This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft File: yTNIHT-khxDcuXP9zSk0De22Ipo.mft (raw, json) Hash identifier: gcpKaBq6xVHFJI/JVb106QyFWsHxFhHg7Zl342aqKPo= Subject key identifier: AB:41:22:FB:13:AB:65:DD:96:B3:64:2A:DD:D5:D0:F2:36:12:06:F7 Authority key identifier: C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A Certificate issuer: /CN=c933481d3fa48710dcb973fdcd29340dedb6229a Certificate serial: 019B405BC84ACD1BB093DECC5CF15CED2ABC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 10:01:55 +0000 Manifest this update: Sun 21 Dec 2025 10:01:55 +0000 Manifest next update: Mon 22 Dec 2025 10:01:55 +0000 Files and hashes: 1: HvvQQ4P4zfTIBBHttsccF48rodM.roa (hash: eIYcjO3+dzOi7TYY3sWHoKLhHWX9s3dv316lhoprHDg=) 2: lcnrXbBFBu5DHpybXSYL_QBSFxY.roa (hash: 55Re6AipYf4XWuugu2p6Yv9D+4CVj5GB9DhYUd+Co3s=) 3: xS0SlQmQEPSTI5X308pfcaxO2vE.roa (hash: wF4G59jbcX8C0L3Y4yTS+qPNuavU+1BMJghlyklDhUU=) 4: yTNIHT-khxDcuXP9zSk0De22Ipo.crl (hash: 7bSjDWvL3ag5t+VTd3qFgSwE4hEfLbxKzzQmCNGxDDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:c8:4a:cd:1b:b0:93:de:cc:5c:f1:5c:ed:2a:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c933481d3fa48710dcb973fdcd29340dedb6229a Validity Not Before: Dec 21 10:01:55 2025 GMT Not After : Dec 22 10:01:55 2025 GMT Subject: CN=ab4122fb13ab65dd96b3642addd5d0f2361206f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f5:a5:72:33:e0:39:5e:47:8e:86:ac:d0:8c: b4:bc:bd:5b:bd:2f:87:29:bf:82:69:26:38:01:f3: 9f:ff:77:f2:49:90:9b:f1:fe:56:56:27:b1:a1:3a: 24:b1:53:fb:c8:e5:3d:29:ac:75:8b:ee:f8:7d:74: 9f:4f:23:d3:fd:92:cf:d9:16:8c:65:3b:ac:47:37: 69:64:e4:5f:59:93:e8:f8:eb:34:60:02:50:67:ce: 6f:12:ca:68:53:67:06:38:d9:bd:8e:99:56:81:fc: a5:12:1c:f7:85:97:2f:08:7c:b0:7c:c1:88:14:10: 6d:22:34:ff:2f:a5:4d:33:99:77:87:e8:ec:05:b1: d9:77:10:3e:43:95:3d:3e:ac:a9:df:60:af:54:87: 71:cc:48:90:f2:b7:ca:e1:b5:8a:08:56:a4:7c:92: b8:c1:4f:5b:19:6b:05:5d:a8:33:2b:46:a6:dd:14: 5b:7d:a4:c8:0c:b8:f9:75:cc:d1:ed:e7:43:38:78: 35:ff:c5:52:db:9e:93:d0:93:5e:1a:b6:70:e3:e9: 4b:35:d6:35:d4:f2:09:89:54:4a:33:92:75:6e:9a: a3:7f:cc:3f:d4:63:77:c4:3a:4e:a8:ca:08:70:f7: 46:5a:69:72:0f:d4:25:00:b4:e4:28:32:de:e6:f5: df:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:41:22:FB:13:AB:65:DD:96:B3:64:2A:DD:D5:D0:F2:36:12:06:F7 X509v3 Authority Key Identifier: keyid:C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:c7:31:c5:65:57:19:4b:3b:15:38:cd:85:f8:42:a5:93:3b: 5f:52:d1:b5:af:03:c1:99:5e:21:46:f3:c3:a7:07:3d:b2:1a: 2d:f1:7a:74:ef:2c:79:d8:c9:ab:fd:f1:61:80:f1:3a:08:ac: df:82:6c:85:e4:06:4c:09:93:c2:c1:6c:00:76:63:90:50:bc: 68:79:fd:e2:c7:64:ba:05:f0:e0:52:1f:bb:e1:ef:56:14:5b: 41:7d:6b:d1:0a:12:d6:69:ca:3c:bc:47:57:a4:b5:ec:1f:24: 85:f9:23:d6:92:69:b9:b1:1e:17:f2:0d:79:31:b9:f2:c1:c3: 60:77:51:4e:81:41:92:e8:a4:45:ed:ec:d9:1b:bf:33:6e:1d: 57:ea:ce:0e:9d:10:62:a5:d0:b8:6c:93:11:a0:56:23:0a:54: 5b:5d:95:e4:3e:ac:02:88:62:d8:58:0b:83:ed:28:95:19:2d: 7e:1f:b0:66:19:08:51:95:a0:bb:72:bc:02:65:14:39:fb:7b: 20:b5:18:5a:50:ff:74:66:73:b6:8e:a5:56:87:75:eb:c6:c9: cf:25:fc:73:ff:b7:15:33:e2:3b:7b:66:d6:b0:f2:23:36:be: 7e:0a:e9:63:b7:7e:5a:74:dc:13:97:9f:27:33:02:3d:66:92: 3e:1f:ab:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW8hKzRuwk97MXPFc7Sq8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MzM0ODFkM2ZhNDg3MTBkY2I5NzNmZGNkMjkzNDBkZWRi NjIyOWEwHhcNMjUxMjIxMTAwMTU1WhcNMjUxMjIyMTAwMTU1WjAzMTEwLwYDVQQD EyhhYjQxMjJmYjEzYWI2NWRkOTZiMzY0MmFkZGQ1ZDBmMjM2MTIwNmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PWlcjPgOV5Hjoas0Iy0vL1bvS+H Kb+CaSY4AfOf/3fySZCb8f5WViexoToksVP7yOU9Kax1i+74fXSfTyPT/ZLP2RaM ZTusRzdpZORfWZPo+Os0YAJQZ85vEspoU2cGONm9jplWgfylEhz3hZcvCHywfMGI FBBtIjT/L6VNM5l3h+jsBbHZdxA+Q5U9Pqyp32CvVIdxzEiQ8rfK4bWKCFakfJK4 wU9bGWsFXagzK0am3RRbfaTIDLj5dczR7edDOHg1/8VS256T0JNeGrZw4+lLNdY1 1PIJiVRKM5J1bpqjf8w/1GN3xDpOqMoIcPdGWmlyD9QlALTkKDLe5vXfoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtBIvsTq2XdlrNkKt3V0PI2Egb3MB8GA1UdIwQY MBaAFMkzSB0/pIcQ3Llz/c0pNA3ttiKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVROSUhULWtoeERjdVhQOXpTazBEZTIySXBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83MzI4MDEtNjI5NC00MTJiLTk1NWUt ZmVmZDM3NjY2NzQxLzEveVROSUhULWtoeERjdVhQOXpTazBEZTIySXBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS83MzI4MDEtNjI5NC00MTJiLTk1NWUtZmVmZDM3NjY2NzQx LzEveVROSUhULWtoeERjdVhQOXpTazBEZTIySXBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkscxxWVX GUs7FTjNhfhCpZM7X1LRta8DwZleIUbzw6cHPbIaLfF6dO8sedjJq/3xYYDxOgis 34JsheQGTAmTwsFsAHZjkFC8aHn94sdkugXw4FIfu+HvVhRbQX1r0QoS1mnKPLxH V6S17B8khfkj1pJpubEeF/INeTG58sHDYHdRToFBkuikRe3s2Ru/M24dV+rODp0Q YqXQuGyTEaBWIwpUW12V5D6sAohi2FgLg+0olRktfh+wZhkIUZWgu3K8AmUUOft7 ILUYWlD/dGZzto6lVod168bJzyX8c/+3FTPiO3tm1rDyIza+fgrpY7d+WnTcE5ef JzMCPWaSPh+raA== -----END CERTIFICATE-----Generated at Sun Dec 21 13:39:58 2025 by rpki-client