This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft File: yc040dHEojBTzZlxYzGNZJp7Klc.mft (raw, json) Hash identifier: gCNVRKk6i41tGO19d1Ddq4d+NgwRRcqBBSfZrrcDD0w= Subject key identifier: 8B:4F:45:05:BF:35:B0:67:0D:9A:C7:20:CE:F8:74:E6:AF:06:61:7C Authority key identifier: C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57 Certificate issuer: /CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57 Certificate serial: 019B3F11E196DD1C151AACFBE9C4020E0F83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 04:01:34 +0000 Manifest this update: Sun 21 Dec 2025 04:01:34 +0000 Manifest next update: Mon 22 Dec 2025 04:01:34 +0000 Files and hashes: 1: 85I4pfyLQKX8k9V-tQtyQU5bDYo.roa (hash: TN5K/hNnnHvE6u0/+9oRgawldt2710m801enGA9Infw=) 2: 9Ddwg04k-x748SWw8ZAq8FwjEC0.roa (hash: hAsF5Dd97oXArWDCgchVp4XLtAVACH5ddk2EH9+qQDM=) 3: yc040dHEojBTzZlxYzGNZJp7Klc.crl (hash: 5FDjzK+B+8k2PZX1Iq9wF/URnVl34R4/RHiBrloggoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:e1:96:dd:1c:15:1a:ac:fb:e9:c4:02:0e:0f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57 Validity Not Before: Dec 21 04:01:34 2025 GMT Not After : Dec 22 04:01:34 2025 GMT Subject: CN=8b4f4505bf35b0670d9ac720cef874e6af06617c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cb:fa:dd:c4:b6:da:30:cf:0e:1d:90:f3:9a: df:39:34:26:84:4c:aa:e0:c8:bd:d4:d9:90:a6:ad: 01:d8:1f:de:6e:14:05:81:ba:f8:75:f7:95:51:02: b4:aa:2c:f4:41:9b:56:c1:d9:99:90:c7:15:5c:3f: b4:0f:85:99:cf:d8:7c:dd:0b:a3:a9:45:42:39:44: fc:f9:1c:0d:5d:9a:dd:56:c5:8a:5e:a6:16:a2:71: 20:02:73:20:e3:d4:84:ba:a0:f9:8d:d4:73:17:23: cd:8d:f1:da:96:07:de:be:da:20:8c:d9:12:99:ce: 19:04:71:5e:72:67:98:2f:d1:88:0b:00:e8:3e:c2: 57:a6:5a:6f:77:79:84:3e:2d:c2:7b:9d:3f:a7:bb: eb:60:90:0f:af:67:18:b0:ba:6a:cf:1b:27:bf:b0: f1:3f:cb:48:56:78:a5:1a:78:64:8a:71:f5:42:d6: cf:4f:a1:0a:b0:e5:4e:4b:59:c2:7c:fb:e9:52:89: 7c:88:86:83:72:64:7f:a9:ae:7f:14:f5:01:33:ca: 15:d3:83:d8:cb:58:47:7b:4e:64:1a:66:75:27:e0: c4:ce:50:81:8a:4c:98:2e:02:30:e1:6d:8d:aa:a4: 8b:e9:76:e8:5f:79:fc:6d:82:09:fa:c4:d7:a6:30: eb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:4F:45:05:BF:35:B0:67:0D:9A:C7:20:CE:F8:74:E6:AF:06:61:7C X509v3 Authority Key Identifier: keyid:C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:91:07:37:e2:07:e9:d6:69:46:98:2a:b0:87:b8:fe:68:37: 4c:5f:b3:f6:cb:c7:45:68:0c:f4:56:90:88:39:04:43:74:77: 53:a5:9f:82:10:bc:ff:f1:d3:85:d4:fa:a6:4a:e9:21:a9:07: eb:b7:19:15:19:c7:df:d6:2e:5f:ed:f1:28:47:cc:16:c3:d0: 6b:f4:89:10:09:1d:0c:57:b5:4d:90:e0:46:40:d7:0a:3d:c0: 29:51:24:df:14:46:9f:28:2b:64:e4:ad:07:86:14:8d:36:2d: 10:3a:de:82:87:b1:8c:7e:3d:b5:1c:a0:14:20:02:97:c7:c9: 13:f8:e2:32:b9:e8:4d:d9:ad:04:4a:b4:82:a4:a4:09:57:ac: e6:af:e5:b3:fe:11:cf:65:50:16:c8:bb:1b:1d:fe:43:eb:98: b2:04:3f:96:85:54:48:3d:3e:12:5b:7c:7c:f0:32:83:f0:1a: c7:a9:45:cc:9a:6c:d5:d1:cc:30:f3:33:f8:5a:8f:78:64:0f: b7:7a:39:86:69:f7:22:c1:f8:9d:4b:19:d7:54:85:59:12:08: 33:b8:15:29:ee:a7:03:30:bc:13:4c:96:f1:17:a6:a4:66:aa: 35:42:bd:94:d8:a9:8e:b1:02:56:a7:c1:95:f4:f4:0b:f9:24: b1:a8:65:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EeGW3RwVGqz76cQCDg+DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5Y2QzOGQxZDFjNGEyMzA1M2NkOTk3MTYzMzE4ZDY0OWE3 YjJhNTcwHhcNMjUxMjIxMDQwMTM0WhcNMjUxMjIyMDQwMTM0WjAzMTEwLwYDVQQD Eyg4YjRmNDUwNWJmMzViMDY3MGQ5YWM3MjBjZWY4NzRlNmFmMDY2MTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncv63cS22jDPDh2Q85rfOTQmhEyq 4Mi91NmQpq0B2B/ebhQFgbr4dfeVUQK0qiz0QZtWwdmZkMcVXD+0D4WZz9h83Quj qUVCOUT8+RwNXZrdVsWKXqYWonEgAnMg49SEuqD5jdRzFyPNjfHalgfevtogjNkS mc4ZBHFecmeYL9GICwDoPsJXplpvd3mEPi3Ce50/p7vrYJAPr2cYsLpqzxsnv7Dx P8tIVnilGnhkinH1QtbPT6EKsOVOS1nCfPvpUol8iIaDcmR/qa5/FPUBM8oV04PY y1hHe05kGmZ1J+DEzlCBikyYLgIw4W2NqqSL6XboX3n8bYIJ+sTXpjDriQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItPRQW/NbBnDZrHIM74dOavBmF8MB8GA1UdIwQY MBaAFMnNONHRxKIwU82ZcWMxjWSaeypXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWMwNDBkSEVvakJUelpseFl6R05aSnA3S2xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yMmU0OWQtNjk1My00ZmM4LWE4OTYt YzVjMzU4ODM3YTg0LzEveWMwNDBkSEVvakJUelpseFl6R05aSnA3S2xjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8yMmU0OWQtNjk1My00ZmM4LWE4OTYtYzVjMzU4ODM3YTg0 LzEveWMwNDBkSEVvakJUelpseFl6R05aSnA3S2xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZEHN+IH 6dZpRpgqsIe4/mg3TF+z9svHRWgM9FaQiDkEQ3R3U6WfghC8//HThdT6pkrpIakH 67cZFRnH39YuX+3xKEfMFsPQa/SJEAkdDFe1TZDgRkDXCj3AKVEk3xRGnygrZOSt B4YUjTYtEDregoexjH49tRygFCACl8fJE/jiMrnoTdmtBEq0gqSkCVes5q/ls/4R z2VQFsi7Gx3+Q+uYsgQ/loVUSD0+Elt8fPAyg/Aax6lFzJps1dHMMPMz+FqPeGQP t3o5hmn3IsH4nUsZ11SFWRIIM7gVKe6nAzC8E0yW8RempGaqNUK9lNipjrECVqfB lfT0C/kksahlAw== -----END CERTIFICATE-----Generated at Sun Dec 21 07:47:28 2025 by rpki-client