This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft File: YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft (raw, json) Hash identifier: kdgpmIrXFHgY2aCEMb+vYkPiU9mi61o57CsR3w0hanU= Subject key identifier: 3B:3C:F4:49:CE:3A:AC:A9:DA:E1:A8:4E:45:2B:49:2D:55:31:73:A5 Authority key identifier: 62:7A:99:50:9E:D5:1D:F9:3A:33:F2:A4:E2:FD:66:2D:1C:8D:66:0B Certificate issuer: /CN=627a99509ed51df93a33f2a4e2fd662d1c8d660b Certificate serial: 019B3F47E95E92F9DF2344831852E5425C22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft Manifest number: 0377 Signing time: Sun 21 Dec 2025 05:00:35 +0000 Manifest this update: Sun 21 Dec 2025 05:00:35 +0000 Manifest next update: Mon 22 Dec 2025 05:00:35 +0000 Files and hashes: 1: FRrrM4yAfnu6pnFh5wowlvqVDWA.roa (hash: Hv8/4ynB8VDf7OX62BWXwwqyCndg3mMaA+WdwhpJSlw=) 2: YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.crl (hash: iZoStOIIy71z4uZnnVvPNj3W91ZtfUEFikxWL+QcxJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:47:e9:5e:92:f9:df:23:44:83:18:52:e5:42:5c:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=627a99509ed51df93a33f2a4e2fd662d1c8d660b Validity Not Before: Dec 21 05:00:35 2025 GMT Not After : Dec 22 05:00:35 2025 GMT Subject: CN=3b3cf449ce3aaca9dae1a84e452b492d553173a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2d:35:a3:01:94:46:85:0e:6a:63:3a:72:23: a4:81:de:9a:a4:28:d3:8f:d1:6b:7b:09:e1:77:4b: 8d:4e:87:37:3f:ac:c2:66:6d:51:68:c2:67:9c:7d: ef:81:57:25:e4:5e:35:79:02:53:7c:14:4c:20:29: 43:14:be:bb:00:14:c7:e2:73:6f:1f:e2:05:ad:62: 5d:cd:27:3e:c9:e9:28:f1:08:82:69:f8:97:d2:25: 82:ba:2b:b1:4a:6e:e0:17:3b:77:4c:49:9f:4b:a1: 2e:04:63:5a:36:60:6f:4b:0a:1c:73:c9:bc:e7:cf: 7d:cb:8b:c6:13:b5:0d:62:7a:7f:b0:35:89:d3:ef: 0d:29:a6:0f:1c:24:60:18:b7:6c:7a:75:6a:1f:85: eb:2c:58:43:bf:f4:47:e5:a1:47:3b:d7:3d:50:bf: 1b:31:55:0c:88:73:4b:59:2e:0d:d7:09:59:9d:12: b4:89:f3:aa:c5:27:d2:cd:ec:d7:71:8d:d8:2a:ce: fe:34:a8:54:15:2f:4f:ae:26:f0:85:9e:f8:e7:c0: 2a:c1:62:54:a1:87:01:dd:e5:60:da:13:6a:0c:b1: 5f:98:a0:09:8a:9f:90:ef:75:bf:e9:0c:31:64:f1: f0:6f:b2:f4:12:59:b0:7c:1b:87:32:31:11:ff:27: 8b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3C:F4:49:CE:3A:AC:A9:DA:E1:A8:4E:45:2B:49:2D:55:31:73:A5 X509v3 Authority Key Identifier: keyid:62:7A:99:50:9E:D5:1D:F9:3A:33:F2:A4:E2:FD:66:2D:1C:8D:66:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:91:12:4b:ce:34:7e:6f:cf:e3:1a:01:e4:79:56:30:e0:2d: e0:82:57:83:f4:ab:0f:58:c9:8c:a1:7c:e8:ea:ea:78:e0:6d: 77:9c:9d:d1:e1:28:01:c2:b0:53:63:c4:0a:a5:02:11:dd:d6: b6:c3:1a:4d:3e:93:6f:2e:2a:66:dc:27:6f:66:a8:66:44:df: 0f:7b:40:1d:fd:a5:e6:2b:05:37:60:fb:f8:5c:ff:63:ff:d3: 0f:bc:a8:1c:fa:28:80:26:5e:b5:ec:4e:06:29:12:1a:d1:07: f7:e7:a9:70:9c:94:b4:32:dd:08:67:36:83:a9:87:62:ec:ff: a0:cc:fa:22:85:63:34:32:f3:86:7d:a0:d1:e2:6d:37:46:a6: d9:07:39:f9:9a:41:1c:0f:98:ed:63:70:1b:e9:40:02:b8:67: cb:86:59:b2:01:0f:64:bf:ac:e4:5a:9a:91:df:e1:da:97:c7: d5:49:87:ad:45:7a:37:99:15:92:c4:36:40:22:01:f4:88:a2: 32:93:a5:47:ff:98:34:95:c3:17:fd:62:99:af:0a:d6:83:2c: ee:1f:1e:e6:51:11:33:5f:09:7b:d5:85:3b:80:bd:b5:46:92: 9c:f5:d0:bd:c9:2a:0d:54:59:ac:06:8a:33:8c:f8:4f:c7:dc: 6b:ca:af:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/R+lekvnfI0SDGFLlQlwiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyN2E5OTUwOWVkNTFkZjkzYTMzZjJhNGUyZmQ2NjJkMWM4 ZDY2MGIwHhcNMjUxMjIxMDUwMDM1WhcNMjUxMjIyMDUwMDM1WjAzMTEwLwYDVQQD EygzYjNjZjQ0OWNlM2FhY2E5ZGFlMWE4NGU0NTJiNDkyZDU1MzE3M2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS01owGURoUOamM6ciOkgd6apCjT j9Frewnhd0uNToc3P6zCZm1RaMJnnH3vgVcl5F41eQJTfBRMIClDFL67ABTH4nNv H+IFrWJdzSc+yeko8QiCafiX0iWCuiuxSm7gFzt3TEmfS6EuBGNaNmBvSwocc8m8 5899y4vGE7UNYnp/sDWJ0+8NKaYPHCRgGLdsenVqH4XrLFhDv/RH5aFHO9c9UL8b MVUMiHNLWS4N1wlZnRK0ifOqxSfSzezXcY3YKs7+NKhUFS9PribwhZ7458AqwWJU oYcB3eVg2hNqDLFfmKAJip+Q73W/6QwxZPHwb7L0ElmwfBuHMjER/yeLFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDs89EnOOqyp2uGoTkUrSS1VMXOlMB8GA1UdIwQY MBaAFGJ6mVCe1R35OjPypOL9Zi0cjWYLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW5xWlVKN1ZIZms2TV9LazR2MW1MUnlOWmdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy80NjM2NjYtMDBlMC00OTJlLWE0NjMt MDEyOGQ5NzE3OWU4LzEvWW5xWlVKN1ZIZms2TV9LazR2MW1MUnlOWmdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy80NjM2NjYtMDBlMC00OTJlLWE0NjMtMDEyOGQ5NzE3OWU4 LzEvWW5xWlVKN1ZIZms2TV9LazR2MW1MUnlOWmdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5ESS840 fm/P4xoB5HlWMOAt4IJXg/SrD1jJjKF86OrqeOBtd5yd0eEoAcKwU2PECqUCEd3W tsMaTT6Tby4qZtwnb2aoZkTfD3tAHf2l5isFN2D7+Fz/Y//TD7yoHPoogCZetexO BikSGtEH9+epcJyUtDLdCGc2g6mHYuz/oMz6IoVjNDLzhn2g0eJtN0am2Qc5+ZpB HA+Y7WNwG+lAArhny4ZZsgEPZL+s5Fqakd/h2pfH1UmHrUV6N5kVksQ2QCIB9Iii MpOlR/+YNJXDF/1ima8K1oMs7h8e5lERM18Je9WFO4C9tUaSnPXQvckqDVRZrAaK M4z4T8fca8qvKg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:36:29 2025 by rpki-client