This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft File: yjNIq_Fz0ndMiUIAjK321gEqPVI.mft (raw, json) Hash identifier: Txh0muLeQ6OYJfFw42wgARiuyzoY+owAZuPtCoo9snI= Subject key identifier: FB:FD:A9:98:42:CD:47:4D:9F:05:64:A0:7E:0F:B9:C3:A0:66:65:5A Authority key identifier: CA:33:48:AB:F1:73:D2:77:4C:89:42:00:8C:AD:F6:D6:01:2A:3D:52 Certificate issuer: /CN=ca3348abf173d2774c8942008cadf6d6012a3d52 Certificate serial: 019B33B198EEC42DBCB5F49993FBED43E1F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft Manifest number: 0779 Signing time: Thu 18 Dec 2025 23:00:35 +0000 Manifest this update: Thu 18 Dec 2025 23:00:35 +0000 Manifest next update: Fri 19 Dec 2025 23:00:35 +0000 Files and hashes: 1: xfu021S1jJtouexa28jA9KZojkw.roa (hash: ydYZd2IQ/M2DMWZopd0Btk/t60vr6MsiYiLHbkf4rwI=) 2: yjNIq_Fz0ndMiUIAjK321gEqPVI.crl (hash: V05m+0c91E3aLOf9/Ua1MvZQQnd/vqZ7mFpyOh+Bv+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.crl rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:98:ee:c4:2d:bc:b5:f4:99:93:fb:ed:43:e1:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca3348abf173d2774c8942008cadf6d6012a3d52 Validity Not Before: Dec 18 23:00:35 2025 GMT Not After : Dec 19 23:00:35 2025 GMT Subject: CN=fbfda99842cd474d9f0564a07e0fb9c3a066655a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b3:6a:55:22:55:b4:41:4f:1c:d0:47:eb:50: c4:ec:6b:5c:f9:3d:30:6c:33:34:1e:b9:33:c0:c6: 58:b0:ab:37:3e:3b:06:f4:f8:87:1b:b1:a8:ca:26: cd:a3:c4:3d:82:47:50:29:7d:52:2d:8c:ae:0e:4d: 35:18:86:d9:47:47:7f:25:79:2d:65:7b:4f:71:32: 73:25:68:d4:5c:32:4f:83:45:56:30:bf:16:16:e3: b4:68:b8:42:7b:b4:25:4d:46:c5:f8:4d:5e:6b:59: c7:60:54:18:1b:35:cc:ac:db:4e:49:e5:78:7c:03: 69:ee:1e:67:f0:3b:1f:71:4b:94:a9:bb:f2:8b:8c: ac:aa:9f:b6:47:ff:05:36:31:56:00:49:72:ac:36: d2:8c:bb:1d:23:e0:63:3e:7f:5b:e2:c1:3b:87:b5: 85:53:15:40:eb:b8:03:5b:4c:4c:6d:6d:17:c8:c9: a5:e5:98:f1:d4:af:5f:3c:ed:e2:8c:f3:9a:16:4a: a7:1b:52:04:43:17:07:70:48:fe:37:84:77:14:45: 0b:d1:c2:38:a3:b1:11:0c:59:c5:81:2a:70:83:e3: 35:e6:4a:8c:9c:c8:41:e7:9f:50:af:cc:0f:3a:07: a1:e2:8d:ce:4b:be:6e:2c:22:ef:eb:1d:9b:0c:69: 00:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:FD:A9:98:42:CD:47:4D:9F:05:64:A0:7E:0F:B9:C3:A0:66:65:5A X509v3 Authority Key Identifier: keyid:CA:33:48:AB:F1:73:D2:77:4C:89:42:00:8C:AD:F6:D6:01:2A:3D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b2:22:a8:3f:83:70:a3:d8:1e:6c:ab:1a:7b:e7:92:0d:ef: 46:79:b8:e6:8f:79:78:b6:d3:b1:36:c1:dc:06:83:f9:f9:a6: bc:f2:95:40:b9:bc:3f:44:8e:71:a3:ad:75:3b:ff:99:05:af: 6c:50:ba:7f:e9:7d:5f:65:78:e4:26:da:ed:5d:28:87:56:39: 2c:39:e7:50:31:1e:71:4c:a7:dc:26:2a:40:ed:b1:8d:a1:96: ee:c0:c6:a3:dd:3f:e8:3b:44:f1:a0:45:16:9b:d8:69:f4:f5: 76:a9:f4:f2:2a:d2:75:8a:01:1a:f1:32:b7:ca:c5:8a:b8:14: e7:93:91:9a:c5:9a:58:df:98:f8:e9:5d:19:f5:5a:1b:a4:98: b2:92:e1:70:a2:17:9e:41:bf:cd:0d:56:50:66:25:a5:53:a0: 80:e3:bb:2f:fa:83:8a:e3:6d:89:7b:0a:5e:e0:c9:ea:29:54: 4d:d9:bd:5e:f4:b8:6a:c8:46:3f:e9:28:60:12:9c:77:59:5f: bc:7e:02:2d:e8:9a:9e:a9:76:2c:4b:a8:42:8a:f3:b8:ee:78: 35:30:b3:f2:ab:6f:6c:bf:8d:a8:13:bf:ca:17:d5:18:95:10: 80:61:77:49:64:06:92:5b:b9:d0:8d:a0:ef:08:b2:c9:a8:f4: 4f:d3:2c:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsZjuxC28tfSZk/vtQ+H3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzM0OGFiZjE3M2QyNzc0Yzg5NDIwMDhjYWRmNmQ2MDEy YTNkNTIwHhcNMjUxMjE4MjMwMDM1WhcNMjUxMjE5MjMwMDM1WjAzMTEwLwYDVQQD EyhmYmZkYTk5ODQyY2Q0NzRkOWYwNTY0YTA3ZTBmYjljM2EwNjY2NTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurNqVSJVtEFPHNBH61DE7Gtc+T0w bDM0HrkzwMZYsKs3PjsG9PiHG7GoyibNo8Q9gkdQKX1SLYyuDk01GIbZR0d/JXkt ZXtPcTJzJWjUXDJPg0VWML8WFuO0aLhCe7QlTUbF+E1ea1nHYFQYGzXMrNtOSeV4 fANp7h5n8DsfcUuUqbvyi4ysqp+2R/8FNjFWAElyrDbSjLsdI+BjPn9b4sE7h7WF UxVA67gDW0xMbW0XyMml5Zjx1K9fPO3ijPOaFkqnG1IEQxcHcEj+N4R3FEUL0cI4 o7ERDFnFgSpwg+M15kqMnMhB559Qr8wPOgeh4o3OS75uLCLv6x2bDGkA/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPv9qZhCzUdNnwVkoH4PucOgZmVaMB8GA1UdIwQY MBaAFMozSKvxc9J3TIlCAIyt9tYBKj1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWpOSXFfRnowbmRNaVVJQWpLMzIxZ0VxUFZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wMjY5MTQtMTYxMi00NWY0LWFjZGYt MmFjYjlkMTdjMTFjLzEveWpOSXFfRnowbmRNaVVJQWpLMzIxZ0VxUFZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8wMjY5MTQtMTYxMi00NWY0LWFjZGYtMmFjYjlkMTdjMTFj LzEveWpOSXFfRnowbmRNaVVJQWpLMzIxZ0VxUFZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnbIiqD+D cKPYHmyrGnvnkg3vRnm45o95eLbTsTbB3AaD+fmmvPKVQLm8P0SOcaOtdTv/mQWv bFC6f+l9X2V45Cba7V0oh1Y5LDnnUDEecUyn3CYqQO2xjaGW7sDGo90/6DtE8aBF FpvYafT1dqn08irSdYoBGvEyt8rFirgU55ORmsWaWN+Y+OldGfVaG6SYspLhcKIX nkG/zQ1WUGYlpVOggOO7L/qDiuNtiXsKXuDJ6ilUTdm9XvS4ashGP+koYBKcd1lf vH4CLeianql2LEuoQorzuO54NTCz8qtvbL+NqBO/yhfVGJUQgGF3SWQGklu50I2g 7wiyyaj0T9Ms1A== -----END CERTIFICATE-----Generated at Fri Dec 19 00:53:04 2025 by rpki-client