This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft File: yWncvDPoAQQ4EpKC03rU6L-EuB8.mft (raw, json) Hash identifier: vtUDXp6nFPebv7ta1OYmx3n7wcBpeifhcON+ONmBuVo= Subject key identifier: 38:18:FF:CA:65:FC:EF:F7:76:F5:44:BF:C2:7F:3A:E4:93:22:69:85 Authority key identifier: C9:69:DC:BC:33:E8:01:04:38:12:92:82:D3:7A:D4:E8:BF:84:B8:1F Certificate issuer: /CN=c969dcbc33e8010438129282d37ad4e8bf84b81f Certificate serial: 019B582C1AC49CF44D4BF3547FA086284B5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft Manifest number: 16C1 Signing time: Fri 26 Dec 2025 01:00:44 +0000 Manifest this update: Fri 26 Dec 2025 01:00:44 +0000 Manifest next update: Sat 27 Dec 2025 01:00:44 +0000 Files and hashes: 1: FU1o4K68ASMHjxslt5agTXMw1Z4.roa (hash: cFpnMXx4SNy55YthuxgRWkF2I8U6u41jmzS8UiT8Yts=) 2: yWncvDPoAQQ4EpKC03rU6L-EuB8.crl (hash: nib2gQM0rJr06cGEA+O0bP4qObNmHCkeFBPgJ6zKf+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:2c:1a:c4:9c:f4:4d:4b:f3:54:7f:a0:86:28:4b:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c969dcbc33e8010438129282d37ad4e8bf84b81f Validity Not Before: Dec 26 01:00:44 2025 GMT Not After : Dec 27 01:00:44 2025 GMT Subject: CN=3818ffca65fceff776f544bfc27f3ae493226985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b6:6a:2d:0a:ed:38:97:27:7f:15:d9:f6:7f: 3a:81:d9:f7:7b:10:45:23:4e:76:3a:91:37:51:16: b4:bf:4c:44:da:c0:a8:56:3a:72:13:5d:77:fc:1a: 41:b1:ae:b5:20:da:5b:82:db:c0:34:da:83:eb:34: 62:7e:58:00:1e:41:98:7d:71:e0:d2:3b:c1:a2:c3: 1e:2f:6e:77:57:39:80:ef:6e:10:43:af:ca:be:a1: d8:51:c0:5f:ed:e9:63:c3:ca:68:0e:0c:7e:8f:14: a6:09:9f:70:9e:f1:d1:c3:7d:20:43:18:be:19:24: 7a:7c:bd:c3:00:dd:3c:74:04:b3:c7:bd:a1:de:c4: 19:d3:37:c3:a3:52:4a:e6:c8:0c:19:57:8c:1e:a7: 07:4c:ac:c9:b5:69:5e:4f:f1:cf:72:e1:f0:4e:cb: a6:12:45:38:5c:5a:0d:6c:4e:e8:c6:20:c4:bc:af: 80:8c:9b:ed:6f:2b:92:a4:77:88:12:b2:e4:51:58: 32:eb:b0:82:94:91:1a:4b:a8:6b:c1:87:35:85:bb: d3:2c:1d:b0:2d:6c:ad:69:28:d7:b1:ff:36:46:46: 80:3b:c6:de:fd:b9:76:98:7a:12:5c:2e:c3:61:4f: 86:04:b4:42:59:e3:2e:c8:f6:75:39:80:53:64:27: 90:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:18:FF:CA:65:FC:EF:F7:76:F5:44:BF:C2:7F:3A:E4:93:22:69:85 X509v3 Authority Key Identifier: keyid:C9:69:DC:BC:33:E8:01:04:38:12:92:82:D3:7A:D4:E8:BF:84:B8:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:68:5f:f7:43:28:ab:ba:ea:da:5e:f7:7d:7c:db:e2:66:b3: cb:b7:02:04:43:ba:61:94:b1:16:85:5d:13:21:d3:7e:dc:3b: 47:dc:7e:e2:84:f8:b6:e3:33:f1:3e:38:9c:11:28:c4:9f:25: 05:46:df:06:7b:03:fc:fb:bd:e8:89:38:33:21:82:f2:42:74: 50:f3:d9:5a:33:45:ff:1c:94:c6:1b:60:d7:d7:6a:5f:2d:6d: 27:34:10:88:0e:b6:2f:8f:09:67:b4:1c:14:09:38:ab:95:0d: fb:20:4f:f7:5b:03:00:a4:65:db:71:88:3b:2f:71:f4:5d:a4: a2:ac:52:06:36:3d:eb:90:19:bd:ea:d1:46:73:79:20:bb:9c: 44:0f:a9:1f:fd:f7:2e:75:fb:89:bc:53:48:2c:74:05:77:6b: 4a:24:a0:34:47:6e:80:db:a8:03:9a:38:70:be:16:69:df:d6: 2c:18:8b:a2:6d:a5:41:24:a7:5a:c5:60:a6:41:e5:6c:57:d5: 81:1e:6f:14:cc:80:f7:95:78:e2:8a:75:9b:1c:bf:24:37:aa: a8:88:f9:59:77:09:64:36:55:a5:3d:bc:93:4a:1f:43:3f:61: d1:ce:35:4a:97:0f:3b:86:ff:f0:84:da:59:fb:77:ff:c7:75: 8c:59:4f:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtYLBrEnPRNS/NUf6CGKEtaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5NjlkY2JjMzNlODAxMDQzODEyOTI4MmQzN2FkNGU4YmY4 NGI4MWYwHhcNMjUxMjI2MDEwMDQ0WhcNMjUxMjI3MDEwMDQ0WjAzMTEwLwYDVQQD EygzODE4ZmZjYTY1ZmNlZmY3NzZmNTQ0YmZjMjdmM2FlNDkzMjI2OTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbZqLQrtOJcnfxXZ9n86gdn3exBF I052OpE3URa0v0xE2sCoVjpyE113/BpBsa61INpbgtvANNqD6zRiflgAHkGYfXHg 0jvBosMeL253VzmA724QQ6/KvqHYUcBf7eljw8poDgx+jxSmCZ9wnvHRw30gQxi+ GSR6fL3DAN08dASzx72h3sQZ0zfDo1JK5sgMGVeMHqcHTKzJtWleT/HPcuHwTsum EkU4XFoNbE7oxiDEvK+AjJvtbyuSpHeIErLkUVgy67CClJEaS6hrwYc1hbvTLB2w LWytaSjXsf82RkaAO8be/bl2mHoSXC7DYU+GBLRCWeMuyPZ1OYBTZCeQlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgY/8pl/O/3dvVEv8J/OuSTImmFMB8GA1UdIwQY MBaAFMlp3Lwz6AEEOBKSgtN61Oi/hLgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVduY3ZEUG9BUVE0RXBLQzAzclU2TC1FdUI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8xOTU4OTMtNjk5Yi00NWI0LWEwM2Qt MGRiNTBiZmY5NDRhLzEveVduY3ZEUG9BUVE0RXBLQzAzclU2TC1FdUI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8xOTU4OTMtNjk5Yi00NWI0LWEwM2QtMGRiNTBiZmY5NDRh LzEveVduY3ZEUG9BUVE0RXBLQzAzclU2TC1FdUI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2hf90Mo q7rq2l73fXzb4mazy7cCBEO6YZSxFoVdEyHTftw7R9x+4oT4tuMz8T44nBEoxJ8l BUbfBnsD/Pu96Ik4MyGC8kJ0UPPZWjNF/xyUxhtg19dqXy1tJzQQiA62L48JZ7Qc FAk4q5UN+yBP91sDAKRl23GIOy9x9F2koqxSBjY965AZverRRnN5ILucRA+pH/33 LnX7ibxTSCx0BXdrSiSgNEdugNuoA5o4cL4Wad/WLBiLom2lQSSnWsVgpkHlbFfV gR5vFMyA95V44op1mxy/JDeqqIj5WXcJZDZVpT28k0ofQz9h0c41SpcPO4b/8ITa Wft3/8d1jFlPnQ== -----END CERTIFICATE-----Generated at Fri Dec 26 03:13:48 2025 by rpki-client