This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft File: 9YQK34T7C3WOuopaE1qYA5Pov3M.mft (raw, json) Hash identifier: y2Vn2qgOgX/sQQhzwnuB9r7/FUCKqV3TSXHWafGa0fc= Subject key identifier: 02:03:55:49:24:88:CA:DE:B9:CA:F3:6D:93:19:01:25:29:5A:A2:A5 Authority key identifier: F5:84:0A:DF:84:FB:0B:75:8E:BA:8A:5A:13:5A:98:03:93:E8:BF:73 Certificate issuer: /CN=f5840adf84fb0b758eba8a5a135a980393e8bf73 Certificate serial: 019B4EF20FE5703AE4068D249BD8C8E838C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft Manifest number: 033D Signing time: Wed 24 Dec 2025 06:00:45 +0000 Manifest this update: Wed 24 Dec 2025 06:00:45 +0000 Manifest next update: Thu 25 Dec 2025 06:00:45 +0000 Files and hashes: 1: 9YQK34T7C3WOuopaE1qYA5Pov3M.crl (hash: klvB5oDWXBizjNNqKpsI98rtSiY4qKfyJCAcAaayrus=) 2: ug_6Y8ki9EP25vsoMMlfyRj48uY.roa (hash: iRz3po2Z+C7i19HNQJqYaoWDRng24eOA7rSUnQMnMPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.crl rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 06:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f2:0f:e5:70:3a:e4:06:8d:24:9b:d8:c8:e8:38:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5840adf84fb0b758eba8a5a135a980393e8bf73 Validity Not Before: Dec 24 06:00:45 2025 GMT Not After : Dec 25 06:00:45 2025 GMT Subject: CN=020355492488cadeb9caf36d93190125295aa2a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:92:2f:4c:53:a5:dd:aa:b2:c3:6c:ed:66:eb: cd:88:bd:d0:d0:ca:c3:eb:86:c8:f6:57:93:84:4f: ba:96:c6:ce:b2:36:f2:07:b0:a2:ac:36:ee:d3:90: 22:f9:4d:6c:81:d1:bf:8c:ce:cc:ba:cb:a9:bf:a4: 83:7f:ef:f1:e9:2e:15:64:78:32:b1:a5:3d:b5:2c: ad:47:2a:c0:be:00:39:54:53:43:b2:4e:42:5d:90: 7e:30:eb:ac:98:ec:8f:ee:67:83:cc:21:f1:54:75: 7b:89:76:cb:39:46:3a:f1:9a:d5:33:a3:7b:6c:63: e2:f1:e5:e4:23:0f:02:68:0b:e1:99:27:22:63:34: bb:83:6e:4f:cf:25:52:a1:39:37:9a:e3:6b:7d:34: 76:75:5c:5a:cb:db:0b:27:83:23:8e:59:81:6b:f9: 54:41:9d:d7:a5:bc:d4:79:ed:46:92:7e:8d:a5:77: 4a:30:3d:4a:32:c7:c0:f4:f9:8e:f4:b3:88:52:d5: a5:ef:ea:87:4b:cb:e2:95:3a:58:0d:78:52:e1:38: a5:19:80:48:0d:4b:42:e3:4b:a2:ec:14:49:b5:4c: 2f:ea:d8:59:c2:7f:0d:17:cf:91:f7:7a:2a:c3:fa: 02:3a:b0:62:46:21:e6:24:a0:70:dc:8b:18:d9:71: 59:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:03:55:49:24:88:CA:DE:B9:CA:F3:6D:93:19:01:25:29:5A:A2:A5 X509v3 Authority Key Identifier: keyid:F5:84:0A:DF:84:FB:0B:75:8E:BA:8A:5A:13:5A:98:03:93:E8:BF:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:f9:4b:14:c4:ff:28:bb:c8:06:f0:9e:01:72:f6:32:60:f6: b5:2b:8d:33:08:73:0a:14:39:1f:4e:e3:94:34:d3:93:cb:96: 3b:24:35:aa:4f:04:b4:33:96:c1:a6:88:7c:ba:fc:59:d2:3a: bc:1b:2a:2b:18:af:53:2a:5a:90:a9:d5:be:44:51:9c:b6:d0: 6d:ce:49:34:64:69:51:8c:8d:3a:3a:cf:e7:9e:54:fb:cd:e7: 04:9d:31:04:29:6c:71:9b:23:a0:c6:57:98:67:1e:d7:18:2f: 85:ab:0d:fb:7c:ca:d3:4e:e7:e9:14:c0:48:5c:b5:ca:3c:7d: 24:87:1f:06:f1:a3:de:db:6e:40:a0:d0:bd:2e:3a:b8:be:eb: d2:2d:dd:83:8c:90:3a:2f:46:7c:ec:bb:04:05:fd:f3:81:e9: 70:9b:6c:5f:d9:a9:fb:55:ae:35:22:94:6e:8e:6c:7d:c1:87: b7:a8:5d:58:f1:92:5c:60:66:ac:6f:3a:e5:35:ac:c2:57:46: 0c:31:5f:9c:34:75:1a:0d:9e:01:27:4f:9f:98:c1:b1:a2:cc: 12:d2:c0:dd:76:c1:2c:27:e9:cb:c6:3e:69:75:57:74:35:bd: 3c:ab:0a:26:fd:cd:f0:4b:1f:e8:20:44:c1:f1:07:66:74:f9: 40:c6:d3:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8g/lcDrkBo0km9jI6DjJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ODQwYWRmODRmYjBiNzU4ZWJhOGE1YTEzNWE5ODAzOTNl OGJmNzMwHhcNMjUxMjI0MDYwMDQ1WhcNMjUxMjI1MDYwMDQ1WjAzMTEwLwYDVQQD EygwMjAzNTU0OTI0ODhjYWRlYjljYWYzNmQ5MzE5MDEyNTI5NWFhMmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZIvTFOl3aqyw2ztZuvNiL3Q0MrD 64bI9leThE+6lsbOsjbyB7CirDbu05Ai+U1sgdG/jM7Musupv6SDf+/x6S4VZHgy saU9tSytRyrAvgA5VFNDsk5CXZB+MOusmOyP7meDzCHxVHV7iXbLOUY68ZrVM6N7 bGPi8eXkIw8CaAvhmSciYzS7g25PzyVSoTk3muNrfTR2dVxay9sLJ4MjjlmBa/lU QZ3XpbzUee1Gkn6NpXdKMD1KMsfA9PmO9LOIUtWl7+qHS8vilTpYDXhS4TilGYBI DUtC40ui7BRJtUwv6thZwn8NF8+R93oqw/oCOrBiRiHmJKBw3IsY2XFZWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIDVUkkiMreucrzbZMZASUpWqKlMB8GA1UdIwQY MBaAFPWECt+E+wt1jrqKWhNamAOT6L9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVlRSzM0VDdDM1dPdW9wYUUxcVlBNVBvdjNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS80ZjY4N2YtNDJmZS00N2FlLWEwZGIt NGM1OTYwZGRlYjM3LzEvOVlRSzM0VDdDM1dPdW9wYUUxcVlBNVBvdjNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS80ZjY4N2YtNDJmZS00N2FlLWEwZGItNGM1OTYwZGRlYjM3 LzEvOVlRSzM0VDdDM1dPdW9wYUUxcVlBNVBvdjNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPlLFMT/ KLvIBvCeAXL2MmD2tSuNMwhzChQ5H07jlDTTk8uWOyQ1qk8EtDOWwaaIfLr8WdI6 vBsqKxivUypakKnVvkRRnLbQbc5JNGRpUYyNOjrP555U+83nBJ0xBClscZsjoMZX mGce1xgvhasN+3zK007n6RTASFy1yjx9JIcfBvGj3ttuQKDQvS46uL7r0i3dg4yQ Oi9GfOy7BAX984HpcJtsX9mp+1WuNSKUbo5sfcGHt6hdWPGSXGBmrG865TWswldG DDFfnDR1Gg2eASdPn5jBsaLMEtLA3XbBLCfpy8Y+aXVXdDW9PKsKJv3N8Esf6CBE wfEHZnT5QMbT8w== -----END CERTIFICATE-----Generated at Wed Dec 24 10:04:23 2025 by rpki-client