This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft File: yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft (raw, json) Hash identifier: sNW4weM40D+Ws0F/h1Ynpk67bY0UKK2brJOfrfMvFEA= Subject key identifier: 1F:8D:AB:D1:42:37:C7:48:54:DA:94:2C:2E:45:C0:5D:67:A8:BB:EA Authority key identifier: C9:E7:AA:C3:D7:24:D9:D4:9F:30:27:13:36:33:BA:11:9B:B3:67:FB Certificate issuer: /CN=c9e7aac3d724d9d49f3027133633ba119bb367fb Certificate serial: 019B2FD4E583A1FB5E9B613D935FBBF1A94E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft Manifest number: 033F Signing time: Thu 18 Dec 2025 05:00:40 +0000 Manifest this update: Thu 18 Dec 2025 05:00:40 +0000 Manifest next update: Fri 19 Dec 2025 05:00:40 +0000 Files and hashes: 1: RgDK0GlNrO7C7ubV0WX7Z9uLa44.roa (hash: rsSKr9gwgh4LATGzKPPW1fvQ8qeoiCF1icD7tfZVV58=) 2: yeeqw9ck2dSfMCcTNjO6EZuzZ_s.crl (hash: QGyXLjrw9cSAC3/mJoKe99+WIa9977PogZK9ODinVDM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d4:e5:83:a1:fb:5e:9b:61:3d:93:5f:bb:f1:a9:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9e7aac3d724d9d49f3027133633ba119bb367fb Validity Not Before: Dec 18 05:00:40 2025 GMT Not After : Dec 19 05:00:40 2025 GMT Subject: CN=1f8dabd14237c74854da942c2e45c05d67a8bbea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f7:87:25:8d:7a:07:13:18:50:b9:e8:dd:81: c6:c6:cd:ee:a7:0d:30:c6:96:3e:3d:9d:c1:59:02: 7e:ea:f0:a7:c5:92:88:d1:67:ca:f5:86:c2:26:18: 20:01:1e:17:f5:63:89:cc:f1:0d:36:5e:61:0a:ff: 15:cb:95:3e:48:ec:38:af:0f:b1:8f:3e:44:2a:6a: c5:e8:a1:6b:29:a0:56:65:b7:b8:2b:33:8b:71:53: 72:44:c2:40:f1:81:2d:c7:4b:b4:0d:8d:7f:0e:cc: 6c:b3:b7:3c:4a:4f:7e:81:d7:fd:7b:26:88:f8:fb: 3a:a4:c0:9f:a6:88:04:49:28:f3:1e:03:06:a9:e4: d7:17:5c:04:6c:ef:11:57:58:cc:d8:ea:8a:b6:15: 29:3e:8d:e1:af:7e:66:a1:ea:4a:b4:81:04:00:94: 71:6b:8d:af:3f:c0:f5:32:30:6f:f5:4f:2a:1f:e6: 6f:6c:19:a7:52:4e:13:a8:a0:1f:02:d5:71:18:b7: 46:43:9a:31:b6:50:48:51:b2:e3:f0:a1:cf:44:1e: cd:c0:3d:26:f3:f5:74:e4:98:85:9f:a7:75:b5:0b: ab:be:22:0c:46:0b:09:91:b6:6d:2b:9a:06:16:94: cd:3a:82:f1:02:26:b8:0d:5b:89:bd:d9:aa:f4:09: 09:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8D:AB:D1:42:37:C7:48:54:DA:94:2C:2E:45:C0:5D:67:A8:BB:EA X509v3 Authority Key Identifier: keyid:C9:E7:AA:C3:D7:24:D9:D4:9F:30:27:13:36:33:BA:11:9B:B3:67:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:92:89:f4:7b:7b:1b:2e:7f:f4:cd:42:f6:13:a5:24:3a:ac: c4:a2:44:88:af:31:89:65:d2:e1:45:86:f2:f3:3e:f2:ab:e7: 02:96:cd:87:9d:28:d9:55:28:d4:1a:f5:ab:fc:03:33:19:4d: a6:d4:77:20:23:8c:57:a4:f5:d6:aa:6e:78:b8:ee:c3:a6:1f: ec:c1:f7:cc:11:bb:a0:f9:1e:bd:6f:3e:be:71:c1:be:95:03: c0:41:ee:b5:46:7d:a4:c6:d3:3d:33:9e:fa:ef:52:f5:3a:f1: 87:78:54:c8:d1:1c:3d:69:08:60:e2:a8:e4:d8:bd:4f:22:f5: cd:56:52:ca:f3:dd:ec:3b:67:8e:90:27:40:c7:42:d8:37:30: b4:67:e1:13:90:d3:57:b4:49:eb:0d:94:9e:54:44:2a:a1:40: dd:cc:f4:38:2c:53:3d:4a:2e:a0:0b:76:d3:97:53:21:57:03: bc:57:cd:f7:7c:58:2b:e1:9a:25:87:05:9d:a1:50:d6:2b:e1: 4e:3f:9a:43:15:0e:99:a8:c4:ab:8b:0e:f0:36:89:41:28:96: 31:3c:a2:5a:3d:48:89:7d:ff:b3:c2:33:57:a7:75:a0:bb:b1: aa:cf:d3:0e:01:9d:16:00:48:78:71:71:9d:1f:1d:c1:dd:68: 90:35:20:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1OWDoftem2E9k1+78alOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZTdhYWMzZDcyNGQ5ZDQ5ZjMwMjcxMzM2MzNiYTExOWJi MzY3ZmIwHhcNMjUxMjE4MDUwMDQwWhcNMjUxMjE5MDUwMDQwWjAzMTEwLwYDVQQD EygxZjhkYWJkMTQyMzdjNzQ4NTRkYTk0MmMyZTQ1YzA1ZDY3YThiYmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/eHJY16BxMYULno3YHGxs3upw0w xpY+PZ3BWQJ+6vCnxZKI0WfK9YbCJhggAR4X9WOJzPENNl5hCv8Vy5U+SOw4rw+x jz5EKmrF6KFrKaBWZbe4KzOLcVNyRMJA8YEtx0u0DY1/Dsxss7c8Sk9+gdf9eyaI +Ps6pMCfpogESSjzHgMGqeTXF1wEbO8RV1jM2OqKthUpPo3hr35moepKtIEEAJRx a42vP8D1MjBv9U8qH+ZvbBmnUk4TqKAfAtVxGLdGQ5oxtlBIUbLj8KHPRB7NwD0m 8/V05JiFn6d1tQurviIMRgsJkbZtK5oGFpTNOoLxAia4DVuJvdmq9AkJAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+Nq9FCN8dIVNqULC5FwF1nqLvqMB8GA1UdIwQY MBaAFMnnqsPXJNnUnzAnEzYzuhGbs2f7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWVlcXc5Y2syZFNmTUNjVE5qTzZFWnV6Wl9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80Zjc1MWQtYTM1NS00MGYzLWFhNDQt N2NjYTY3NzM2MDFhLzEveWVlcXc5Y2syZFNmTUNjVE5qTzZFWnV6Wl9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80Zjc1MWQtYTM1NS00MGYzLWFhNDQtN2NjYTY3NzM2MDFh LzEveWVlcXc5Y2syZFNmTUNjVE5qTzZFWnV6Wl9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnpKJ9Ht7 Gy5/9M1C9hOlJDqsxKJEiK8xiWXS4UWG8vM+8qvnApbNh50o2VUo1Br1q/wDMxlN ptR3ICOMV6T11qpueLjuw6Yf7MH3zBG7oPkevW8+vnHBvpUDwEHutUZ9pMbTPTOe +u9S9Trxh3hUyNEcPWkIYOKo5Ni9TyL1zVZSyvPd7DtnjpAnQMdC2DcwtGfhE5DT V7RJ6w2UnlREKqFA3cz0OCxTPUouoAt205dTIVcDvFfN93xYK+GaJYcFnaFQ1ivh Tj+aQxUOmajEq4sO8DaJQSiWMTyiWj1IiX3/s8IzV6d1oLuxqs/TDgGdFgBIeHFx nR8dwd1okDUgIw== -----END CERTIFICATE-----Generated at Thu Dec 18 10:27:47 2025 by rpki-client