This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json) Hash identifier: GOounn9na1CiXFUIr46nDLyQnrUWZdgPAFA2Jd2qVg0= Subject key identifier: F3:70:8D:73:01:71:8B:71:26:96:F3:FF:78:73:61:78:2A:5F:4D:6E Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f Certificate serial: 019B10810221C012F662ABC6BC97382408BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft Manifest number: 1251 Signing time: Fri 12 Dec 2025 03:00:48 +0000 Manifest this update: Fri 12 Dec 2025 03:00:48 +0000 Manifest next update: Sat 13 Dec 2025 03:00:48 +0000 Files and hashes: 1: 0SWPLRWTYkJG7421JHXOtiDBZR4.roa (hash: 6unS6vuhfVD53i6+xoXsZBSCsuic5U4lcQX4ccwpcWM=) 2: WbzMJtvriwpBLgG099PPDIe8VG4.roa (hash: Ug409g0I8zLQGsJbLA43Dct7NIITII3VJknFQnHFZYo=) 3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: LyOvcAGB5lUn0q/emRgpF75635Ywlvu1YMKW2BJNlTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:02:21:c0:12:f6:62:ab:c6:bc:97:38:24:08:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f Validity Not Before: Dec 12 03:00:48 2025 GMT Not After : Dec 13 03:00:48 2025 GMT Subject: CN=f3708d7301718b712696f3ff787361782a5f4d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3a:be:d8:a7:df:9f:6e:47:6e:e9:35:8b:5d: 71:e1:39:01:e1:60:18:2b:01:50:0d:ef:98:e5:25: 1c:fd:0d:7a:f5:c0:d4:2b:96:ba:03:2a:47:e7:fa: 75:85:ea:e4:46:3f:62:de:e8:4c:6b:51:a0:63:8e: 8b:70:2c:22:4c:a9:aa:b9:2e:a0:9c:ba:a2:07:c1: bd:a0:62:b2:6f:e7:59:7e:64:d2:dd:01:dd:de:38: 12:1e:ff:e0:99:14:de:52:0b:50:17:2f:78:c9:c7: ae:e5:ba:33:77:76:12:a6:d8:ea:4a:a5:6d:da:e9: 02:6f:bc:f2:b0:a9:be:a5:4b:c2:92:ed:a5:44:9b: 64:d0:c5:69:e6:09:fa:f0:57:30:1d:f0:14:b1:4e: cc:6e:ea:1f:a1:e6:3d:95:3b:98:2e:00:5c:43:02: d1:4a:ee:ec:76:02:32:0f:1d:c6:9a:6e:dc:d7:05: ac:67:52:1e:4b:0c:a0:76:2d:8e:7a:7b:6f:09:fd: ff:f9:3a:76:ff:f7:1e:bd:60:7c:0e:41:9f:21:bc: f4:0c:a0:5c:79:37:24:a4:33:34:fc:55:5c:e6:49: d7:47:07:62:90:41:57:c5:87:3b:87:86:ab:bd:42: 93:f0:5a:ec:c9:47:a9:4f:d9:99:6f:15:9a:db:58: 89:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:70:8D:73:01:71:8B:71:26:96:F3:FF:78:73:61:78:2A:5F:4D:6E X509v3 Authority Key Identifier: keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:e3:16:d8:70:84:3a:27:62:51:5f:41:eb:0b:2d:e0:9a:c8: ad:9a:45:23:89:8c:b7:1e:cd:ee:59:fa:de:9a:ff:01:db:25: 58:0c:ab:a5:4b:3d:f2:ac:36:5e:dc:5c:93:ca:71:d4:0a:70: d4:7e:c5:09:17:7a:80:f4:cc:18:22:2d:12:48:35:a2:43:b4: 74:6e:7b:65:85:5f:fd:56:08:6b:23:6b:59:36:45:35:01:f2: 89:1b:10:99:ba:2b:14:be:ad:cf:c3:cd:5e:96:17:31:af:3f: 78:6d:f3:bb:5c:84:8b:5f:bd:74:43:f5:07:9a:5e:4c:7a:87: 0c:bd:62:80:20:50:9f:f9:6b:07:72:de:42:b2:f1:0a:e7:a9: 59:03:d9:ad:07:45:19:03:26:44:1f:9e:7b:44:77:00:9a:5b: ca:a1:40:fe:d6:ae:e6:1a:c6:da:e8:ae:b1:7f:fa:3c:d0:2e: 2b:a7:3f:36:6b:d7:97:9c:e5:a4:5f:cc:57:9b:86:37:f3:a9: ef:60:22:de:98:ee:d6:2a:16:52:a7:1d:38:94:c3:b3:fe:53: e2:2f:6e:db:8c:56:5b:8d:7d:8b:c2:c9:73:42:67:04:7c:43: d0:74:85:d3:8f:0f:9c:ca:0a:fa:b8:01:f6:05:d4:b7:f4:a5: 3e:fa:6f:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgQIhwBL2YqvGvJc4JAi+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZDVhYTcwMzQyNTBhYjFhODc4OWFjODZjYzBlZWYzYmZj OWRiNWYwHhcNMjUxMjEyMDMwMDQ4WhcNMjUxMjEzMDMwMDQ4WjAzMTEwLwYDVQQD EyhmMzcwOGQ3MzAxNzE4YjcxMjY5NmYzZmY3ODczNjE3ODJhNWY0ZDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Dq+2Kffn25Hbuk1i11x4TkB4WAY KwFQDe+Y5SUc/Q169cDUK5a6AypH5/p1herkRj9i3uhMa1GgY46LcCwiTKmquS6g nLqiB8G9oGKyb+dZfmTS3QHd3jgSHv/gmRTeUgtQFy94yceu5bozd3YSptjqSqVt 2ukCb7zysKm+pUvCku2lRJtk0MVp5gn68FcwHfAUsU7MbuofoeY9lTuYLgBcQwLR Su7sdgIyDx3Gmm7c1wWsZ1IeSwygdi2OentvCf3/+Tp2//cevWB8DkGfIbz0DKBc eTckpDM0/FVc5knXRwdikEFXxYc7h4arvUKT8FrsyUepT9mZbxWa21iJMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNwjXMBcYtxJpbz/3hzYXgqX01uMB8GA1UdIwQY MBaAFMjVqnA0JQqxqHiayGzA7vO/ydtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yZDQ5MGMtNmZmOC00NzFkLTk3ZDIt MmQ3MmYyMzE5M2RiLzEveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yZDQ5MGMtNmZmOC00NzFkLTk3ZDItMmQ3MmYyMzE5M2Ri LzEveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeuMW2HCE OidiUV9B6wst4JrIrZpFI4mMtx7N7ln63pr/AdslWAyrpUs98qw2Xtxck8px1Apw 1H7FCRd6gPTMGCItEkg1okO0dG57ZYVf/VYIayNrWTZFNQHyiRsQmborFL6tz8PN XpYXMa8/eG3zu1yEi1+9dEP1B5peTHqHDL1igCBQn/lrB3LeQrLxCuepWQPZrQdF GQMmRB+ee0R3AJpbyqFA/tau5hrG2uiusX/6PNAuK6c/NmvXl5zlpF/MV5uGN/Op 72Ai3pju1ioWUqcdOJTDs/5T4i9u24xWW419i8LJc0JnBHxD0HSF048PnMoK+rgB 9gXUt/SlPvpvKQ== -----END CERTIFICATE-----Generated at Fri Dec 12 09:23:47 2025 by rpki-client