This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft File: yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft (raw, json) Hash identifier: pTKYNFQmpR4vCZUzzuCWdVTuY9KtCf0kUyu4z8jqtHU= Subject key identifier: 09:76:41:00:00:28:DB:8B:49:B0:60:8F:0D:CA:72:08:9B:93:82:65 Authority key identifier: C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77 Certificate issuer: /CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277 Certificate serial: 019B45133345044BA17A7EFF535E297F465C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft Manifest number: 1411 Signing time: Mon 22 Dec 2025 08:00:44 +0000 Manifest this update: Mon 22 Dec 2025 08:00:44 +0000 Manifest next update: Tue 23 Dec 2025 08:00:44 +0000 Files and hashes: 1: 1-VGMXMMV2Cqy03R1ZIzIT8zjSHs.roa (hash: odkCOMHYYSyyI06jcNtcsAr7ZqbIzMS4uoFJAxDHurk=) 2: yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl (hash: n/3vRnbsmhLN4hOqRa6MKbxs4q0QKQNoMbSEATBP9rE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:33:45:04:4b:a1:7a:7e:ff:53:5e:29:7f:46:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277 Validity Not Before: Dec 22 08:00:44 2025 GMT Not After : Dec 23 08:00:44 2025 GMT Subject: CN=097641000028db8b49b0608f0dca72089b938265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:10:82:94:ee:22:6a:95:32:29:39:35:77:dc: 58:73:da:7f:9b:78:bb:6b:2f:03:21:e0:f0:ba:aa: 00:d7:6f:59:6a:d4:e4:80:f8:28:d5:64:d8:9f:f3: 85:80:6e:ec:29:ef:94:ae:9b:d5:1a:fe:da:17:18: e2:82:fd:c4:34:a6:20:2a:f7:ff:4a:43:cd:7b:9d: 23:bb:79:c7:77:f4:70:00:c1:05:d1:2d:7b:7b:eb: 27:b6:5d:fb:fa:1f:d1:e5:5e:82:74:d6:0e:27:fe: b5:e3:1a:fa:87:2f:a2:96:0d:1a:ac:e8:13:5d:fd: 49:46:9f:ea:b5:16:ae:0c:38:6d:45:2a:da:4a:80: 97:f5:5d:6c:c7:5d:c1:35:0e:7d:47:e9:74:48:30: be:14:39:50:d5:d1:e7:51:0b:14:fe:7a:e5:46:3a: dc:72:f3:55:79:39:3a:fa:dd:9a:0b:f1:66:a2:a4: 49:b9:b8:1a:1d:c6:78:20:23:64:a5:06:e3:11:9a: ea:0b:e3:77:c8:fb:e5:55:70:1b:d8:36:ec:f0:08: c6:15:0f:47:a9:02:6e:36:d3:88:1d:05:58:c2:79: 2b:a3:d4:0b:2e:45:a1:49:4b:70:bf:8b:e3:7b:84: 95:d4:d2:d8:71:64:c1:3e:b7:1e:44:ac:3d:cb:d4: d3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:76:41:00:00:28:DB:8B:49:B0:60:8F:0D:CA:72:08:9B:93:82:65 X509v3 Authority Key Identifier: keyid:C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:4e:4a:d2:26:4a:5e:39:23:3e:ee:73:36:6d:25:d0:33:bc: 53:c2:e4:fd:7f:21:f3:3f:f1:e6:52:d3:ef:b8:94:b0:c4:45: bd:3a:5e:59:27:fc:bc:df:5a:99:15:1a:1d:7a:bf:33:1a:f4: 53:f3:e1:86:9b:27:35:15:e2:59:c3:20:4b:d1:06:b0:18:22: fd:a0:14:50:35:a3:98:80:30:d1:3e:50:54:49:62:ee:13:16: 76:74:a1:c0:26:a0:05:60:e5:67:ed:5b:06:a5:40:88:ca:e4: b8:25:ab:3d:1e:87:07:06:4e:b7:32:4a:91:05:12:2d:f4:4d: 01:c4:74:77:54:ec:56:05:ad:c0:52:68:9e:c1:33:93:db:4b: 0e:10:3e:a3:fa:d0:60:d8:45:e7:81:f9:b8:ac:02:b3:5c:f5: 38:68:c3:fc:3e:d4:d4:c4:3d:7f:68:0c:3a:c8:8e:fa:d2:95: 5e:91:ed:00:9f:93:29:e3:af:ad:3b:1c:b7:1f:65:5f:50:df: 88:19:1c:4e:c1:af:6c:07:85:6d:8d:6e:5b:5c:f5:2a:39:45: 07:b6:d9:6c:ea:b9:a4:a1:6c:4e:87:84:70:5d:e9:fd:5a:ed: 3b:07:af:7c:ff:e6:c2:4d:7f:d8:98:f9:5b:12:11:47:32:18: 29:15:bc:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFEzNFBEuhen7/U14pf0ZcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4Mjg5NTM1ZTdlNGQyM2U2M2UxNzhlM2ZiNWJmMDU2ZmU4 YWUyNzcwHhcNMjUxMjIyMDgwMDQ0WhcNMjUxMjIzMDgwMDQ0WjAzMTEwLwYDVQQD EygwOTc2NDEwMDAwMjhkYjhiNDliMDYwOGYwZGNhNzIwODliOTM4MjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhCClO4iapUyKTk1d9xYc9p/m3i7 ay8DIeDwuqoA129ZatTkgPgo1WTYn/OFgG7sKe+UrpvVGv7aFxjigv3ENKYgKvf/ SkPNe50ju3nHd/RwAMEF0S17e+sntl37+h/R5V6CdNYOJ/614xr6hy+ilg0arOgT Xf1JRp/qtRauDDhtRSraSoCX9V1sx13BNQ59R+l0SDC+FDlQ1dHnUQsU/nrlRjrc cvNVeTk6+t2aC/FmoqRJubgaHcZ4ICNkpQbjEZrqC+N3yPvlVXAb2Dbs8AjGFQ9H qQJuNtOIHQVYwnkro9QLLkWhSUtwv4vje4SV1NLYcWTBPrceRKw9y9TT8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAl2QQAAKNuLSbBgjw3Kcgibk4JlMB8GA1UdIwQY MBaAFMgolTXn5NI+Y+F44/tb8Fb+iuJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUNpVk5lZmswajVqNFhqai0xdndWdjZLNG5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82ZGNlZGItY2EwYi00ODNhLWE2NjQt NjZhNWVjYzg0NjE2LzEveUNpVk5lZmswajVqNFhqai0xdndWdjZLNG5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82ZGNlZGItY2EwYi00ODNhLWE2NjQtNjZhNWVjYzg0NjE2 LzEveUNpVk5lZmswajVqNFhqai0xdndWdjZLNG5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfU5K0iZK XjkjPu5zNm0l0DO8U8Lk/X8h8z/x5lLT77iUsMRFvTpeWSf8vN9amRUaHXq/Mxr0 U/PhhpsnNRXiWcMgS9EGsBgi/aAUUDWjmIAw0T5QVEli7hMWdnShwCagBWDlZ+1b BqVAiMrkuCWrPR6HBwZOtzJKkQUSLfRNAcR0d1TsVgWtwFJonsEzk9tLDhA+o/rQ YNhF54H5uKwCs1z1OGjD/D7U1MQ9f2gMOsiO+tKVXpHtAJ+TKeOvrTsctx9lX1Df iBkcTsGvbAeFbY1uW1z1KjlFB7bZbOq5pKFsToeEcF3p/VrtOwevfP/mwk1/2Jj5 WxIRRzIYKRW8Gg== -----END CERTIFICATE-----Generated at Mon Dec 22 14:04:03 2025 by rpki-client