This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft File: yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json) Hash identifier: lpY2p9CenAkXrkEU9jdifP4+qIc/yIy7KQs1IqPy6DM= Subject key identifier: 9C:CA:A1:13:AC:89:76:53:42:EB:CC:1C:1E:1A:A1:15:24:E0:62:97 Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B Certificate issuer: /CN=c97dc6d8df5d084e923063488d37d3ae0114777b Certificate serial: 019B6EB3BDEED089FFB9DDE295CF6561D0DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft Manifest number: 17A4 Signing time: Tue 30 Dec 2025 10:00:31 +0000 Manifest this update: Tue 30 Dec 2025 10:00:31 +0000 Manifest next update: Wed 31 Dec 2025 10:00:31 +0000 Files and hashes: 1: 4nT-1vcQu44Sr-GCt6E0ooWA0hc.roa (hash: 9TU/QChXgdZn/WcufvGJiX+DQZh8m5mR65S2JB7VAL8=) 2: 7t39UO78LeFsKwD7CJstzTknIXs.roa (hash: QthZq6ZVZqJtxtcGdDvDYL6VwA/yafoVzBmUfyLehqw=) 3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: gOjhQ1MT/ctiWKsBMmYeNP2zq4Dcdew1TToqbJrqD50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:b3:bd:ee:d0:89:ff:b9:dd:e2:95:cf:65:61:d0:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b Validity Not Before: Dec 30 10:00:31 2025 GMT Not After : Dec 31 10:00:31 2025 GMT Subject: CN=9ccaa113ac89765342ebcc1c1e1aa11524e06297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f9:35:aa:06:62:01:95:1f:f5:f7:f7:15:48: 89:35:73:b4:ce:8a:8c:16:1b:f2:c2:9d:40:79:4a: 3e:7b:d3:43:38:60:37:fb:ee:83:42:61:c4:41:91: d1:7f:82:73:c2:b6:71:c6:b6:55:88:8d:4f:d9:61: b1:e3:07:57:02:2c:3f:7c:ea:dc:70:5b:b2:5e:8e: 2f:bb:1f:3a:b0:1c:d3:d6:58:bb:9b:fc:c2:32:7c: 26:1d:ff:cb:c3:71:51:df:60:ee:6f:c3:08:b5:fe: dc:c7:53:d1:3b:a7:db:9b:a1:80:52:59:d2:ae:ab: c2:4e:34:26:bb:e9:05:56:e0:ed:6f:1a:e1:cd:6e: d0:f9:a6:d9:4f:b4:59:b9:b8:1b:bd:f8:44:f3:d7: 8e:9d:b6:52:c9:76:45:73:ef:05:1a:2e:13:91:38: b3:9d:96:74:70:ae:87:ac:3b:85:8a:c5:c5:80:b7: 62:a6:f3:64:05:ac:1e:f2:cb:80:3f:e5:8e:6b:c9: fc:40:fc:bd:d0:55:fe:ab:20:0d:29:03:9a:09:d0: 4e:89:78:03:bb:06:3b:a6:b1:86:67:2c:3c:50:48: b3:3a:0a:b1:56:71:24:59:b8:a9:29:a8:ad:f4:d7: 19:fe:a0:6d:ab:94:26:d6:50:9f:8c:db:69:79:4c: dd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CA:A1:13:AC:89:76:53:42:EB:CC:1C:1E:1A:A1:15:24:E0:62:97 X509v3 Authority Key Identifier: keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b9:05:18:20:2b:bc:b2:96:d9:09:cc:c7:94:ba:30:bb:87: ff:0e:dc:c6:5a:4a:a5:c0:7d:28:20:ee:bd:6a:6a:68:c0:1e: 52:a7:f3:d6:9a:cf:e3:46:2c:fe:58:20:8b:c7:34:c4:23:c5: 8e:d3:b2:a9:e0:08:40:97:69:3f:10:09:45:a0:d5:26:c9:84: f9:9c:0d:9d:f2:d0:1e:fa:cd:2b:a1:5f:ec:7d:c5:3a:21:71: 79:f7:c5:3c:ac:f3:1b:99:0b:41:0b:41:d6:c2:5f:cd:83:5d: 40:f8:be:5a:d8:7d:bf:bb:db:4e:4d:65:c7:30:f8:b7:f7:df: 97:26:56:12:64:46:f5:f0:57:d2:f0:ee:74:86:0f:62:0b:fd: 56:9e:07:88:f8:f3:e4:ed:bf:d6:ca:b9:31:a8:8e:23:cf:a5: 47:c8:7b:23:fc:56:e7:c7:61:b7:9a:e1:70:13:96:2d:a8:fa: d7:a2:24:2b:36:95:62:ed:88:c7:7b:df:87:60:99:54:40:03: 37:fd:09:4b:8c:87:e0:b3:d6:c5:69:a4:1a:55:51:86:b4:c4: bc:7c:a3:0d:41:dc:cf:40:aa:d9:b3:cd:96:63:a5:e7:80:cf: 53:13:b4:f7:cc:bc:e2:77:d5:77:84:14:ab:7b:85:a4:92:2a: da:c2:ac:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtus73u0In/ud3ilc9lYdDfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5N2RjNmQ4ZGY1ZDA4NGU5MjMwNjM0ODhkMzdkM2FlMDEx NDc3N2IwHhcNMjUxMjMwMTAwMDMxWhcNMjUxMjMxMTAwMDMxWjAzMTEwLwYDVQQD Eyg5Y2NhYTExM2FjODk3NjUzNDJlYmNjMWMxZTFhYTExNTI0ZTA2Mjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovk1qgZiAZUf9ff3FUiJNXO0zoqM Fhvywp1AeUo+e9NDOGA3++6DQmHEQZHRf4JzwrZxxrZViI1P2WGx4wdXAiw/fOrc cFuyXo4vux86sBzT1li7m/zCMnwmHf/Lw3FR32Dub8MItf7cx1PRO6fbm6GAUlnS rqvCTjQmu+kFVuDtbxrhzW7Q+abZT7RZubgbvfhE89eOnbZSyXZFc+8FGi4TkTiz nZZ0cK6HrDuFisXFgLdipvNkBawe8suAP+WOa8n8QPy90FX+qyANKQOaCdBOiXgD uwY7prGGZyw8UEizOgqxVnEkWbipKait9NcZ/qBtq5Qm1lCfjNtpeUzdFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzKoROsiXZTQuvMHB4aoRUk4GKXMB8GA1UdIwQY MBaAFMl9xtjfXQhOkjBjSI03064BFHd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVgzRzJOOWRDRTZTTUdOSWpUZlRyZ0VVZDNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8wZjY5MjAtMjc3MC00Y2JlLWE2NGYt MmE2YmMzODMyYTBhLzEveVgzRzJOOWRDRTZTTUdOSWpUZlRyZ0VVZDNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8wZjY5MjAtMjc3MC00Y2JlLWE2NGYtMmE2YmMzODMyYTBh LzEveVgzRzJOOWRDRTZTTUdOSWpUZlRyZ0VVZDNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbkFGCAr vLKW2QnMx5S6MLuH/w7cxlpKpcB9KCDuvWpqaMAeUqfz1prP40Ys/lggi8c0xCPF jtOyqeAIQJdpPxAJRaDVJsmE+ZwNnfLQHvrNK6Ff7H3FOiFxeffFPKzzG5kLQQtB 1sJfzYNdQPi+Wth9v7vbTk1lxzD4t/fflyZWEmRG9fBX0vDudIYPYgv9Vp4HiPjz 5O2/1sq5MaiOI8+lR8h7I/xW58dht5rhcBOWLaj616IkKzaVYu2Ix3vfh2CZVEAD N/0JS4yH4LPWxWmkGlVRhrTEvHyjDUHcz0Cq2bPNlmOl54DPUxO098y84nfVd4QU q3uFpJIq2sKsbA== -----END CERTIFICATE-----Generated at Tue Dec 30 12:12:59 2025 by rpki-client