This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft File: ykeSHkQwUhp3J4iME7x7jhBMvb4.mft (raw, json) Hash identifier: /6mOsU2j+hR9sZ+gppuPiioqi2zVvWSaSsvlBLVYxgI= Subject key identifier: D0:DF:36:6F:89:83:95:4D:0D:74:8B:04:EC:CC:D9:05:C5:43:C7:17 Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE Certificate issuer: /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe Certificate serial: 019B51BD2531D96CC6FBB1BF4C5111C0BF5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft Manifest number: 162E Signing time: Wed 24 Dec 2025 19:01:48 +0000 Manifest this update: Wed 24 Dec 2025 19:01:48 +0000 Manifest next update: Thu 25 Dec 2025 19:01:48 +0000 Files and hashes: 1: Ky7rxpR-4kSoR04Qa7eCVK5uiAA.roa (hash: 79v9RJlNPMb159U3SJ5gXF4cXCcoiW5a6vs+5ie+7Wo=) 2: Zc10HX1foB49pMgA50Z_9jpZwkI.roa (hash: 2g9yRUzjmd9wC7gYwkCUgnhu5bqK4zqTow7PrbYY/ZM=) 3: ykeSHkQwUhp3J4iME7x7jhBMvb4.crl (hash: GXZEmPwzjw5Ii6cU3Kd7kva/NkEX+RCxtFCt4vUjTzI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:25:31:d9:6c:c6:fb:b1:bf:4c:51:11:c0:bf:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe Validity Not Before: Dec 24 19:01:48 2025 GMT Not After : Dec 25 19:01:48 2025 GMT Subject: CN=d0df366f8983954d0d748b04ecccd905c543c717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b0:11:22:ce:16:16:dc:93:10:c6:4d:88:25: d6:25:24:99:30:9d:cd:1f:4e:e1:04:53:d9:02:81: a5:57:cc:c6:6b:4a:10:33:ce:35:f3:08:a5:4b:e8: 45:56:f6:56:c2:92:94:a5:e5:fe:c2:8e:b1:1a:e4: e1:b4:a1:ad:d1:f6:ad:26:76:b8:73:7f:39:fe:10: 1a:ae:9d:81:34:8f:b8:e3:94:04:61:63:85:8e:90: 04:9b:4c:c4:2c:19:58:dc:a9:87:77:c0:90:ac:1f: 34:9d:45:39:7a:d5:70:47:fa:46:bc:40:47:0a:52: 6f:67:71:93:33:6c:f5:ae:00:7c:7f:98:ca:46:25: 1f:78:13:23:ab:b8:71:4b:3d:7b:f9:5b:51:4a:00: cf:7d:74:fd:5e:ca:9f:45:7d:3c:d5:bc:43:9e:84: 9b:ef:e8:34:2c:e0:bc:01:52:88:2b:6e:da:90:f0: be:e7:11:31:8b:e4:67:f5:83:f8:a8:ca:12:ec:89: 88:5f:6c:36:12:82:4d:77:5e:2d:25:2a:34:07:4b: b1:9b:82:ae:3e:2e:83:b0:cc:9a:98:66:21:e6:a7: c5:d1:1e:51:66:6e:f0:b3:59:13:7a:ab:09:a3:e3: d4:e9:3c:f7:6f:91:b2:d0:4a:18:78:a3:00:be:01: 3a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:DF:36:6F:89:83:95:4D:0D:74:8B:04:EC:CC:D9:05:C5:43:C7:17 X509v3 Authority Key Identifier: keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:a8:17:00:4d:20:d9:8b:fc:ba:c0:26:d1:f6:6a:3c:33:bd: 38:2b:a8:bf:2d:54:f0:4b:2a:e2:e9:7f:5f:b0:8b:8a:e3:5c: b5:11:f0:44:d7:78:7e:38:01:e4:a9:14:13:bb:7e:25:75:80: d0:bc:c6:bd:06:ea:e7:90:f1:ca:ed:4e:7e:da:e6:fc:36:9a: 1c:3a:bd:3f:12:53:65:63:af:f1:7d:ba:d0:c2:b8:ad:51:1d: 18:df:89:db:db:27:06:9a:5f:d8:38:17:28:2b:54:89:9d:e2: bf:93:d5:2d:4f:0b:58:17:38:b5:a0:49:a7:77:04:78:41:40: 34:63:87:73:ec:0d:20:b1:a7:a1:1b:ab:5e:52:3e:df:bb:0c: 3c:c1:3d:bb:ca:a5:b5:05:7b:b0:ca:0a:ed:1c:0c:e7:5a:ae: ab:92:5a:c5:77:ef:2a:5a:05:e3:27:20:fd:d7:64:c2:a3:d6: ff:6d:b0:64:a4:e5:a7:d2:af:98:c4:05:bc:c0:91:b8:53:40: 18:78:e1:10:f8:e4:13:82:04:09:44:33:a5:6e:6b:d2:f3:3c: ec:7b:41:67:fb:a6:36:0c:df:5d:fb:0c:d8:10:54:5f:61:7a: c2:0d:e1:97:33:f7:e4:af:2a:12:7b:54:b7:6b:b6:4a:b1:17: b2:2d:7e:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvSUx2WzG+7G/TFERwL9aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNDc5MjFlNDQzMDUyMWE3NzI3ODg4YzEzYmM3YjhlMTA0 Y2JkYmUwHhcNMjUxMjI0MTkwMTQ4WhcNMjUxMjI1MTkwMTQ4WjAzMTEwLwYDVQQD EyhkMGRmMzY2Zjg5ODM5NTRkMGQ3NDhiMDRlY2NjZDkwNWM1NDNjNzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbARIs4WFtyTEMZNiCXWJSSZMJ3N H07hBFPZAoGlV8zGa0oQM8418wilS+hFVvZWwpKUpeX+wo6xGuThtKGt0fatJna4 c385/hAarp2BNI+445QEYWOFjpAEm0zELBlY3KmHd8CQrB80nUU5etVwR/pGvEBH ClJvZ3GTM2z1rgB8f5jKRiUfeBMjq7hxSz17+VtRSgDPfXT9XsqfRX081bxDnoSb 7+g0LOC8AVKIK27akPC+5xExi+Rn9YP4qMoS7ImIX2w2EoJNd14tJSo0B0uxm4Ku Pi6DsMyamGYh5qfF0R5RZm7ws1kTeqsJo+PU6Tz3b5Gy0EoYeKMAvgE6bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNDfNm+Jg5VNDXSLBOzM2QXFQ8cXMB8GA1UdIwQY MBaAFMpHkh5EMFIadyeIjBO8e44QTL2+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWtlU0hrUXdVaHAzSjRpTUU3eDdqaEJNdmI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82M2YxZTgtMzcxNS00NDE0LTlmM2It ODNlNTVjNWY2ZjdkLzEveWtlU0hrUXdVaHAzSjRpTUU3eDdqaEJNdmI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi82M2YxZTgtMzcxNS00NDE0LTlmM2ItODNlNTVjNWY2Zjdk LzEveWtlU0hrUXdVaHAzSjRpTUU3eDdqaEJNdmI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6gXAE0g 2Yv8usAm0fZqPDO9OCuovy1U8Esq4ul/X7CLiuNctRHwRNd4fjgB5KkUE7t+JXWA 0LzGvQbq55Dxyu1Oftrm/DaaHDq9PxJTZWOv8X260MK4rVEdGN+J29snBppf2DgX KCtUiZ3iv5PVLU8LWBc4taBJp3cEeEFANGOHc+wNILGnoRurXlI+37sMPME9u8ql tQV7sMoK7RwM51quq5JaxXfvKloF4ycg/ddkwqPW/22wZKTlp9KvmMQFvMCRuFNA GHjhEPjkE4IECUQzpW5r0vM87HtBZ/umNgzfXfsM2BBUX2F6wg3hlzP35K8qEntU t2u2SrEXsi1+Vw== -----END CERTIFICATE-----Generated at Wed Dec 24 21:34:29 2025 by rpki-client