This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft File: yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft (raw, json) Hash identifier: pqbQ+4xw5q+GwTg64UzaiHZ2Fe34vJq+xZpOsWFiUT4= Subject key identifier: F2:3E:BB:F2:9A:BC:90:27:14:4A:F6:5F:17:82:70:99:C2:76:21:7F Authority key identifier: C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64 Certificate issuer: /CN=c8df337cea56a083f46b799072e70da345cc2364 Certificate serial: 019B337AE9737D0096047584C18C726882CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 22:00:51 +0000 Manifest this update: Thu 18 Dec 2025 22:00:51 +0000 Manifest next update: Fri 19 Dec 2025 22:00:51 +0000 Files and hashes: 1: yEMlFNYIo_7PBG15hC66LWSw4E0.roa (hash: 0NF8QaEpF30c3qMJTec6Bga4N+I8Ns4AqntJ51k9D0k=) 2: yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl (hash: EbPex3AAZEZEpV2Nh8mJK6UPhI0LMqHfeBaGuqrEzaw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7a:e9:73:7d:00:96:04:75:84:c1:8c:72:68:82:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8df337cea56a083f46b799072e70da345cc2364 Validity Not Before: Dec 18 22:00:51 2025 GMT Not After : Dec 19 22:00:51 2025 GMT Subject: CN=f23ebbf29abc9027144af65f17827099c276217f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ed:2c:39:1f:0e:ad:83:14:1e:07:a5:72:2f: 87:d6:7c:ba:f3:bb:09:2c:09:7b:33:cf:2f:cc:a1: 71:dc:1c:ae:38:24:50:80:78:b8:66:ba:16:8d:ab: d8:29:cf:00:87:1e:f0:b2:1f:3b:63:e6:ad:f7:d3: e0:be:6b:db:6e:50:bc:63:27:a8:b4:4a:93:96:2a: e4:e3:21:e9:24:2c:b9:8d:f4:0b:6f:de:7f:b6:38: 61:14:49:19:11:14:03:f7:08:ba:c2:5c:14:09:ff: d5:f3:b8:1b:4b:b6:2e:8d:8e:05:43:da:63:cb:99: 57:46:24:0c:cb:05:13:24:ea:ae:1e:38:b0:3a:83: 70:0e:3f:0a:a9:0a:b9:62:ed:98:43:98:04:17:84: b8:ef:ce:db:63:32:c7:61:40:4f:a8:26:b8:da:90: dc:77:01:7a:ad:4c:fe:5c:37:57:03:bb:70:28:78: d6:9b:9a:18:bd:56:7a:5c:d1:3a:6b:0b:bf:f4:2e: f1:1a:6c:ce:18:8a:bf:c9:4f:2c:b8:f4:ec:eb:fa: 77:a7:8a:8b:d9:b0:ee:98:ef:b1:7f:9e:8b:1c:52: 6a:84:fa:0e:6c:65:fb:64:c5:6c:bd:c1:38:40:a5: 12:b9:b9:8e:88:26:19:60:8d:e6:a4:61:05:8b:a8: 65:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3E:BB:F2:9A:BC:90:27:14:4A:F6:5F:17:82:70:99:C2:76:21:7F X509v3 Authority Key Identifier: keyid:C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:c4:85:8e:c5:75:42:47:a2:b5:38:e6:16:53:5d:b7:26:22: 6d:8d:95:b9:ee:47:a5:a8:eb:ed:9c:70:72:53:94:43:38:ba: 24:5d:8b:e7:71:e3:56:fa:86:dc:41:03:24:ae:9a:bb:30:d4: f3:5e:87:ec:ea:25:9c:fc:3a:17:eb:4a:f9:6e:df:c9:c0:c9: a3:d4:6d:a9:57:0c:77:8a:96:e2:09:d6:9f:3c:db:2a:b1:1b: f5:39:97:7c:13:a5:b4:88:27:03:a6:29:85:e4:9b:66:ab:e9: dc:bb:3d:d3:92:2c:b9:b3:13:89:32:c0:85:36:a5:70:08:c7: 5e:0b:64:52:12:43:06:9b:6f:23:eb:df:18:17:8d:c0:97:2d: 06:bf:4c:95:4a:36:34:25:cc:58:b4:f6:3c:0c:e5:4b:43:b9: 23:9b:55:4a:3b:3e:a8:18:24:9a:76:56:03:33:84:f0:83:c4: 9d:ff:c8:90:f7:59:7a:92:65:50:60:a9:be:e1:34:3e:cf:d5: dc:8b:ec:63:4e:8f:cb:ba:51:d3:88:e4:de:1c:25:bd:08:83: 1f:e0:46:aa:e7:97:ee:76:35:e2:8c:88:32:a7:c2:84:91:1b: 5d:83:53:f8:3a:4d:cd:ef:43:fb:a1:06:45:4d:be:d3:51:4a: db:85:bc:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszeulzfQCWBHWEwYxyaILMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZGYzMzdjZWE1NmEwODNmNDZiNzk5MDcyZTcwZGEzNDVj YzIzNjQwHhcNMjUxMjE4MjIwMDUxWhcNMjUxMjE5MjIwMDUxWjAzMTEwLwYDVQQD EyhmMjNlYmJmMjlhYmM5MDI3MTQ0YWY2NWYxNzgyNzA5OWMyNzYyMTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu0sOR8OrYMUHgelci+H1ny687sJ LAl7M88vzKFx3ByuOCRQgHi4ZroWjavYKc8Ahx7wsh87Y+at99PgvmvbblC8Yyeo tEqTlirk4yHpJCy5jfQLb95/tjhhFEkZERQD9wi6wlwUCf/V87gbS7YujY4FQ9pj y5lXRiQMywUTJOquHjiwOoNwDj8KqQq5Yu2YQ5gEF4S4787bYzLHYUBPqCa42pDc dwF6rUz+XDdXA7twKHjWm5oYvVZ6XNE6awu/9C7xGmzOGIq/yU8suPTs6/p3p4qL 2bDumO+xf56LHFJqhPoObGX7ZMVsvcE4QKUSubmOiCYZYI3mpGEFi6hlbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPI+u/KavJAnFEr2XxeCcJnCdiF/MB8GA1UdIwQY MBaAFMjfM3zqVqCD9Gt5kHLnDaNFzCNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU44emZPcFdvSVAwYTNtUWN1Y05vMFhNSTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yOTdkNTQtYmQ4Mi00MmUwLTljNDIt NmZkYmNhNjAwZTAwLzEveU44emZPcFdvSVAwYTNtUWN1Y05vMFhNSTJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8yOTdkNTQtYmQ4Mi00MmUwLTljNDItNmZkYmNhNjAwZTAw LzEveU44emZPcFdvSVAwYTNtUWN1Y05vMFhNSTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScSFjsV1 QkeitTjmFlNdtyYibY2Vue5Hpajr7ZxwclOUQzi6JF2L53HjVvqG3EEDJK6auzDU 816H7OolnPw6F+tK+W7fycDJo9RtqVcMd4qW4gnWnzzbKrEb9TmXfBOltIgnA6Yp heSbZqvp3Ls905IsubMTiTLAhTalcAjHXgtkUhJDBptvI+vfGBeNwJctBr9MlUo2 NCXMWLT2PAzlS0O5I5tVSjs+qBgkmnZWAzOE8IPEnf/IkPdZepJlUGCpvuE0Ps/V 3IvsY06Py7pR04jk3hwlvQiDH+BGqueX7nY14oyIMqfChJEbXYNT+DpNze9D+6EG RU2+01FK24W8Cw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:15:50 2025 by rpki-client