This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft File: yeG79grg631AB2JxhcXxRyP_864.mft (raw, json) Hash identifier: GjuWzqwcKX7yxRDNPj98hJvuqHQYfHqngrCmwFLuZM0= Subject key identifier: BB:92:FA:DA:1B:3E:1D:C8:C0:B7:43:09:7B:43:B1:C5:BF:68:EC:87 Authority key identifier: C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE Certificate issuer: /CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae Certificate serial: 019B1ACD743B03A44D1CFC01BD7979324372 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft Manifest number: 02BA Signing time: Sun 14 Dec 2025 03:00:30 +0000 Manifest this update: Sun 14 Dec 2025 03:00:30 +0000 Manifest next update: Mon 15 Dec 2025 03:00:30 +0000 Files and hashes: 1: qP-gsAFmgVOc4H-oZTo26Ptp5vw.roa (hash: QT6Tbak41BDvyGiXFOwS3KI7ZlriOjq7qFbGvl+22Ak=) 2: yeG79grg631AB2JxhcXxRyP_864.crl (hash: ZC/yCJBJ93isXnOW96Mxgr8rjHIh9YLafyOXyjyDE6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:cd:74:3b:03:a4:4d:1c:fc:01:bd:79:79:32:43:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae Validity Not Before: Dec 14 03:00:30 2025 GMT Not After : Dec 15 03:00:30 2025 GMT Subject: CN=bb92fada1b3e1dc8c0b743097b43b1c5bf68ec87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:08:a8:44:bc:3b:6f:44:87:49:c4:9d:78:95: 9e:f0:3a:4f:23:ef:16:55:af:4a:c0:47:7c:31:10: 69:20:26:e2:6a:c5:d9:85:da:0a:07:04:0e:01:11: 6e:66:dc:5a:65:0c:2f:7b:d9:bc:e5:e3:82:b7:96: 31:c1:1c:7e:25:62:1e:e6:7b:70:01:4f:5f:91:1e: 99:52:cc:8c:57:84:c2:cb:ad:91:35:e1:9b:1f:54: cc:72:49:e4:72:e0:a2:8e:d4:be:51:9e:88:53:06: 74:e2:30:9d:34:d1:58:a4:9d:a4:9c:95:06:35:b5: 87:9f:58:45:a9:6f:3a:af:a5:86:aa:b7:0a:c0:19: 6a:be:77:0b:a9:2c:81:2f:b0:7c:62:3a:81:c7:12: d2:85:b3:07:67:b0:68:53:0e:74:d1:a2:17:40:fb: 05:bd:27:57:16:2b:a5:7e:35:48:e5:5e:ad:6a:65: 25:07:71:ad:ef:c5:bd:f8:a5:70:ee:8c:cb:8d:24: 47:14:58:44:99:65:80:f4:99:b9:f5:0c:6c:9a:6d: 21:d6:51:ef:09:6e:06:54:7b:c6:64:82:bf:a8:25: ec:b4:08:8d:a9:23:f4:c9:ec:5c:ff:12:7d:88:79: 3f:b7:7e:8f:61:cb:a3:8f:8f:8c:6b:9c:f7:de:94: 93:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:92:FA:DA:1B:3E:1D:C8:C0:B7:43:09:7B:43:B1:C5:BF:68:EC:87 X509v3 Authority Key Identifier: keyid:C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:9a:1c:ad:3b:97:31:e0:ca:2e:04:67:e1:84:37:87:da:e8: b2:ff:ad:6a:0b:98:9c:36:2b:7b:a3:eb:a5:3e:36:35:6a:bb: 11:7d:d8:58:50:16:e6:1a:b8:06:a6:57:7b:b5:23:0c:bb:f4: c6:44:ee:46:ba:95:5e:48:9b:05:cf:b8:a7:43:1b:b0:ad:56: dc:4b:5c:74:9e:e5:8e:90:59:28:b6:19:79:81:9d:75:67:ec: 6e:43:66:a8:46:18:08:53:58:00:45:cb:80:90:09:c3:a1:1a: dd:54:ff:58:e3:21:a7:ee:67:ec:b3:53:14:5c:5f:91:de:cf: 13:b0:eb:5d:73:0f:da:c4:80:ea:17:e0:ae:17:69:5b:00:f9: 15:bf:7e:b6:89:f3:4e:77:0b:95:0c:4f:fd:e5:fb:92:bd:46: a6:b8:e8:57:be:43:b1:ad:4f:3d:85:70:07:bd:c4:9b:a1:10: 4e:f0:eb:50:08:89:03:28:82:73:56:eb:22:a6:1f:38:6e:ca: 8b:c5:f2:8e:29:2d:d3:8c:20:de:35:64:cb:45:6d:58:7a:fb: 7b:c6:54:55:c6:ea:28:e2:71:13:e8:e7:4b:d6:59:9c:96:02: e6:f8:0f:b2:a8:f1:5a:69:80:94:8d:03:a5:23:73:d7:e2:eb: d1:be:f5:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsazXQ7A6RNHPwBvXl5MkNyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZTFiYmY2MGFlMGViN2Q0MDA3NjI3MTg1YzVmMTQ3MjNm ZmYzYWUwHhcNMjUxMjE0MDMwMDMwWhcNMjUxMjE1MDMwMDMwWjAzMTEwLwYDVQQD EyhiYjkyZmFkYTFiM2UxZGM4YzBiNzQzMDk3YjQzYjFjNWJmNjhlYzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwioRLw7b0SHScSdeJWe8DpPI+8W Va9KwEd8MRBpICbiasXZhdoKBwQOARFuZtxaZQwve9m85eOCt5YxwRx+JWIe5ntw AU9fkR6ZUsyMV4TCy62RNeGbH1TMcknkcuCijtS+UZ6IUwZ04jCdNNFYpJ2knJUG NbWHn1hFqW86r6WGqrcKwBlqvncLqSyBL7B8YjqBxxLShbMHZ7BoUw500aIXQPsF vSdXFiulfjVI5V6tamUlB3Gt78W9+KVw7ozLjSRHFFhEmWWA9Jm59Qxsmm0h1lHv CW4GVHvGZIK/qCXstAiNqSP0yexc/xJ9iHk/t36PYcujj4+Ma5z33pSTLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuS+tobPh3IwLdDCXtDscW/aOyHMB8GA1UdIwQY MBaAFMnhu/YK4Ot9QAdicYXF8Ucj//OuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWVHNzlncmc2MzFBQjJKeGhjWHhSeVBfODY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kYTUyOTYtZjczYi00NWQ2LWE5NDIt ZTEyOTZiMzJhMTFmLzEveWVHNzlncmc2MzFBQjJKeGhjWHhSeVBfODY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9kYTUyOTYtZjczYi00NWQ2LWE5NDItZTEyOTZiMzJhMTFm LzEveWVHNzlncmc2MzFBQjJKeGhjWHhSeVBfODY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN5ocrTuX MeDKLgRn4YQ3h9rosv+taguYnDYre6PrpT42NWq7EX3YWFAW5hq4BqZXe7UjDLv0 xkTuRrqVXkibBc+4p0MbsK1W3EtcdJ7ljpBZKLYZeYGddWfsbkNmqEYYCFNYAEXL gJAJw6Ea3VT/WOMhp+5n7LNTFFxfkd7PE7DrXXMP2sSA6hfgrhdpWwD5Fb9+tonz TncLlQxP/eX7kr1GprjoV75Dsa1PPYVwB73Em6EQTvDrUAiJAyiCc1brIqYfOG7K i8Xyjikt04wg3jVky0VtWHr7e8ZUVcbqKOJxE+jnS9ZZnJYC5vgPsqjxWmmAlI0D pSNz1+Lr0b71vA== -----END CERTIFICATE-----Generated at Sun Dec 14 13:51:00 2025 by rpki-client