This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft File: yNMivrfjY_TUV14eT-7lzLhOEnU.mft (raw, json) Hash identifier: zOoUoQcoxA5N8jl9sNhdblFXZgOV1Xv56OHSZTtt4V0= Subject key identifier: FC:EA:97:35:FC:F4:A9:5F:92:AC:43:AE:2B:0C:87:47:C2:01:BE:D7 Authority key identifier: C8:D3:22:BE:B7:E3:63:F4:D4:57:5E:1E:4F:EE:E5:CC:B8:4E:12:75 Certificate issuer: /CN=c8d322beb7e363f4d4575e1e4feee5ccb84e1275 Certificate serial: 019B3CEC4ACD1159860C1567C99BB71F2043 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 18:01:17 +0000 Manifest this update: Sat 20 Dec 2025 18:01:17 +0000 Manifest next update: Sun 21 Dec 2025 18:01:17 +0000 Files and hashes: 1: nvq-TJNbL0ajM2TA5cfgJ-DqXBg.roa (hash: pDByD6dp3Va0k7qBPd8tHFheIh5zQKazx/nAE02gXa4=) 2: yNMivrfjY_TUV14eT-7lzLhOEnU.crl (hash: +ASzHTBhdJoREt14fqeC2MIF/K2dgzVW9BK9qxentUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:4a:cd:11:59:86:0c:15:67:c9:9b:b7:1f:20:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8d322beb7e363f4d4575e1e4feee5ccb84e1275 Validity Not Before: Dec 20 18:01:17 2025 GMT Not After : Dec 21 18:01:17 2025 GMT Subject: CN=fcea9735fcf4a95f92ac43ae2b0c8747c201bed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0d:56:92:94:bb:0b:bf:2b:2e:57:c8:ce:dc: 61:9b:da:ca:f3:be:6c:61:83:9f:0a:04:5f:2d:28: 75:c8:b0:57:e1:6b:50:78:22:84:1b:3d:f6:49:78: 7c:62:b0:dd:3d:2b:9c:7e:c9:62:5f:62:cc:7e:14: 2a:cd:cf:05:e3:9a:ae:b4:ed:0e:41:d9:50:2e:af: 08:2c:18:6d:bf:00:56:d6:50:83:53:89:78:be:68: a1:5c:75:31:3e:ca:8f:e5:eb:68:b4:f9:56:c9:82: 05:42:9c:13:2d:14:24:01:ea:56:3a:f8:b4:2b:58: a5:85:11:e4:47:0a:77:3c:78:01:a1:4f:ba:99:43: c2:68:e3:b1:87:6d:b5:11:b1:6f:60:ba:2e:7a:39: 68:09:12:5c:61:3c:8e:74:63:b2:cd:bf:3b:fb:79: 38:7b:09:40:d1:56:76:65:cc:55:71:ce:a3:db:5e: 01:cd:db:78:95:c8:47:7f:3c:81:0d:04:87:94:5e: 5f:df:5d:21:cf:35:f6:c9:e1:5c:6c:64:3b:28:7c: fa:01:d4:75:5e:73:af:73:2c:85:d4:53:58:8d:5a: 1a:7a:dd:fc:0a:74:7c:c4:6d:c5:be:8b:c6:14:23: e1:ae:75:41:d4:21:76:d3:be:99:21:cb:3b:02:30: a4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:EA:97:35:FC:F4:A9:5F:92:AC:43:AE:2B:0C:87:47:C2:01:BE:D7 X509v3 Authority Key Identifier: keyid:C8:D3:22:BE:B7:E3:63:F4:D4:57:5E:1E:4F:EE:E5:CC:B8:4E:12:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:71:98:f4:2e:48:99:29:a9:db:bc:0e:aa:aa:1f:a6:84:cd: a7:78:a2:da:2a:12:e8:24:3f:21:15:31:de:b4:7f:20:1a:d0: c2:eb:1b:b9:25:d7:e4:76:32:2a:fe:a6:ea:be:ec:eb:2e:ec: 09:87:5a:aa:02:b5:8b:50:ef:70:b7:67:5e:46:21:9a:09:01: e0:60:62:ef:f9:2d:c8:39:13:83:cd:a7:17:1a:76:83:2a:23: 6d:78:70:5c:b0:06:7c:5c:c9:fc:1f:ea:8e:34:ed:ba:a9:f7: 4c:fa:9f:91:6e:8b:ca:59:be:11:98:19:10:2a:93:c2:42:4c: e8:9c:51:60:22:9a:dc:3c:b3:cc:20:04:0d:1f:ff:4f:0c:58: fd:a5:45:bc:6d:e9:b7:6f:fc:3b:49:c7:66:2e:ea:8d:75:6f: be:7f:08:c5:eb:2a:18:c0:d6:44:9b:ba:aa:f4:a3:f8:e9:e6: e5:54:4d:76:dc:9f:0d:96:e3:47:c8:d9:09:54:e8:86:9a:99: 36:d6:07:a4:9f:89:d8:ee:e7:a0:02:b5:3d:b7:fa:6a:81:2f: ef:5a:e0:11:da:64:ff:36:28:51:ec:a9:f1:2d:28:ed:f1:98: e5:5c:59:9f:15:61:0a:c9:a9:d0:7f:d2:70:03:b7:8a:30:c3: 54:3c:ba:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87ErNEVmGDBVnyZu3HyBDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZDMyMmJlYjdlMzYzZjRkNDU3NWUxZTRmZWVlNWNjYjg0 ZTEyNzUwHhcNMjUxMjIwMTgwMTE3WhcNMjUxMjIxMTgwMTE3WjAzMTEwLwYDVQQD EyhmY2VhOTczNWZjZjRhOTVmOTJhYzQzYWUyYjBjODc0N2MyMDFiZWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg1WkpS7C78rLlfIztxhm9rK875s YYOfCgRfLSh1yLBX4WtQeCKEGz32SXh8YrDdPSucfsliX2LMfhQqzc8F45qutO0O QdlQLq8ILBhtvwBW1lCDU4l4vmihXHUxPsqP5etotPlWyYIFQpwTLRQkAepWOvi0 K1ilhRHkRwp3PHgBoU+6mUPCaOOxh221EbFvYLouejloCRJcYTyOdGOyzb87+3k4 ewlA0VZ2ZcxVcc6j214Bzdt4lchHfzyBDQSHlF5f310hzzX2yeFcbGQ7KHz6AdR1 XnOvcyyF1FNYjVoaet38CnR8xG3FvovGFCPhrnVB1CF2076ZIcs7AjCkswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzqlzX89KlfkqxDrisMh0fCAb7XMB8GA1UdIwQY MBaAFMjTIr6342P01FdeHk/u5cy4ThJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU5NaXZyZmpZX1RVVjE0ZVQtN2x6TGhPRW5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lZjRkYjAtYjZjOS00N2FhLTg0YzEt ZGMzNzY5ZThmNmExLzEveU5NaXZyZmpZX1RVVjE0ZVQtN2x6TGhPRW5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9lZjRkYjAtYjZjOS00N2FhLTg0YzEtZGMzNzY5ZThmNmEx LzEveU5NaXZyZmpZX1RVVjE0ZVQtN2x6TGhPRW5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHGY9C5I mSmp27wOqqofpoTNp3ii2ioS6CQ/IRUx3rR/IBrQwusbuSXX5HYyKv6m6r7s6y7s CYdaqgK1i1DvcLdnXkYhmgkB4GBi7/ktyDkTg82nFxp2gyojbXhwXLAGfFzJ/B/q jjTtuqn3TPqfkW6Lylm+EZgZECqTwkJM6JxRYCKa3DyzzCAEDR//TwxY/aVFvG3p t2/8O0nHZi7qjXVvvn8IxesqGMDWRJu6qvSj+Onm5VRNdtyfDZbjR8jZCVTohpqZ NtYHpJ+J2O7noAK1Pbf6aoEv71rgEdpk/zYoUeyp8S0o7fGY5VxZnxVhCsmp0H/S cAO3ijDDVDy6Rw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:41:40 2025 by rpki-client