This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft File: yjNIUNrzcSIFIBmSKevekO8osBg.mft (raw, json) Hash identifier: q8rWIUyuYp5ywaZBO6YdUS9Y3gL7ktp9/E9R19kYz8M= Subject key identifier: B0:06:CB:8E:0D:65:CC:75:A9:1C:0C:27:A1:C0:D0:E6:D4:A3:C4:FF Authority key identifier: CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18 Certificate issuer: /CN=ca334850daf371220520199229ebde90ef28b018 Certificate serial: 019B3BA2AD200A40817584D713BA580C5DAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft Manifest number: 0804 Signing time: Sat 20 Dec 2025 12:01:15 +0000 Manifest this update: Sat 20 Dec 2025 12:01:15 +0000 Manifest next update: Sun 21 Dec 2025 12:01:15 +0000 Files and hashes: 1: 6eOqvZGDKFDuA6yXPPPze8WOsrA.roa (hash: ERZvSVqw/o5/S8YL0KRBFbpGBsSfCd4T3Hhjomrg6eY=) 2: yjNIUNrzcSIFIBmSKevekO8osBg.crl (hash: Q36Jqzu/gt/zhy50+d0PkVIGvnr5jx+Ojpyiae2AD6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:ad:20:0a:40:81:75:84:d7:13:ba:58:0c:5d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca334850daf371220520199229ebde90ef28b018 Validity Not Before: Dec 20 12:01:15 2025 GMT Not After : Dec 21 12:01:15 2025 GMT Subject: CN=b006cb8e0d65cc75a91c0c27a1c0d0e6d4a3c4ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3d:0d:59:c1:b0:39:83:16:1b:ae:09:8a:6c: cb:59:69:ff:09:0f:d0:73:77:62:df:4e:f2:11:d2: eb:c3:52:8b:45:e5:fa:6b:76:60:44:b8:df:5c:60: d5:b0:81:24:f4:a0:1f:56:0c:24:cc:00:81:32:4b: 7e:0f:c6:52:50:0e:0e:e2:01:37:81:98:2b:da:05: 5d:98:48:db:8d:ff:d0:a8:30:4d:9c:48:8b:98:3a: 99:f6:e8:aa:ae:1d:3f:e0:c9:7e:93:d1:6a:82:0e: 06:16:25:78:cf:7b:1d:66:e6:26:b1:71:da:a7:5a: 3a:bd:af:00:ff:ee:40:24:1d:04:94:59:5d:a9:6f: 00:a8:71:43:d9:85:14:df:01:9a:98:b4:cc:93:3b: 07:37:da:b8:92:c9:64:ac:d8:e4:43:11:c6:78:27: 5c:57:18:4f:26:49:e3:fd:d9:50:49:6a:25:af:c0: 53:96:75:b0:18:fe:20:71:bd:a7:42:06:94:46:b3: c1:b4:27:e4:98:7f:fe:de:83:73:8c:9a:a4:1f:cf: 54:64:a7:16:2e:e4:d3:ad:ea:ff:80:73:45:5d:5f: b1:a7:b3:1b:1f:aa:fb:d1:94:93:6c:b4:35:94:1b: 31:36:87:da:7d:23:cd:c6:66:19:6b:51:6c:40:40: 91:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:06:CB:8E:0D:65:CC:75:A9:1C:0C:27:A1:C0:D0:E6:D4:A3:C4:FF X509v3 Authority Key Identifier: keyid:CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:d3:67:0b:96:1f:82:49:13:0e:d4:79:37:a1:0b:e7:07:4d: d0:9b:e8:01:0a:dc:d8:2c:4e:92:e3:b8:54:71:1e:0d:59:12: fa:68:8d:3f:b9:a3:a7:37:27:8e:f5:56:7c:51:aa:48:81:d2: 7d:b5:38:c2:47:eb:78:dd:e4:43:8b:92:04:5e:ad:11:93:26: 7b:25:4a:a1:14:e5:53:02:0f:bd:c1:b7:50:f2:13:11:c1:85: 78:f7:77:1b:39:21:73:e5:d5:d6:29:7d:16:70:10:60:45:78: ee:6e:3a:90:e9:0b:55:8c:04:91:87:31:29:ea:08:93:bb:4a: 15:1a:7a:2f:5e:97:b6:2c:08:b3:d7:a6:be:aa:f6:08:ac:9d: 42:1b:ab:a5:19:78:05:1f:cd:55:6a:5b:9b:8b:e0:c1:33:c4: 57:6b:cc:86:df:cb:1d:1a:12:74:c0:f8:69:80:f0:8d:98:3e: 4d:24:ec:66:9e:8b:a4:4a:2f:7d:28:19:a8:41:c4:c9:a1:37: 22:de:20:77:f3:71:54:37:63:75:53:9c:fd:c8:4f:f6:5c:95: 3e:55:70:18:b1:40:93:f6:2e:4c:86:6b:cf:77:66:15:10:dd: 5b:7e:82:17:10:41:36:78:c1:65:4a:c2:58:dd:c1:ce:02:cf: cd:04:33:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oq0gCkCBdYTXE7pYDF2qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzM0ODUwZGFmMzcxMjIwNTIwMTk5MjI5ZWJkZTkwZWYy OGIwMTgwHhcNMjUxMjIwMTIwMTE1WhcNMjUxMjIxMTIwMTE1WjAzMTEwLwYDVQQD EyhiMDA2Y2I4ZTBkNjVjYzc1YTkxYzBjMjdhMWMwZDBlNmQ0YTNjNGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT0NWcGwOYMWG64JimzLWWn/CQ/Q c3di307yEdLrw1KLReX6a3ZgRLjfXGDVsIEk9KAfVgwkzACBMkt+D8ZSUA4O4gE3 gZgr2gVdmEjbjf/QqDBNnEiLmDqZ9uiqrh0/4Ml+k9Fqgg4GFiV4z3sdZuYmsXHa p1o6va8A/+5AJB0ElFldqW8AqHFD2YUU3wGamLTMkzsHN9q4kslkrNjkQxHGeCdc VxhPJknj/dlQSWolr8BTlnWwGP4gcb2nQgaURrPBtCfkmH/+3oNzjJqkH89UZKcW LuTTrer/gHNFXV+xp7MbH6r70ZSTbLQ1lBsxNofafSPNxmYZa1FsQECR4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAGy44NZcx1qRwMJ6HA0ObUo8T/MB8GA1UdIwQY MBaAFMozSFDa83EiBSAZkinr3pDvKLAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWpOSVVOcnpjU0lGSUJtU0tldmVrTzhvc0JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lZTVlNDctNGUyOS00NjAzLWI5NjIt MGUwMDQ2YzhhODdiLzEveWpOSVVOcnpjU0lGSUJtU0tldmVrTzhvc0JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lZTVlNDctNGUyOS00NjAzLWI5NjItMGUwMDQ2YzhhODdi LzEveWpOSVVOcnpjU0lGSUJtU0tldmVrTzhvc0JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMNNnC5Yf gkkTDtR5N6EL5wdN0JvoAQrc2CxOkuO4VHEeDVkS+miNP7mjpzcnjvVWfFGqSIHS fbU4wkfreN3kQ4uSBF6tEZMmeyVKoRTlUwIPvcG3UPITEcGFePd3Gzkhc+XV1il9 FnAQYEV47m46kOkLVYwEkYcxKeoIk7tKFRp6L16XtiwIs9emvqr2CKydQhurpRl4 BR/NVWpbm4vgwTPEV2vMht/LHRoSdMD4aYDwjZg+TSTsZp6LpEovfSgZqEHEyaE3 It4gd/NxVDdjdVOc/chP9lyVPlVwGLFAk/YuTIZrz3dmFRDdW36CFxBBNnjBZUrC WN3BzgLPzQQzFg== -----END CERTIFICATE-----Generated at Sat Dec 20 14:41:09 2025 by rpki-client