This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json) Hash identifier: Hpz1l9flrVJtYcw1483SQiRK6ykOoR6JmMlPsqPwPv0= Subject key identifier: EE:EC:9F:70:2F:C8:DB:B3:25:C4:FD:41:D5:8C:27:73:79:63:6F:18 Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Certificate serial: 019B3F1170F42446D12259253A8563AFE0D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft Manifest number: 0BA9 Signing time: Sun 21 Dec 2025 04:01:06 +0000 Manifest this update: Sun 21 Dec 2025 04:01:06 +0000 Manifest next update: Mon 22 Dec 2025 04:01:06 +0000 Files and hashes: 1: BVbo9uh3-UvDvwSZi6BfXSBGPHU.roa (hash: Z8qyhH6viB+EEzaDtRv3WrjvxrAR7rKFv4csNYovB+g=) 2: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: 1X4Fir4tPhf7r/YwkCbal4thWYtJPInWgk/r5QH+Sdg=) 3: Fiaoyzt87itbMDPQcRW3KUFZRqE.roa (hash: msw75zbRd9jVXLoPptdxNvS4cyBll5nFN6qdq2TWWOE=) 4: KVQkFeUwolH0HmllWNVJLFREzvY.roa (hash: FUk/SpsOFKtFJQWm18UEZH4SZGt6o3hi/sxLs3zEIeU=) 5: OEhLMwhGsj88kZ4FqVMVTfpqz-8.roa (hash: /KQ43a3fdsH0+xJZbYiIUJZNQ9G0ar1u4ierKXmEsMM=) 6: m87-CXNBm5VwmmEvQBAI-p_8l98.roa (hash: vGGq9E7IPOkRddkapcYuXImJsPgw9f+HEWKjnAHtMCI=) 7: nMhyX7boXa--DjLfLdE1CijBszU.roa (hash: s95e1FJb6EuRsUkazwo7HJhOqZW3W1mabgyeLhjUIIo=) 8: o0CQ-6MywHICo_xO6JVYrovLnaI.roa (hash: z9rRzR4IXOVwVGTGGEfUd7SIN6ihlxFiSh4at67AG5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:70:f4:24:46:d1:22:59:25:3a:85:63:af:e0:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Validity Not Before: Dec 21 04:01:06 2025 GMT Not After : Dec 22 04:01:06 2025 GMT Subject: CN=eeec9f702fc8dbb325c4fd41d58c277379636f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:78:13:1a:a8:91:6c:89:78:cc:23:3f:c5:ec: af:e7:7c:bf:6c:5d:d6:76:5e:b4:a3:72:83:1b:2b: 8a:87:a9:aa:f3:0e:a4:7a:34:e9:4b:33:3e:48:37: 65:3c:b4:fe:18:b0:de:5f:34:f7:24:83:0e:0d:6f: 81:38:d9:47:39:af:38:1c:c3:04:40:aa:23:b9:9f: 18:2e:ef:e6:bc:e4:e3:b7:08:4f:d0:a0:a4:c0:dd: d2:27:70:47:58:f5:c4:a9:2e:13:40:21:cd:05:a0: 79:52:fa:83:36:8f:0e:a8:b2:39:3e:1d:b2:36:33: c0:f1:58:02:71:94:44:bd:e6:4f:50:5e:08:fe:28: d8:2f:8a:57:ef:e6:7d:38:83:d4:95:07:9c:d9:97: 76:09:ee:b6:2f:88:d2:1f:92:99:16:08:d6:8c:5e: 12:d5:35:1f:0e:7a:46:e2:56:4b:28:89:cf:e6:07: aa:a6:a7:e0:00:d4:fa:33:f5:77:a1:3e:6f:3a:82: 43:11:97:32:17:13:8a:ef:22:c1:f1:73:e9:4d:42: f2:d3:ca:0f:9b:89:e4:ad:23:f4:61:dd:31:f1:85: f1:22:07:79:bc:80:0d:06:73:9f:e5:4e:fe:43:b6: e3:a5:08:9e:91:a5:a1:39:e7:46:36:d7:22:fe:39: c9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:EC:9F:70:2F:C8:DB:B3:25:C4:FD:41:D5:8C:27:73:79:63:6F:18 X509v3 Authority Key Identifier: keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:a4:d1:01:a2:47:31:b1:a6:c5:c9:3a:a6:f4:63:47:b2:51: 87:6a:44:49:cb:a6:08:95:a7:53:d5:74:b5:59:e8:83:43:58: 63:ef:cf:f5:9a:c9:1f:d8:ba:5d:5b:87:8c:6c:77:43:1b:29: de:66:73:83:ae:10:54:43:43:1d:3d:25:da:99:49:45:ca:68: 88:23:ba:28:3f:d1:98:6e:04:ff:8b:0c:d6:88:ac:19:55:ed: 0b:dd:57:d4:a9:96:be:06:78:1b:1c:d6:58:dd:33:21:83:fc: 3b:f4:47:c6:3e:84:ee:a8:d5:75:ac:7e:76:a0:14:5f:3d:74: 3e:ca:f3:cf:80:f6:ad:18:2c:7d:2c:ea:71:8d:b2:91:92:20: 2e:33:c1:63:bb:30:d5:15:59:f1:07:ae:e7:0b:cf:5a:57:68: 5f:a6:d6:9c:8d:88:b3:95:c4:0e:e0:5d:c4:34:6b:b5:05:c4: 8b:5d:6e:b2:09:d1:d8:e3:2c:80:a3:6c:74:61:2f:58:e3:5e: 01:29:fb:ce:da:4b:eb:93:25:a7:44:a1:14:40:32:a3:79:a3: 01:62:fb:e3:a9:e1:65:c6:fa:ab:4d:42:f1:01:99:be:71:d1: 62:00:22:c1:e4:27:40:b7:a2:de:f2:58:fa:78:c8:90:0c:7b: 4d:cb:42:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EXD0JEbRIlklOoVjr+DRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1 NmRiZmQwHhcNMjUxMjIxMDQwMTA2WhcNMjUxMjIyMDQwMTA2WjAzMTEwLwYDVQQD EyhlZWVjOWY3MDJmYzhkYmIzMjVjNGZkNDFkNThjMjc3Mzc5NjM2ZjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjngTGqiRbIl4zCM/xeyv53y/bF3W dl60o3KDGyuKh6mq8w6kejTpSzM+SDdlPLT+GLDeXzT3JIMODW+BONlHOa84HMME QKojuZ8YLu/mvOTjtwhP0KCkwN3SJ3BHWPXEqS4TQCHNBaB5UvqDNo8OqLI5Ph2y NjPA8VgCcZREveZPUF4I/ijYL4pX7+Z9OIPUlQec2Zd2Ce62L4jSH5KZFgjWjF4S 1TUfDnpG4lZLKInP5geqpqfgANT6M/V3oT5vOoJDEZcyFxOK7yLB8XPpTULy08oP m4nkrSP0Yd0x8YXxIgd5vIANBnOf5U7+Q7bjpQiekaWhOedGNtci/jnJBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO7sn3AvyNuzJcT9QdWMJ3N5Y28YMB8GA1UdIwQY MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt ZTIxNjZhZDc0ZTNmLzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASaTRAaJH MbGmxck6pvRjR7JRh2pEScumCJWnU9V0tVnog0NYY+/P9ZrJH9i6XVuHjGx3Qxsp 3mZzg64QVENDHT0l2plJRcpoiCO6KD/RmG4E/4sM1oisGVXtC91X1KmWvgZ4GxzW WN0zIYP8O/RHxj6E7qjVdax+dqAUXz10Psrzz4D2rRgsfSzqcY2ykZIgLjPBY7sw 1RVZ8Qeu5wvPWldoX6bWnI2Is5XEDuBdxDRrtQXEi11usgnR2OMsgKNsdGEvWONe ASn7ztpL65Mlp0ShFEAyo3mjAWL746nhZcb6q01C8QGZvnHRYgAiweQnQLei3vJY +njIkAx7TctCaw== -----END CERTIFICATE-----Generated at Sun Dec 21 08:36:47 2025 by rpki-client