This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft File: yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft (raw, json) Hash identifier: 8QKA64RZzq4JlvU7i4J8KnNxovVoiSYLc3TyBI8qLiM= Subject key identifier: 69:00:22:7A:0B:F9:8B:1C:10:A5:16:30:55:8E:D0:42:9D:B2:EA:59 Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7 Certificate issuer: /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7 Certificate serial: 019B34FBAB8E150A7D8EA798F076E820EAC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft Manifest number: 07A4 Signing time: Fri 19 Dec 2025 05:01:07 +0000 Manifest this update: Fri 19 Dec 2025 05:01:07 +0000 Manifest next update: Sat 20 Dec 2025 05:01:07 +0000 Files and hashes: 1: AM_8FnzBWvppCWEq5L2m7zOw4Xs.roa (hash: BSOdW4w3xzDGFEiTqGVLTD5VpVN1n3Tm2IL/b7m+dNI=) 2: Bofs4ohNskP7oRhXntEkamcTByY.roa (hash: 2wFqF3IDJ9WWoiEwRf3HPN+kDBVLZG7FcftR+HQ+PQ0=) 3: yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl (hash: IbodrPPgHjT1FRM4QiUHz6QQHmQNKUIn+llsBM1/Jlc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:ab:8e:15:0a:7d:8e:a7:98:f0:76:e8:20:ea:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7 Validity Not Before: Dec 19 05:01:07 2025 GMT Not After : Dec 20 05:01:07 2025 GMT Subject: CN=6900227a0bf98b1c10a51630558ed0429db2ea59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:10:d7:6d:5b:92:b9:be:1a:7b:7e:bf:2e:f9: 86:4e:9c:f0:0f:7a:11:ba:52:fe:8b:0d:4f:a5:b9: 53:d4:be:77:00:73:b1:a2:b1:a6:ca:a6:c7:5a:f2: 90:a5:83:d4:85:3f:c7:9e:a6:d1:64:ce:8c:dc:6f: 60:85:89:75:e8:8f:e4:b8:53:95:f4:d6:f2:ad:5c: 7e:2a:c6:e9:ec:7d:ab:d4:50:62:f1:d6:f3:af:40: 04:a9:f7:b4:e3:53:5b:9d:78:3a:ea:e8:72:07:08: c7:89:8d:d9:6e:79:37:c9:cb:f3:1f:ca:18:e4:d1: 3e:61:72:e6:e6:56:1b:92:c9:ac:19:84:2d:5b:93: 4b:d3:00:45:42:5e:fb:5f:2e:34:e4:08:49:b2:39: 6f:f6:44:3a:f6:1b:34:37:11:72:a0:2e:b8:7a:5a: a2:e5:60:5a:2f:18:4d:b9:c7:b4:1f:9f:13:ad:17: 1c:c7:98:39:45:b7:fe:c4:c6:93:4c:07:21:f2:a2: ac:21:b1:26:30:89:de:ae:51:b8:0a:4e:66:53:3f: 8e:f3:26:63:d1:59:35:a8:63:80:57:61:15:fb:4e: aa:bc:76:cb:04:1e:ff:4a:16:61:88:17:5d:8f:a3: c8:f5:2d:93:ee:a9:80:83:34:2b:af:9b:6b:5e:27: 9d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:00:22:7A:0B:F9:8B:1C:10:A5:16:30:55:8E:D0:42:9D:B2:EA:59 X509v3 Authority Key Identifier: keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:c9:48:f9:bc:ed:f3:f2:fb:bf:67:bc:63:10:75:a7:d1:1c: 5f:3d:bd:ca:3f:54:6f:db:92:cd:07:4e:3f:f2:a0:c4:1b:53: f3:9c:c6:d6:9c:04:4c:dc:df:75:6f:d8:c0:5c:0d:fc:90:ee: cb:5a:81:f3:ea:a4:3e:98:f2:43:13:33:d5:f1:c6:e2:8d:40: 53:b7:99:da:e5:79:f3:c2:58:5e:4a:72:6d:22:7d:69:0a:fd: ff:d0:68:e7:3d:07:49:41:31:a0:93:04:57:1f:ba:38:4e:19: 97:25:4a:e3:e1:6f:1e:54:c7:51:4c:53:d3:8f:54:8d:4d:41: d7:f1:d8:8a:21:58:e4:66:82:bb:b8:e9:a9:2e:58:75:3e:b6: 67:0b:e4:90:42:9e:d4:17:f1:30:77:1e:67:2a:f8:b4:38:3b: 35:bd:f7:82:d9:17:14:6b:d4:4b:eb:ec:a0:dc:41:d3:fa:73: ea:39:e1:e4:aa:5c:4c:5e:10:75:86:fd:d6:55:09:c8:54:e8: 9a:b2:8a:26:a5:5a:9b:51:35:77:49:70:5a:11:3d:db:0a:d5: 6c:7d:b7:c6:2f:31:f5:41:36:fa:ad:c1:64:7a:30:bd:10:01: 86:08:1f:7f:02:40:68:42:71:d5:39:0a:15:f3:19:3a:a9:29: 53:54:a9:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+6uOFQp9jqeY8HboIOrJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZjIzYzliN2IzZWEwNTQ5MTQyYjcwMTU5NzcwNmZjN2E2 Mzg1ZTcwHhcNMjUxMjE5MDUwMTA3WhcNMjUxMjIwMDUwMTA3WjAzMTEwLwYDVQQD Eyg2OTAwMjI3YTBiZjk4YjFjMTBhNTE2MzA1NThlZDA0MjlkYjJlYTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hDXbVuSub4ae36/LvmGTpzwD3oR ulL+iw1PpblT1L53AHOxorGmyqbHWvKQpYPUhT/HnqbRZM6M3G9ghYl16I/kuFOV 9NbyrVx+Ksbp7H2r1FBi8dbzr0AEqfe041NbnXg66uhyBwjHiY3Zbnk3ycvzH8oY 5NE+YXLm5lYbksmsGYQtW5NL0wBFQl77Xy405AhJsjlv9kQ69hs0NxFyoC64elqi 5WBaLxhNuce0H58TrRccx5g5Rbf+xMaTTAch8qKsIbEmMInerlG4Ck5mUz+O8yZj 0Vk1qGOAV2EV+06qvHbLBB7/ShZhiBddj6PI9S2T7qmAgzQrr5trXiedRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkAInoL+YscEKUWMFWO0EKdsupZMB8GA1UdIwQY MBaAFMnyPJt7PqBUkUK3AVl3Bvx6Y4XnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWZJOG0zcy1vRlNSUXJjQldYY0dfSHBqaGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jY2M3M2ItOWM4Ny00NWQ1LTgxYzQt M2Y5MjJiNDAxNjhhLzEveWZJOG0zcy1vRlNSUXJjQldYY0dfSHBqaGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9jY2M3M2ItOWM4Ny00NWQ1LTgxYzQtM2Y5MjJiNDAxNjhh LzEveWZJOG0zcy1vRlNSUXJjQldYY0dfSHBqaGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMlI+bzt 8/L7v2e8YxB1p9EcXz29yj9Ub9uSzQdOP/KgxBtT85zG1pwETNzfdW/YwFwN/JDu y1qB8+qkPpjyQxMz1fHG4o1AU7eZ2uV588JYXkpybSJ9aQr9/9Bo5z0HSUExoJME Vx+6OE4ZlyVK4+FvHlTHUUxT049UjU1B1/HYiiFY5GaCu7jpqS5YdT62ZwvkkEKe 1BfxMHceZyr4tDg7Nb33gtkXFGvUS+vsoNxB0/pz6jnh5KpcTF4QdYb91lUJyFTo mrKKJqVam1E1d0lwWhE92wrVbH23xi8x9UE2+q3BZHowvRABhggffwJAaEJx1TkK FfMZOqkpU1SpDQ== -----END CERTIFICATE-----Generated at Fri Dec 19 12:19:26 2025 by rpki-client