This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft File: yYlmC_FH9ij7fPiycYc3_qhimNA.mft (raw, json) Hash identifier: h+WTduqFXbRDTmjJ/B4YtJfnzzzdx86y3C5dtQ8us50= Subject key identifier: 45:6D:4F:70:0D:D7:2A:C5:B9:01:04:39:19:0D:EF:40:35:60:98:7F Authority key identifier: C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0 Certificate issuer: /CN=c989660bf147f628fb7cf8b2718737fea86298d0 Certificate serial: 019B446E4203D1FB7ABC55A2445DFE6A1C2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft Manifest number: 0A95 Signing time: Mon 22 Dec 2025 05:00:34 +0000 Manifest this update: Mon 22 Dec 2025 05:00:34 +0000 Manifest next update: Tue 23 Dec 2025 05:00:34 +0000 Files and hashes: 1: EdKvKktbhV253248rH8OS7KgOJc.roa (hash: OVq8FxeeYttd7uYMiCGl4rm6BCNN8JrWv82y6k+zOKs=) 2: yYlmC_FH9ij7fPiycYc3_qhimNA.crl (hash: typwDBTXuuTv7mZu34j3NHh2obSJV03V47l6rxqUWt4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 05:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:42:03:d1:fb:7a:bc:55:a2:44:5d:fe:6a:1c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c989660bf147f628fb7cf8b2718737fea86298d0 Validity Not Before: Dec 22 05:00:34 2025 GMT Not After : Dec 23 05:00:34 2025 GMT Subject: CN=456d4f700dd72ac5b9010439190def403560987f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:82:60:4b:70:8d:a1:34:24:ee:8a:f9:5e:16: ef:ac:4c:c4:93:89:f1:c1:78:b0:c6:55:be:db:6b: 7a:a3:41:5e:d9:90:38:f2:20:6e:b9:69:49:c4:5a: b5:05:69:ea:86:9d:47:fd:5f:19:02:3a:b4:3b:f3: ab:bd:f9:27:ae:cd:29:a3:78:d0:66:bc:ec:42:2d: 8e:ce:f4:9e:8e:27:14:b4:ce:2f:41:5b:dd:62:5a: 82:bb:7d:fc:24:66:9b:8b:24:98:01:5a:a2:2d:75: fe:3c:76:3e:19:44:30:f0:4d:19:f6:69:38:81:56: 5f:b5:8b:cb:2e:78:18:83:84:8f:4e:ce:de:2f:24: e0:2b:d2:f9:84:e1:90:94:7b:25:56:87:0d:ba:b1: 0a:b1:b6:7d:a6:50:d9:af:7c:af:f0:62:79:c5:4c: b9:15:0a:9b:69:ad:72:e4:f7:5b:c0:1b:ba:85:45: 42:11:b0:3b:1f:43:fb:a9:7a:e9:f2:49:23:ea:8a: d4:21:0a:74:ea:17:8e:4b:71:f8:99:57:01:31:29: 8d:36:c3:9a:91:a9:13:13:42:78:e7:ff:c2:2b:9a: 78:c0:33:a3:6f:93:a9:f6:de:ed:6f:2b:4a:f7:55: fa:84:5c:46:ab:5e:b7:4a:75:55:1c:18:dd:32:b0: 9b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6D:4F:70:0D:D7:2A:C5:B9:01:04:39:19:0D:EF:40:35:60:98:7F X509v3 Authority Key Identifier: keyid:C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:f7:81:4e:a4:03:74:bf:b9:80:61:08:cb:fa:d7:70:72:b1: 06:be:4e:1c:d1:02:a4:1b:96:f5:67:03:14:1f:32:b8:f0:61: 19:7f:29:ae:31:5d:6c:b9:52:7e:98:04:5a:2d:d3:bb:c3:3c: 9f:22:b0:3f:13:ae:38:21:39:e8:d0:8a:c0:73:c6:4d:fe:6a: d8:39:e9:85:a5:c2:aa:60:fa:5d:c1:a6:aa:42:58:fb:82:16: 97:fb:e2:c3:26:45:e0:e1:26:97:28:52:b4:10:99:4f:2f:3f: 26:c4:8c:e9:90:35:d1:50:47:f8:09:58:d4:3e:1b:3e:82:95: 23:6a:3c:6f:b1:81:13:c7:d9:81:a9:3a:de:8f:81:5d:aa:49: 3a:94:56:b4:3c:af:50:24:25:38:f7:ab:84:09:8b:05:c6:c4: fd:71:00:99:d0:98:a9:2c:8f:6c:32:5a:ac:a8:2b:32:7c:26: 89:3f:3d:f8:9d:8d:f9:e7:78:92:fa:97:5b:e1:72:47:26:64: 4d:89:9e:e6:ec:17:9c:8d:9d:29:21:0e:89:0a:cb:54:69:1a: 45:07:ec:04:1f:3c:6f:6b:8d:a3:96:b1:87:0a:5b:2a:7f:54: c0:07:67:9a:19:76:1e:79:2c:4b:ca:b6:44:7d:b9:fd:63:1e: 5e:6d:c4:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbkID0ft6vFWiRF3+ahwsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ODk2NjBiZjE0N2Y2MjhmYjdjZjhiMjcxODczN2ZlYTg2 Mjk4ZDAwHhcNMjUxMjIyMDUwMDM0WhcNMjUxMjIzMDUwMDM0WjAzMTEwLwYDVQQD Eyg0NTZkNGY3MDBkZDcyYWM1YjkwMTA0MzkxOTBkZWY0MDM1NjA5ODdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIJgS3CNoTQk7or5XhbvrEzEk4nx wXiwxlW+22t6o0Fe2ZA48iBuuWlJxFq1BWnqhp1H/V8ZAjq0O/Orvfknrs0po3jQ ZrzsQi2OzvSejicUtM4vQVvdYlqCu338JGabiySYAVqiLXX+PHY+GUQw8E0Z9mk4 gVZftYvLLngYg4SPTs7eLyTgK9L5hOGQlHslVocNurEKsbZ9plDZr3yv8GJ5xUy5 FQqbaa1y5PdbwBu6hUVCEbA7H0P7qXrp8kkj6orUIQp06heOS3H4mVcBMSmNNsOa kakTE0J45//CK5p4wDOjb5Op9t7tbytK91X6hFxGq163SnVVHBjdMrCboQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEVtT3AN1yrFuQEEORkN70A1YJh/MB8GA1UdIwQY MBaAFMmJZgvxR/Yo+3z4snGHN/6oYpjQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVlsbUNfRkg5aWo3ZlBpeWNZYzNfcWhpbU5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82ZjAzOTItOGE4NS00N2FiLTg3NDYt YzE5ODY1M2FhYzVmLzEveVlsbUNfRkg5aWo3ZlBpeWNZYzNfcWhpbU5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy82ZjAzOTItOGE4NS00N2FiLTg3NDYtYzE5ODY1M2FhYzVm LzEveVlsbUNfRkg5aWo3ZlBpeWNZYzNfcWhpbU5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPeBTqQD dL+5gGEIy/rXcHKxBr5OHNECpBuW9WcDFB8yuPBhGX8prjFdbLlSfpgEWi3Tu8M8 nyKwPxOuOCE56NCKwHPGTf5q2DnphaXCqmD6XcGmqkJY+4IWl/viwyZF4OEmlyhS tBCZTy8/JsSM6ZA10VBH+AlY1D4bPoKVI2o8b7GBE8fZgak63o+BXapJOpRWtDyv UCQlOPerhAmLBcbE/XEAmdCYqSyPbDJarKgrMnwmiT89+J2N+ed4kvqXW+FyRyZk TYme5uwXnI2dKSEOiQrLVGkaRQfsBB88b2uNo5axhwpbKn9UwAdnmhl2HnksS8q2 RH25/WMeXm3Ehw== -----END CERTIFICATE-----Generated at Mon Dec 22 09:53:56 2025 by rpki-client