This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft File: yciBJHytvL9SqirXYsx0VKeocm4.mft (raw, json) Hash identifier: it1/IhD5wSkAV9gF5DpeP8RCRLrxE7dsSVq1NwOYAWg= Subject key identifier: AD:1B:E4:7E:FD:24:22:A1:67:8F:A9:32:31:AF:7F:05:F7:31:2E:70 Authority key identifier: C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E Certificate issuer: /CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e Certificate serial: 019B5E2E4D60FDFE04F0FEE919F60983F23B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft Manifest number: 1660 Signing time: Sat 27 Dec 2025 05:00:51 +0000 Manifest this update: Sat 27 Dec 2025 05:00:51 +0000 Manifest next update: Sun 28 Dec 2025 05:00:51 +0000 Files and hashes: 1: jOZRDN_BFHgGfDMvwJ0jkJTVBko.roa (hash: v7urVrLJEvfyeck+EYvOP/ZepjN99wS4T6ZKWFITJzs=) 2: yciBJHytvL9SqirXYsx0VKeocm4.crl (hash: D1YO415sru6FMYbSgMDQoHK8Cv5EosA23TlpM3LyTfw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 05:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:2e:4d:60:fd:fe:04:f0:fe:e9:19:f6:09:83:f2:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e Validity Not Before: Dec 27 05:00:51 2025 GMT Not After : Dec 28 05:00:51 2025 GMT Subject: CN=ad1be47efd2422a1678fa93231af7f05f7312e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:72:36:84:e1:a5:89:f4:be:e6:bf:79:ce:a4: 08:2e:dd:fe:23:5e:e1:42:c9:69:0b:20:94:55:06: c3:a7:9d:2c:66:5b:6c:bd:5a:05:2d:ac:89:b1:94: 47:be:05:36:68:82:2b:0d:f1:37:ba:15:88:bb:f8: 5d:20:4d:26:4d:e3:b7:47:84:34:6a:26:7b:de:36: 1c:9b:ed:b3:6c:54:0b:24:b4:6b:f7:0e:2e:70:2e: ea:79:01:00:55:ab:a0:ce:c3:87:46:17:45:ab:50: 34:b5:01:f3:f9:aa:03:59:0b:cd:30:48:85:79:65: 3c:c9:12:b3:20:7f:c5:7e:76:90:67:0c:91:76:9d: b7:e0:92:f4:5a:71:b8:1a:26:af:1e:92:f4:df:eb: 6e:18:99:40:04:cd:26:da:09:e8:74:3b:3d:16:58: 91:5b:5a:e8:e8:6b:28:9d:62:90:d2:6f:40:3b:3e: ca:2a:bf:f4:db:2d:94:44:ea:27:7b:a6:54:f1:99: cb:e8:7a:ea:86:47:4f:0e:55:1d:e1:75:c3:7c:0c: 16:52:09:b1:c3:29:66:2e:ee:51:23:7e:89:9b:81: ae:72:83:24:7b:31:05:be:9b:e5:ca:05:6d:67:4b: 95:88:c8:33:61:fc:fb:1b:c2:ba:a1:c4:53:1e:77: a6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:1B:E4:7E:FD:24:22:A1:67:8F:A9:32:31:AF:7F:05:F7:31:2E:70 X509v3 Authority Key Identifier: keyid:C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:e4:f6:24:93:08:e8:79:fb:be:33:9f:b3:bd:39:18:cb:52: 13:1f:f1:84:11:fa:68:83:f3:50:ca:dc:f0:55:17:b5:04:c8: b4:1a:a5:04:53:84:30:4f:f5:ff:59:ac:ec:64:77:e4:08:c4: 53:28:c2:b4:8c:49:a8:07:26:6a:28:33:a1:fd:b0:27:73:98: 72:59:64:30:81:56:df:ac:3c:74:89:0a:84:8b:5b:75:61:6b: c9:a3:af:a7:6e:29:e7:2a:99:fc:ea:49:cf:4f:f9:3f:97:f5: f3:1e:e6:65:da:98:57:02:0f:48:0d:4d:56:0e:a9:c3:31:3b: 4d:f7:38:0b:29:5b:76:8c:d1:63:fd:7b:8a:90:d0:88:6b:b0: dc:2d:13:4e:bd:cc:2b:73:84:c9:44:3f:60:49:d0:8a:fd:fc: 7f:e2:c2:5e:26:83:f8:17:e9:92:4d:15:98:38:a4:99:b1:32: 18:9f:b8:1c:e6:9e:8f:fd:07:a3:80:37:c2:9d:e9:5f:3b:bd: 6c:a2:73:5d:44:09:cd:6e:07:e3:f9:74:9b:89:93:75:03:7c: 67:6c:4a:3a:9e:ed:1f:30:ee:fb:9b:03:f3:25:93:8d:ee:d4: 5e:95:85:a3:02:c6:d0:ab:96:27:80:17:7b:cf:cc:a3:b9:7b: da:32:33:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZteLk1g/f4E8P7pGfYJg/I7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5Yzg4MTI0N2NhZGJjYmY1MmFhMmFkNzYyY2M3NDU0YTdh ODcyNmUwHhcNMjUxMjI3MDUwMDUxWhcNMjUxMjI4MDUwMDUxWjAzMTEwLwYDVQQD EyhhZDFiZTQ3ZWZkMjQyMmExNjc4ZmE5MzIzMWFmN2YwNWY3MzEyZTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHI2hOGlifS+5r95zqQILt3+I17h QslpCyCUVQbDp50sZltsvVoFLayJsZRHvgU2aIIrDfE3uhWIu/hdIE0mTeO3R4Q0 aiZ73jYcm+2zbFQLJLRr9w4ucC7qeQEAVaugzsOHRhdFq1A0tQHz+aoDWQvNMEiF eWU8yRKzIH/FfnaQZwyRdp234JL0WnG4GiavHpL03+tuGJlABM0m2gnodDs9FliR W1ro6GsonWKQ0m9AOz7KKr/02y2UROone6ZU8ZnL6HrqhkdPDlUd4XXDfAwWUgmx wylmLu5RI36Jm4GucoMkezEFvpvlygVtZ0uViMgzYfz7G8K6ocRTHnem5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0b5H79JCKhZ4+pMjGvfwX3MS5wMB8GA1UdIwQY MBaAFMnIgSR8rby/Uqoq12LMdFSnqHJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWNpQkpIeXR2TDlTcWlyWFlzeDBWS2VvY200LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZDZiNTMtOTVhOS00ZDYwLWI0NmQt N2VmZTkwNWZmMjkxLzEveWNpQkpIeXR2TDlTcWlyWFlzeDBWS2VvY200Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi82ZDZiNTMtOTVhOS00ZDYwLWI0NmQtN2VmZTkwNWZmMjkx LzEveWNpQkpIeXR2TDlTcWlyWFlzeDBWS2VvY200LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr+T2JJMI 6Hn7vjOfs705GMtSEx/xhBH6aIPzUMrc8FUXtQTItBqlBFOEME/1/1ms7GR35AjE UyjCtIxJqAcmaigzof2wJ3OYcllkMIFW36w8dIkKhItbdWFryaOvp24p5yqZ/OpJ z0/5P5f18x7mZdqYVwIPSA1NVg6pwzE7Tfc4CylbdozRY/17ipDQiGuw3C0TTr3M K3OEyUQ/YEnQiv38f+LCXiaD+Bfpkk0VmDikmbEyGJ+4HOaej/0Ho4A3wp3pXzu9 bKJzXUQJzW4H4/l0m4mTdQN8Z2xKOp7tHzDu+5sD8yWTje7UXpWFowLG0KuWJ4AX e8/Mo7l72jIz5w== -----END CERTIFICATE-----Generated at Sat Dec 27 10:50:07 2025 by rpki-client