This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft File: ypQrJwZ2HCunUyiXg-35heM48Xc.mft (raw, json) Hash identifier: wHFhBBny2vQUAtyvbgrXiBygib3Grrxu7EZqabzVXf4= Subject key identifier: 46:B6:CD:D3:A0:39:2E:D3:1F:83:DC:E2:FC:37:0A:90:34:96:B1:06 Authority key identifier: CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77 Certificate issuer: /CN=ca942b2706761c2ba753289783edf985e338f177 Certificate serial: 019B3F7EE9FF070D419CEAEB7A34A2459DA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft Manifest number: 0D17 Signing time: Sun 21 Dec 2025 06:00:40 +0000 Manifest this update: Sun 21 Dec 2025 06:00:40 +0000 Manifest next update: Mon 22 Dec 2025 06:00:40 +0000 Files and hashes: 1: eiXFhQbxCQpcEPNruQeHmSAD-Z0.roa (hash: MfMam3uqTveTnOv++uzEyTkwTSJ0lTcdAkWlcL+odNo=) 2: ypQrJwZ2HCunUyiXg-35heM48Xc.crl (hash: 8QJYQEAsbNSu52w+3OVx91LZAMYuMAurIBKzkC3uFXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:e9:ff:07:0d:41:9c:ea:eb:7a:34:a2:45:9d:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca942b2706761c2ba753289783edf985e338f177 Validity Not Before: Dec 21 06:00:40 2025 GMT Not After : Dec 22 06:00:40 2025 GMT Subject: CN=46b6cdd3a0392ed31f83dce2fc370a903496b106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:52:50:c7:55:9d:c1:ef:20:5d:6c:fa:9c:6a: ef:32:46:09:82:66:e9:2e:dc:17:97:df:ab:dc:02: 78:40:48:27:32:e7:70:0f:cf:b0:fa:48:43:db:1b: 5d:6b:00:3d:de:ee:f8:f3:a7:d0:73:84:25:25:6c: 9c:8c:32:06:b7:93:78:40:a6:c4:f5:69:24:0b:ca: 2b:3d:4a:f8:56:79:a6:1d:c4:6c:83:c1:02:c9:2d: dc:7e:26:be:b3:e7:84:8b:8d:1a:20:85:73:d6:dc: 37:6d:4e:78:49:00:57:84:f4:c6:71:e5:ea:c8:7c: b4:03:4c:51:a0:4a:c7:44:3d:2b:ec:ed:ba:83:cd: 79:66:00:b6:41:ee:07:0e:58:d2:c4:e6:17:f7:9a: 04:60:1d:78:15:48:50:46:94:b5:be:58:d2:bf:bd: 7d:7c:36:85:69:23:38:91:47:90:ae:7c:90:b3:14: 28:09:6a:6f:74:59:d4:86:00:00:88:09:03:49:ff: 71:3f:30:b1:49:dd:11:73:bf:e2:5b:fb:ea:05:e8: 4e:97:77:73:7d:63:66:b5:31:8a:7d:7d:3b:e2:25: 4c:ed:a6:05:30:fe:17:71:4a:25:dd:ac:a2:30:e4: 3f:3b:da:7c:3d:93:22:0f:3f:fa:03:b2:9b:d3:2d: 63:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B6:CD:D3:A0:39:2E:D3:1F:83:DC:E2:FC:37:0A:90:34:96:B1:06 X509v3 Authority Key Identifier: keyid:CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:2b:c3:fb:04:ec:9f:85:d0:9e:fe:3e:3b:32:b0:2e:af:c9: f0:16:d1:30:b1:26:db:6f:21:96:c7:2e:39:8c:83:be:ca:e3: 72:df:9f:47:01:d4:8c:7e:94:09:d9:ce:32:fa:45:fb:25:9a: e0:bb:a2:67:c3:00:2f:af:27:b1:2f:b3:e7:4b:d0:85:97:00: 78:df:15:f6:0e:9e:f3:0a:f0:9e:64:d7:3a:03:11:46:50:b0: 61:71:c7:80:f2:2f:ba:42:e6:d6:9b:5a:64:b0:53:d0:26:e5: 9d:ef:10:50:6f:45:14:2c:bf:17:b2:f0:25:dc:a3:99:6b:d0: 86:74:02:10:93:56:b7:1d:62:bb:66:ef:8a:b2:fb:8b:04:61: 03:40:89:d1:b8:f1:01:3c:51:b6:2d:2f:b1:f3:6c:16:dc:95: 21:36:bb:4a:f2:83:6b:2f:84:ea:70:c4:21:16:8f:a5:0a:88: 27:45:63:d9:c6:c0:91:3a:77:ff:90:45:80:33:ec:c3:df:70: 56:b3:0a:bf:df:af:03:6a:c0:43:ca:9f:f4:e7:79:28:8f:76: f0:19:f4:3c:7f:a4:77:7f:98:fc:33:7d:cc:05:6f:77:24:7d: f6:8d:13:ab:57:c7:27:c4:f7:fe:84:42:19:a2:98:e5:fb:98: 9a:0f:82:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fun/Bw1BnOrrejSiRZ2iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhOTQyYjI3MDY3NjFjMmJhNzUzMjg5NzgzZWRmOTg1ZTMz OGYxNzcwHhcNMjUxMjIxMDYwMDQwWhcNMjUxMjIyMDYwMDQwWjAzMTEwLwYDVQQD Eyg0NmI2Y2RkM2EwMzkyZWQzMWY4M2RjZTJmYzM3MGE5MDM0OTZiMTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1JQx1Wdwe8gXWz6nGrvMkYJgmbp LtwXl9+r3AJ4QEgnMudwD8+w+khD2xtdawA93u7486fQc4QlJWycjDIGt5N4QKbE 9WkkC8orPUr4VnmmHcRsg8ECyS3cfia+s+eEi40aIIVz1tw3bU54SQBXhPTGceXq yHy0A0xRoErHRD0r7O26g815ZgC2Qe4HDljSxOYX95oEYB14FUhQRpS1vljSv719 fDaFaSM4kUeQrnyQsxQoCWpvdFnUhgAAiAkDSf9xPzCxSd0Rc7/iW/vqBehOl3dz fWNmtTGKfX074iVM7aYFMP4XcUol3ayiMOQ/O9p8PZMiDz/6A7Kb0y1jYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEa2zdOgOS7TH4Pc4vw3CpA0lrEGMB8GA1UdIwQY MBaAFMqUKycGdhwrp1Mol4Pt+YXjOPF3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXBRckp3WjJIQ3VuVXlpWGctMzVoZU00OFhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iOGMxM2QtZTdkMy00YWE5LWE5MTEt ZWQ2NDgwNTk3N2YwLzEveXBRckp3WjJIQ3VuVXlpWGctMzVoZU00OFhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9iOGMxM2QtZTdkMy00YWE5LWE5MTEtZWQ2NDgwNTk3N2Yw LzEveXBRckp3WjJIQ3VuVXlpWGctMzVoZU00OFhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPCvD+wTs n4XQnv4+OzKwLq/J8BbRMLEm228hlscuOYyDvsrjct+fRwHUjH6UCdnOMvpF+yWa 4LuiZ8MAL68nsS+z50vQhZcAeN8V9g6e8wrwnmTXOgMRRlCwYXHHgPIvukLm1pta ZLBT0Cblne8QUG9FFCy/F7LwJdyjmWvQhnQCEJNWtx1iu2bvirL7iwRhA0CJ0bjx ATxRti0vsfNsFtyVITa7SvKDay+E6nDEIRaPpQqIJ0Vj2cbAkTp3/5BFgDPsw99w VrMKv9+vA2rAQ8qf9Od5KI928Bn0PH+kd3+Y/DN9zAVvdyR99o0Tq1fHJ8T3/oRC GaKY5fuYmg+CTg== -----END CERTIFICATE-----Generated at Sun Dec 21 12:39:29 2025 by rpki-client