This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft File: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft (raw, json) Hash identifier: ku6hcmK6IFJCp5u7/MLJRFgQSX/MI/KNRDZTP32bKnQ= Subject key identifier: 15:CA:CB:AE:33:33:2B:39:FA:7F:B5:E0:50:D8:AF:98:E8:99:3C:B0 Authority key identifier: C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB Certificate issuer: /CN=c97edcedec3254b357b09615a02b16e06ebe63eb Certificate serial: 019B427FDA33A16A7138D1C799300498955B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft Manifest number: 0DCE Signing time: Sun 21 Dec 2025 20:00:33 +0000 Manifest this update: Sun 21 Dec 2025 20:00:33 +0000 Manifest next update: Mon 22 Dec 2025 20:00:33 +0000 Files and hashes: 1: 1GNJJW2MjxVD_5YjOAnhTl6g1zg.roa (hash: p9+B/bwGUg8wWWb+goY+HH8qOHNqvJrQlybwIBP6B1Y=) 2: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl (hash: gU2Dj2OGYc0iaWXX7bsTjKEQMvu0SeuVfneA51magig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:7f:da:33:a1:6a:71:38:d1:c7:99:30:04:98:95:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c97edcedec3254b357b09615a02b16e06ebe63eb Validity Not Before: Dec 21 20:00:33 2025 GMT Not After : Dec 22 20:00:33 2025 GMT Subject: CN=15cacbae33332b39fa7fb5e050d8af98e8993cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:91:43:05:b6:b2:1d:9e:0a:61:09:f7:62:a5: 9e:1d:71:1b:40:5b:38:b0:3d:a2:ec:5a:ef:e4:fc: a6:53:e4:c8:76:6c:4f:ba:3f:e7:cb:e8:b2:71:26: 4f:93:74:29:35:56:71:1b:6c:d1:52:9d:81:3c:3c: 4a:35:19:3f:4e:13:5b:7e:39:7a:89:65:41:47:6c: c4:b5:23:04:a7:97:db:d9:79:cd:95:4c:58:ec:42: cd:d1:4f:69:22:53:ca:22:25:d0:ef:9f:09:06:7d: f6:6d:56:0f:e8:b8:34:e8:ca:4b:5a:fc:54:02:e7: 39:6f:18:5e:05:7a:b6:14:60:c1:33:c1:c9:9b:3a: c1:43:42:68:32:a0:2f:68:9d:e3:2e:cf:cc:bb:56: 38:5b:1e:5f:34:7e:37:d8:35:6e:cf:60:10:b4:1f: 23:b5:3c:7c:88:35:e4:9f:75:26:2d:99:30:ab:04: 27:5d:5f:18:7c:a8:02:36:11:8f:d6:62:84:ed:1d: 73:67:24:45:8e:00:86:52:1f:34:85:d5:64:06:49: 65:ca:8b:c9:22:1e:d2:40:9a:8a:4b:87:8b:50:45: a7:50:32:d7:a6:84:44:77:64:58:dd:8d:e1:46:74: 4e:ac:52:24:d3:4c:a6:88:15:e9:d9:87:61:93:1c: 5a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:CA:CB:AE:33:33:2B:39:FA:7F:B5:E0:50:D8:AF:98:E8:99:3C:B0 X509v3 Authority Key Identifier: keyid:C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:14:aa:35:ea:a6:5b:fc:ad:8f:95:26:b4:c9:5a:e4:e7:9d: 3e:92:76:ab:57:df:d8:ff:d3:78:2c:13:d0:f8:c5:4b:67:9c: eb:e4:dc:d9:50:c0:14:18:e9:a5:e3:37:a2:7c:f4:57:eb:ad: 16:b8:80:12:98:bb:f7:56:41:0f:43:4b:35:cf:3e:af:a6:9f: 86:4f:28:96:7f:0e:da:6e:5a:24:c6:8e:ec:41:37:b3:49:63: f8:4a:23:e6:88:d7:46:b1:a2:13:4d:81:0a:5d:a8:ce:68:d9: a0:41:4e:2a:d4:af:89:48:03:e5:17:86:97:ec:c0:f5:02:c9: 3c:42:d8:b7:e0:90:3c:32:4d:b7:a3:38:bc:34:68:f4:3c:51: 0d:3a:b5:94:31:39:e6:67:67:6f:20:56:f0:6b:40:9d:8c:57: b7:a4:83:21:b4:37:54:81:7c:47:4d:8d:9b:4e:88:ec:00:43: 61:ae:99:d7:45:8f:55:e0:e0:fe:0a:51:c4:fd:f0:ea:8d:16: 6e:00:4b:03:92:4c:ff:21:29:1f:8f:cf:b5:0d:2c:68:11:ae: 4c:34:7d:1a:f9:c7:63:29:c2:d0:a5:a1:f7:78:92:dd:a1:a4: eb:85:12:07:56:05:56:3e:c5:23:a7:71:1f:d8:1e:8a:28:d6: ed:89:8f:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCf9ozoWpxONHHmTAEmJVbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5N2VkY2VkZWMzMjU0YjM1N2IwOTYxNWEwMmIxNmUwNmVi ZTYzZWIwHhcNMjUxMjIxMjAwMDMzWhcNMjUxMjIyMjAwMDMzWjAzMTEwLwYDVQQD EygxNWNhY2JhZTMzMzMyYjM5ZmE3ZmI1ZTA1MGQ4YWY5OGU4OTkzY2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJFDBbayHZ4KYQn3YqWeHXEbQFs4 sD2i7Frv5PymU+TIdmxPuj/ny+iycSZPk3QpNVZxG2zRUp2BPDxKNRk/ThNbfjl6 iWVBR2zEtSMEp5fb2XnNlUxY7ELN0U9pIlPKIiXQ758JBn32bVYP6Lg06MpLWvxU Auc5bxheBXq2FGDBM8HJmzrBQ0JoMqAvaJ3jLs/Mu1Y4Wx5fNH432DVuz2AQtB8j tTx8iDXkn3UmLZkwqwQnXV8YfKgCNhGP1mKE7R1zZyRFjgCGUh80hdVkBkllyovJ Ih7SQJqKS4eLUEWnUDLXpoREd2RY3Y3hRnROrFIk00ymiBXp2YdhkxxazwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXKy64zMys5+n+14FDYr5jomTywMB8GA1UdIwQY MBaAFMl+3O3sMlSzV7CWFaArFuBuvmPrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVg3Yzdld3lWTE5Yc0pZVm9Dc1c0RzYtWS1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lZmQyODItMzNiMi00MzczLTk5NDgt MzIzOWE4MWM5ZmM4LzEveVg3Yzdld3lWTE5Yc0pZVm9Dc1c0RzYtWS1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9lZmQyODItMzNiMi00MzczLTk5NDgtMzIzOWE4MWM5ZmM4 LzEveVg3Yzdld3lWTE5Yc0pZVm9Dc1c0RzYtWS1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmBSqNeqm W/ytj5UmtMla5OedPpJ2q1ff2P/TeCwT0PjFS2ec6+Tc2VDAFBjppeM3onz0V+ut FriAEpi791ZBD0NLNc8+r6afhk8oln8O2m5aJMaO7EE3s0lj+Eoj5ojXRrGiE02B Cl2ozmjZoEFOKtSviUgD5ReGl+zA9QLJPELYt+CQPDJNt6M4vDRo9DxRDTq1lDE5 5mdnbyBW8GtAnYxXt6SDIbQ3VIF8R02Nm06I7ABDYa6Z10WPVeDg/gpRxP3w6o0W bgBLA5JM/yEpH4/PtQ0saBGuTDR9GvnHYynC0KWh93iS3aGk64USB1YFVj7FI6dx H9geiijW7YmPJg== -----END CERTIFICATE-----Generated at Sun Dec 21 22:38:58 2025 by rpki-client