This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft File: yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft (raw, json) Hash identifier: EHtjbwdv8r9bgcYDo6uR6WqfPnIx188tGSI6U9Ri3yk= Subject key identifier: 50:F1:47:EB:E8:4E:A3:56:D3:3E:4A:E9:02:5B:EA:29:91:04:FA:07 Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02 Certificate issuer: /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02 Certificate serial: 019B3AFDFFE27B32C1CD99263FD095CA6413 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft Manifest number: 11CF Signing time: Sat 20 Dec 2025 09:01:23 +0000 Manifest this update: Sat 20 Dec 2025 09:01:23 +0000 Manifest next update: Sun 21 Dec 2025 09:01:23 +0000 Files and hashes: 1: 3PSx9dotZYAyDtqMkmvWnodExOo.roa (hash: vk6bcm3rilt5w+/C+Ma6CzJC2WgKxVja0T1kBgt8Mfo=) 2: YC3-xixw4XeW0DEnxSoXSA3y9I0.roa (hash: g2+qW4cdB8k/DANIZo5brjTh6TFBwg+CXUq3jLsJYWU=) 3: yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl (hash: vFFP2EnlL54UM5H5LqbgWCvz1LNXa7hiND9CXWa/LYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:ff:e2:7b:32:c1:cd:99:26:3f:d0:95:ca:64:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02 Validity Not Before: Dec 20 09:01:23 2025 GMT Not After : Dec 21 09:01:23 2025 GMT Subject: CN=50f147ebe84ea356d33e4ae9025bea299104fa07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f4:aa:99:a8:e4:60:a8:02:72:9f:9f:76:91: 91:da:72:4b:08:a2:50:17:59:9e:aa:59:af:7b:f9: 51:70:00:37:67:68:10:49:7a:bb:00:4d:9c:15:2f: 04:71:77:83:27:02:59:2d:a8:9e:fd:63:10:f2:8d: e1:a2:d2:51:09:49:f1:64:2c:c0:5b:f9:40:d1:19: 13:0c:a4:ec:fe:2c:5a:75:6f:fc:d4:ac:0d:97:7c: bd:69:0f:5d:fb:f2:5b:03:8f:2a:15:f8:e0:18:f2: ac:eb:9d:3c:ae:6d:ab:27:70:39:18:4a:81:31:7b: 44:a0:44:7a:f3:a6:56:77:5d:8d:d6:f9:23:5d:2a: ee:99:d5:32:df:da:d6:f5:1e:c5:35:ae:cf:11:ff: f3:74:e1:d1:ed:74:67:be:12:f7:9f:be:f4:9d:6a: 65:d5:88:9c:84:e4:79:4b:bd:3b:c7:18:d0:99:95: d4:09:33:55:24:a8:7e:99:60:cd:fb:7e:1b:1f:f3: 11:16:1c:5d:56:93:96:5e:58:55:0a:00:bb:8e:a7: cb:4f:da:e7:03:00:0e:cb:38:d6:b0:3e:c1:df:5e: 73:83:f7:7f:60:69:d5:72:18:a0:bc:ff:27:f6:12: 5e:c5:ab:e0:c1:fc:e3:b9:10:4c:23:cf:3d:0f:56: a5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F1:47:EB:E8:4E:A3:56:D3:3E:4A:E9:02:5B:EA:29:91:04:FA:07 X509v3 Authority Key Identifier: keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:6a:41:37:61:15:d8:68:23:0b:a7:33:ce:38:60:ba:ad:cc: 19:4d:00:59:9c:7c:a7:f2:33:60:ac:44:34:8c:8d:6d:e3:73: af:95:71:2f:6f:40:46:ee:ff:7a:2d:36:4d:07:52:8e:da:b0: 32:55:c2:23:17:c0:e5:4d:ba:9c:c1:1d:8a:ee:b6:0b:75:dd: 78:dc:e8:de:b5:8b:71:d6:7c:c9:1b:7c:49:30:87:ce:6e:22: 6d:92:73:93:f5:98:8e:d4:76:7a:03:19:34:eb:db:d1:52:c8: 66:ae:9b:79:d7:52:c2:de:af:5d:d4:3e:cc:c9:df:6e:d7:32: 7f:59:2b:34:87:2a:06:bf:9e:e3:f5:9a:a2:18:2e:ee:ff:4f: 88:fb:31:ff:d4:a8:45:75:3a:d7:aa:3d:08:1f:59:bb:ac:0d: 8a:10:ac:51:cb:40:44:84:9c:e2:03:6c:6c:25:1d:7d:42:bd: 2e:4b:a8:5a:7b:80:74:10:63:91:ec:c6:d2:ae:51:6a:47:26: 20:fc:e2:37:41:46:0f:64:6c:47:05:24:33:1a:fd:7d:03:9a: 29:5e:a5:24:b8:6b:af:49:e7:a7:da:34:87:93:f9:dc:b1:75: aa:95:d0:80:b9:6a:dc:c8:f5:c7:89:e7:0f:3d:1c:95:19:60: 01:ed:e4:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/f/iezLBzZkmP9CVymQTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzI5Y2VkOGVmYjQxZjNiNGEyMDc4ZDk0YmJiMGEzYWFi NGZiMDIwHhcNMjUxMjIwMDkwMTIzWhcNMjUxMjIxMDkwMTIzWjAzMTEwLwYDVQQD Eyg1MGYxNDdlYmU4NGVhMzU2ZDMzZTRhZTkwMjViZWEyOTkxMDRmYTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfSqmajkYKgCcp+fdpGR2nJLCKJQ F1meqlmve/lRcAA3Z2gQSXq7AE2cFS8EcXeDJwJZLaie/WMQ8o3hotJRCUnxZCzA W/lA0RkTDKTs/ixadW/81KwNl3y9aQ9d+/JbA48qFfjgGPKs6508rm2rJ3A5GEqB MXtEoER686ZWd12N1vkjXSrumdUy39rW9R7FNa7PEf/zdOHR7XRnvhL3n770nWpl 1YichOR5S707xxjQmZXUCTNVJKh+mWDN+34bH/MRFhxdVpOWXlhVCgC7jqfLT9rn AwAOyzjWsD7B315zg/d/YGnVchigvP8n9hJexavgwfzjuRBMI889D1alnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDxR+voTqNW0z5K6QJb6imRBPoHMB8GA1UdIwQY MBaAFMoynO2O+0HztKIHjZS7sKOqtPsCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWpLYzdZNzdRZk8wb2dlTmxMdXdvNnEwLXdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81MGU3ODAtZWNhNy00NThlLWI2YWEt OWRiYzM1NjcyMzI5LzEveWpLYzdZNzdRZk8wb2dlTmxMdXdvNnEwLXdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81MGU3ODAtZWNhNy00NThlLWI2YWEtOWRiYzM1NjcyMzI5 LzEveWpLYzdZNzdRZk8wb2dlTmxMdXdvNnEwLXdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZmpBN2EV 2GgjC6czzjhguq3MGU0AWZx8p/IzYKxENIyNbeNzr5VxL29ARu7/ei02TQdSjtqw MlXCIxfA5U26nMEdiu62C3XdeNzo3rWLcdZ8yRt8STCHzm4ibZJzk/WYjtR2egMZ NOvb0VLIZq6beddSwt6vXdQ+zMnfbtcyf1krNIcqBr+e4/Waohgu7v9PiPsx/9So RXU616o9CB9Zu6wNihCsUctARISc4gNsbCUdfUK9LkuoWnuAdBBjkezG0q5Rakcm IPziN0FGD2RsRwUkMxr9fQOaKV6lJLhrr0nnp9o0h5P53LF1qpXQgLlq3Mj1x4nn Dz0clRlgAe3kaA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:25:57 2025 by rpki-client