This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft File: yAYJ8hhRvff3TtGPDwnfku23U1U.mft (raw, json) Hash identifier: MmoHP67ACB0TYnFMD7WnL70Lb3+OJvGhUU9THuPb1uQ= Subject key identifier: A7:39:6F:87:97:21:62:94:17:25:0F:19:59:B2:31:6F:8D:D9:72:82 Authority key identifier: C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55 Certificate issuer: /CN=c80609f21851bdf7f74ed18f0f09df92edb75355 Certificate serial: 019B3720853D56A974E68E0CECF01EF4C439 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft Manifest number: 0F4A Signing time: Fri 19 Dec 2025 15:00:36 +0000 Manifest this update: Fri 19 Dec 2025 15:00:36 +0000 Manifest next update: Sat 20 Dec 2025 15:00:36 +0000 Files and hashes: 1: Wg-bSrUatmukyH3xDDiSbozsSDE.roa (hash: +C5Ooc81ApTJACiPZcILtsd+XtVBtietyO7rZMjbj2I=) 2: yAYJ8hhRvff3TtGPDwnfku23U1U.crl (hash: 7gavnRfFYMKXB0NXiYfjfoTd3cvBDn03fkVA+llAsmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:20:85:3d:56:a9:74:e6:8e:0c:ec:f0:1e:f4:c4:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c80609f21851bdf7f74ed18f0f09df92edb75355 Validity Not Before: Dec 19 15:00:36 2025 GMT Not After : Dec 20 15:00:36 2025 GMT Subject: CN=a7396f879721629417250f1959b2316f8dd97282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:63:d1:93:47:12:b0:d8:64:f1:4d:ac:a5:02: da:ee:98:1a:88:35:63:ef:bc:9f:48:e6:a2:e0:6a: 93:3e:e2:29:53:d8:01:e2:39:fe:50:36:7f:2e:1d: e9:8e:9d:2e:36:6e:43:b8:db:d0:4c:d4:1b:6f:40: 92:b6:1f:d9:4f:5b:2c:4b:63:53:11:93:e6:e6:e4: 4f:09:94:fe:1d:5b:13:ac:12:e1:3b:2f:4f:b8:ab: c3:1b:01:2e:12:66:64:4a:7f:3b:6c:d5:33:47:eb: de:61:67:be:69:9f:4e:fd:88:72:a5:44:07:38:34: d8:5b:8e:94:79:3e:46:63:7a:4d:28:a5:13:e0:39: 72:59:da:ef:10:68:0d:e5:f5:d9:af:a1:dc:af:12: fb:37:ce:e5:a2:5f:d1:12:4b:38:b5:0f:68:2c:f8: 6d:3e:89:ae:f3:80:15:00:31:c1:0c:15:f8:b7:c0: 02:7e:db:08:64:1a:6e:eb:04:54:f4:a8:dd:c6:10: 9a:cb:8d:fd:c2:0f:d9:db:d9:7c:e0:45:95:d6:06: 9f:55:8a:b4:c0:b6:a2:35:1c:2c:8e:5a:fb:7d:aa: 71:d9:35:b2:2c:ce:44:18:70:6a:58:0e:6c:ef:63: 70:94:af:75:30:91:cf:d2:45:7b:f2:de:8b:ec:7d: 1c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:39:6F:87:97:21:62:94:17:25:0F:19:59:B2:31:6F:8D:D9:72:82 X509v3 Authority Key Identifier: keyid:C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:e8:28:32:04:b0:c6:1a:fe:a2:48:a4:36:43:3a:ea:e9:c7: 35:58:80:b7:89:a2:80:7e:58:48:e9:aa:b0:ed:46:27:cf:2c: c6:ae:98:58:83:b5:ba:20:8b:5e:d4:79:2a:cf:a2:31:ea:09: 02:dd:e0:33:42:9f:dc:38:35:5e:39:63:b9:87:c3:03:d9:bd: dc:5e:eb:bb:b8:af:e3:af:b2:7a:1e:f0:c8:ca:be:ba:73:9b: 22:b5:e8:46:d5:ee:32:1a:94:c4:ab:3a:6c:bc:9f:72:11:f7: ba:0e:8f:5c:d3:61:4a:a8:c1:51:65:f5:52:10:18:15:c6:53: a4:b3:e5:6f:f0:75:f5:de:8c:fc:6a:06:30:d3:f3:81:41:95: 0a:17:d1:ff:67:4b:69:cb:6b:53:62:40:3f:c5:4d:11:f4:2d: 33:09:0d:bb:d1:7a:5b:8c:40:27:aa:bf:d7:94:62:39:b3:16: 64:44:4b:a6:76:f0:ca:d2:92:86:fd:e3:2b:34:5e:67:d1:e2: 52:9b:ff:bd:c4:77:1a:92:33:f6:c5:0d:4e:fc:7f:aa:7e:8b: 8d:80:e8:32:b6:ed:b8:8e:ab:f4:ba:99:b7:0d:14:de:49:a9: 33:4b:05:90:76:c1:a3:df:65:91:80:ce:be:0a:12:a4:a6:eb: 37:7b:0d:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IIU9Vql05o4M7PAe9MQ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MDYwOWYyMTg1MWJkZjdmNzRlZDE4ZjBmMDlkZjkyZWRi NzUzNTUwHhcNMjUxMjE5MTUwMDM2WhcNMjUxMjIwMTUwMDM2WjAzMTEwLwYDVQQD EyhhNzM5NmY4Nzk3MjE2Mjk0MTcyNTBmMTk1OWIyMzE2ZjhkZDk3MjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymPRk0cSsNhk8U2spQLa7pgaiDVj 77yfSOai4GqTPuIpU9gB4jn+UDZ/Lh3pjp0uNm5DuNvQTNQbb0CSth/ZT1ssS2NT EZPm5uRPCZT+HVsTrBLhOy9PuKvDGwEuEmZkSn87bNUzR+veYWe+aZ9O/YhypUQH ODTYW46UeT5GY3pNKKUT4DlyWdrvEGgN5fXZr6HcrxL7N87lol/REks4tQ9oLPht Pomu84AVADHBDBX4t8ACftsIZBpu6wRU9KjdxhCay439wg/Z29l84EWV1gafVYq0 wLaiNRwsjlr7fapx2TWyLM5EGHBqWA5s72NwlK91MJHP0kV78t6L7H0cdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKc5b4eXIWKUFyUPGVmyMW+N2XKCMB8GA1UdIwQY MBaAFMgGCfIYUb33907Rjw8J35Ltt1NVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUFZSjhoaFJ2ZmYzVHRHUER3bmZrdTIzVTFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lYzkxNTktZGFiNC00MjgwLWI0NGMt NGNiY2U1YmFiYWE3LzEveUFZSjhoaFJ2ZmYzVHRHUER3bmZrdTIzVTFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lYzkxNTktZGFiNC00MjgwLWI0NGMtNGNiY2U1YmFiYWE3 LzEveUFZSjhoaFJ2ZmYzVHRHUER3bmZrdTIzVTFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+goMgSw xhr+okikNkM66unHNViAt4migH5YSOmqsO1GJ88sxq6YWIO1uiCLXtR5Ks+iMeoJ At3gM0Kf3Dg1XjljuYfDA9m93F7ru7iv46+yeh7wyMq+unObIrXoRtXuMhqUxKs6 bLyfchH3ug6PXNNhSqjBUWX1UhAYFcZTpLPlb/B19d6M/GoGMNPzgUGVChfR/2dL actrU2JAP8VNEfQtMwkNu9F6W4xAJ6q/15RiObMWZERLpnbwytKShv3jKzReZ9Hi Upv/vcR3GpIz9sUNTvx/qn6LjYDoMrbtuI6r9LqZtw0U3kmpM0sFkHbBo99lkYDO vgoSpKbrN3sNRA== -----END CERTIFICATE-----Generated at Sat Dec 20 00:22:32 2025 by rpki-client