This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft File: Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft (raw, json) Hash identifier: f7DfQAWjHIbM4HhBZ6MLEVO/8redFvwTe8u31Ry85LM= Subject key identifier: 7A:1B:5B:91:56:93:B6:2B:62:74:0F:CA:BF:C2:B7:E0:BB:5F:80:92 Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f Certificate serial: 019B3B6B9742AC287973652C90007BD7F8D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft Manifest number: 093E Signing time: Sat 20 Dec 2025 11:01:05 +0000 Manifest this update: Sat 20 Dec 2025 11:01:05 +0000 Manifest next update: Sun 21 Dec 2025 11:01:05 +0000 Files and hashes: 1: CPodE3_RIBh9_-_Q9IrXnt0jBQQ.roa (hash: +FHXKf3f9JVzV+Qw7xj+2wXQmTxWPnbFGqd+rwkbcMY=) 2: EMXYEynUntG8ll4EW5Q-6Hk40TY.roa (hash: Xpiy8GuGmhJYwB9WLtl0u6lzkUU+gwZPYmYDPQzDZdI=) 3: OikZGL2LEHpl7dY7zmLA3J5GOEE.roa (hash: M6ctsVmPoPZhMMxHtbO6g9MMFqbmRKFOMWh5oVa/f94=) 4: Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl (hash: Ewe/TDC4QFY30QjpwmPRrZzzOW09mfElaD2c5F6/pj4=) 5: ZTkkr8A-pu4VErIYAfOwtOL1xB0.roa (hash: RCu5F9BHN+FsFu6QEVOPg1gjGcIiYWmxnihME0bALsk=) 6: aeDfOfbVztGADm5NBTaLM-YRqHs.roa (hash: 0X4nT8WQ19Et5qFSAny70J/znuk2NQeORpBaCqs4M3A=) 7: l4a3XbHOtKFp0184MdRIDU-jOxk.roa (hash: q5kFgaOF3Cv5yGAbLEZMIoShfmz2+xh9WCr6tx/KZ50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:97:42:ac:28:79:73:65:2c:90:00:7b:d7:f8:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f Validity Not Before: Dec 20 11:01:05 2025 GMT Not After : Dec 21 11:01:05 2025 GMT Subject: CN=7a1b5b915693b62b62740fcabfc2b7e0bb5f8092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b7:47:b7:6a:7f:db:cf:c3:08:ef:0b:a5:89: ff:e7:ab:14:b1:d9:b9:70:f8:77:bc:fe:2b:3a:91: 34:87:68:d6:7e:94:53:10:51:95:bb:5a:2d:3f:2d: 54:45:48:03:b3:7c:26:f8:62:5a:ca:50:2c:6e:57: 60:c3:1a:21:a9:c4:b7:29:97:01:b7:3a:ad:03:7c: 20:7e:3a:97:b2:26:d3:bb:05:dd:e8:26:a2:5a:00: ef:47:30:df:6b:c9:b3:65:7e:7c:cf:94:06:d0:9a: 8b:8c:9f:1c:9b:77:3e:20:6a:a5:d5:1b:f3:78:24: f4:10:e2:4c:45:30:6b:a7:33:e4:47:e9:02:e3:22: 5a:d4:dc:ad:68:1b:e3:e1:34:94:79:ae:af:ba:44: c6:72:e3:95:11:49:05:7e:1d:69:50:bc:f0:3d:bc: ed:fb:78:96:c1:c7:07:b5:4f:88:42:8e:7f:3c:40: a2:47:07:ce:a8:e2:e2:f0:fa:0c:e1:41:86:0d:23: 6a:a0:d4:0e:66:e6:18:8f:a3:3a:72:8f:5a:1e:d5: b1:86:aa:62:c7:38:48:15:38:fb:f7:ab:99:c9:9b: fd:34:ad:b7:a0:67:13:3d:d0:69:50:8d:59:ba:03: a2:0c:11:15:9d:45:f1:11:49:45:d4:47:b3:b4:1e: 1f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:1B:5B:91:56:93:B6:2B:62:74:0F:CA:BF:C2:B7:E0:BB:5F:80:92 X509v3 Authority Key Identifier: keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:90:48:c9:2f:2b:24:cc:f7:c5:d7:4f:a7:f6:0e:3d:aa:22: e8:fd:b8:6a:74:24:16:a1:26:64:3b:15:77:19:30:5d:5f:c7: 02:03:6a:62:08:1c:73:d4:4d:3c:33:1a:cb:09:c8:08:40:fe: bd:8f:d4:79:0c:fd:8a:98:7e:fc:e9:f6:67:21:02:4d:7b:1c: af:36:3b:ed:3e:1a:be:f0:f1:4b:6a:79:59:86:a6:90:32:2c: 7b:a2:d6:2f:f5:d5:ee:68:b2:94:87:47:59:ba:d4:4a:78:b1: 96:30:c0:1d:7e:a0:8a:96:01:e8:a1:3c:ef:fc:ec:06:9a:cf: ff:f2:6b:ef:49:3c:d5:1f:93:12:03:a6:9b:af:8b:1d:3b:e0: b3:37:6d:fc:62:ea:44:4d:fc:6e:3c:50:c9:e2:d5:a8:cc:4a: fc:aa:ea:ce:2a:14:4a:f8:86:36:af:99:c8:92:6d:d1:2a:32: e0:1b:25:d2:bc:9b:9a:e5:d1:8d:89:05:82:18:80:a4:6c:19: 37:1c:b9:60:44:39:62:f7:1e:cf:eb:bb:2e:d2:ae:bd:95:1f: bc:58:7a:55:c8:8a:7c:dd:4c:64:5d:72:5a:db:83:dc:6f:cf: ae:19:16:ee:a3:63:aa:ec:76:c6:b8:d3:50:a7:ae:2c:71:fb: 35:6d:f7:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a5dCrCh5c2UskAB71/jVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMmVjYzZjYzU5MDNhZWEwZGI2MTIwMGY0Y2NkNGY4MjRj ZGQ1NGYwHhcNMjUxMjIwMTEwMTA1WhcNMjUxMjIxMTEwMTA1WjAzMTEwLwYDVQQD Eyg3YTFiNWI5MTU2OTNiNjJiNjI3NDBmY2FiZmMyYjdlMGJiNWY4MDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLdHt2p/28/DCO8LpYn/56sUsdm5 cPh3vP4rOpE0h2jWfpRTEFGVu1otPy1URUgDs3wm+GJaylAsbldgwxohqcS3KZcB tzqtA3wgfjqXsibTuwXd6CaiWgDvRzDfa8mzZX58z5QG0JqLjJ8cm3c+IGql1Rvz eCT0EOJMRTBrpzPkR+kC4yJa1NytaBvj4TSUea6vukTGcuOVEUkFfh1pULzwPbzt +3iWwccHtU+IQo5/PECiRwfOqOLi8PoM4UGGDSNqoNQOZuYYj6M6co9aHtWxhqpi xzhIFTj796uZyZv9NK23oGcTPdBpUI1ZugOiDBEVnUXxEUlF1EeztB4fZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHobW5FWk7YrYnQPyr/Ct+C7X4CSMB8GA1UdIwQY MBaAFGIuzGzFkDrqDbYSAPTM1PgkzdVPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWk3TWJNV1FPdW9OdGhJQTlNelUtQ1ROMVU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yNjJhNGItYzcwMS00OGRjLTlhZTUt MzQ2MzY4ODI3ZTY4LzEvWWk3TWJNV1FPdW9OdGhJQTlNelUtQ1ROMVU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8yNjJhNGItYzcwMS00OGRjLTlhZTUtMzQ2MzY4ODI3ZTY4 LzEvWWk3TWJNV1FPdW9OdGhJQTlNelUtQ1ROMVU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZBIyS8r JMz3xddPp/YOPaoi6P24anQkFqEmZDsVdxkwXV/HAgNqYggcc9RNPDMaywnICED+ vY/UeQz9iph+/On2ZyECTXscrzY77T4avvDxS2p5WYamkDIse6LWL/XV7miylIdH WbrUSnixljDAHX6gipYB6KE87/zsBprP//Jr70k81R+TEgOmm6+LHTvgszdt/GLq RE38bjxQyeLVqMxK/KrqzioUSviGNq+ZyJJt0Soy4Bsl0rybmuXRjYkFghiApGwZ Nxy5YEQ5Yvcez+u7LtKuvZUfvFh6VciKfN1MZF1yWtuD3G/PrhkW7qNjqux2xrjT UKeuLHH7NW33YA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:55:04 2025 by rpki-client