This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft File: YvYD86VaKeZhfwlrOmm_8KOSqSg.mft (raw, json) Hash identifier: pOH6E5CJ1zd/WAXqJajns6L4hT+ZmY/Rlt0HY7KtWWw= Subject key identifier: C5:94:2E:27:5A:B9:97:CB:AC:A1:53:D0:57:79:E4:6F:44:CE:17:DF Authority key identifier: 62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28 Certificate issuer: /CN=62f603f3a55a29e6617f096b3a69bff0a392a928 Certificate serial: 019B4814AA66F8164A209FF5CEB6617F06BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 22:01:12 +0000 Manifest this update: Mon 22 Dec 2025 22:01:12 +0000 Manifest next update: Tue 23 Dec 2025 22:01:12 +0000 Files and hashes: 1: CdAs9uXPdWzwOsn5f3_VQNLvlMY.roa (hash: z23dSOm4EWMwCPY/rIYDaKhlW5ucCmgZPFZkayJaxA8=) 2: YvYD86VaKeZhfwlrOmm_8KOSqSg.crl (hash: 5Kk0wm4xhZzX6WPKcGNJSozOTvJnZrn38wZ8yfHbDPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:aa:66:f8:16:4a:20:9f:f5:ce:b6:61:7f:06:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62f603f3a55a29e6617f096b3a69bff0a392a928 Validity Not Before: Dec 22 22:01:12 2025 GMT Not After : Dec 23 22:01:12 2025 GMT Subject: CN=c5942e275ab997cbaca153d05779e46f44ce17df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:80:6b:42:50:9c:ad:61:be:40:f7:cf:dd:7e: b4:1d:3e:77:1f:e4:71:88:9a:30:6b:4b:c8:13:e2: 6c:b0:f6:32:b5:98:0f:c1:07:bb:09:d9:6b:3b:10: 60:48:33:29:cc:4e:54:55:3b:d1:a6:53:91:d9:6e: 88:f4:94:b8:f3:e2:ed:50:7d:ac:3b:dd:cb:8b:f2: 12:44:d7:f0:0f:75:39:15:3b:b0:b7:89:4b:c1:ae: 11:34:55:61:59:d2:07:8f:27:15:d1:11:f0:8d:3b: b8:20:c5:54:73:cd:97:56:63:c2:a8:f6:53:bb:52: d7:55:80:75:94:00:8e:85:38:a2:7f:8d:33:a2:88: a8:60:e2:09:0d:b9:a6:8a:42:a8:00:1a:e3:dd:86: 8e:06:f9:31:70:15:eb:4c:f9:19:0e:57:4b:0a:02: f8:10:0c:46:93:3d:0d:fa:35:65:55:74:53:64:d3: e7:15:1a:10:ab:fa:7a:12:fd:bb:c4:d4:f6:a9:1a: 15:fb:1f:5a:e6:de:ff:0c:aa:ac:c7:cf:d7:99:cb: 82:f0:0d:a7:ea:23:de:20:96:35:0d:37:e6:1c:dc: db:ac:04:a6:be:7e:ea:d6:e9:a6:f8:bb:d1:21:ad: 6c:21:14:a6:9a:91:0d:c6:25:0b:c8:d8:95:77:1e: ab:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:94:2E:27:5A:B9:97:CB:AC:A1:53:D0:57:79:E4:6F:44:CE:17:DF X509v3 Authority Key Identifier: keyid:62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:22:9c:29:23:eb:d4:3f:2c:d4:3c:29:15:25:87:9b:30:a4: 75:3b:0c:39:a5:cb:aa:d5:41:27:c1:ab:a7:6b:c4:1e:b8:3e: c6:f7:59:17:95:a6:c7:ce:d7:08:c1:94:d8:d1:98:bd:9f:de: f9:2d:9f:8e:dc:53:57:8e:4b:c7:e6:68:cf:38:0f:74:24:45: 0a:f5:5c:f3:ef:59:2c:11:3a:29:38:e0:0d:a0:d1:02:a2:4c: 57:80:29:ed:ef:8c:3a:0b:4c:c6:b1:ac:71:22:f4:18:e9:5e: fb:d0:42:15:05:7f:89:06:39:1c:12:5f:83:97:c5:70:cb:54: 09:c2:2b:a7:63:b2:84:5d:46:71:f6:37:b9:05:48:4d:7d:43: 3c:23:34:fc:ea:78:44:fe:20:d9:0c:a4:04:53:21:51:4c:b1: a7:f4:26:73:62:cc:7e:58:46:82:44:87:b2:c7:b9:9c:69:33: b2:08:b2:3f:e9:e2:20:04:d9:2b:a1:29:31:d4:79:0b:a9:4d: a3:67:62:2a:99:a4:0f:de:b6:46:78:f2:3f:3a:53:ea:3d:8a: 8b:7b:5a:cb:7e:84:a5:d6:cf:f4:bd:c2:34:7f:82:14:1c:3c: e1:43:cc:09:39:a1:40:09:6d:1f:34:bb:d7:3b:f1:7c:8d:b6: 7d:8e:8d:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFKpm+BZKIJ/1zrZhfwa8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZjYwM2YzYTU1YTI5ZTY2MTdmMDk2YjNhNjliZmYwYTM5 MmE5MjgwHhcNMjUxMjIyMjIwMTEyWhcNMjUxMjIzMjIwMTEyWjAzMTEwLwYDVQQD EyhjNTk0MmUyNzVhYjk5N2NiYWNhMTUzZDA1Nzc5ZTQ2ZjQ0Y2UxN2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIBrQlCcrWG+QPfP3X60HT53H+Rx iJowa0vIE+JssPYytZgPwQe7CdlrOxBgSDMpzE5UVTvRplOR2W6I9JS48+LtUH2s O93Li/ISRNfwD3U5FTuwt4lLwa4RNFVhWdIHjycV0RHwjTu4IMVUc82XVmPCqPZT u1LXVYB1lACOhTiif40zooioYOIJDbmmikKoABrj3YaOBvkxcBXrTPkZDldLCgL4 EAxGkz0N+jVlVXRTZNPnFRoQq/p6Ev27xNT2qRoV+x9a5t7/DKqsx8/XmcuC8A2n 6iPeIJY1DTfmHNzbrASmvn7q1umm+LvRIa1sIRSmmpENxiULyNiVdx6rtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWULidauZfLrKFT0Fd55G9EzhffMB8GA1UdIwQY MBaAFGL2A/OlWinmYX8Jazppv/CjkqkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXZZRDg2VmFLZVpoZndsck9tbV84S09TcVNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS80NzA2NWQtMmQ4My00NjQxLTgyMjMt NDFmMzlhOGMwOWRkLzEvWXZZRDg2VmFLZVpoZndsck9tbV84S09TcVNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS80NzA2NWQtMmQ4My00NjQxLTgyMjMtNDFmMzlhOGMwOWRk LzEvWXZZRDg2VmFLZVpoZndsck9tbV84S09TcVNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSKcKSPr 1D8s1DwpFSWHmzCkdTsMOaXLqtVBJ8Grp2vEHrg+xvdZF5Wmx87XCMGU2NGYvZ/e +S2fjtxTV45Lx+ZozzgPdCRFCvVc8+9ZLBE6KTjgDaDRAqJMV4Ap7e+MOgtMxrGs cSL0GOle+9BCFQV/iQY5HBJfg5fFcMtUCcIrp2OyhF1GcfY3uQVITX1DPCM0/Op4 RP4g2QykBFMhUUyxp/Qmc2LMflhGgkSHsse5nGkzsgiyP+niIATZK6EpMdR5C6lN o2diKpmkD962RnjyPzpT6j2Ki3tay36EpdbP9L3CNH+CFBw84UPMCTmhQAltHzS7 1zvxfI22fY6Nhg== -----END CERTIFICATE-----Generated at Tue Dec 23 00:43:42 2025 by rpki-client