This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json) Hash identifier: O46lasqGKI26aVoC66fwZaelVH+nzkYNzTCggJKETpw= Subject key identifier: AE:12:C9:9A:BE:1F:09:F9:1D:EF:54:C5:81:59:B0:98:10:48:03:62 Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b Certificate serial: 019B3F7EFBC19F8E1210FAE084FD304450D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft Manifest number: 0FBD Signing time: Sun 21 Dec 2025 06:00:45 +0000 Manifest this update: Sun 21 Dec 2025 06:00:45 +0000 Manifest next update: Mon 22 Dec 2025 06:00:45 +0000 Files and hashes: 1: JNo1MUvO7s8A9kHBAkmvoAiPGvM.roa (hash: R/jVb2Ae9Mk2lsjcWf8tfEbhkiCQiMp10JSlkK4oRdc=) 2: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: hNPqoRaX6Q30Vb7RzfXKLYVwnSld11PNM3lCvAK9FxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:fb:c1:9f:8e:12:10:fa:e0:84:fd:30:44:50:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b Validity Not Before: Dec 21 06:00:45 2025 GMT Not After : Dec 22 06:00:45 2025 GMT Subject: CN=ae12c99abe1f09f91def54c58159b09810480362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e4:e2:db:53:43:11:41:0a:12:59:d7:49:93: 3d:07:3b:bf:3e:11:c9:97:cd:c8:5f:ff:a5:05:25: ac:5f:9e:29:ce:b7:15:b9:a9:dd:b7:be:0c:a2:49: eb:51:96:3c:02:4b:a8:57:73:c6:3e:3e:55:8c:c1: 35:f4:ac:06:fa:44:ad:82:b1:e5:e2:a2:a9:71:4f: 09:6e:dd:62:16:66:b1:84:c0:4b:71:7f:51:e3:8d: 1e:70:0f:40:6c:c8:f8:9a:d1:a5:bc:f9:a5:c6:39: 2c:d0:93:6a:a5:aa:bd:2b:51:e2:7f:fb:29:1a:56: 66:eb:ab:37:b6:0d:f2:d7:70:97:5f:ca:cf:7f:4a: 90:7b:bb:03:9c:c9:0d:b2:ac:59:ea:9a:0d:3d:93: 3d:19:29:26:d3:e3:c7:c0:f1:26:f4:15:ca:68:ad: d6:89:f2:1c:5b:06:f3:fd:31:ff:e1:bb:48:5c:40: a0:bd:44:4b:c1:b3:38:bc:dd:df:61:7b:8f:5c:47: 22:bf:eb:9f:f1:5b:db:63:b3:e1:e2:a4:fe:85:5a: 8e:7e:e8:3d:3c:b2:bc:7a:5b:a8:25:82:70:f9:f3: 89:f7:0f:b9:8f:af:08:1d:91:7b:65:88:5c:10:ee: 2e:e5:b5:50:9b:95:59:9e:fa:46:78:8d:c8:6b:cf: 06:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:12:C9:9A:BE:1F:09:F9:1D:EF:54:C5:81:59:B0:98:10:48:03:62 X509v3 Authority Key Identifier: keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:5f:d5:64:fc:33:34:6a:d1:43:01:45:bf:6d:1b:d1:b8:12: 0b:3b:a5:dd:dc:4b:ab:8c:f3:3f:91:fe:ad:1e:d7:1b:33:33: f3:0e:e1:09:89:ba:22:1d:d5:e1:f8:7d:66:c1:e5:4f:03:62: cc:d4:18:3c:0c:59:42:e7:fe:4c:a9:0c:5b:39:f2:4e:9f:6c: 65:b3:c7:71:75:c3:98:65:38:3f:21:c6:64:2b:af:ec:57:a5: 65:fd:70:ae:ea:7d:fd:f2:a7:98:9b:ca:1b:9d:bc:fc:40:a4: 59:3c:50:82:f7:44:26:16:a3:06:97:0e:5f:30:18:06:72:3a: 21:ec:98:c7:12:e4:b9:f5:c2:ac:4b:52:a7:28:5b:8a:ba:fa: 4e:ef:39:01:70:23:96:0b:ed:1d:0c:43:6a:11:9a:72:91:b4: fc:1a:82:54:78:f5:42:9c:e2:78:eb:0b:65:e1:bd:74:d1:15: 1f:fa:d3:69:30:1f:98:6b:05:77:ed:c0:09:ee:f3:d5:f6:6c: b7:18:51:65:38:ba:4a:6e:4b:48:09:25:80:e9:eb:f3:a7:06: 9a:6f:31:e5:e8:50:f1:ea:fa:cb:11:46:7b:28:a2:17:34:62: 34:c2:cc:3f:c1:7e:e9:94:8a:01:a6:73:bd:19:8d:d2:cc:f8: bb:a1:11:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fvvBn44SEPrghP0wRFDXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZmM5ODQyOGMyNDUxYzFhZWRmOGFmZmMwNzJhOTU4Njhl Y2VlOGIwHhcNMjUxMjIxMDYwMDQ1WhcNMjUxMjIyMDYwMDQ1WjAzMTEwLwYDVQQD EyhhZTEyYzk5YWJlMWYwOWY5MWRlZjU0YzU4MTU5YjA5ODEwNDgwMzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeTi21NDEUEKElnXSZM9Bzu/PhHJ l83IX/+lBSWsX54pzrcVuandt74MoknrUZY8AkuoV3PGPj5VjME19KwG+kStgrHl 4qKpcU8Jbt1iFmaxhMBLcX9R440ecA9AbMj4mtGlvPmlxjks0JNqpaq9K1Hif/sp GlZm66s3tg3y13CXX8rPf0qQe7sDnMkNsqxZ6poNPZM9GSkm0+PHwPEm9BXKaK3W ifIcWwbz/TH/4btIXECgvURLwbM4vN3fYXuPXEciv+uf8VvbY7Ph4qT+hVqOfug9 PLK8eluoJYJw+fOJ9w+5j68IHZF7ZYhcEO4u5bVQm5VZnvpGeI3Ia88GCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4SyZq+Hwn5He9UxYFZsJgQSANiMB8GA1UdIwQY MBaAFJ/8mEKMJFHBrt+K/8ByqVho7O6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83MjQzMjgtMDlkMy00OTY0LWFjYzQt Yjk2ZDJmYmVmZWJkLzEvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS83MjQzMjgtMDlkMy00OTY0LWFjYzQtYjk2ZDJmYmVmZWJk LzEvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcV/VZPwz NGrRQwFFv20b0bgSCzul3dxLq4zzP5H+rR7XGzMz8w7hCYm6Ih3V4fh9ZsHlTwNi zNQYPAxZQuf+TKkMWznyTp9sZbPHcXXDmGU4PyHGZCuv7FelZf1wrup9/fKnmJvK G528/ECkWTxQgvdEJhajBpcOXzAYBnI6IeyYxxLkufXCrEtSpyhbirr6Tu85AXAj lgvtHQxDahGacpG0/BqCVHj1QpzieOsLZeG9dNEVH/rTaTAfmGsFd+3ACe7z1fZs txhRZTi6Sm5LSAklgOnr86cGmm8x5ehQ8er6yxFGeyiiFzRiNMLMP8F+6ZSKAaZz vRmN0sz4u6EReg== -----END CERTIFICATE-----Generated at Sun Dec 21 09:00:47 2025 by rpki-client