This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft File: yeG79grg631AB2JxhcXxRyP_864.mft (raw, json) Hash identifier: gA+98FRBrtozQZ29TvOOjGvHjxe4ywiALRaxThnyQZs= Subject key identifier: D4:00:D4:9C:80:B2:24:30:1C:D9:97:4F:03:AF:3F:21:A7:76:A6:5A Authority key identifier: C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE Certificate issuer: /CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae Certificate serial: 019B56AB679D7C34B7404E697193796434BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft Manifest number: 02D9 Signing time: Thu 25 Dec 2025 18:00:32 +0000 Manifest this update: Thu 25 Dec 2025 18:00:32 +0000 Manifest next update: Fri 26 Dec 2025 18:00:32 +0000 Files and hashes: 1: qP-gsAFmgVOc4H-oZTo26Ptp5vw.roa (hash: QT6Tbak41BDvyGiXFOwS3KI7ZlriOjq7qFbGvl+22Ak=) 2: yeG79grg631AB2JxhcXxRyP_864.crl (hash: EgQxlpxpuCRqlR4c55ABgf0hWEahM1QPZ6jEEfSSfH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:ab:67:9d:7c:34:b7:40:4e:69:71:93:79:64:34:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae Validity Not Before: Dec 25 18:00:32 2025 GMT Not After : Dec 26 18:00:32 2025 GMT Subject: CN=d400d49c80b224301cd9974f03af3f21a776a65a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9e:25:35:d4:7b:19:05:4f:79:a6:55:db:c7: fe:cc:06:5f:60:89:3f:84:22:3a:4b:07:bf:d9:c4: a3:a2:5e:0b:14:4d:19:96:71:6d:53:b4:b8:35:02: 73:a2:9d:af:63:e8:96:b0:12:27:b1:36:ff:0c:03: 0e:bf:5a:1c:1e:87:f5:6a:ca:8a:5e:d1:5c:42:35: 5d:f5:ad:96:05:db:23:4a:a5:45:95:14:38:15:7b: ce:b3:36:47:e2:7b:02:b8:65:22:9e:af:cb:3b:67: 3b:40:f0:7b:8a:84:6d:e2:68:52:a2:b4:e0:4f:67: 72:e8:2c:07:18:74:78:db:41:d6:54:4e:cd:f2:67: 16:05:1b:72:1d:c8:9f:5f:46:40:d7:f8:bd:99:31: fc:21:f6:da:96:27:a5:f6:7b:20:8e:9d:86:7c:19: 2d:9b:df:7b:0d:6f:d8:71:5d:f3:77:ed:a5:e0:3d: 8a:a3:fb:e0:11:40:44:45:c7:e3:d6:12:6b:dc:e3: 85:28:e3:b0:1c:01:db:ac:35:f9:91:35:de:1a:47: 90:ea:f2:51:30:04:cb:41:e6:a4:28:7d:13:45:2b: 0c:29:b9:e4:02:e3:e8:60:f3:c1:40:5b:af:51:16: d8:2a:d8:e2:bf:89:f4:e8:72:9a:45:f6:81:b1:59: ca:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:00:D4:9C:80:B2:24:30:1C:D9:97:4F:03:AF:3F:21:A7:76:A6:5A X509v3 Authority Key Identifier: keyid:C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:51:0a:c4:52:c0:d0:eb:a1:61:96:75:49:e6:c1:fb:6f:53: 72:72:51:3d:53:5c:e3:f7:7b:f8:a8:5f:b7:1f:46:50:e2:fa: 6f:da:df:7d:0d:2e:1b:2f:2b:ec:76:df:42:7a:93:b6:8a:c1: c6:33:3a:48:f9:5c:77:35:00:c9:e0:e5:d8:e2:30:e3:cd:ef: 1a:01:05:2b:39:05:d7:ef:aa:7e:80:8d:2d:75:4c:37:dc:bb: 77:93:75:11:1b:eb:d2:17:3f:20:59:86:6b:a5:42:17:fa:ad: 61:10:fd:30:19:c2:f2:83:65:db:dc:86:40:21:19:8e:80:32: 69:03:d4:64:3a:a1:9f:8b:24:ef:9f:89:d9:b9:18:a4:23:25: d4:59:f7:c2:60:ba:cb:6b:9d:33:4f:8b:41:ca:0d:bd:cc:70: d4:4d:13:a6:60:31:95:fb:ff:0e:92:97:16:d3:bc:5f:7d:aa: 05:59:6b:74:8b:59:d9:dc:a9:64:00:73:a2:d3:a3:12:91:cc: 4c:6f:87:2c:87:88:65:50:da:12:82:15:8b:8a:a7:6f:ad:a5: b0:f5:eb:a2:73:d3:a8:39:63:b9:cc:6c:19:6d:bd:51:59:a8: 45:89:00:0b:7a:1f:d3:e1:be:14:1d:cc:08:9a:bc:5c:de:df: 25:0a:60:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWq2edfDS3QE5pcZN5ZDS9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZTFiYmY2MGFlMGViN2Q0MDA3NjI3MTg1YzVmMTQ3MjNm ZmYzYWUwHhcNMjUxMjI1MTgwMDMyWhcNMjUxMjI2MTgwMDMyWjAzMTEwLwYDVQQD EyhkNDAwZDQ5YzgwYjIyNDMwMWNkOTk3NGYwM2FmM2YyMWE3NzZhNjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu54lNdR7GQVPeaZV28f+zAZfYIk/ hCI6Swe/2cSjol4LFE0ZlnFtU7S4NQJzop2vY+iWsBInsTb/DAMOv1ocHof1asqK XtFcQjVd9a2WBdsjSqVFlRQ4FXvOszZH4nsCuGUinq/LO2c7QPB7ioRt4mhSorTg T2dy6CwHGHR420HWVE7N8mcWBRtyHcifX0ZA1/i9mTH8Ifbaliel9nsgjp2GfBkt m997DW/YcV3zd+2l4D2Ko/vgEUBERcfj1hJr3OOFKOOwHAHbrDX5kTXeGkeQ6vJR MATLQeakKH0TRSsMKbnkAuPoYPPBQFuvURbYKtjiv4n06HKaRfaBsVnKewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQA1JyAsiQwHNmXTwOvPyGndqZaMB8GA1UdIwQY MBaAFMnhu/YK4Ot9QAdicYXF8Ucj//OuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWVHNzlncmc2MzFBQjJKeGhjWHhSeVBfODY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kYTUyOTYtZjczYi00NWQ2LWE5NDIt ZTEyOTZiMzJhMTFmLzEveWVHNzlncmc2MzFBQjJKeGhjWHhSeVBfODY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9kYTUyOTYtZjczYi00NWQ2LWE5NDItZTEyOTZiMzJhMTFm LzEveWVHNzlncmc2MzFBQjJKeGhjWHhSeVBfODY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVEKxFLA 0OuhYZZ1SebB+29TcnJRPVNc4/d7+Khftx9GUOL6b9rffQ0uGy8r7HbfQnqTtorB xjM6SPlcdzUAyeDl2OIw483vGgEFKzkF1++qfoCNLXVMN9y7d5N1ERvr0hc/IFmG a6VCF/qtYRD9MBnC8oNl29yGQCEZjoAyaQPUZDqhn4sk75+J2bkYpCMl1Fn3wmC6 y2udM0+LQcoNvcxw1E0TpmAxlfv/DpKXFtO8X32qBVlrdItZ2dypZABzotOjEpHM TG+HLIeIZVDaEoIVi4qnb62lsPXronPTqDljucxsGW29UVmoRYkAC3of0+G+FB3M CJq8XN7fJQpgvg== -----END CERTIFICATE-----Generated at Thu Dec 25 19:39:52 2025 by rpki-client