This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft File: yTsGP8Y-ihq6H0MLLQdNvicL45U.mft (raw, json) Hash identifier: CxKGYF6BqWbT55Z7fdesHvRWNhEHIq78YNfjO3Gn0B0= Subject key identifier: 48:19:AB:A7:5D:3D:22:31:7F:68:1D:40:45:96:0B:C6:B2:E5:43:F6 Authority key identifier: C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95 Certificate issuer: /CN=c93b063fc63e8a1aba1f430b2d074dbe270be395 Certificate serial: 019B4E84ACADA365D85C9CA873B48CD67D6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft Manifest number: 1791 Signing time: Wed 24 Dec 2025 04:01:16 +0000 Manifest this update: Wed 24 Dec 2025 04:01:16 +0000 Manifest next update: Thu 25 Dec 2025 04:01:16 +0000 Files and hashes: 1: 1F8onmseCNCuGUO4DR0wCF969LM.roa (hash: 5Q04Z/04ubuR0XnIvzjk6WhZzGAxE4KZkR5m6+NYcEk=) 2: yTsGP8Y-ihq6H0MLLQdNvicL45U.crl (hash: 8RyxxKT7eZ5VGWEBdDejlehUGrTvQrc1CQuALoib/JI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 04:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:ac:ad:a3:65:d8:5c:9c:a8:73:b4:8c:d6:7d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c93b063fc63e8a1aba1f430b2d074dbe270be395 Validity Not Before: Dec 24 04:01:16 2025 GMT Not After : Dec 25 04:01:16 2025 GMT Subject: CN=4819aba75d3d22317f681d4045960bc6b2e543f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e7:cc:dd:01:d5:6f:f1:80:df:22:19:f9:ec: f7:54:8e:46:a7:49:23:04:b1:c4:20:fb:2f:2d:64: 89:6f:f1:8a:e3:22:a5:32:a6:41:26:1e:3e:47:f7: 11:13:f0:c9:2c:87:b9:a2:4f:a5:52:a6:ee:e5:ea: d9:eb:82:0e:e3:b6:d4:01:f9:b7:9b:1e:ea:56:62: b7:0b:c1:09:3c:b3:32:a5:d3:d7:e2:19:40:51:da: 06:56:ab:a2:b9:87:e3:4e:18:4a:43:2a:6f:a5:17: eb:80:75:5b:2f:af:c2:5f:94:88:03:ec:a5:fb:a9: e4:85:30:e8:e9:59:90:21:51:58:40:dc:b3:3b:60: 8d:b5:2d:fa:95:60:57:dd:8c:43:56:c1:c6:cd:73: b2:9c:06:16:a9:ed:28:1d:36:5c:dd:97:26:66:bd: 77:20:ed:29:a0:d2:b2:3c:58:ce:17:fe:4c:b4:56: c9:95:eb:50:f5:87:8a:e8:99:5c:d4:6a:32:d2:d9: c6:43:fe:21:21:62:18:e7:ac:e6:09:4a:e4:f8:fa: 0e:21:9d:92:5c:f5:7b:39:c0:a4:6b:ad:58:84:0d: 69:41:8a:51:9f:45:d6:35:c6:6e:fd:e2:ff:7d:61: 7f:5d:46:7e:52:f8:38:99:3d:cc:8e:d6:fe:16:c5: fa:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:19:AB:A7:5D:3D:22:31:7F:68:1D:40:45:96:0B:C6:B2:E5:43:F6 X509v3 Authority Key Identifier: keyid:C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:37:63:51:6c:40:c5:71:67:e9:aa:27:75:a0:0a:c1:fd:82: f2:25:5b:37:50:cc:81:52:aa:62:08:c8:99:74:1e:e2:4d:cb: f8:02:a0:b9:97:69:0f:ad:e0:df:0a:39:b7:dd:46:c5:4d:37: 69:ae:e3:44:4e:43:85:8b:0a:f1:a3:af:9d:83:94:ee:e7:51: e5:c1:0e:7b:e1:be:3e:4c:6e:3d:d6:a0:97:aa:7b:b8:23:77: 98:24:d4:36:04:f2:44:f5:9b:4f:61:2b:ab:32:73:63:7b:91: 9e:7d:66:b8:03:7f:46:9b:08:a8:2f:3f:40:d5:85:6a:f6:c2: 57:62:19:fc:f6:a1:16:02:6d:d1:68:dc:2c:13:15:3c:c7:3a: b2:70:1a:1d:b7:4b:a6:ae:51:a6:f5:64:ba:9c:ed:8a:5f:dd: c1:33:50:4b:6e:50:1b:12:77:93:f3:cf:dc:8f:36:9b:d1:97: e2:52:e9:24:89:c0:6f:9a:66:45:7a:b2:62:c6:a8:90:9c:c5: f7:8f:e0:7d:b8:74:aa:4b:ca:29:ca:7b:63:6c:00:22:87:7a: 5d:9f:37:36:52:a9:a5:55:69:72:f0:ec:62:1b:85:cf:b7:b5: cb:06:5c:2f:5f:a9:7a:a6:83:7c:b1:13:1b:28:ff:fd:26:0d: da:8d:9c:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhKyto2XYXJyoc7SM1n1qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5M2IwNjNmYzYzZThhMWFiYTFmNDMwYjJkMDc0ZGJlMjcw YmUzOTUwHhcNMjUxMjI0MDQwMTE2WhcNMjUxMjI1MDQwMTE2WjAzMTEwLwYDVQQD Eyg0ODE5YWJhNzVkM2QyMjMxN2Y2ODFkNDA0NTk2MGJjNmIyZTU0M2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+fM3QHVb/GA3yIZ+ez3VI5Gp0kj BLHEIPsvLWSJb/GK4yKlMqZBJh4+R/cRE/DJLIe5ok+lUqbu5erZ64IO47bUAfm3 mx7qVmK3C8EJPLMypdPX4hlAUdoGVquiuYfjThhKQypvpRfrgHVbL6/CX5SIA+yl +6nkhTDo6VmQIVFYQNyzO2CNtS36lWBX3YxDVsHGzXOynAYWqe0oHTZc3ZcmZr13 IO0poNKyPFjOF/5MtFbJletQ9YeK6Jlc1Goy0tnGQ/4hIWIY56zmCUrk+PoOIZ2S XPV7OcCka61YhA1pQYpRn0XWNcZu/eL/fWF/XUZ+Uvg4mT3Mjtb+FsX6KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgZq6ddPSIxf2gdQEWWC8ay5UP2MB8GA1UdIwQY MBaAFMk7Bj/GPooauh9DCy0HTb4nC+OVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVRzR1A4WS1paHE2SDBNTExRZE52aWNMNDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNjMyYjAtMDhmNi00MjE3LTk0YmMt OTQwYmM4MTkxNjU5LzEveVRzR1A4WS1paHE2SDBNTExRZE52aWNMNDVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9lNjMyYjAtMDhmNi00MjE3LTk0YmMtOTQwYmM4MTkxNjU5 LzEveVRzR1A4WS1paHE2SDBNTExRZE52aWNMNDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDdjUWxA xXFn6aondaAKwf2C8iVbN1DMgVKqYgjImXQe4k3L+AKguZdpD63g3wo5t91GxU03 aa7jRE5DhYsK8aOvnYOU7udR5cEOe+G+PkxuPdagl6p7uCN3mCTUNgTyRPWbT2Er qzJzY3uRnn1muAN/RpsIqC8/QNWFavbCV2IZ/PahFgJt0WjcLBMVPMc6snAaHbdL pq5RpvVkupztil/dwTNQS25QGxJ3k/PP3I82m9GX4lLpJInAb5pmRXqyYsaokJzF 94/gfbh0qkvKKcp7Y2wAIod6XZ83NlKppVVpcvDsYhuFz7e1ywZcL1+peqaDfLET Gyj//SYN2o2cMQ== -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:43 2025 by rpki-client