This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft File: yjevCVET2t1bxRveu_CtNNbu22Q.mft (raw, json) Hash identifier: HkAXfl7rgBHn3ktqVeBm29BWwZA4HzIGceN12DaDEjw= Subject key identifier: 52:B7:35:0D:0A:79:A6:D2:D0:DD:F5:34:FF:D5:A6:BF:59:8E:59:6C Authority key identifier: CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64 Certificate issuer: /CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64 Certificate serial: 019B51BC08FFBF510A6CFA0964D8A7408008 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft Manifest number: 13A3 Signing time: Wed 24 Dec 2025 19:00:36 +0000 Manifest this update: Wed 24 Dec 2025 19:00:36 +0000 Manifest next update: Thu 25 Dec 2025 19:00:36 +0000 Files and hashes: 1: FMnMJSika8qzHn3rA1gugh6bskk.roa (hash: ifB+hpHW1Zidp1iRq+x5utdXKTTiyitHTNMMB+oocZw=) 2: yjevCVET2t1bxRveu_CtNNbu22Q.crl (hash: 68pnOp7VPvj+mb0SkumzuBsno/RSpfQn2fKzlafsiWo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:08:ff:bf:51:0a:6c:fa:09:64:d8:a7:40:80:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64 Validity Not Before: Dec 24 19:00:36 2025 GMT Not After : Dec 25 19:00:36 2025 GMT Subject: CN=52b7350d0a79a6d2d0ddf534ffd5a6bf598e596c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b5:ac:fa:d0:09:f6:3d:af:f6:1d:fe:11:17: 91:4a:ce:a6:d7:b6:75:ea:49:08:b7:6b:bd:82:a3: e2:47:d5:99:25:7e:cd:e9:60:b9:0e:c7:da:a8:d9: 6b:e8:5e:51:40:6e:39:ad:07:d7:ff:a8:87:4f:38: 4b:85:b9:25:9f:2b:70:63:7c:72:78:4c:89:98:64: 16:92:95:9e:b2:7f:f6:98:0c:f6:57:c3:ec:ca:68: 3f:9c:c7:44:8b:92:32:64:46:cb:63:81:ba:7f:aa: d2:24:6c:21:d8:b8:6a:09:71:fe:a7:77:57:9f:a9: 94:d4:e7:6b:d4:c8:d6:93:eb:7e:0a:f7:90:79:8c: 45:d5:60:f8:ae:e2:49:3d:58:b5:d9:fd:b6:b1:97: a5:f8:1b:07:f9:22:00:8a:47:ca:a8:f2:cc:bb:6b: 98:d5:d5:bc:3a:a6:20:03:28:69:98:9e:61:ab:8b: 36:9d:9e:2c:32:81:b6:d0:da:31:dd:42:31:f0:8b: f0:cf:8f:b2:0f:70:6d:e0:fe:e6:42:db:e1:48:0a: ea:82:d5:85:45:10:79:e8:fe:4a:ee:7e:ba:42:df: f2:3f:0f:7d:21:ba:88:06:fa:b6:43:fb:f6:55:e9: 09:17:59:de:4b:b1:7c:d6:4d:b7:e3:b7:2c:d4:17: 80:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B7:35:0D:0A:79:A6:D2:D0:DD:F5:34:FF:D5:A6:BF:59:8E:59:6C X509v3 Authority Key Identifier: keyid:CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:34:f0:36:54:0d:a4:0f:8d:32:f6:26:7d:e1:7f:6a:1d:8c: 3a:ca:e2:00:87:fb:32:97:76:75:98:b9:97:4f:ab:22:89:36: 32:a5:a4:25:10:6f:e5:cb:90:c1:72:b9:a7:75:a0:7f:8e:da: 1a:75:6a:29:6c:fb:09:14:29:76:02:5e:cd:24:85:f8:90:20: a3:76:62:de:8f:72:60:05:45:ed:cd:ca:31:e1:d2:f4:80:d9: 7b:97:49:fe:26:89:4d:ac:1e:de:e2:7c:b1:c1:28:55:bb:c3: d8:84:12:3f:67:17:22:0f:2a:7b:f8:13:40:48:b6:c4:16:9f: ef:6c:40:de:04:89:86:b5:5f:0b:2f:6f:7a:d5:6e:ac:e1:72: 23:1f:c1:95:77:fb:94:2f:c6:ed:89:70:1d:92:20:3d:1f:9a: 03:c1:73:db:6a:64:bc:86:b7:ad:04:35:dc:01:29:e2:de:5d: dc:1a:e0:4c:87:90:4f:73:5b:3c:86:aa:6e:33:db:75:4e:bb: 94:09:b7:10:46:d8:84:c4:a1:b3:89:4e:3d:0c:ce:ff:83:8b: 64:d7:fd:da:44:84:02:7c:06:76:3c:bf:2a:2d:74:d8:ff:7c: 5e:f7:a9:bc:bb:c5:be:d2:9c:24:59:be:d5:4c:fe:5a:29:12: 88:87:b0:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvAj/v1EKbPoJZNinQIAIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzdhZjA5NTExM2RhZGQ1YmM1MWJkZWJiZjBhZDM0ZDZl ZWRiNjQwHhcNMjUxMjI0MTkwMDM2WhcNMjUxMjI1MTkwMDM2WjAzMTEwLwYDVQQD Eyg1MmI3MzUwZDBhNzlhNmQyZDBkZGY1MzRmZmQ1YTZiZjU5OGU1OTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbWs+tAJ9j2v9h3+EReRSs6m17Z1 6kkIt2u9gqPiR9WZJX7N6WC5DsfaqNlr6F5RQG45rQfX/6iHTzhLhbklnytwY3xy eEyJmGQWkpWesn/2mAz2V8Psymg/nMdEi5IyZEbLY4G6f6rSJGwh2LhqCXH+p3dX n6mU1Odr1MjWk+t+CveQeYxF1WD4ruJJPVi12f22sZel+BsH+SIAikfKqPLMu2uY 1dW8OqYgAyhpmJ5hq4s2nZ4sMoG20Nox3UIx8Ivwz4+yD3Bt4P7mQtvhSArqgtWF RRB56P5K7n66Qt/yPw99IbqIBvq2Q/v2VekJF1neS7F81k2347cs1BeATQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFK3NQ0KeabS0N31NP/Vpr9ZjllsMB8GA1UdIwQY MBaAFMo3rwlRE9rdW8Ub3rvwrTTW7ttkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hZDZjODMtZTVmZC00NDE3LWJmZjkt ZWI2OGVmYzQ3NDhiLzEveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9hZDZjODMtZTVmZC00NDE3LWJmZjktZWI2OGVmYzQ3NDhi LzEveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDTwNlQN pA+NMvYmfeF/ah2MOsriAIf7Mpd2dZi5l0+rIok2MqWkJRBv5cuQwXK5p3Wgf47a GnVqKWz7CRQpdgJezSSF+JAgo3Zi3o9yYAVF7c3KMeHS9IDZe5dJ/iaJTawe3uJ8 scEoVbvD2IQSP2cXIg8qe/gTQEi2xBaf72xA3gSJhrVfCy9vetVurOFyIx/BlXf7 lC/G7YlwHZIgPR+aA8Fz22pkvIa3rQQ13AEp4t5d3BrgTIeQT3NbPIaqbjPbdU67 lAm3EEbYhMShs4lOPQzO/4OLZNf92kSEAnwGdjy/Ki102P98XvepvLvFvtKcJFm+ 1Uz+WikSiIewVA== -----END CERTIFICATE-----Generated at Thu Dec 25 01:03:00 2025 by rpki-client