This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft File: yJgrANxgA9zFz9fSe1WV0MrKXaE.mft (raw, json) Hash identifier: RzNqLWC9xeoAQwyOSK9UOvTP8ibIukm9BVzql2T5EA0= Subject key identifier: 1F:7C:1C:28:F3:B0:A8:85:D4:15:95:E8:FC:8F:E6:22:41:83:B1:42 Authority key identifier: C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1 Certificate issuer: /CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1 Certificate serial: 019B4A711D0DC967F69F7C33678B31699328 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 09:01:25 +0000 Manifest this update: Tue 23 Dec 2025 09:01:25 +0000 Manifest next update: Wed 24 Dec 2025 09:01:25 +0000 Files and hashes: 1: fF2XIJTPCrRrtW2Ed7f3XI5YBGE.roa (hash: yAyZKCviC/wjO248iuIwgpoUtsrF9JNp+X9B5Xdnj9A=) 2: yJgrANxgA9zFz9fSe1WV0MrKXaE.crl (hash: iXlVdqCzE99dnir++LuPNlyOgtsMG25WsFVT4H+K0hg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:1d:0d:c9:67:f6:9f:7c:33:67:8b:31:69:93:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1 Validity Not Before: Dec 23 09:01:25 2025 GMT Not After : Dec 24 09:01:25 2025 GMT Subject: CN=1f7c1c28f3b0a885d41595e8fc8fe6224183b142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b7:fc:e4:96:4a:a8:25:9e:45:53:8e:9c:e0: 40:e1:99:63:31:20:e1:51:0b:23:46:c6:e2:31:fe: d6:08:2d:41:90:20:37:a3:3f:28:65:2a:25:f8:59: 0f:40:a3:38:df:4b:6e:11:57:c1:e4:bb:e1:2c:d2: e8:91:a4:69:c3:a5:8f:19:8d:28:1a:9c:83:cd:e3: 0b:f6:6b:e9:5c:12:57:ab:19:bc:98:a6:2b:70:c7: bd:70:7d:92:39:92:d3:fd:9d:61:66:08:7c:2b:ea: ff:78:3e:20:86:af:1c:5d:fe:1b:27:4b:c6:0f:e5: 67:09:3e:6f:fc:70:3e:f6:83:0b:c6:1f:38:a4:d6: 57:ba:cd:56:53:cd:a6:84:ae:a8:04:dd:06:cc:3a: 68:3f:13:b7:fc:9d:26:f8:eb:55:0e:91:97:2d:94: 36:35:5d:6c:11:6d:0f:82:16:c3:2c:15:fb:72:1c: 82:21:c0:f4:4b:b8:20:4d:80:15:64:43:e7:82:c7: 95:c4:44:bd:8d:9f:c3:f0:cb:9c:2b:e2:3a:79:5f: 07:96:ea:b3:07:6e:51:d3:b0:24:6a:63:ff:ea:7c: 1a:0a:5b:0a:e8:51:e1:12:29:10:ed:90:19:2d:78: 8a:12:c9:a1:d5:46:9d:a4:7e:36:c0:ca:b2:cf:34: 1c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7C:1C:28:F3:B0:A8:85:D4:15:95:E8:FC:8F:E6:22:41:83:B1:42 X509v3 Authority Key Identifier: keyid:C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:f3:60:95:14:8f:16:f7:fd:41:b4:90:0c:0b:b1:26:4a:d8: 16:ec:24:3d:ab:2a:6a:35:0d:c9:56:84:cf:5b:7f:b8:1d:15: c0:0f:f4:1e:40:7b:6e:42:6b:31:4b:11:2a:ce:cb:a2:96:b7: 22:b8:36:a8:fc:8b:6e:75:8a:1a:16:25:23:10:32:4f:63:94: 92:a5:4a:e3:32:eb:3a:56:5b:56:78:42:56:91:41:fd:a2:f2: 8a:09:cb:e2:fa:3b:e9:b4:20:70:33:dc:8f:66:82:0e:fd:b0: e4:3f:e8:8c:00:f0:c3:cc:5d:af:ea:46:f9:86:2e:18:c4:5d: dd:0c:57:0d:1d:8b:00:1d:04:fc:9e:0b:9b:23:c6:c9:e8:df: cf:c3:56:3b:10:97:62:6e:17:63:c7:80:37:a8:bf:6b:58:89: 7f:5b:e0:d2:7a:64:12:62:1f:97:4f:e5:1d:c1:6b:6f:af:b7: 8a:55:7d:1d:27:38:a3:f7:fd:53:e6:cf:c1:5a:ab:42:2c:42: e0:a7:48:60:0e:b4:0f:25:36:0d:ab:09:df:cc:9e:80:17:81: dc:96:40:50:ca:b4:b2:6a:51:a6:23:4b:63:d1:e0:98:3e:48: 9b:66:5e:0e:73:e6:d2:4c:a1:68:75:1f:07:c3:13:b7:bf:ea: 45:a5:53:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcR0NyWf2n3wzZ4sxaZMoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4OTgyYjAwZGM2MDAzZGNjNWNmZDdkMjdiNTU5NWQwY2Fj YTVkYTEwHhcNMjUxMjIzMDkwMTI1WhcNMjUxMjI0MDkwMTI1WjAzMTEwLwYDVQQD EygxZjdjMWMyOGYzYjBhODg1ZDQxNTk1ZThmYzhmZTYyMjQxODNiMTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLf85JZKqCWeRVOOnOBA4ZljMSDh UQsjRsbiMf7WCC1BkCA3oz8oZSol+FkPQKM430tuEVfB5LvhLNLokaRpw6WPGY0o GpyDzeML9mvpXBJXqxm8mKYrcMe9cH2SOZLT/Z1hZgh8K+r/eD4ghq8cXf4bJ0vG D+VnCT5v/HA+9oMLxh84pNZXus1WU82mhK6oBN0GzDpoPxO3/J0m+OtVDpGXLZQ2 NV1sEW0PghbDLBX7chyCIcD0S7ggTYAVZEPngseVxES9jZ/D8MucK+I6eV8Hluqz B25R07AkamP/6nwaClsK6FHhEikQ7ZAZLXiKEsmh1UadpH42wMqyzzQc7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB98HCjzsKiF1BWV6PyP5iJBg7FCMB8GA1UdIwQY MBaAFMiYKwDcYAPcxc/X0ntVldDKyl2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUpnckFOeGdBOXpGejlmU2UxV1YwTXJLWGFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8yMTY4YmEtMWM0Yy00MjA2LTkyOTkt MTY1M2UwZGU0MDUwLzEveUpnckFOeGdBOXpGejlmU2UxV1YwTXJLWGFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8yMTY4YmEtMWM0Yy00MjA2LTkyOTktMTY1M2UwZGU0MDUw LzEveUpnckFOeGdBOXpGejlmU2UxV1YwTXJLWGFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOfNglRSP Fvf9QbSQDAuxJkrYFuwkPasqajUNyVaEz1t/uB0VwA/0HkB7bkJrMUsRKs7Lopa3 Irg2qPyLbnWKGhYlIxAyT2OUkqVK4zLrOlZbVnhCVpFB/aLyignL4vo76bQgcDPc j2aCDv2w5D/ojADww8xdr+pG+YYuGMRd3QxXDR2LAB0E/J4LmyPGyejfz8NWOxCX Ym4XY8eAN6i/a1iJf1vg0npkEmIfl0/lHcFrb6+3ilV9HSc4o/f9U+bPwVqrQixC 4KdIYA60DyU2DasJ38yegBeB3JZAUMq0smpRpiNLY9HgmD5Im2ZeDnPm0kyhaHUf B8MTt7/qRaVTDA== -----END CERTIFICATE-----Generated at Tue Dec 23 13:00:26 2025 by rpki-client