This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft File: ynSM0AzX_mohdVr2QtiBuN2aOfc.mft (raw, json) Hash identifier: fG9Een3pmFpXD2/fSHiaSmWiWCpvwgN/DUZzpjj2yhs= Subject key identifier: 2B:DA:C3:E7:D7:10:A3:C2:BC:34:D1:9B:CB:F4:E2:D1:67:C9:CF:48 Authority key identifier: CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7 Certificate issuer: /CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7 Certificate serial: 019B3FB5F5E34D092FE77136F86802D5924C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 07:00:48 +0000 Manifest this update: Sun 21 Dec 2025 07:00:48 +0000 Manifest next update: Mon 22 Dec 2025 07:00:48 +0000 Files and hashes: 1: s9EuqX5b9zt_Znw1hEoBNVzx0co.roa (hash: MS1QUNemj9oOGEXp2GgN/ppihkcGaOAMbcG5uVtKAdE=) 2: ynSM0AzX_mohdVr2QtiBuN2aOfc.crl (hash: mGYFP9XSjSJDulgzlZOI0ST9r+FVDCNZnnMXKvYZOHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:f5:e3:4d:09:2f:e7:71:36:f8:68:02:d5:92:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7 Validity Not Before: Dec 21 07:00:48 2025 GMT Not After : Dec 22 07:00:48 2025 GMT Subject: CN=2bdac3e7d710a3c2bc34d19bcbf4e2d167c9cf48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:03:63:87:15:e1:1a:f1:42:b0:bb:04:55:1c: c4:63:74:3a:00:a4:68:fc:b5:3c:2f:dd:5c:fb:cf: 7c:b9:fa:a6:91:20:59:35:d5:52:5a:11:2d:05:64: b1:03:aa:ca:9c:4e:e4:93:31:ff:57:62:3b:0a:c1: a8:3b:cc:fa:3d:43:91:fa:86:27:cb:62:0e:2d:a5: d9:04:fd:d2:7f:ca:39:3a:03:61:dc:f1:5a:7d:41: de:a6:fe:5d:92:e6:53:d2:3b:de:23:00:47:56:af: 71:6c:24:cc:c5:8c:f3:7e:6a:59:d8:d6:fa:db:80: 58:b8:72:9c:b2:9a:cf:f1:30:1b:87:20:22:e9:b6: 89:fe:05:86:80:9d:ea:58:b9:11:eb:01:93:6c:42: d0:61:c5:f8:e2:77:14:98:cf:8d:6f:57:4b:ed:12: 4a:a5:cc:fe:71:c8:94:86:40:25:49:0c:6d:b5:c4: 0f:f9:09:e2:a0:ed:5f:4b:43:ac:46:c2:21:4d:d3: 52:f4:b4:4c:db:8c:35:13:cf:a6:07:62:09:a7:b1: 6e:d3:cf:f9:13:d0:36:d9:f6:fd:c5:22:f8:69:21: 3b:62:ed:cf:66:0c:ff:33:75:39:35:a4:66:fc:66: f5:dc:99:68:8b:d2:65:fd:62:67:62:e5:1c:ae:66: e0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DA:C3:E7:D7:10:A3:C2:BC:34:D1:9B:CB:F4:E2:D1:67:C9:CF:48 X509v3 Authority Key Identifier: keyid:CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:fc:9f:a4:45:2e:ab:c8:5b:3d:54:e6:28:51:f4:cd:15:7d: e1:b3:36:7a:ef:5f:3a:41:12:ce:c2:f1:f7:b1:7b:58:6a:83: 17:17:91:f4:90:63:60:32:40:41:c7:c4:7b:49:98:af:3f:c1: fd:3b:60:0c:6b:74:5a:ba:8b:4d:f4:49:07:6a:1d:04:d5:f2: 2a:54:33:57:72:44:09:60:e1:e2:58:86:b3:49:e8:e7:28:40: 8f:10:e3:b4:32:13:ef:fe:89:d7:59:84:e1:2b:ec:b4:ba:c1: 54:f1:e9:e3:45:bd:84:7b:25:e6:8d:54:e1:10:5a:c7:db:63: ab:75:92:85:4b:7b:74:55:e1:20:44:a2:d1:a0:d4:6b:10:3b: f4:f2:21:10:11:80:b3:f2:2a:a9:3b:52:f8:da:8a:64:94:ae: b9:2f:c8:a0:21:5c:eb:c6:22:d3:64:3c:6e:9a:2f:c1:48:3b: f4:77:b3:e1:c8:ae:56:b6:1f:95:d3:0b:2a:d1:e4:0b:9b:c2: e4:23:b1:a0:62:3e:42:ef:d7:dd:e4:67:89:83:57:ce:0e:fe: 47:32:99:bf:9c:f4:48:cb:70:07:12:bd:40:5a:e2:f1:74:8f: 3c:c1:1d:59:76:06:7c:39:79:40:14:a1:a6:60:f5:a3:92:92: 06:1c:9e:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tfXjTQkv53E2+GgC1ZJMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNzQ4Y2QwMGNkN2ZlNmEyMTc1NWFmNjQyZDg4MWI4ZGQ5 YTM5ZjcwHhcNMjUxMjIxMDcwMDQ4WhcNMjUxMjIyMDcwMDQ4WjAzMTEwLwYDVQQD EygyYmRhYzNlN2Q3MTBhM2MyYmMzNGQxOWJjYmY0ZTJkMTY3YzljZjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQNjhxXhGvFCsLsEVRzEY3Q6AKRo /LU8L91c+898ufqmkSBZNdVSWhEtBWSxA6rKnE7kkzH/V2I7CsGoO8z6PUOR+oYn y2IOLaXZBP3Sf8o5OgNh3PFafUHepv5dkuZT0jveIwBHVq9xbCTMxYzzfmpZ2Nb6 24BYuHKcsprP8TAbhyAi6baJ/gWGgJ3qWLkR6wGTbELQYcX44ncUmM+Nb1dL7RJK pcz+cciUhkAlSQxttcQP+QnioO1fS0OsRsIhTdNS9LRM24w1E8+mB2IJp7Fu08/5 E9A22fb9xSL4aSE7Yu3PZgz/M3U5NaRm/Gb13Jloi9Jl/WJnYuUcrmbgkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCvaw+fXEKPCvDTRm8v04tFnyc9IMB8GA1UdIwQY MBaAFMp0jNAM1/5qIXVa9kLYgbjdmjn3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW5TTTBBelhfbW9oZFZyMlF0aUJ1TjJhT2ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xNmVlYjItYzgyNy00MmM5LThlNDgt MmEzZGY5YjMzMzEzLzEveW5TTTBBelhfbW9oZFZyMlF0aUJ1TjJhT2ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8xNmVlYjItYzgyNy00MmM5LThlNDgtMmEzZGY5YjMzMzEz LzEveW5TTTBBelhfbW9oZFZyMlF0aUJ1TjJhT2ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnPyfpEUu q8hbPVTmKFH0zRV94bM2eu9fOkESzsLx97F7WGqDFxeR9JBjYDJAQcfEe0mYrz/B /TtgDGt0WrqLTfRJB2odBNXyKlQzV3JECWDh4liGs0no5yhAjxDjtDIT7/6J11mE 4SvstLrBVPHp40W9hHsl5o1U4RBax9tjq3WShUt7dFXhIESi0aDUaxA79PIhEBGA s/IqqTtS+NqKZJSuuS/IoCFc68Yi02Q8bpovwUg79Hez4ciuVrYfldMLKtHkC5vC 5COxoGI+Qu/X3eRniYNXzg7+RzKZv5z0SMtwBxK9QFri8XSPPMEdWXYGfDl5QBSh pmD1o5KSBhyerQ== -----END CERTIFICATE-----Generated at Sun Dec 21 08:42:01 2025 by rpki-client