This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft File: yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft (raw, json) Hash identifier: YQ2ZkrcIO+/Om843ZNRTEDH1U8e03KERcWQY1aTdcgY= Subject key identifier: 7C:0B:41:FA:95:DD:58:5B:9B:50:3B:73:81:3D:A7:1E:29:EC:65:60 Authority key identifier: C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77 Certificate issuer: /CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277 Certificate serial: 019B413650C291C130DE92C57CC67922116B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft Manifest number: 140F Signing time: Sun 21 Dec 2025 14:00:37 +0000 Manifest this update: Sun 21 Dec 2025 14:00:37 +0000 Manifest next update: Mon 22 Dec 2025 14:00:37 +0000 Files and hashes: 1: 1-VGMXMMV2Cqy03R1ZIzIT8zjSHs.roa (hash: odkCOMHYYSyyI06jcNtcsAr7ZqbIzMS4uoFJAxDHurk=) 2: yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl (hash: u19d4trdHrZ7KMmlE9Q/KLE14RuZpOIstaZyywChrgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:50:c2:91:c1:30:de:92:c5:7c:c6:79:22:11:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277 Validity Not Before: Dec 21 14:00:37 2025 GMT Not After : Dec 22 14:00:37 2025 GMT Subject: CN=7c0b41fa95dd585b9b503b73813da71e29ec6560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6f:fe:25:dc:f2:e7:3f:b8:c7:1b:70:c2:3f: ca:fc:47:06:d4:fd:bf:d8:86:e2:f1:a3:92:a7:f8: e1:65:ab:54:3b:0c:db:8c:d5:06:91:1d:d1:e2:e0: 8a:2f:e8:ad:7e:b7:f3:0e:c1:a4:70:df:c6:49:4e: 7d:02:f8:6e:d7:3a:06:13:98:92:1f:86:d2:c0:4a: 86:e6:3b:a9:20:50:ee:6a:f2:00:0c:66:a9:57:ac: 4f:dc:af:15:92:ae:65:38:2c:cd:15:e0:53:e3:8e: b8:6c:99:56:19:13:9d:8d:4d:51:a7:43:39:9a:43: 83:d8:75:0e:a5:dd:50:a9:1c:74:60:2e:39:7c:b7: 9f:13:08:57:3e:69:93:ed:60:ac:c1:04:18:f9:17: 8e:09:82:b6:e4:4a:69:2f:9b:34:ec:26:bc:b3:d4: ea:5e:9d:0f:3a:ee:d2:17:c7:3d:2e:6b:02:40:63: b7:f8:4c:dc:11:d5:c0:ce:2e:e2:10:d9:27:4a:79: a8:71:7f:1f:5a:fd:ff:d4:22:23:29:dc:20:79:fa: 46:22:2f:af:5b:15:f4:57:1e:52:78:bf:1a:7d:2e: 93:13:52:d4:9b:58:6d:0d:c6:dd:fc:4b:30:15:6e: 3f:7d:80:f4:42:b9:fb:c8:34:cc:e3:90:e9:27:aa: b0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:0B:41:FA:95:DD:58:5B:9B:50:3B:73:81:3D:A7:1E:29:EC:65:60 X509v3 Authority Key Identifier: keyid:C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:2b:f0:b0:8f:01:b8:c1:cb:b9:ea:00:d6:9e:0d:2e:cd:71: 44:d1:09:ac:90:69:d9:c7:42:b9:a1:4f:ca:ca:e1:1b:db:0e: a5:d2:41:ae:a2:c6:96:58:58:b3:be:57:c6:b6:5d:ef:41:c7: 82:e8:14:c3:93:3a:7e:b5:78:65:97:4b:4b:a7:c8:e3:4e:1c: 55:6a:f8:74:7b:02:4b:e7:98:13:b3:4b:ce:ea:ed:55:ad:0f: d4:0a:12:05:5e:fd:51:6e:23:42:be:f5:d9:40:db:b6:77:f9: df:82:fd:be:6d:83:a6:4b:47:62:c4:53:ae:0e:1f:7e:95:84: 64:3c:a6:45:09:93:5e:c1:76:58:b0:c7:1b:59:72:2e:7a:3f: 97:eb:f5:8d:30:3d:25:3c:0e:4f:cf:72:25:f6:40:fa:d9:3d: c4:cc:67:29:46:ee:f8:9e:52:88:65:78:17:de:0c:08:45:03: a5:f0:54:ba:f5:ce:83:da:7d:c1:71:f8:8e:ca:1b:02:81:0a: 09:af:c4:68:27:98:99:3a:11:52:85:7f:ac:f0:63:c1:83:ff: 04:80:17:0f:f9:d0:db:cd:2b:ae:41:26:1a:b1:7c:12:68:3f: 5b:7f:4c:d9:ba:9b:0d:55:3d:65:fb:69:eb:16:0c:cb:5e:ba: e5:19:8b:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNlDCkcEw3pLFfMZ5IhFrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4Mjg5NTM1ZTdlNGQyM2U2M2UxNzhlM2ZiNWJmMDU2ZmU4 YWUyNzcwHhcNMjUxMjIxMTQwMDM3WhcNMjUxMjIyMTQwMDM3WjAzMTEwLwYDVQQD Eyg3YzBiNDFmYTk1ZGQ1ODViOWI1MDNiNzM4MTNkYTcxZTI5ZWM2NTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2/+Jdzy5z+4xxtwwj/K/EcG1P2/ 2Ibi8aOSp/jhZatUOwzbjNUGkR3R4uCKL+itfrfzDsGkcN/GSU59Avhu1zoGE5iS H4bSwEqG5jupIFDuavIADGapV6xP3K8Vkq5lOCzNFeBT4464bJlWGROdjU1Rp0M5 mkOD2HUOpd1QqRx0YC45fLefEwhXPmmT7WCswQQY+ReOCYK25EppL5s07Ca8s9Tq Xp0POu7SF8c9LmsCQGO3+EzcEdXAzi7iENknSnmocX8fWv3/1CIjKdwgefpGIi+v WxX0Vx5SeL8afS6TE1LUm1htDcbd/EswFW4/fYD0Qrn7yDTM45DpJ6qwcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwLQfqV3Vhbm1A7c4E9px4p7GVgMB8GA1UdIwQY MBaAFMgolTXn5NI+Y+F44/tb8Fb+iuJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUNpVk5lZmswajVqNFhqai0xdndWdjZLNG5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82ZGNlZGItY2EwYi00ODNhLWE2NjQt NjZhNWVjYzg0NjE2LzEveUNpVk5lZmswajVqNFhqai0xdndWdjZLNG5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82ZGNlZGItY2EwYi00ODNhLWE2NjQtNjZhNWVjYzg0NjE2 LzEveUNpVk5lZmswajVqNFhqai0xdndWdjZLNG5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATCvwsI8B uMHLueoA1p4NLs1xRNEJrJBp2cdCuaFPysrhG9sOpdJBrqLGllhYs75XxrZd70HH gugUw5M6frV4ZZdLS6fI404cVWr4dHsCS+eYE7NLzurtVa0P1AoSBV79UW4jQr71 2UDbtnf534L9vm2DpktHYsRTrg4ffpWEZDymRQmTXsF2WLDHG1lyLno/l+v1jTA9 JTwOT89yJfZA+tk9xMxnKUbu+J5SiGV4F94MCEUDpfBUuvXOg9p9wXH4jsobAoEK Ca/EaCeYmToRUoV/rPBjwYP/BIAXD/nQ280rrkEmGrF8Emg/W39M2bqbDVU9Zftp 6xYMy1665RmLFQ== -----END CERTIFICATE-----Generated at Sun Dec 21 17:55:51 2025 by rpki-client