This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft File: yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft (raw, json) Hash identifier: +mo65qr9VaxMDPkpGsvw/2EOVqkZqInJ+7hAuz3JMR8= Subject key identifier: 5C:A5:04:7B:4F:D4:97:8D:8A:18:38:E4:66:86:37:B5:70:26:64:A3 Authority key identifier: CB:22:4E:A3:85:72:EA:0D:A0:2F:49:CF:4D:67:A3:CB:B7:C6:E1:40 Certificate issuer: /CN=cb224ea38572ea0da02f49cf4d67a3cbb7c6e140 Certificate serial: 019B522AB611FDBB4607102AFEB4E5FB9D0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft Manifest number: 1713 Signing time: Wed 24 Dec 2025 21:01:29 +0000 Manifest this update: Wed 24 Dec 2025 21:01:29 +0000 Manifest next update: Thu 25 Dec 2025 21:01:29 +0000 Files and hashes: 1: 1-uz2QLGD_Zd1L5FYfBI3cC6XHM8.roa (hash: t1w40I15hLlr7dv8d0uJE/Dz2j4qqNVpP8R3SOXwVvk=) 2: yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl (hash: FfPUnIt9dsNOlQ4EF90gKV7tqFA4p+eIj19KSKdLN14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 21:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:b6:11:fd:bb:46:07:10:2a:fe:b4:e5:fb:9d:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb224ea38572ea0da02f49cf4d67a3cbb7c6e140 Validity Not Before: Dec 24 21:01:29 2025 GMT Not After : Dec 25 21:01:29 2025 GMT Subject: CN=5ca5047b4fd4978d8a1838e4668637b5702664a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:97:cb:97:8e:28:1d:e2:97:81:a9:d4:0e:7f: 23:3f:df:24:2b:6a:70:cf:73:d3:66:ff:16:19:7f: 9c:0b:90:2c:73:7b:94:a0:63:9e:57:45:d0:b6:fd: e8:9a:b7:04:84:ff:97:ba:35:59:fa:49:a4:5f:ae: 23:43:43:e7:1d:68:54:4a:a6:08:5f:17:3a:66:9a: 26:56:68:ef:6e:09:39:07:4f:34:d7:61:45:5c:19: 95:ab:cb:d4:f1:66:a7:81:bd:87:ec:9f:cb:ff:d3: 6b:03:59:3b:3f:89:26:0c:6f:d9:c0:5e:75:a2:f4: 53:c6:1b:ec:44:6d:b7:11:ef:52:f7:e4:9e:af:b9: 8d:a5:eb:89:2a:4c:d5:28:e5:9b:c6:63:e8:56:e8: ee:fd:60:2b:6d:61:1f:c0:f5:a1:8f:8f:19:32:3b: 72:33:52:ad:ae:7b:41:f9:be:32:d4:17:59:43:8d: 2d:cb:d3:18:58:0f:89:7b:81:ad:01:62:73:14:de: 79:eb:fe:a0:ea:04:d6:89:bf:35:7f:c0:d2:08:57: 8b:b3:8e:a1:56:02:ef:45:c9:a2:09:41:92:78:72: ed:7b:71:fc:ad:fd:a0:98:b1:57:5f:85:7f:d4:c7: 39:d0:41:d5:13:3c:a7:19:6a:dd:7e:1b:95:3f:e8: 6b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A5:04:7B:4F:D4:97:8D:8A:18:38:E4:66:86:37:B5:70:26:64:A3 X509v3 Authority Key Identifier: keyid:CB:22:4E:A3:85:72:EA:0D:A0:2F:49:CF:4D:67:A3:CB:B7:C6:E1:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:8b:7b:32:47:bc:6d:37:9c:64:db:e5:fb:fc:db:da:c9:34: 7a:f7:61:38:16:ab:25:11:cc:d3:14:59:82:ff:96:63:e9:fe: 9f:9b:29:90:6f:dd:9a:f2:61:f1:ad:ee:c2:e0:88:a1:e8:9b: ed:79:06:5d:4d:31:3a:4c:da:f9:17:37:2e:33:15:ce:ac:e4: 2f:f0:cb:9f:98:b5:48:a8:c7:32:84:7b:cc:79:1f:1e:94:16: cc:5e:4a:6c:8f:23:76:54:ff:2c:8c:e1:87:93:f2:89:87:d1: 63:da:02:ce:24:74:f2:30:cb:39:1a:19:f9:32:60:ae:00:d8: 41:bc:07:2a:cb:16:6d:11:29:6a:77:41:5a:58:3f:8c:8a:ef: 05:cd:7e:64:a4:40:0f:2f:25:6a:a4:65:63:5c:79:82:53:d0: 31:25:ec:8a:8c:07:3d:ae:6d:09:96:4d:fd:0f:df:65:aa:1e: 04:c3:c5:8a:7c:66:22:cd:b1:c5:f9:5b:e3:59:3c:e8:44:09: 22:cb:c3:6e:44:1e:7d:6e:8b:46:ef:d0:01:a9:7f:93:b0:d9: a5:be:d5:55:66:c5:aa:fd:a8:1c:25:43:58:b7:62:b6:af:ce: ac:04:eb:b9:d9:65:ba:1e:4f:5e:ac:05:37:7f:5c:2c:14:86: 15:c1:d7:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKrYR/btGBxAq/rTl+50NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMjI0ZWEzODU3MmVhMGRhMDJmNDljZjRkNjdhM2NiYjdj NmUxNDAwHhcNMjUxMjI0MjEwMTI5WhcNMjUxMjI1MjEwMTI5WjAzMTEwLwYDVQQD Eyg1Y2E1MDQ3YjRmZDQ5NzhkOGExODM4ZTQ2Njg2MzdiNTcwMjY2NGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZfLl44oHeKXganUDn8jP98kK2pw z3PTZv8WGX+cC5Asc3uUoGOeV0XQtv3omrcEhP+XujVZ+kmkX64jQ0PnHWhUSqYI Xxc6ZpomVmjvbgk5B08012FFXBmVq8vU8Wangb2H7J/L/9NrA1k7P4kmDG/ZwF51 ovRTxhvsRG23Ee9S9+Ser7mNpeuJKkzVKOWbxmPoVuju/WArbWEfwPWhj48ZMjty M1KtrntB+b4y1BdZQ40ty9MYWA+Je4GtAWJzFN556/6g6gTWib81f8DSCFeLs46h VgLvRcmiCUGSeHLte3H8rf2gmLFXX4V/1Mc50EHVEzynGWrdfhuVP+hrYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFylBHtP1JeNihg45GaGN7VwJmSjMB8GA1UdIwQY MBaAFMsiTqOFcuoNoC9Jz01no8u3xuFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXlKT280Vnk2ZzJnTDBuUFRXZWp5N2ZHNFVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zNTAzZWUtNWI4Mi00MjMxLWI1N2Et MWZkMjliMTA4YTIxLzEveXlKT280Vnk2ZzJnTDBuUFRXZWp5N2ZHNFVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8zNTAzZWUtNWI4Mi00MjMxLWI1N2EtMWZkMjliMTA4YTIx LzEveXlKT280Vnk2ZzJnTDBuUFRXZWp5N2ZHNFVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4t7Mke8 bTecZNvl+/zb2sk0evdhOBarJRHM0xRZgv+WY+n+n5spkG/dmvJh8a3uwuCIoeib 7XkGXU0xOkza+Rc3LjMVzqzkL/DLn5i1SKjHMoR7zHkfHpQWzF5KbI8jdlT/LIzh h5PyiYfRY9oCziR08jDLORoZ+TJgrgDYQbwHKssWbREpandBWlg/jIrvBc1+ZKRA Dy8laqRlY1x5glPQMSXsiowHPa5tCZZN/Q/fZaoeBMPFinxmIs2xxflb41k86EQJ IsvDbkQefW6LRu/QAal/k7DZpb7VVWbFqv2oHCVDWLditq/OrATrudlluh5PXqwF N39cLBSGFcHXWg== -----END CERTIFICATE-----Generated at Thu Dec 25 06:24:52 2025 by rpki-client