This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft File: i_ynyW6ARQWki5lgPZshJPHdNwI.mft (raw, json) Hash identifier: vHsxXS5sI8D9/G4A7GWPMl7PV+vov56VAn5W+uSkrEQ= Subject key identifier: D0:E5:E9:17:48:25:1D:31:10:AA:29:50:32:85:36:55:73:50:77:CB Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02 Certificate issuer: /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702 Certificate serial: 019B3B34805C162E2B3D848974BFADBB45FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 10:00:54 +0000 Manifest this update: Sat 20 Dec 2025 10:00:54 +0000 Manifest next update: Sun 21 Dec 2025 10:00:54 +0000 Files and hashes: 1: 4sWj8i7vRryJSCNDCbfEp1hlcTg.roa (hash: vNPNBYN1nUhed4j+PRjHE75t7GtK+pbCWaOwWZ1P5Dk=) 2: GMZbdZf7DVTMVtG07UzJ8oYQZc8.roa (hash: uUSVFyEZfsZP1WTLjagwoDZc2IMdNsTiDoZDnsmStBw=) 3: OXFWEO59LWqNp3-W3eA61p6mEl4.roa (hash: jxmmKXt9r49nsxlJrTEnzRizABJyfl5jsZhQ3LTeKIk=) 4: gtsG_e5t3YAxHhnI_DHS901RwK8.roa (hash: 1lFl+Q6Ir4bOnT+mLXLb7DAr/V+reNwDxhD0ncFcb1M=) 5: i_ynyW6ARQWki5lgPZshJPHdNwI.crl (hash: XngGgwQnZKejHd9WZIV/FZGg+8PfcAr945VjluQJ8mI=) 6: jZLLv74nES8X7HrAvzMmRiiIMQ4.roa (hash: ToeBoYoZimyYyA3TOZCcbSyTu3TK4xRAHnCuvXcY/eo=) 7: vZSI2LaRad19lSy1p-p3fBBNwQk.roa (hash: axONSdCDQQuuZ1UzeZtig6WOLz6ES7sF69OmLUuGd5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:80:5c:16:2e:2b:3d:84:89:74:bf:ad:bb:45:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702 Validity Not Before: Dec 20 10:00:54 2025 GMT Not After : Dec 21 10:00:54 2025 GMT Subject: CN=d0e5e91748251d3110aa295032853655735077cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:df:9c:55:65:93:18:85:d0:b1:36:2e:ea:95: 8e:8e:e2:59:63:65:1a:4d:b1:9b:f8:49:ee:a5:0d: 0a:5f:30:12:ab:11:bb:d7:f9:c2:1f:e0:08:77:22: bc:cd:37:48:60:1a:d5:cd:03:e1:1e:a0:6d:4e:a0: 8b:37:d1:a1:fa:f0:20:7e:dd:b1:be:9e:d4:c0:e8: 62:de:71:3c:c8:e4:b7:1d:67:2e:34:6e:73:0d:bc: 95:fb:eb:5a:9a:05:b7:3c:3a:6e:f9:2e:d0:b6:d8: c3:9f:15:d4:e2:45:fc:b9:a4:c5:75:7c:12:27:6c: 64:80:72:52:cf:01:33:24:86:f4:72:0f:83:81:d9: 39:e5:62:39:8d:4f:82:f9:9c:5f:f5:51:27:33:2f: 08:0a:a3:4b:f7:6e:a8:23:71:89:fc:af:ad:5a:0d: 2c:52:ff:8d:56:14:8c:91:b7:40:b1:28:c0:d7:85: 54:83:09:44:e8:08:bc:9a:c3:ca:34:eb:60:1e:6b: 3f:4f:6b:de:c9:8f:bb:e2:71:2b:6f:d4:a1:7e:e1: 5c:73:58:a8:20:52:71:9d:d7:14:bc:f6:22:2c:c9: 89:04:d8:53:d3:5d:62:65:cc:34:11:0c:46:a4:e9: 5b:06:73:a2:71:69:d6:e9:44:4e:6e:4d:5e:1f:e6: c4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E5:E9:17:48:25:1D:31:10:AA:29:50:32:85:36:55:73:50:77:CB X509v3 Authority Key Identifier: keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:b0:b5:ff:be:48:47:42:39:e6:53:69:bf:06:df:89:18:fc: 63:3b:5a:a0:7b:eb:77:2e:d3:a2:2f:f4:b4:6b:76:28:81:e5: 29:f4:db:ae:06:d0:07:58:4e:5e:03:d1:c8:c4:3d:d1:f9:2b: 2f:44:15:2c:d9:68:22:34:86:fa:52:1e:ba:d2:ac:1c:bf:89: f8:eb:0b:5c:45:34:84:9b:54:43:80:25:3d:88:ad:f1:8e:59: 7d:5a:a5:06:ba:3b:3f:b9:ef:46:d3:2a:82:6c:48:61:4f:25: a0:3c:96:6b:c6:d7:2d:3b:45:e2:dd:ae:a7:9b:b4:4e:99:ef: 0f:5a:88:da:68:01:2d:67:8c:41:c6:72:f2:be:dc:43:56:0b: 0f:ea:da:db:89:a5:89:d9:4c:fe:38:ad:e3:f1:26:52:4e:67: 3d:e4:d2:7b:51:44:78:f4:e6:9e:fc:7f:fe:59:bd:60:9e:e1: b5:6d:ae:26:b7:6c:12:5d:ed:a9:b1:c2:f6:04:9b:16:9f:ca: a9:07:a9:04:c9:08:21:c5:c6:4e:6c:11:f5:0c:f8:1b:b6:0b: 7f:21:47:4d:9c:36:d1:52:6e:d3:dd:94:30:22:ad:16:8a:4c: c8:c8:03:e1:e7:15:f7:1b:34:93:3e:d6:4c:5c:12:d6:00:dd: aa:70:e6:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NIBcFi4rPYSJdL+tu0X7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZmNhN2M5NmU4MDQ1MDVhNDhiOTk2MDNkOWIyMTI0ZjFk ZDM3MDIwHhcNMjUxMjIwMTAwMDU0WhcNMjUxMjIxMTAwMDU0WjAzMTEwLwYDVQQD EyhkMGU1ZTkxNzQ4MjUxZDMxMTBhYTI5NTAzMjg1MzY1NTczNTA3N2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0N+cVWWTGIXQsTYu6pWOjuJZY2Ua TbGb+EnupQ0KXzASqxG71/nCH+AIdyK8zTdIYBrVzQPhHqBtTqCLN9Gh+vAgft2x vp7UwOhi3nE8yOS3HWcuNG5zDbyV++tamgW3PDpu+S7QttjDnxXU4kX8uaTFdXwS J2xkgHJSzwEzJIb0cg+Dgdk55WI5jU+C+Zxf9VEnMy8ICqNL926oI3GJ/K+tWg0s Uv+NVhSMkbdAsSjA14VUgwlE6Ai8msPKNOtgHms/T2veyY+74nErb9ShfuFcc1io IFJxndcUvPYiLMmJBNhT011iZcw0EQxGpOlbBnOicWnW6URObk1eH+bEqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNDl6RdIJR0xEKopUDKFNlVzUHfLMB8GA1UdIwQY MBaAFIv8p8lugEUFpIuZYD2bISTx3TcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAt MThiMWE5MzdhNTY3LzEvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAtMThiMWE5MzdhNTY3 LzEvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvrC1/75I R0I55lNpvwbfiRj8YztaoHvrdy7Toi/0tGt2KIHlKfTbrgbQB1hOXgPRyMQ90fkr L0QVLNloIjSG+lIeutKsHL+J+OsLXEU0hJtUQ4AlPYit8Y5ZfVqlBro7P7nvRtMq gmxIYU8loDyWa8bXLTtF4t2up5u0TpnvD1qI2mgBLWeMQcZy8r7cQ1YLD+ra24ml idlM/jit4/EmUk5nPeTSe1FEePTmnvx//lm9YJ7htW2uJrdsEl3tqbHC9gSbFp/K qQepBMkIIcXGTmwR9Qz4G7YLfyFHTZw20VJu092UMCKtFopMyMgD4ecV9xs0kz7W TFwS1gDdqnDmrA== -----END CERTIFICATE-----Generated at Sat Dec 20 13:35:17 2025 by rpki-client