This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft File: yND8glkHXNZ18xnXr0-nEwSKUVw.mft (raw, json) Hash identifier: jrJQXCjd1btZsPfO8DSJjxhhtE9vjzC33EhYRj9ddXI= Subject key identifier: CC:3F:A3:CD:CA:6B:4A:C6:B8:D8:D6:1E:AD:DB:01:A2:AD:FD:F0:4F Authority key identifier: C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C Certificate issuer: /CN=c8d0fc8259075cd675f319d7af4fa713048a515c Certificate serial: 019B46CA94CD211C2A0DAB73E5957E689CE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 16:00:39 +0000 Manifest this update: Mon 22 Dec 2025 16:00:39 +0000 Manifest next update: Tue 23 Dec 2025 16:00:39 +0000 Files and hashes: 1: Z406JsldDq5gjN_1Lio77tcegQc.roa (hash: M3kXHnMtNow14QpQkIkQl70hqTwzolvy5YYpOz5DGxs=) 2: yND8glkHXNZ18xnXr0-nEwSKUVw.crl (hash: EhyeGrJO7nXQCOPiGqhXewUo38i34bbv6E2QtHb7haI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.crl rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:ca:94:cd:21:1c:2a:0d:ab:73:e5:95:7e:68:9c:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8d0fc8259075cd675f319d7af4fa713048a515c Validity Not Before: Dec 22 16:00:39 2025 GMT Not After : Dec 23 16:00:39 2025 GMT Subject: CN=cc3fa3cdca6b4ac6b8d8d61eaddb01a2adfdf04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d7:2c:33:30:c2:97:54:ca:3d:31:72:43:3e: 91:4a:44:6c:21:7d:74:f3:c7:ce:eb:0e:e0:06:6d: b5:9a:e3:7e:6c:7e:f7:1b:69:8b:b9:9e:69:93:2f: b7:46:b8:3c:a7:56:8b:24:94:56:b5:76:fc:80:d7: 31:8d:25:f5:0a:f7:75:8f:e6:3e:c7:6c:3a:95:f4: 15:1b:90:30:dd:24:68:4f:c3:90:09:11:16:27:b6: da:1a:81:59:99:a0:9b:b9:c6:ff:bf:97:3d:0e:d9: 91:13:4d:1a:10:90:79:73:0d:a3:0e:a3:3b:98:50: 7c:34:a4:06:59:53:55:d1:fe:25:34:5f:49:3f:e0: 92:25:71:96:7d:9a:85:2a:d7:f6:03:ec:a2:12:ed: 67:fa:3c:19:9c:8f:1e:a2:06:76:6d:8b:17:a8:0f: 38:5d:9d:a9:3f:a6:cd:68:7f:08:48:45:87:5d:aa: 78:80:0c:c7:77:02:1d:db:8b:a8:16:07:57:51:94: ef:8c:40:5c:08:7f:d2:69:93:5d:6d:d5:ab:4c:d6: 5b:59:53:8a:90:b5:6f:f3:cc:49:06:10:c4:d7:07: 81:37:3c:ab:9b:2b:62:dc:76:f6:46:0e:ba:21:32: df:b4:a2:9f:5d:db:67:b7:aa:cd:21:fc:ee:a4:4b: 93:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:3F:A3:CD:CA:6B:4A:C6:B8:D8:D6:1E:AD:DB:01:A2:AD:FD:F0:4F X509v3 Authority Key Identifier: keyid:C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:9c:78:7c:8c:7b:68:c2:2f:3d:a8:13:a5:de:94:06:89:10: 66:2a:e5:40:26:32:68:e9:8a:a3:72:47:93:c5:e5:ee:69:aa: 77:35:55:42:75:f5:b2:53:fa:73:4b:49:66:d5:a1:48:21:cb: 6a:23:c4:79:30:1b:fe:e5:d3:67:05:bd:9f:a1:60:fc:6d:e7: 21:51:29:f2:db:a4:b6:90:8a:c1:18:05:9e:bb:e4:85:a2:e5: 43:b7:62:87:ae:79:9b:4e:d7:bd:d5:43:74:50:81:b0:54:6d: 73:81:0d:fc:36:4b:df:74:f2:85:d1:58:71:9a:9e:d1:dc:c9: 6b:72:ad:37:81:f0:b1:9e:8a:70:e9:47:cf:22:78:75:37:5b: 28:18:b7:af:e0:96:68:8b:1b:71:d8:63:2d:53:42:10:fe:20: 87:8f:7b:ca:29:08:a5:87:b6:a2:6b:8b:6e:97:9a:cb:dd:40: 0f:dc:67:03:46:7f:53:7c:3c:2e:38:c8:dd:f7:c9:2c:41:21: 0c:1a:36:f1:29:19:3c:dd:85:75:a8:b6:e1:86:84:ea:2c:78: 95:3f:03:a5:b6:07:37:e6:33:00:07:21:dc:05:b4:90:4c:2a: ee:37:57:93:9b:e2:77:71:95:54:e2:e5:0e:79:37:65:53:cb: 5f:b4:38:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGypTNIRwqDatz5ZV+aJzhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZDBmYzgyNTkwNzVjZDY3NWYzMTlkN2FmNGZhNzEzMDQ4 YTUxNWMwHhcNMjUxMjIyMTYwMDM5WhcNMjUxMjIzMTYwMDM5WjAzMTEwLwYDVQQD EyhjYzNmYTNjZGNhNmI0YWM2YjhkOGQ2MWVhZGRiMDFhMmFkZmRmMDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NcsMzDCl1TKPTFyQz6RSkRsIX10 88fO6w7gBm21muN+bH73G2mLuZ5pky+3Rrg8p1aLJJRWtXb8gNcxjSX1Cvd1j+Y+ x2w6lfQVG5Aw3SRoT8OQCREWJ7baGoFZmaCbucb/v5c9DtmRE00aEJB5cw2jDqM7 mFB8NKQGWVNV0f4lNF9JP+CSJXGWfZqFKtf2A+yiEu1n+jwZnI8eogZ2bYsXqA84 XZ2pP6bNaH8ISEWHXap4gAzHdwId24uoFgdXUZTvjEBcCH/SaZNdbdWrTNZbWVOK kLVv88xJBhDE1weBNzyrmyti3Hb2Rg66ITLftKKfXdtnt6rNIfzupEuTiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMw/o83Ka0rGuNjWHq3bAaKt/fBPMB8GA1UdIwQY MBaAFMjQ/IJZB1zWdfMZ169PpxMEilFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU5EOGdsa0hYTloxOHhuWHIwLW5Fd1NLVVZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80NWM4NjItOWUzMy00NWM4LWE3Mjgt N2EyZmQxMDI2OWJlLzEveU5EOGdsa0hYTloxOHhuWHIwLW5Fd1NLVVZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC80NWM4NjItOWUzMy00NWM4LWE3MjgtN2EyZmQxMDI2OWJl LzEveU5EOGdsa0hYTloxOHhuWHIwLW5Fd1NLVVZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi5x4fIx7 aMIvPagTpd6UBokQZirlQCYyaOmKo3JHk8Xl7mmqdzVVQnX1slP6c0tJZtWhSCHL aiPEeTAb/uXTZwW9n6Fg/G3nIVEp8tuktpCKwRgFnrvkhaLlQ7dih655m07XvdVD dFCBsFRtc4EN/DZL33TyhdFYcZqe0dzJa3KtN4HwsZ6KcOlHzyJ4dTdbKBi3r+CW aIsbcdhjLVNCEP4gh497yikIpYe2omuLbpeay91AD9xnA0Z/U3w8LjjI3ffJLEEh DBo28SkZPN2Fdai24YaE6ix4lT8DpbYHN+YzAAch3AW0kEwq7jdXk5vid3GVVOLl Dnk3ZVPLX7Q4GQ== -----END CERTIFICATE-----Generated at Mon Dec 22 18:59:15 2025 by rpki-client