b8:8d:d8:e6:08:60:e7:e7:eb:4d:24:24:8e:a7:0a: 1e:9c:4e:5a:22:40:9d:33:e5:66:ea:7b:40:05:57:5a:93:ec: e1:68:13:e9:62:19:66:03:f2:36:04:26:ca:ae:49:a6:06:f7: b5:cc:ad:86:a2:bd:af:52:87:38:89:80:66:ea:33:8d:54:a4: 44:09:3b:d5:1d:82:96:0c:7e:d9:31:49:51:3f:b7:25:3f:ce: c7:e9:fd:53:3a:bc:fd:b3:90:fe:9e:d9:f6:7b:a3:70:80:52: ce:a6:d9:0a:cc:a9:0c:12:11:b6:02:4a:b4:3c:1c:10:0d:09: 47:ee:b5:b9:43:9e:b5:4b:f5:1b:bf:b9:a3:cf:53:6d:95:21: 55:d9:c7:4d:cb:4a:75:63:05:f6:2d:61:93:c4:c4:61:24:44: 73:97:4b:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/uTPQwPHCatVzqoWFyrdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjI3NmRiOWQ5YjM0Y2RlYzI2MjBjNzI1N2RjNWFkNGFl YjgzMmQwHhcNMjUxMjIwMjMwMTEzWhcNMjUxMjIxMjMwMTEzWjAzMTEwLwYDVQQD EyhhNzBmMDgwM2Q5YjA5N2VlYzBjMWYyODNiOWU5MmZhZGQ2ODkyZGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OFxFckOqlPOJ6bgvkNQx2YmFl6O Vm7nuquSsc2SuHTon5hqKq6YfUN81K2C2magJ9f9RDYZgxkyV/40A24mVCIPTsso NsMfun8e5yGeKMrdLofF74HxRCO8puoDe6ps5/+WpywMkuwhhdlBgzYrpCkRjGZI 5OCltW1U+GyaEzoXroJ6iBvllg6DjGA0Z1U2/lfictRu91/bofjRxgrwNGeF1r05 blj/ymMSxOmKY6fV2yZ26C95PhjmTdZkdSZzD5zPv9AYwRkLUahnyMGnO1wEl1Ik vvQSTQNa/667zpvNdNMhgVTgx9Yg9V1lOZ43YV6GGd6cSPkECL6kHJAiywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcPCAPZsJfuwMHyg7npL63WiS30MB8GA1UdIwQY MBaAFGIidtudmzTN7CYgxyV9xa1K64MtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlKMjI1MmJOTTNzSmlESEpYM0ZyVXJyZ3kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84N2FhM2QtY2E1ZS00NTEzLWFhOWUt ZTZlZTU4MzRjOTk1LzEvWWlKMjI1MmJOTTNzSmlESEpYM0ZyVXJyZ3kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC84N2FhM2QtY2E1ZS00NTEzLWFhOWUtZTZlZTU4MzRjOTk1 LzEvWWlKMjI1MmJOTTNzSmlESEpYM0ZyVXJyZ3kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClp7mli6 Jf1ziRleVlSknC92HzQsrW7bVOtMiJuvbGYmjZNwPgbDZyEKNpGO/EATyuXB3jPW XP6OR4ty0SsCaJDYpmRl0ynxiowkXpxI3D3tHzvghQH5T1MSwQCXuI3Y5ghg5+fr TSQkjqcKHpxOWiJAnTPlZup7QAVXWpPs4WgT6WIZZgPyNgQmyq5Jpgb3tcythqK9 r1KHOImAZuozjVSkRAk71R2Clgx+2TFJUT+3JT/Ox+n9Uzq8/bOQ/p7Z9nujcIBS zqbZCsypDBIRtgJKtDwcEA0JR+61uUOetUv1G7+5o89TbZUhVdnHTctKdWMF9i1h k8TEYSREc5dL9Q== -----END CERTIFICATE-----Generated at Sun Dec 21 06:16:58 2025 by rpki-client