This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft File: Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft (raw, json) Hash identifier: 3nz8yM6zRuGGwPjI5rl2DQkY9K8hzCWYGGtY9CVAF90= Subject key identifier: 45:E1:65:06:BE:D7:98:0A:EF:4E:49:B4:7B:7D:60:92:04:55:A6:60 Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f Certificate serial: 019B56750544F3932CE85EE8239A06A5866F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft Manifest number: 094C Signing time: Thu 25 Dec 2025 17:01:08 +0000 Manifest this update: Thu 25 Dec 2025 17:01:08 +0000 Manifest next update: Fri 26 Dec 2025 17:01:08 +0000 Files and hashes: 1: CPodE3_RIBh9_-_Q9IrXnt0jBQQ.roa (hash: +FHXKf3f9JVzV+Qw7xj+2wXQmTxWPnbFGqd+rwkbcMY=) 2: EMXYEynUntG8ll4EW5Q-6Hk40TY.roa (hash: Xpiy8GuGmhJYwB9WLtl0u6lzkUU+gwZPYmYDPQzDZdI=) 3: OikZGL2LEHpl7dY7zmLA3J5GOEE.roa (hash: M6ctsVmPoPZhMMxHtbO6g9MMFqbmRKFOMWh5oVa/f94=) 4: Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl (hash: corAeOkW3h+rrwc5PDlD+k97YcBtjsjSjSfmOnJ5Zv4=) 5: ZTkkr8A-pu4VErIYAfOwtOL1xB0.roa (hash: RCu5F9BHN+FsFu6QEVOPg1gjGcIiYWmxnihME0bALsk=) 6: aeDfOfbVztGADm5NBTaLM-YRqHs.roa (hash: 0X4nT8WQ19Et5qFSAny70J/znuk2NQeORpBaCqs4M3A=) 7: l4a3XbHOtKFp0184MdRIDU-jOxk.roa (hash: q5kFgaOF3Cv5yGAbLEZMIoShfmz2+xh9WCr6tx/KZ50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 17:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:75:05:44:f3:93:2c:e8:5e:e8:23:9a:06:a5:86:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f Validity Not Before: Dec 25 17:01:08 2025 GMT Not After : Dec 26 17:01:08 2025 GMT Subject: CN=45e16506bed7980aef4e49b47b7d60920455a660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:05:86:96:65:76:0e:7f:2d:e2:f2:35:11:a1: 1c:f8:ed:44:19:7c:e3:48:7b:22:10:48:7e:0c:8d: 62:e5:55:16:80:93:5e:46:00:b8:52:f1:af:95:fd: c0:ae:9a:d8:d6:52:c9:19:fb:47:dc:a8:97:f3:42: e0:59:8d:f8:20:be:b8:41:a0:2c:b9:c3:c9:e0:ab: ef:1b:9b:36:f6:61:53:35:88:ad:1d:aa:ad:59:c7: 3b:36:99:99:90:aa:4a:ef:c3:0f:37:59:d7:17:6b: e5:20:3c:28:02:24:b8:8b:1b:cf:75:0e:f9:23:c3: 7b:ea:ab:5f:3e:f1:b5:51:93:94:11:55:4a:63:f7: 45:ec:a6:fb:62:b7:3c:37:ff:86:06:9e:2d:a0:fb: bf:a8:d6:d7:94:36:d6:e8:c2:58:27:c3:db:f7:b4: 59:4e:38:d9:2a:41:03:4d:e6:4f:99:18:f4:89:db: a1:d6:c6:50:88:8a:cc:5e:0c:ff:e6:63:7d:36:28: 24:cf:22:ed:dc:3a:19:15:40:26:40:06:cd:83:81: 13:a6:0b:ca:7e:82:c4:03:07:63:98:94:34:3f:b1: d4:1c:dd:b1:e0:0f:05:3b:44:97:21:8b:56:9e:85: bc:2f:bf:bc:dd:49:00:0f:1f:bd:28:9e:83:2b:5f: 51:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E1:65:06:BE:D7:98:0A:EF:4E:49:B4:7B:7D:60:92:04:55:A6:60 X509v3 Authority Key Identifier: keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:4b:c5:9d:04:e8:8c:70:6f:60:6a:2e:c3:96:07:e1:7e:61: 1e:17:f4:57:83:61:08:6a:ca:e8:51:f3:ed:c9:cd:a3:de:39: 0f:d3:90:0d:b0:c1:04:12:a6:0d:3d:54:a4:a9:fa:c4:80:fa: 1e:39:1b:36:f9:73:3f:2c:bd:73:d3:c4:fa:3d:6e:1f:16:08: 10:04:d0:59:17:5e:58:6f:68:b4:df:b8:ab:47:04:5f:76:d6: 8b:3c:3c:22:29:8e:d8:6d:02:64:7a:61:da:5f:63:8a:8e:35: ea:e8:bf:d4:40:9e:0e:ae:49:d7:4e:e1:69:53:24:6e:95:53: 0b:e4:58:66:35:10:c0:ff:08:d4:44:18:70:43:5c:33:9c:dc: fe:7e:19:f7:ec:a3:2d:a1:3e:f1:99:0b:59:5f:5d:15:a8:3a: d4:54:7d:b4:c5:60:eb:c4:e1:98:30:c2:2e:3c:a3:ca:2e:be: 4f:cc:01:f9:d5:08:5c:ef:be:ab:eb:8c:70:d9:ac:6b:f0:07: 0c:12:89:6e:93:82:d5:14:29:10:ff:33:a2:ae:53:ce:e8:d6: 62:af:96:42:05:e7:46:de:d2:0d:84:21:60:6b:de:84:7a:fc: 0b:b9:3a:f1:09:a0:4d:f7:68:98:d2:1d:98:9e:5d:10:fc:5c: 31:b6:e3:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWdQVE85Ms6F7oI5oGpYZvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMmVjYzZjYzU5MDNhZWEwZGI2MTIwMGY0Y2NkNGY4MjRj ZGQ1NGYwHhcNMjUxMjI1MTcwMTA4WhcNMjUxMjI2MTcwMTA4WjAzMTEwLwYDVQQD Eyg0NWUxNjUwNmJlZDc5ODBhZWY0ZTQ5YjQ3YjdkNjA5MjA0NTVhNjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwWGlmV2Dn8t4vI1EaEc+O1EGXzj SHsiEEh+DI1i5VUWgJNeRgC4UvGvlf3ArprY1lLJGftH3KiX80LgWY34IL64QaAs ucPJ4KvvG5s29mFTNYitHaqtWcc7NpmZkKpK78MPN1nXF2vlIDwoAiS4ixvPdQ75 I8N76qtfPvG1UZOUEVVKY/dF7Kb7Yrc8N/+GBp4toPu/qNbXlDbW6MJYJ8Pb97RZ TjjZKkEDTeZPmRj0iduh1sZQiIrMXgz/5mN9NigkzyLt3DoZFUAmQAbNg4ETpgvK foLEAwdjmJQ0P7HUHN2x4A8FO0SXIYtWnoW8L7+83UkADx+9KJ6DK19RwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXhZQa+15gK705JtHt9YJIEVaZgMB8GA1UdIwQY MBaAFGIuzGzFkDrqDbYSAPTM1PgkzdVPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWk3TWJNV1FPdW9OdGhJQTlNelUtQ1ROMVU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yNjJhNGItYzcwMS00OGRjLTlhZTUt MzQ2MzY4ODI3ZTY4LzEvWWk3TWJNV1FPdW9OdGhJQTlNelUtQ1ROMVU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8yNjJhNGItYzcwMS00OGRjLTlhZTUtMzQ2MzY4ODI3ZTY4 LzEvWWk3TWJNV1FPdW9OdGhJQTlNelUtQ1ROMVU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqUvFnQTo jHBvYGouw5YH4X5hHhf0V4NhCGrK6FHz7cnNo945D9OQDbDBBBKmDT1UpKn6xID6 HjkbNvlzPyy9c9PE+j1uHxYIEATQWRdeWG9otN+4q0cEX3bWizw8IimO2G0CZHph 2l9jio416ui/1ECeDq5J107haVMkbpVTC+RYZjUQwP8I1EQYcENcM5zc/n4Z9+yj LaE+8ZkLWV9dFag61FR9tMVg68ThmDDCLjyjyi6+T8wB+dUIXO++q+uMcNmsa/AH DBKJbpOC1RQpEP8zoq5TzujWYq+WQgXnRt7SDYQhYGvehHr8C7k68QmgTfdomNId mJ5dEPxcMbbjyg== -----END CERTIFICATE-----Generated at Thu Dec 25 23:53:51 2025 by rpki-client