This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft File: yYoYbo7rhxTtylsNcW5R1mwWjOE.mft (raw, json) Hash identifier: /5nU6hqaJL9AfDvilsmucF07NIqeGIYqXmHs7v3h+Jk= Subject key identifier: 70:56:DF:39:F7:21:D7:8A:2A:14:02:84:95:7C:5B:BA:4A:29:A3:7C Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1 Certificate issuer: /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1 Certificate serial: 019B3DC75B58C70B0CE2250B707A2E5BF746 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 22:00:33 +0000 Manifest this update: Sat 20 Dec 2025 22:00:33 +0000 Manifest next update: Sun 21 Dec 2025 22:00:33 +0000 Files and hashes: 1: Y9vHd81ibfUetGxJah-LnbSDV5g.roa (hash: 4fkHfBFVcEfZDutW6y6I1HuGuOEE4ACtS7MPP484LwM=) 2: yYoYbo7rhxTtylsNcW5R1mwWjOE.crl (hash: My5GvwRtg0pW5Rb+k/pto0Yw9Z40O64dV8GPvYuLshM=) 3: zBGnHPAUEWWCm_u3jtGTRqp9xHs.roa (hash: WhdGn2fRgjfQdOUl3EYSHsYRvd0466eSDsxZA6Pu8m8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:5b:58:c7:0b:0c:e2:25:0b:70:7a:2e:5b:f7:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1 Validity Not Before: Dec 20 22:00:33 2025 GMT Not After : Dec 21 22:00:33 2025 GMT Subject: CN=7056df39f721d78a2a140284957c5bba4a29a37c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:31:fe:0d:e4:b1:01:29:08:f9:a8:60:7b:d2: 7c:51:5f:b1:e0:69:85:1f:14:df:01:7f:41:e3:02: ac:bf:dd:f5:f2:ba:57:39:a2:06:fc:36:e0:04:b9: 1c:b3:ab:38:95:4b:11:6f:75:10:0e:7d:46:a0:cf: 25:69:d3:2b:11:d1:a9:af:af:c7:2a:44:10:20:ec: d7:fe:29:39:cc:58:ee:23:73:d9:de:e7:24:ac:45: 05:4b:84:53:a9:4a:4f:eb:df:ad:6e:98:08:0f:bb: a4:e4:56:17:4a:58:51:b2:0b:1e:cf:49:56:40:d7: 7d:64:b6:a9:45:0f:2e:ac:f4:30:09:1f:3a:55:f8: e6:1a:1d:09:68:c1:58:8f:7b:2b:8a:71:49:e1:32: de:4d:b1:1b:ea:a0:0e:e8:91:d4:22:16:25:3e:d1: a6:dc:6d:c6:21:00:b8:fd:5c:1c:02:61:13:bb:38: 9d:ad:8f:5f:76:7b:de:c1:1b:68:9e:6e:ac:b7:ad: dc:ae:39:f6:19:a0:54:c2:37:fa:e8:88:45:d9:d3: 3b:f4:df:58:83:6e:33:0b:9a:b0:f9:2a:2e:44:fb: 4a:1d:a7:69:cc:21:c9:5a:6e:4c:0f:bb:6f:d0:9a: 45:4f:f7:b7:24:7d:17:00:6e:77:33:c2:d2:e5:13: 5f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:56:DF:39:F7:21:D7:8A:2A:14:02:84:95:7C:5B:BA:4A:29:A3:7C X509v3 Authority Key Identifier: keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:36:f8:9d:f6:f4:14:67:9b:2d:dc:be:45:c7:35:5f:b9:6c: 6e:9a:52:03:9e:fc:d1:58:f3:33:96:87:00:e0:be:e1:b9:80: 54:f3:f9:3f:b4:55:e6:fd:df:3d:b2:23:09:00:b0:21:b6:42: 41:55:25:11:3a:cb:e3:75:08:ed:50:84:a7:b2:7f:4b:7c:60: 0f:b1:9a:9c:b2:86:6f:71:7d:cf:8d:e4:e2:db:29:49:16:d5: 78:9d:58:5e:02:03:56:c9:17:fe:97:6f:08:1c:41:ae:07:3a: 2e:5b:f8:67:39:53:8f:e1:0e:28:c3:ae:c7:fc:80:58:3b:31: 6b:12:d8:ee:53:85:2f:dd:01:58:fe:fb:44:70:d4:10:13:ad: 7e:7a:89:86:f7:ee:8c:8b:4b:50:fe:3f:6f:66:4a:cb:36:c9: 49:01:c5:33:6c:d9:db:e6:2d:f1:26:5e:2b:8b:95:9c:d7:d2: a6:50:05:5a:f6:d3:22:07:b2:e7:16:0d:fb:7f:e9:9b:7e:d4: 75:18:96:7e:90:3e:3d:4e:a3:18:96:64:5d:5e:70:55:c4:30: e2:ac:f9:b3:2d:5a:7a:96:57:0a:f1:ac:0f:32:6b:a9:b2:6a: 5a:e6:b2:d9:14:5f:5d:b1:a3:25:d7:8a:b9:4b:2f:e0:45:f8: 45:54:ee:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x1tYxwsM4iULcHouW/dGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OGExODZlOGVlYjg3MTRlZGNhNWIwZDcxNmU1MWQ2NmMx NjhjZTEwHhcNMjUxMjIwMjIwMDMzWhcNMjUxMjIxMjIwMDMzWjAzMTEwLwYDVQQD Eyg3MDU2ZGYzOWY3MjFkNzhhMmExNDAyODQ5NTdjNWJiYTRhMjlhMzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzH+DeSxASkI+ahge9J8UV+x4GmF HxTfAX9B4wKsv9318rpXOaIG/DbgBLkcs6s4lUsRb3UQDn1GoM8ladMrEdGpr6/H KkQQIOzX/ik5zFjuI3PZ3uckrEUFS4RTqUpP69+tbpgID7uk5FYXSlhRsgsez0lW QNd9ZLapRQ8urPQwCR86VfjmGh0JaMFYj3srinFJ4TLeTbEb6qAO6JHUIhYlPtGm 3G3GIQC4/VwcAmETuzidrY9fdnvewRtonm6st63crjn2GaBUwjf66IhF2dM79N9Y g24zC5qw+SouRPtKHadpzCHJWm5MD7tv0JpFT/e3JH0XAG53M8LS5RNfmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBW3zn3IdeKKhQChJV8W7pKKaN8MB8GA1UdIwQY MBaAFMmKGG6O64cU7cpbDXFuUdZsFozhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVlvWWJvN3JoeFR0eWxzTmNXNVIxbXdXak9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iYTcyMTQtNTU2OC00YTQyLWE5OTkt N2E1YThkMDk2N2M4LzEveVlvWWJvN3JoeFR0eWxzTmNXNVIxbXdXak9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iYTcyMTQtNTU2OC00YTQyLWE5OTktN2E1YThkMDk2N2M4 LzEveVlvWWJvN3JoeFR0eWxzTmNXNVIxbXdXak9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxjb4nfb0 FGebLdy+Rcc1X7lsbppSA5780VjzM5aHAOC+4bmAVPP5P7RV5v3fPbIjCQCwIbZC QVUlETrL43UI7VCEp7J/S3xgD7GanLKGb3F9z43k4tspSRbVeJ1YXgIDVskX/pdv CBxBrgc6Llv4ZzlTj+EOKMOux/yAWDsxaxLY7lOFL90BWP77RHDUEBOtfnqJhvfu jItLUP4/b2ZKyzbJSQHFM2zZ2+Yt8SZeK4uVnNfSplAFWvbTIgey5xYN+3/pm37U dRiWfpA+PU6jGJZkXV5wVcQw4qz5sy1aepZXCvGsDzJrqbJqWuay2RRfXbGjJdeK uUsv4EX4RVTusg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:41:49 2025 by rpki-client