This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft File: yvF4APGUOvHFFChMw754Dpwh3Xg.mft (raw, json) Hash identifier: 2ZAYlbxihFi/hQhmc3OdHtCpz1yTbhGzGjZc4FlLzR0= Subject key identifier: 9C:BE:4C:BD:DC:93:8E:F9:A5:01:26:8B:D9:EC:9C:39:BF:EC:C5:8C Authority key identifier: CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78 Certificate issuer: /CN=caf17800f1943af1c514284cc3be780e9c21dd78 Certificate serial: 019B397DA493DE8EE14A6F18ABA2E031EE39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft Manifest number: 0BD4 Signing time: Sat 20 Dec 2025 02:01:33 +0000 Manifest this update: Sat 20 Dec 2025 02:01:33 +0000 Manifest next update: Sun 21 Dec 2025 02:01:33 +0000 Files and hashes: 1: sjAjhtjT9idj_VOPKz21hZUiTyM.roa (hash: GIvaCG/17riJHZiERj633+3ciTXhudtU1ZczZq4oF9g=) 2: yvF4APGUOvHFFChMw754Dpwh3Xg.crl (hash: mlEuluRsrRmB/MEYnK+bLk/Rxr/omw2tdKR2teC1Lz0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:a4:93:de:8e:e1:4a:6f:18:ab:a2:e0:31:ee:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf17800f1943af1c514284cc3be780e9c21dd78 Validity Not Before: Dec 20 02:01:33 2025 GMT Not After : Dec 21 02:01:33 2025 GMT Subject: CN=9cbe4cbddc938ef9a501268bd9ec9c39bfecc58c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:52:36:c3:61:d9:ba:d9:69:a9:77:6e:99:2f: 5e:ae:f2:9a:19:b8:50:70:85:a5:2f:3d:8c:a1:38: 7f:86:bd:69:27:e6:85:0e:31:59:57:84:20:59:25: 5b:ac:09:f2:45:32:d7:e3:e8:b0:96:87:91:21:63: 5a:61:8c:6d:45:64:76:68:29:ff:35:58:29:81:32: 6b:16:d3:8f:ab:91:fd:08:5d:1b:93:c2:eb:06:4e: 6c:3a:e9:ec:ac:19:16:c8:e1:c2:3b:81:19:3b:cd: 54:43:d9:ee:40:c3:d6:27:b5:eb:32:ac:d4:9a:42: fc:95:7a:48:13:64:6c:31:e3:e9:a0:ee:74:4b:ec: 20:37:ac:fa:51:95:cf:8c:77:a6:7b:b2:7d:12:8c: 7a:d8:c9:2a:5b:76:a7:92:0d:d3:99:65:7b:3f:d9: 1d:34:43:a8:e8:67:39:4e:6d:c6:6a:aa:ba:53:c5: de:13:30:65:3a:1b:b1:f6:a0:34:fa:37:09:36:64: e7:f8:29:66:91:41:62:07:77:91:52:d0:81:c3:d7: 07:19:cd:d6:b7:1f:d8:cd:b1:eb:31:61:78:ad:72: 76:7b:42:e6:d7:ab:59:f1:c0:7a:b5:da:1f:d8:be: 7b:15:40:f1:99:9a:e1:24:cb:51:dc:3d:66:b5:06: 8c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BE:4C:BD:DC:93:8E:F9:A5:01:26:8B:D9:EC:9C:39:BF:EC:C5:8C X509v3 Authority Key Identifier: keyid:CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:f7:39:18:d8:80:14:36:ce:ee:75:17:cd:33:68:d5:c5:8a: 49:c7:8a:30:da:6c:3a:56:82:11:b4:60:3c:47:ce:a5:6e:31: 18:40:c1:30:96:06:c0:7c:f0:26:8b:da:9a:cf:bf:3b:3c:73: ce:81:6a:15:34:f5:a9:3e:77:3a:27:17:fb:e2:42:37:47:6d: 1c:9c:82:67:24:6c:e5:5f:bb:33:ad:59:aa:6a:16:37:78:ce: 97:91:07:dd:0a:b9:d7:74:a3:79:a1:1f:05:c6:c4:a6:ba:bf: a2:17:e9:fc:38:48:94:91:3c:12:2f:f8:c8:22:3f:be:4e:36: ac:52:52:46:b9:bc:29:85:0d:c0:38:2d:f7:bb:f2:8c:b1:2d: 93:52:b9:59:a8:f4:37:14:d3:ed:02:1f:dd:22:2f:a6:0b:fd: e0:72:72:a7:33:23:6c:96:30:f0:60:19:05:be:29:a1:dd:e0: fa:fb:0d:b9:6b:67:49:37:6e:54:10:5f:27:f9:32:78:c8:55: ce:55:8e:5d:22:cb:d9:a5:a5:cb:47:2f:db:f8:6d:9e:e7:8f: 80:4b:8c:12:ff:c5:76:c4:8e:97:1b:1c:51:81:07:14:99:d0: c1:14:81:10:7a:4a:29:25:d3:01:4c:25:c0:9d:fe:40:8c:d5: 12:f7:e7:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5faST3o7hSm8Yq6LgMe45MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZjE3ODAwZjE5NDNhZjFjNTE0Mjg0Y2MzYmU3ODBlOWMy MWRkNzgwHhcNMjUxMjIwMDIwMTMzWhcNMjUxMjIxMDIwMTMzWjAzMTEwLwYDVQQD Eyg5Y2JlNGNiZGRjOTM4ZWY5YTUwMTI2OGJkOWVjOWMzOWJmZWNjNThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lI2w2HZutlpqXdumS9ervKaGbhQ cIWlLz2MoTh/hr1pJ+aFDjFZV4QgWSVbrAnyRTLX4+iwloeRIWNaYYxtRWR2aCn/ NVgpgTJrFtOPq5H9CF0bk8LrBk5sOunsrBkWyOHCO4EZO81UQ9nuQMPWJ7XrMqzU mkL8lXpIE2RsMePpoO50S+wgN6z6UZXPjHeme7J9Eox62MkqW3ankg3TmWV7P9kd NEOo6Gc5Tm3Gaqq6U8XeEzBlOhux9qA0+jcJNmTn+ClmkUFiB3eRUtCBw9cHGc3W tx/YzbHrMWF4rXJ2e0Lm16tZ8cB6tdof2L57FUDxmZrhJMtR3D1mtQaMwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJy+TL3ck475pQEmi9nsnDm/7MWMMB8GA1UdIwQY MBaAFMrxeADxlDrxxRQoTMO+eA6cId14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXZGNEFQR1VPdkhGRkNoTXc3NTREcHdoM1hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NjlhY2UtZjg2NC00NGQ3LWEwN2Ut ODA1OTdlYjQ0NDI2LzEveXZGNEFQR1VPdkhGRkNoTXc3NTREcHdoM1hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82NjlhY2UtZjg2NC00NGQ3LWEwN2UtODA1OTdlYjQ0NDI2 LzEveXZGNEFQR1VPdkhGRkNoTXc3NTREcHdoM1hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIvc5GNiA FDbO7nUXzTNo1cWKSceKMNpsOlaCEbRgPEfOpW4xGEDBMJYGwHzwJovams+/Ozxz zoFqFTT1qT53OicX++JCN0dtHJyCZyRs5V+7M61ZqmoWN3jOl5EH3Qq513SjeaEf BcbEprq/ohfp/DhIlJE8Ei/4yCI/vk42rFJSRrm8KYUNwDgt97vyjLEtk1K5Waj0 NxTT7QIf3SIvpgv94HJypzMjbJYw8GAZBb4pod3g+vsNuWtnSTduVBBfJ/kyeMhV zlWOXSLL2aWly0cv2/htnuePgEuMEv/FdsSOlxscUYEHFJnQwRSBEHpKKSXTAUwl wJ3+QIzVEvfnOw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:34:19 2025 by rpki-client