This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft File: _ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft (raw, json) Hash identifier: ED8d3tkF91izAXWicv6crpympgG0xEYQ4hhll8aPeQ0= Subject key identifier: E8:56:23:C5:8F:D2:25:7E:01:D6:3F:CB:37:E6:B2:7D:0E:2B:18:77 Authority key identifier: FF:2A:50:EE:DF:E7:80:40:20:9D:6C:0A:B9:5F:83:B5:46:03:98:DD Certificate issuer: /CN=ff2a50eedfe78040209d6c0ab95f83b5460398dd Certificate serial: 019B5073359CB5ECA1B528DF579101D6653A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 13:01:26 +0000 Manifest this update: Wed 24 Dec 2025 13:01:26 +0000 Manifest next update: Thu 25 Dec 2025 13:01:26 +0000 Files and hashes: 1: O8Js1mgAF0iv_PSwJLDMH2LqzNs.roa (hash: uCecidRlrlebYe8zpAxIMGUV7GE/OrG+H65AT04t1PQ=) 2: _ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl (hash: me9e+KGy3RylpFj6EuDoNRxcHW7lKQaxhRdRepXuqXU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 13:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:73:35:9c:b5:ec:a1:b5:28:df:57:91:01:d6:65:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff2a50eedfe78040209d6c0ab95f83b5460398dd Validity Not Before: Dec 24 13:01:26 2025 GMT Not After : Dec 25 13:01:26 2025 GMT Subject: CN=e85623c58fd2257e01d63fcb37e6b27d0e2b1877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:b9:e1:2c:ee:56:08:4e:aa:69:23:bb:51:b8: ce:f5:07:d7:fb:f7:a0:38:3f:6e:74:bf:5a:fd:c3: 44:b3:28:ea:15:7f:8a:ad:4a:90:36:fb:64:bb:a2: a2:a6:62:ee:3c:44:86:36:9f:00:de:31:cb:78:60: 80:7d:ef:3a:4a:94:37:3e:4a:3a:e7:d0:4d:78:34: e1:11:15:d4:d9:7a:bb:0d:fd:79:28:c4:fb:7c:47: 82:a6:2c:1d:3a:b9:63:b9:4c:a8:5a:58:3c:43:49: 30:2b:01:8f:cd:80:f0:f0:48:6e:bf:d9:16:6a:7d: a4:51:d7:21:64:b5:b8:13:5c:fe:f2:2a:7c:c6:c4: 80:e7:28:48:89:c2:8f:f1:ac:01:d7:9a:3b:0f:e4: 85:20:55:c5:ec:5b:54:9a:9d:ab:04:fd:4b:1c:51: 4a:09:ea:d8:c7:9f:bf:46:98:a7:13:48:ba:f6:f0: 49:3f:19:58:33:ed:c1:08:06:09:9f:00:dd:ba:60: 17:db:ce:a3:ff:07:e8:c0:89:d7:00:a8:40:4e:2e: 3a:1c:ce:71:a4:b9:5e:97:7f:e6:5b:12:ca:90:89: 1c:ce:03:11:96:b0:c0:7f:a6:3e:64:66:4b:5f:fd: 26:df:51:46:4e:99:11:8c:23:37:a8:a8:75:40:e3: 0c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:56:23:C5:8F:D2:25:7E:01:D6:3F:CB:37:E6:B2:7D:0E:2B:18:77 X509v3 Authority Key Identifier: keyid:FF:2A:50:EE:DF:E7:80:40:20:9D:6C:0A:B9:5F:83:B5:46:03:98:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:93:04:62:f1:33:83:17:9b:e9:b4:5c:62:f9:d5:3a:0f:d6: d2:6c:86:44:ab:2f:3e:c9:43:a7:1f:e1:42:09:22:a0:b6:90: 3d:88:8d:f7:3b:cd:6c:84:6b:99:ff:7a:55:30:2d:c4:bd:35: 22:47:28:62:be:3c:29:92:70:6b:37:be:7f:30:f6:68:59:b9: b3:a1:ed:d3:2a:26:5c:1d:d8:59:7e:eb:23:63:cf:70:b6:9a: b0:b5:7c:75:75:f5:f4:1a:45:a2:59:4f:c2:5b:29:5b:c4:cd: 8f:81:64:54:e7:d0:02:73:b3:e3:7b:5d:68:1a:02:bf:a9:33: 35:4a:b0:ff:11:9f:34:af:6b:cf:09:d1:0d:dc:c0:dd:62:8b: f9:13:d3:0c:63:0c:35:84:81:ec:ac:3e:37:a0:6c:6b:03:2b: c6:81:1c:e4:2d:0e:41:fe:15:36:c8:30:a8:35:e1:b9:47:6b: 60:b1:3a:dd:23:5e:ef:6d:55:9a:48:99:11:96:4e:4f:fc:30: 8d:f7:8a:0c:d5:cd:01:55:af:e2:3c:6c:97:8c:c5:53:da:6e: 03:c7:df:2e:c0:7a:21:84:1e:1b:ff:8d:21:cd:98:aa:08:df: a0:bd:ef:ac:b6:f0:f2:f8:c8:c7:8d:52:43:2b:ca:e0:6e:92: e1:4f:80:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQczWcteyhtSjfV5EB1mU6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMmE1MGVlZGZlNzgwNDAyMDlkNmMwYWI5NWY4M2I1NDYw Mzk4ZGQwHhcNMjUxMjI0MTMwMTI2WhcNMjUxMjI1MTMwMTI2WjAzMTEwLwYDVQQD EyhlODU2MjNjNThmZDIyNTdlMDFkNjNmY2IzN2U2YjI3ZDBlMmIxODc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9rnhLO5WCE6qaSO7UbjO9QfX+/eg OD9udL9a/cNEsyjqFX+KrUqQNvtku6KipmLuPESGNp8A3jHLeGCAfe86SpQ3Pko6 59BNeDThERXU2Xq7Df15KMT7fEeCpiwdOrljuUyoWlg8Q0kwKwGPzYDw8Ehuv9kW an2kUdchZLW4E1z+8ip8xsSA5yhIicKP8awB15o7D+SFIFXF7FtUmp2rBP1LHFFK CerYx5+/RpinE0i69vBJPxlYM+3BCAYJnwDdumAX286j/wfowInXAKhATi46HM5x pLlel3/mWxLKkIkczgMRlrDAf6Y+ZGZLX/0m31FGTpkRjCM3qKh1QOMMyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhWI8WP0iV+AdY/yzfmsn0OKxh3MB8GA1UdIwQY MBaAFP8qUO7f54BAIJ1sCrlfg7VGA5jdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3lwUTd0X25nRUFnbld3S3VWLUR0VVlEbU4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8wMTdmODktOTEzMC00YTRlLTg1NDct ZjNiOTc0MWQxZDRmLzEvX3lwUTd0X25nRUFnbld3S3VWLUR0VVlEbU4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8wMTdmODktOTEzMC00YTRlLTg1NDctZjNiOTc0MWQxZDRm LzEvX3lwUTd0X25nRUFnbld3S3VWLUR0VVlEbU4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZMEYvEz gxeb6bRcYvnVOg/W0myGRKsvPslDpx/hQgkioLaQPYiN9zvNbIRrmf96VTAtxL01 IkcoYr48KZJwaze+fzD2aFm5s6Ht0yomXB3YWX7rI2PPcLaasLV8dXX19BpFollP wlspW8TNj4FkVOfQAnOz43tdaBoCv6kzNUqw/xGfNK9rzwnRDdzA3WKL+RPTDGMM NYSB7Kw+N6BsawMrxoEc5C0OQf4VNsgwqDXhuUdrYLE63SNe721VmkiZEZZOT/ww jfeKDNXNAVWv4jxsl4zFU9puA8ffLsB6IYQeG/+NIc2YqgjfoL3vrLbw8vjIx41S QyvK4G6S4U+A9g== -----END CERTIFICATE-----Generated at Wed Dec 24 21:35:37 2025 by rpki-client