This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft File: yeG79grg631AB2JxhcXxRyP_864.mft (raw, json) Hash identifier: si+wUpT928oC59b374gQ12lmqN/utzirMf8LFLQg9Ws= Subject key identifier: 11:D4:1A:F5:7D:93:29:86:34:51:89:10:CD:E8:4C:3A:AA:F3:02:DF Authority key identifier: C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE Certificate issuer: /CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae Certificate serial: 019B3F7EDF380FACDB9A25A3CB18E59518A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft Manifest number: 02CD Signing time: Sun 21 Dec 2025 06:00:37 +0000 Manifest this update: Sun 21 Dec 2025 06:00:37 +0000 Manifest next update: Mon 22 Dec 2025 06:00:37 +0000 Files and hashes: 1: qP-gsAFmgVOc4H-oZTo26Ptp5vw.roa (hash: QT6Tbak41BDvyGiXFOwS3KI7ZlriOjq7qFbGvl+22Ak=) 2: yeG79grg631AB2JxhcXxRyP_864.crl (hash: cuHPCl4crQisnTtIlckCYXj6pXC0CXzZoF7og/+1hc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:df:38:0f:ac:db:9a:25:a3:cb:18:e5:95:18:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae Validity Not Before: Dec 21 06:00:37 2025 GMT Not After : Dec 22 06:00:37 2025 GMT Subject: CN=11d41af57d93298634518910cde84c3aaaf302df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4a:8e:5d:81:2f:cc:ad:32:c2:50:d7:d3:7b: ce:42:86:6f:c1:a2:70:57:26:b9:d8:32:46:e0:d7: b6:35:b9:3e:13:c1:c4:d8:51:8c:47:4c:8d:8c:64: ff:5d:6b:1a:bf:b9:11:09:5a:ab:ca:6e:d0:a5:28: e3:22:34:c1:46:6e:ea:1b:a3:c1:9c:62:43:af:ab: 65:b1:8a:a7:bd:c9:3d:f4:5f:b2:51:b4:80:99:de: 06:df:26:ca:bb:df:97:4a:2b:46:3b:c9:7e:3c:80: 97:1a:8b:98:0d:dd:9f:d8:b5:30:ec:99:ed:ee:9e: 6c:f3:45:6f:17:3e:2d:72:82:80:76:d4:ca:25:d5: 0d:f8:d9:62:23:8d:11:3c:f2:39:45:83:30:6b:b1: 94:5e:35:e5:e2:38:5c:1e:92:8b:57:71:2c:97:38: b6:a3:f7:fc:9f:f6:8b:70:26:6b:1a:d6:14:9d:c0: 32:db:05:2b:d3:8c:94:ec:e6:c3:d2:05:38:57:32: d2:24:67:a5:c9:ec:4b:8d:80:2c:82:9d:05:f4:02: 29:c1:a2:3a:b1:6c:33:bb:7e:e7:e8:54:4f:61:6a: ae:6e:1d:70:65:d2:67:e3:74:e2:22:27:72:e0:05: 9f:e5:60:bc:9c:1f:f2:de:51:ec:d4:93:1c:22:8f: 63:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D4:1A:F5:7D:93:29:86:34:51:89:10:CD:E8:4C:3A:AA:F3:02:DF X509v3 Authority Key Identifier: keyid:C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:11:44:aa:65:2c:cf:53:84:51:30:eb:be:61:92:d1:7f:52: bd:3e:8c:3b:bb:78:d6:f5:aa:71:b7:3c:b8:e0:22:7d:02:a6: da:0e:23:b5:0d:6e:21:da:d4:ad:af:e8:f4:3d:b9:74:ad:f2: d7:7d:38:6f:2b:b1:e9:28:9c:87:7e:33:46:08:85:91:04:c0: ee:ea:58:d8:03:a7:4a:f7:bf:16:d1:db:3c:6c:99:43:4b:c1: c6:a0:59:03:ee:6e:c7:ff:d6:29:d2:a7:c4:e4:96:70:c4:28: 78:a2:2b:e0:4e:3a:30:6f:d7:43:7f:7d:60:b0:d4:3c:ef:63: 1a:dc:c6:5c:69:0e:cc:31:5d:9d:9d:b3:6a:57:8c:b6:18:73: f6:de:9a:dd:18:07:00:97:36:f9:ea:bb:b6:e2:42:7a:ec:d5: 68:b2:bc:c4:1e:71:96:66:b9:ac:45:c7:05:e1:e5:b7:6c:f9: a0:bf:bd:98:4c:66:ed:d0:f5:00:8c:f6:c5:e3:87:fe:06:42: ff:a9:54:86:a8:c0:5e:b1:12:13:1c:25:6d:b1:2f:94:d0:3a: 71:e3:59:4c:46:8d:87:b2:f5:3e:45:d3:2a:e3:03:9b:01:4c: a0:8f:c6:4c:3c:af:c3:9f:da:16:34:99:55:32:ef:93:b8:c0: 26:e0:3d:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ft84D6zbmiWjyxjllRioMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZTFiYmY2MGFlMGViN2Q0MDA3NjI3MTg1YzVmMTQ3MjNm ZmYzYWUwHhcNMjUxMjIxMDYwMDM3WhcNMjUxMjIyMDYwMDM3WjAzMTEwLwYDVQQD EygxMWQ0MWFmNTdkOTMyOTg2MzQ1MTg5MTBjZGU4NGMzYWFhZjMwMmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kqOXYEvzK0ywlDX03vOQoZvwaJw Vya52DJG4Ne2Nbk+E8HE2FGMR0yNjGT/XWsav7kRCVqrym7QpSjjIjTBRm7qG6PB nGJDr6tlsYqnvck99F+yUbSAmd4G3ybKu9+XSitGO8l+PICXGouYDd2f2LUw7Jnt 7p5s80VvFz4tcoKAdtTKJdUN+NliI40RPPI5RYMwa7GUXjXl4jhcHpKLV3Eslzi2 o/f8n/aLcCZrGtYUncAy2wUr04yU7ObD0gU4VzLSJGelyexLjYAsgp0F9AIpwaI6 sWwzu37n6FRPYWqubh1wZdJn43TiIidy4AWf5WC8nB/y3lHs1JMcIo9jIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHUGvV9kymGNFGJEM3oTDqq8wLfMB8GA1UdIwQY MBaAFMnhu/YK4Ot9QAdicYXF8Ucj//OuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWVHNzlncmc2MzFBQjJKeGhjWHhSeVBfODY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kYTUyOTYtZjczYi00NWQ2LWE5NDIt ZTEyOTZiMzJhMTFmLzEveWVHNzlncmc2MzFBQjJKeGhjWHhSeVBfODY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9kYTUyOTYtZjczYi00NWQ2LWE5NDItZTEyOTZiMzJhMTFm LzEveWVHNzlncmc2MzFBQjJKeGhjWHhSeVBfODY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRFEqmUs z1OEUTDrvmGS0X9SvT6MO7t41vWqcbc8uOAifQKm2g4jtQ1uIdrUra/o9D25dK3y 1304byux6Sich34zRgiFkQTA7upY2AOnSve/FtHbPGyZQ0vBxqBZA+5ux//WKdKn xOSWcMQoeKIr4E46MG/XQ399YLDUPO9jGtzGXGkOzDFdnZ2zaleMthhz9t6a3RgH AJc2+eq7tuJCeuzVaLK8xB5xlma5rEXHBeHlt2z5oL+9mExm7dD1AIz2xeOH/gZC /6lUhqjAXrESExwlbbEvlNA6ceNZTEaNh7L1PkXTKuMDmwFMoI/GTDyvw5/aFjSZ VTLvk7jAJuA9kw== -----END CERTIFICATE-----Generated at Sun Dec 21 09:15:16 2025 by rpki-client