This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft File: yRjEAZR0zIHsZh_OZObJOJchlto.mft (raw, json) Hash identifier: qLa/18hyTqtpsDjuBp5eo7rgWT6njBWTsaqCUJ4DiLM= Subject key identifier: 66:DA:CB:20:8E:14:76:9B:7A:3A:5B:B2:76:9D:C1:6B:07:C1:B4:88 Authority key identifier: C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA Certificate issuer: /CN=c918c4019474cc81ec661fce64e6c938972196da Certificate serial: 019B416D3D5983B0667EE7C5CC2F3C26A525 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft Manifest number: 072D Signing time: Sun 21 Dec 2025 15:00:36 +0000 Manifest this update: Sun 21 Dec 2025 15:00:36 +0000 Manifest next update: Mon 22 Dec 2025 15:00:36 +0000 Files and hashes: 1: Jsgd2QMS4v8iKbqKY7mpL6rgdrw.roa (hash: zUKbiJyZKBDLVjXxF3gSP5G2WQgNlz6YzfL6risxYY8=) 2: yRjEAZR0zIHsZh_OZObJOJchlto.crl (hash: jR8+pYqr1UDYdNapk3CWlLkaKcRBsRVY3UI1XEpJ5cs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:3d:59:83:b0:66:7e:e7:c5:cc:2f:3c:26:a5:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c918c4019474cc81ec661fce64e6c938972196da Validity Not Before: Dec 21 15:00:36 2025 GMT Not After : Dec 22 15:00:36 2025 GMT Subject: CN=66dacb208e14769b7a3a5bb2769dc16b07c1b488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c7:50:2c:13:a7:fc:07:27:94:f0:3d:7d:b1: d4:15:70:d4:4e:eb:12:c5:60:e6:20:ee:fb:98:70: ee:0e:7d:30:eb:b6:f1:ea:92:61:b4:49:00:b1:13: 34:a0:f0:c7:0e:c1:86:61:8c:6d:44:78:25:02:f3: 41:82:8b:e0:ee:86:66:8b:7a:85:e2:db:8f:5a:a5: 86:fd:9c:ce:2b:8c:c4:da:51:da:89:c3:e4:60:5d: ba:ad:6c:98:d7:47:e2:11:bb:5e:f2:d6:d0:b8:06: 9e:6c:7c:c7:90:9b:e3:04:68:b1:9c:ea:55:99:ab: 98:d4:36:48:1d:0e:a2:97:e0:4f:5a:a7:d6:9a:45: a6:84:21:5b:8a:be:b0:ea:cd:43:52:28:b5:4b:fc: 74:c2:e9:e7:1e:90:1f:63:ee:4a:a3:8c:3b:fc:81: 9a:72:97:06:9b:a0:4a:80:e7:9c:41:e4:47:88:d9: bb:46:c8:bb:c4:99:4c:8d:b0:f1:51:ef:75:0d:c8: b9:45:bb:e8:36:f7:db:0c:95:e8:ba:58:2a:59:15: 57:ed:08:7a:e4:bd:1c:51:c5:6b:5b:d5:bb:f9:ab: 7e:76:50:d9:7a:0a:06:b7:7d:ce:44:75:82:c0:9e: 32:8a:e6:7b:75:06:3f:2e:d4:3a:8d:e0:a2:8c:a3: e4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:DA:CB:20:8E:14:76:9B:7A:3A:5B:B2:76:9D:C1:6B:07:C1:B4:88 X509v3 Authority Key Identifier: keyid:C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:d7:69:de:20:74:1c:a5:45:5f:c7:3e:ae:43:0d:3a:d2:c7: 2e:74:85:45:4f:5f:18:64:83:b8:c7:a5:c5:50:53:b7:41:70: 3f:21:72:75:96:3d:b2:8b:cd:ba:5f:2b:ac:dc:35:34:26:65: 72:be:2e:cf:27:ae:4c:8f:7c:4e:ad:08:00:c8:71:ca:8f:78: 3c:b6:8e:c6:74:f4:c8:05:b1:ab:7f:b2:3c:25:7d:ab:c2:43: e1:d9:f3:b7:15:45:0c:24:99:70:4c:fc:51:e0:34:d7:b3:9b: 04:ff:bc:c9:d3:45:91:0c:41:1e:66:7f:ff:7c:32:95:76:f4: 72:3d:2e:bd:8c:e7:e9:9c:b9:46:5f:cc:2e:a3:db:5e:c0:82: 23:c3:58:9e:22:57:54:fa:43:9a:d7:75:0a:ef:4d:dc:9b:ed: de:7a:90:71:c5:f7:8b:15:97:01:52:07:e6:84:a2:9c:39:cc: 41:19:19:f2:aa:94:5f:29:69:86:8e:61:de:96:84:07:37:b2: a3:d5:f9:ad:79:e3:2c:c6:a9:35:e1:ce:12:3e:1d:27:3b:75: 39:2b:d3:97:6b:11:b2:0b:6c:53:2e:15:18:b4:75:dc:58:32: 28:c0:00:a8:ca:42:f0:8a:2d:1b:12:2f:d9:64:4c:73:90:f3: cb:98:53:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbT1Zg7BmfufFzC88JqUlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MThjNDAxOTQ3NGNjODFlYzY2MWZjZTY0ZTZjOTM4OTcy MTk2ZGEwHhcNMjUxMjIxMTUwMDM2WhcNMjUxMjIyMTUwMDM2WjAzMTEwLwYDVQQD Eyg2NmRhY2IyMDhlMTQ3NjliN2EzYTViYjI3NjlkYzE2YjA3YzFiNDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8dQLBOn/AcnlPA9fbHUFXDUTusS xWDmIO77mHDuDn0w67bx6pJhtEkAsRM0oPDHDsGGYYxtRHglAvNBgovg7oZmi3qF 4tuPWqWG/ZzOK4zE2lHaicPkYF26rWyY10fiEbte8tbQuAaebHzHkJvjBGixnOpV mauY1DZIHQ6il+BPWqfWmkWmhCFbir6w6s1DUii1S/x0wunnHpAfY+5Ko4w7/IGa cpcGm6BKgOecQeRHiNm7Rsi7xJlMjbDxUe91Dci5RbvoNvfbDJXoulgqWRVX7Qh6 5L0cUcVrW9W7+at+dlDZegoGt33ORHWCwJ4yiuZ7dQY/LtQ6jeCijKPk4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGbayyCOFHabejpbsnadwWsHwbSIMB8GA1UdIwQY MBaAFMkYxAGUdMyB7GYfzmTmyTiXIZbaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVJqRUFaUjB6SUhzWmhfT1pPYkpPSmNobHRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yOTY4NTItYThmZC00OGU1LThkZDYt OGFiY2JiNjVjNjIxLzEveVJqRUFaUjB6SUhzWmhfT1pPYkpPSmNobHRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8yOTY4NTItYThmZC00OGU1LThkZDYtOGFiY2JiNjVjNjIx LzEveVJqRUFaUjB6SUhzWmhfT1pPYkpPSmNobHRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr9dp3iB0 HKVFX8c+rkMNOtLHLnSFRU9fGGSDuMelxVBTt0FwPyFydZY9sovNul8rrNw1NCZl cr4uzyeuTI98Tq0IAMhxyo94PLaOxnT0yAWxq3+yPCV9q8JD4dnztxVFDCSZcEz8 UeA017ObBP+8ydNFkQxBHmZ//3wylXb0cj0uvYzn6Zy5Rl/MLqPbXsCCI8NYniJX VPpDmtd1Cu9N3Jvt3nqQccX3ixWXAVIH5oSinDnMQRkZ8qqUXylpho5h3paEBzey o9X5rXnjLMapNeHOEj4dJzt1OSvTl2sRsgtsUy4VGLR13FgyKMAAqMpC8IotGxIv 2WRMc5Dzy5hTIg== -----END CERTIFICATE-----Generated at Sun Dec 21 22:58:20 2025 by rpki-client