This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft File: yp6lFngHtwhbUTEMpg2_K5GYL8c.mft (raw, json) Hash identifier: 80NSg05UxiLxF/mReqVJu0wWt6Ik9/hT7Owu6BUS7Hw= Subject key identifier: 9E:0C:5B:1B:68:68:B3:33:7E:18:C7:21:57:F7:85:EC:95:27:23:73 Authority key identifier: CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7 Certificate issuer: /CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7 Certificate serial: 019B3FED698C6A4A1D8EF4E92F8FE8C117DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft Manifest number: 0C8F Signing time: Sun 21 Dec 2025 08:01:22 +0000 Manifest this update: Sun 21 Dec 2025 08:01:22 +0000 Manifest next update: Mon 22 Dec 2025 08:01:22 +0000 Files and hashes: 1: xsFDhAZJurVFLNSpvCJf1kS8dwM.roa (hash: wMuwURUbdvicot2CMjliv2z3rDNvHfV1WIAmLSMG/Bo=) 2: yp6lFngHtwhbUTEMpg2_K5GYL8c.crl (hash: WANX9a+mXouW1ZyyV8QT8g7KyfoKvzvw741UBQOL1SI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:69:8c:6a:4a:1d:8e:f4:e9:2f:8f:e8:c1:17:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7 Validity Not Before: Dec 21 08:01:22 2025 GMT Not After : Dec 22 08:01:22 2025 GMT Subject: CN=9e0c5b1b6868b3337e18c72157f785ec95272373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0a:a0:ae:82:2d:0f:07:74:91:b1:a6:ed:eb: fe:d5:ce:c1:4f:4d:71:82:38:d8:25:96:09:61:93: fb:e8:27:bb:84:35:e5:bd:1e:6f:45:73:b9:01:a6: 22:98:5f:e5:60:2c:2b:1a:16:a3:5b:ef:70:21:c7: a6:69:56:dc:fd:a9:4a:a3:64:67:8f:0e:3a:30:3f: 6a:fb:73:50:2f:d5:e6:be:38:aa:04:b4:33:92:7d: 33:00:0e:cf:38:29:a4:52:e9:41:05:65:43:54:b6: 03:b5:43:25:da:95:4e:31:2e:1a:97:3c:36:bd:1d: c8:b2:c2:f4:43:49:86:04:58:ba:b7:e9:00:50:09: 0e:2c:13:4d:f8:80:44:7b:9c:8b:85:02:93:8e:64: 2f:b6:c0:23:ac:3e:84:33:47:96:e1:7d:77:36:61: 80:af:d9:4a:7c:82:61:64:0f:72:02:17:bf:3d:b0: c8:b1:33:53:19:1a:0b:60:93:8a:89:90:7a:3d:38: 1c:ff:05:aa:dc:2c:50:82:a7:3c:a0:42:dc:44:f3: 9e:a2:f6:a3:e1:a5:14:7e:5f:e2:de:0e:46:a4:7a: b0:e5:06:43:17:47:37:20:30:bf:4a:65:89:6f:cb: 19:80:c4:30:6a:10:d6:c5:0a:07:cb:e9:20:05:f8: 5a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0C:5B:1B:68:68:B3:33:7E:18:C7:21:57:F7:85:EC:95:27:23:73 X509v3 Authority Key Identifier: keyid:CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:f5:30:cb:05:61:0a:e2:1b:89:d2:03:40:16:2c:0d:64:90: 2e:85:d8:23:62:2a:33:64:80:5d:67:1d:3f:06:ba:eb:c4:93: 44:c9:ae:ef:4c:8e:1d:c4:59:29:d2:34:96:78:51:6f:c9:1a: fa:8f:f8:c9:89:74:1f:99:d9:d8:2e:92:91:7e:93:57:bf:ec: 3f:dd:9b:47:7a:f5:63:3e:2d:35:82:16:79:f0:32:2c:74:67: a5:dc:c0:74:76:44:a1:0e:8c:07:6d:3e:5e:e0:19:3a:7d:1d: a9:dc:ab:22:89:c8:e7:00:78:cf:ca:5a:90:6a:b5:21:e4:e7: b5:0b:6e:b5:7f:d7:38:6a:56:73:c0:28:67:31:9a:39:52:28: a9:08:fa:14:a4:0d:29:89:e1:ec:85:c5:f6:e0:10:d2:e9:69: 32:b4:41:ad:a8:f3:e9:9f:eb:c6:68:69:bd:53:09:9f:65:b4: 73:04:84:eb:1b:74:36:2f:ab:5c:dc:02:79:d6:e0:e6:e5:f3: c4:61:50:91:17:ce:a2:70:ae:cf:fc:9b:bb:06:db:a4:79:a9: 39:94:41:ca:3b:02:da:d3:ba:ed:ec:be:1f:60:fb:1b:c5:c8: 81:3e:f0:30:eb:07:61:cb:fd:4c:9b:fe:2d:ef:d3:54:f1:8e: 23:ce:7c:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7WmMakodjvTpL4/owRfbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhOWVhNTE2NzgwN2I3MDg1YjUxMzEwY2E2MGRiZjJiOTE5 ODJmYzcwHhcNMjUxMjIxMDgwMTIyWhcNMjUxMjIyMDgwMTIyWjAzMTEwLwYDVQQD Eyg5ZTBjNWIxYjY4NjhiMzMzN2UxOGM3MjE1N2Y3ODVlYzk1MjcyMzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wqgroItDwd0kbGm7ev+1c7BT01x gjjYJZYJYZP76Ce7hDXlvR5vRXO5AaYimF/lYCwrGhajW+9wIcemaVbc/alKo2Rn jw46MD9q+3NQL9XmvjiqBLQzkn0zAA7POCmkUulBBWVDVLYDtUMl2pVOMS4alzw2 vR3IssL0Q0mGBFi6t+kAUAkOLBNN+IBEe5yLhQKTjmQvtsAjrD6EM0eW4X13NmGA r9lKfIJhZA9yAhe/PbDIsTNTGRoLYJOKiZB6PTgc/wWq3CxQgqc8oELcRPOeovaj 4aUUfl/i3g5GpHqw5QZDF0c3IDC/SmWJb8sZgMQwahDWxQoHy+kgBfhaxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4MWxtoaLMzfhjHIVf3heyVJyNzMB8GA1UdIwQY MBaAFMqepRZ4B7cIW1ExDKYNvyuRmC/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXA2bEZuZ0h0d2hiVVRFTXBnMl9LNUdZTDhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iZTI1NDAtNDhiYi00YzY2LThiMjQt Mjc0MWIzNmI3NWRlLzEveXA2bEZuZ0h0d2hiVVRFTXBnMl9LNUdZTDhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9iZTI1NDAtNDhiYi00YzY2LThiMjQtMjc0MWIzNmI3NWRl LzEveXA2bEZuZ0h0d2hiVVRFTXBnMl9LNUdZTDhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/UwywVh CuIbidIDQBYsDWSQLoXYI2IqM2SAXWcdPwa668STRMmu70yOHcRZKdI0lnhRb8ka +o/4yYl0H5nZ2C6SkX6TV7/sP92bR3r1Yz4tNYIWefAyLHRnpdzAdHZEoQ6MB20+ XuAZOn0dqdyrIonI5wB4z8pakGq1IeTntQtutX/XOGpWc8AoZzGaOVIoqQj6FKQN KYnh7IXF9uAQ0ulpMrRBrajz6Z/rxmhpvVMJn2W0cwSE6xt0Ni+rXNwCedbg5uXz xGFQkRfOonCuz/ybuwbbpHmpOZRByjsC2tO67ey+H2D7G8XIgT7wMOsHYcv9TJv+ Le/TVPGOI858Zw== -----END CERTIFICATE-----Generated at Sun Dec 21 17:27:54 2025 by rpki-client