This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft File: ypQrJwZ2HCunUyiXg-35heM48Xc.mft (raw, json) Hash identifier: vPN+CvRmYAio2AzxoHGwnbkNDGENf52k5vr6/jn42KA= Subject key identifier: 60:D4:B9:05:0D:BA:88:79:F3:A4:2E:15:68:84:34:4D:00:A8:D4:78 Authority key identifier: CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77 Certificate issuer: /CN=ca942b2706761c2ba753289783edf985e338f177 Certificate serial: 019B52CEC4E40FF0B9F204683219669245DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft Manifest number: 0D21 Signing time: Thu 25 Dec 2025 00:00:40 +0000 Manifest this update: Thu 25 Dec 2025 00:00:40 +0000 Manifest next update: Fri 26 Dec 2025 00:00:40 +0000 Files and hashes: 1: eiXFhQbxCQpcEPNruQeHmSAD-Z0.roa (hash: MfMam3uqTveTnOv++uzEyTkwTSJ0lTcdAkWlcL+odNo=) 2: ypQrJwZ2HCunUyiXg-35heM48Xc.crl (hash: JD+A57Q8ef0KHr9O6UUvNtNdXNl0pDBwnxd5B5J9CD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:ce:c4:e4:0f:f0:b9:f2:04:68:32:19:66:92:45:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca942b2706761c2ba753289783edf985e338f177 Validity Not Before: Dec 25 00:00:40 2025 GMT Not After : Dec 26 00:00:40 2025 GMT Subject: CN=60d4b9050dba8879f3a42e156884344d00a8d478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0d:58:e6:57:27:9a:2c:f8:ee:08:cd:c7:33: 01:ac:78:97:64:c6:e2:25:75:cb:d6:79:ca:86:55: 0e:9a:f0:3f:f9:fe:bb:50:4b:92:fa:4c:fa:ca:64: b6:2b:97:2e:8a:6b:0e:63:b5:6f:45:cf:7b:60:4e: 77:83:c7:0d:46:3b:19:dd:8e:55:4a:2b:02:51:a3: 4a:a5:30:47:bc:e2:dc:9c:75:fa:35:b3:45:66:1a: 6e:15:32:7d:73:91:87:e4:62:8e:43:84:1e:16:25: 7b:3a:da:32:50:c0:44:3d:75:39:35:75:93:98:99: 81:a9:ec:a6:6f:e9:f2:7b:07:8f:ab:cf:2f:3a:5a: fd:35:c1:de:8f:9d:8a:ff:d1:0b:92:e7:96:27:1e: dd:65:9c:7d:a0:99:7f:70:2b:89:5d:97:d5:e8:47: 14:27:ec:76:3d:5c:bf:74:48:0f:b3:56:40:60:aa: fc:05:98:b0:db:a8:c4:8a:69:60:bf:74:f0:af:ad: 49:f7:7f:c1:76:d2:d7:e9:f2:44:72:26:46:b1:38: 4d:8c:fd:cb:a6:c0:f6:13:3a:c5:f1:5f:0d:4d:e8: 3d:46:d9:0b:8d:4b:0f:38:49:ef:94:ed:66:c6:00: 8d:bc:ec:80:17:7f:fc:74:40:5b:d8:00:c4:ca:1b: 8e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D4:B9:05:0D:BA:88:79:F3:A4:2E:15:68:84:34:4D:00:A8:D4:78 X509v3 Authority Key Identifier: keyid:CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:b4:96:e0:79:a4:be:64:ea:93:3d:0d:74:da:eb:d2:b2:9e: 84:72:12:68:cb:5f:83:68:98:46:37:c1:30:85:5c:c3:4c:5f: 90:93:e1:bd:80:db:44:c3:49:61:ad:71:e0:10:19:e9:b8:46: 20:86:7f:d2:a8:4b:9d:48:85:c7:9b:14:14:38:5e:81:38:72: a4:fd:64:33:fa:11:e1:5b:f4:53:66:99:e9:d3:d1:aa:43:13: 95:bf:6c:65:ab:d8:15:12:6b:0e:b8:68:3a:80:6a:b6:34:b6: dd:92:77:8e:10:e6:af:56:ea:7f:c0:2f:29:03:02:cb:a0:61: a1:4d:9e:ff:1f:0e:90:55:cf:fb:87:35:2a:bc:95:b4:8f:8c: 3b:25:a7:18:a3:3f:37:42:bc:ce:db:74:75:be:44:8e:bb:28: 99:61:9b:9d:52:a4:7d:f9:27:a1:88:f9:af:e8:ee:0c:53:f3: a6:e5:7e:28:17:2e:b8:3a:dc:66:cc:75:fe:7f:11:f4:7f:41: 25:69:27:b9:8e:6b:90:98:45:61:6a:d2:ee:08:4f:35:8e:56: cf:48:db:fb:0a:66:c9:77:35:79:8a:bf:0b:8b:8f:eb:a8:d2: b6:b3:7d:a1:60:74:d4:9b:0b:4b:a5:be:3d:cf:68:2e:7a:2d: a2:05:60:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzsTkD/C58gRoMhlmkkXeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhOTQyYjI3MDY3NjFjMmJhNzUzMjg5NzgzZWRmOTg1ZTMz OGYxNzcwHhcNMjUxMjI1MDAwMDQwWhcNMjUxMjI2MDAwMDQwWjAzMTEwLwYDVQQD Eyg2MGQ0YjkwNTBkYmE4ODc5ZjNhNDJlMTU2ODg0MzQ0ZDAwYThkNDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ1Y5lcnmiz47gjNxzMBrHiXZMbi JXXL1nnKhlUOmvA/+f67UEuS+kz6ymS2K5cuimsOY7VvRc97YE53g8cNRjsZ3Y5V SisCUaNKpTBHvOLcnHX6NbNFZhpuFTJ9c5GH5GKOQ4QeFiV7OtoyUMBEPXU5NXWT mJmBqeymb+nyewePq88vOlr9NcHej52K/9ELkueWJx7dZZx9oJl/cCuJXZfV6EcU J+x2PVy/dEgPs1ZAYKr8BZiw26jEimlgv3Twr61J93/BdtLX6fJEciZGsThNjP3L psD2EzrF8V8NTeg9RtkLjUsPOEnvlO1mxgCNvOyAF3/8dEBb2ADEyhuO8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDUuQUNuoh586QuFWiENE0AqNR4MB8GA1UdIwQY MBaAFMqUKycGdhwrp1Mol4Pt+YXjOPF3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXBRckp3WjJIQ3VuVXlpWGctMzVoZU00OFhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iOGMxM2QtZTdkMy00YWE5LWE5MTEt ZWQ2NDgwNTk3N2YwLzEveXBRckp3WjJIQ3VuVXlpWGctMzVoZU00OFhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9iOGMxM2QtZTdkMy00YWE5LWE5MTEtZWQ2NDgwNTk3N2Yw LzEveXBRckp3WjJIQ3VuVXlpWGctMzVoZU00OFhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOrSW4Hmk vmTqkz0NdNrr0rKehHISaMtfg2iYRjfBMIVcw0xfkJPhvYDbRMNJYa1x4BAZ6bhG IIZ/0qhLnUiFx5sUFDhegThypP1kM/oR4Vv0U2aZ6dPRqkMTlb9sZavYFRJrDrho OoBqtjS23ZJ3jhDmr1bqf8AvKQMCy6BhoU2e/x8OkFXP+4c1KryVtI+MOyWnGKM/ N0K8ztt0db5EjrsomWGbnVKkffknoYj5r+juDFPzpuV+KBcuuDrcZsx1/n8R9H9B JWknuY5rkJhFYWrS7ghPNY5Wz0jb+wpmyXc1eYq/C4uP66jStrN9oWB01JsLS6W+ Pc9oLnotogVg4A== -----END CERTIFICATE-----Generated at Thu Dec 25 02:48:46 2025 by rpki-client