This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft File: yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft (raw, json) Hash identifier: vyovzV/cydt9hfQOtnio3lH1pSayh0ldXC3YyU9D3j4= Subject key identifier: 16:B9:AE:DD:D7:8A:1C:3D:67:FC:8F:00:D2:3B:5C:80:92:AE:0C:BE Authority key identifier: C8:7F:EF:B4:DB:57:46:68:0A:D6:03:69:34:66:2E:23:6C:A7:77:72 Certificate issuer: /CN=c87fefb4db5746680ad6036934662e236ca77772 Certificate serial: 019B6CFC44BCE5CB5720B41CA2A6FA9F0699 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft Manifest number: 03CD Signing time: Tue 30 Dec 2025 02:00:30 +0000 Manifest this update: Tue 30 Dec 2025 02:00:30 +0000 Manifest next update: Wed 31 Dec 2025 02:00:30 +0000 Files and hashes: 1: kwdJRuJyM2sxA3nVQ3hN_-t4yAw.roa (hash: t72IL0Bu4xhSTiCzxaWI7CqqsPyLBuuMnaHiD42pbD4=) 2: yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl (hash: pWcgww9AMHGCuvcqCRBxDmk3rPn9D4Gtpbn2i20UMws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:fc:44:bc:e5:cb:57:20:b4:1c:a2:a6:fa:9f:06:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c87fefb4db5746680ad6036934662e236ca77772 Validity Not Before: Dec 30 02:00:30 2025 GMT Not After : Dec 31 02:00:30 2025 GMT Subject: CN=16b9aeddd78a1c3d67fc8f00d23b5c8092ae0cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d6:24:24:ba:e7:e9:30:69:24:c8:21:98:ab: d3:0d:31:d7:64:b2:cc:b8:95:f8:e4:7b:6d:b4:8b: 05:73:61:45:20:de:a8:38:29:b1:64:3c:45:82:9a: ca:b0:bb:40:22:9a:4f:5d:32:23:83:1c:de:63:cf: ca:9f:f3:35:b7:dc:c2:21:81:50:09:33:a6:c2:fa: 57:ed:84:87:2a:30:27:a4:fa:4b:96:ac:b5:11:e1: 0e:77:c3:d4:23:df:ca:aa:00:ec:9a:71:ad:72:c2: c9:66:02:e2:7c:cc:ed:62:98:4a:e5:cd:5a:77:4d: c2:b9:48:2e:a8:72:28:95:43:25:55:4c:a9:bd:29: e4:87:bc:a4:d6:a7:82:ff:02:6f:e9:85:a7:94:b0: 78:b1:ba:8c:6f:83:c6:d7:0b:e3:93:b9:ec:59:ff: e5:dc:c0:7a:b6:36:18:b5:79:de:0c:1f:79:2a:b2: 8a:ba:d2:1e:ed:61:57:30:52:8f:0c:77:0c:3a:5c: 79:58:3c:9a:67:81:42:0f:2e:6f:c6:9c:22:3f:1c: 36:8f:0f:a7:92:75:2c:3c:31:ed:5d:75:41:d4:2c: ac:69:27:be:a6:23:aa:0a:e6:1a:11:35:45:ef:51: 95:8d:58:fb:c3:1e:c4:0d:9b:08:5a:de:29:ec:dc: 31:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B9:AE:DD:D7:8A:1C:3D:67:FC:8F:00:D2:3B:5C:80:92:AE:0C:BE X509v3 Authority Key Identifier: keyid:C8:7F:EF:B4:DB:57:46:68:0A:D6:03:69:34:66:2E:23:6C:A7:77:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:c2:92:3c:98:20:27:7e:f1:85:40:c8:e5:b5:e0:57:2d:93: 51:26:11:c6:3d:9d:08:3b:1f:1d:ad:28:42:58:6b:06:32:95: e4:67:1f:10:f4:0c:ad:68:00:31:04:93:f4:54:a1:65:23:ed: 64:8f:7e:ba:c8:cd:4f:ca:44:6e:73:e4:dd:f8:cc:89:6b:d7: ff:d4:e6:96:38:92:e7:2d:aa:05:48:1a:61:fa:e5:fc:aa:d8: 95:29:2a:af:8e:1a:23:60:d3:8c:99:45:38:68:76:33:dc:31: fc:5a:38:14:db:7f:ab:42:17:d3:62:fc:9a:3d:9f:a0:09:85: 75:85:cd:7c:ec:92:2e:82:c2:5e:a0:84:48:2b:3a:16:36:e6: 67:38:eb:94:ee:9a:dc:82:d2:64:fa:59:88:6a:c6:98:95:f9: db:df:28:b3:91:6e:9a:8e:24:3a:db:30:75:8f:06:4b:13:ed: 6a:94:6c:d3:5d:41:2f:6d:10:e9:4c:53:e1:38:7a:45:48:7a: 57:cf:d4:fc:9d:cd:ed:9b:54:07:3d:fa:b4:e0:52:2c:79:da: db:4e:af:6b:fd:e4:06:f0:8d:4c:d8:1e:34:73:33:e9:c1:13: 60:47:af:c5:96:a5:a2:91:1b:38:48:6b:f8:e5:8b:d6:0a:32: f0:52:bb:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZts/ES85ctXILQcoqb6nwaZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4N2ZlZmI0ZGI1NzQ2NjgwYWQ2MDM2OTM0NjYyZTIzNmNh Nzc3NzIwHhcNMjUxMjMwMDIwMDMwWhcNMjUxMjMxMDIwMDMwWjAzMTEwLwYDVQQD EygxNmI5YWVkZGQ3OGExYzNkNjdmYzhmMDBkMjNiNWM4MDkyYWUwY2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdYkJLrn6TBpJMghmKvTDTHXZLLM uJX45HtttIsFc2FFIN6oOCmxZDxFgprKsLtAIppPXTIjgxzeY8/Kn/M1t9zCIYFQ CTOmwvpX7YSHKjAnpPpLlqy1EeEOd8PUI9/KqgDsmnGtcsLJZgLifMztYphK5c1a d03CuUguqHIolUMlVUypvSnkh7yk1qeC/wJv6YWnlLB4sbqMb4PG1wvjk7nsWf/l 3MB6tjYYtXneDB95KrKKutIe7WFXMFKPDHcMOlx5WDyaZ4FCDy5vxpwiPxw2jw+n knUsPDHtXXVB1CysaSe+piOqCuYaETVF71GVjVj7wx7EDZsIWt4p7NwxDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBa5rt3Xihw9Z/yPANI7XICSrgy+MB8GA1UdIwQY MBaAFMh/77TbV0ZoCtYDaTRmLiNsp3dyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUhfdnROdFhSbWdLMWdOcE5HWXVJMnluZDNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wNzY4MzgtNTU0Ny00Yjk4LTgyYmIt Njk1MGMxY2I4ODc5LzEveUhfdnROdFhSbWdLMWdOcE5HWXVJMnluZDNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8wNzY4MzgtNTU0Ny00Yjk4LTgyYmItNjk1MGMxY2I4ODc5 LzEveUhfdnROdFhSbWdLMWdOcE5HWXVJMnluZDNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABsKSPJgg J37xhUDI5bXgVy2TUSYRxj2dCDsfHa0oQlhrBjKV5GcfEPQMrWgAMQST9FShZSPt ZI9+usjNT8pEbnPk3fjMiWvX/9TmljiS5y2qBUgaYfrl/KrYlSkqr44aI2DTjJlF OGh2M9wx/Fo4FNt/q0IX02L8mj2foAmFdYXNfOySLoLCXqCESCs6FjbmZzjrlO6a 3ILSZPpZiGrGmJX5298os5Fumo4kOtswdY8GSxPtapRs011BL20Q6UxT4Th6RUh6 V8/U/J3N7ZtUBz36tOBSLHna206va/3kBvCNTNgeNHMz6cETYEevxZalopEbOEhr +OWL1goy8FK73A== -----END CERTIFICATE-----Generated at Tue Dec 30 07:18:23 2025 by rpki-client