This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft File: i_ynyW6ARQWki5lgPZshJPHdNwI.mft (raw, json) Hash identifier: aIvvdBwNrjdFwKGKve3k+gwubT0IG5FL2hngDDHZXyc= Subject key identifier: 76:22:92:7D:6D:12:6C:FC:31:60:5E:63:4B:C1:D8:9D:B0:11:27:4A Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02 Certificate issuer: /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702 Certificate serial: 019B563D9AC535D337D54B166E79DDEA154D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft Manifest number: 1797 Signing time: Thu 25 Dec 2025 16:00:36 +0000 Manifest this update: Thu 25 Dec 2025 16:00:36 +0000 Manifest next update: Fri 26 Dec 2025 16:00:36 +0000 Files and hashes: 1: 4sWj8i7vRryJSCNDCbfEp1hlcTg.roa (hash: vNPNBYN1nUhed4j+PRjHE75t7GtK+pbCWaOwWZ1P5Dk=) 2: GMZbdZf7DVTMVtG07UzJ8oYQZc8.roa (hash: uUSVFyEZfsZP1WTLjagwoDZc2IMdNsTiDoZDnsmStBw=) 3: OXFWEO59LWqNp3-W3eA61p6mEl4.roa (hash: jxmmKXt9r49nsxlJrTEnzRizABJyfl5jsZhQ3LTeKIk=) 4: gtsG_e5t3YAxHhnI_DHS901RwK8.roa (hash: 1lFl+Q6Ir4bOnT+mLXLb7DAr/V+reNwDxhD0ncFcb1M=) 5: i_ynyW6ARQWki5lgPZshJPHdNwI.crl (hash: KWyBFQ94UFD1Zv8SRg6AHxfIfXHQdKmLmSp7mZsZm74=) 6: jZLLv74nES8X7HrAvzMmRiiIMQ4.roa (hash: ToeBoYoZimyYyA3TOZCcbSyTu3TK4xRAHnCuvXcY/eo=) 7: vZSI2LaRad19lSy1p-p3fBBNwQk.roa (hash: axONSdCDQQuuZ1UzeZtig6WOLz6ES7sF69OmLUuGd5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 16:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:3d:9a:c5:35:d3:37:d5:4b:16:6e:79:dd:ea:15:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702 Validity Not Before: Dec 25 16:00:36 2025 GMT Not After : Dec 26 16:00:36 2025 GMT Subject: CN=7622927d6d126cfc31605e634bc1d89db011274a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9f:70:a8:a1:8f:6c:af:f8:62:b1:0b:df:67: 38:06:75:c0:69:a2:2d:4c:5a:38:08:38:bb:59:5f: fb:d0:0d:52:87:1d:2d:5d:ca:d1:66:a0:39:32:b6: db:be:0f:1f:f2:5b:a6:ce:3a:7e:33:ef:79:f9:a2: 0f:b1:72:8c:f2:e7:11:3c:94:73:c8:71:59:ff:a7: 3c:da:7b:73:b3:db:50:66:44:75:6f:aa:74:b4:40: bb:fe:b1:fe:39:3a:4f:86:33:49:df:b3:b9:41:50: 2f:7e:b3:3c:10:d6:3b:73:bf:84:93:5c:2b:31:23: c6:d3:df:dd:08:40:b7:05:fd:61:9b:47:e8:f7:f5: 86:48:e0:bd:c3:af:8f:50:e9:11:e4:d5:2b:39:87: cb:b2:db:c2:bc:de:d7:16:4f:a4:2e:d9:ef:32:34: f2:6e:c0:8d:80:39:3c:ff:e4:35:b9:6e:7d:b0:44: 4b:f1:af:46:51:7a:82:5d:95:dd:57:25:62:88:15: 90:52:b5:9a:79:7c:29:ff:06:76:c5:40:4d:f9:f0: 32:8f:3e:04:d3:cf:d2:0c:25:db:19:a3:ac:fc:6f: c1:35:e0:2d:84:15:55:0b:ce:a8:ab:81:bc:5e:6e: 1b:54:25:06:51:b5:cc:5f:01:6b:d6:18:62:35:4d: ca:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:22:92:7D:6D:12:6C:FC:31:60:5E:63:4B:C1:D8:9D:B0:11:27:4A X509v3 Authority Key Identifier: keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:19:e5:3f:3a:66:8c:42:4d:fd:57:4e:d6:5a:92:a7:7e:63: 2e:ce:7f:3b:8f:8a:14:22:c5:9e:52:83:db:7f:18:51:37:bc: 02:15:51:31:e8:30:52:9f:e1:b8:67:5c:33:f4:de:3a:9d:62: 88:8d:41:74:dd:a6:3e:7e:cb:a0:f5:b2:66:e8:e2:6b:e5:f1: c7:20:03:c6:f1:72:11:ba:19:83:6f:6e:0b:c1:29:60:ce:c9: c2:6c:62:9d:76:bf:72:e8:66:43:de:c9:07:00:81:86:6d:2b: 6b:fb:74:ac:0f:28:26:a2:83:12:08:2e:af:11:a8:81:62:e8: ea:2c:60:12:43:c2:ea:da:dd:d0:f1:f6:0a:8a:ca:b3:b9:29: 48:39:25:41:c9:08:df:3e:8d:67:62:0f:51:71:b0:41:57:29: 1e:32:29:d1:a5:15:2d:6f:0c:ed:c8:97:5f:c7:18:73:4d:82: a6:e8:dd:cf:c9:ec:77:ae:58:bb:f9:6b:e1:5e:f6:7c:88:9a: 07:21:09:43:e5:0d:ee:1e:47:20:18:14:10:74:04:2f:d8:2e: 49:17:4b:24:48:c2:8f:39:e4:a9:dc:e1:bc:db:89:ce:c6:ac: b9:55:67:78:59:5d:48:08:01:13:e8:ea:dd:33:ad:9f:11:cb: 31:86:1a:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWPZrFNdM31UsWbnnd6hVNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZmNhN2M5NmU4MDQ1MDVhNDhiOTk2MDNkOWIyMTI0ZjFk ZDM3MDIwHhcNMjUxMjI1MTYwMDM2WhcNMjUxMjI2MTYwMDM2WjAzMTEwLwYDVQQD Eyg3NjIyOTI3ZDZkMTI2Y2ZjMzE2MDVlNjM0YmMxZDg5ZGIwMTEyNzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ9wqKGPbK/4YrEL32c4BnXAaaIt TFo4CDi7WV/70A1Shx0tXcrRZqA5Mrbbvg8f8lumzjp+M+95+aIPsXKM8ucRPJRz yHFZ/6c82ntzs9tQZkR1b6p0tEC7/rH+OTpPhjNJ37O5QVAvfrM8ENY7c7+Ek1wr MSPG09/dCEC3Bf1hm0fo9/WGSOC9w6+PUOkR5NUrOYfLstvCvN7XFk+kLtnvMjTy bsCNgDk8/+Q1uW59sERL8a9GUXqCXZXdVyViiBWQUrWaeXwp/wZ2xUBN+fAyjz4E 08/SDCXbGaOs/G/BNeAthBVVC86oq4G8Xm4bVCUGUbXMXwFr1hhiNU3KkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYikn1tEmz8MWBeY0vB2J2wESdKMB8GA1UdIwQY MBaAFIv8p8lugEUFpIuZYD2bISTx3TcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAt MThiMWE5MzdhNTY3LzEvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAtMThiMWE5MzdhNTY3 LzEvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxnlPzpm jEJN/VdO1lqSp35jLs5/O4+KFCLFnlKD238YUTe8AhVRMegwUp/huGdcM/TeOp1i iI1BdN2mPn7LoPWyZujia+XxxyADxvFyEboZg29uC8EpYM7JwmxinXa/cuhmQ97J BwCBhm0ra/t0rA8oJqKDEggurxGogWLo6ixgEkPC6trd0PH2CorKs7kpSDklQckI 3z6NZ2IPUXGwQVcpHjIp0aUVLW8M7ciXX8cYc02Cpujdz8nsd65Yu/lr4V72fIia ByEJQ+UN7h5HIBgUEHQEL9guSRdLJEjCjznkqdzhvNuJzsasuVVneFldSAgBE+jq 3TOtnxHLMYYafg== -----END CERTIFICATE-----Generated at Thu Dec 25 22:25:19 2025 by rpki-client