This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft File: yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft (raw, json) Hash identifier: 3t6W0kjRCqE0p6c9AwINA8bEwM4vA9rnVkpVTAR/m2E= Subject key identifier: B2:1A:33:F6:A9:54:2B:91:91:2D:92:20:33:62:C1:70:F4:9D:00:00 Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22 Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622 Certificate serial: 019B35A0A2F057550CEEE50541A9308F55EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft Manifest number: 14D2 Signing time: Fri 19 Dec 2025 08:01:18 +0000 Manifest this update: Fri 19 Dec 2025 08:01:18 +0000 Manifest next update: Sat 20 Dec 2025 08:01:18 +0000 Files and hashes: 1: 1-0Y1K8-7iyhXdhoTYDD_MThh3vE.roa (hash: UqK1yASRyJvFv5c4mwnLEN1kbb6bTTjQR+7JRYc/30A=) 2: 8ugftUXGOYARk8hNtz_dZIPLHoY.roa (hash: fXuh9GYhE6qY7sn2WSDIqQCBrlOo2zt5TZUsfH3qCOk=) 3: CDJht7IkCxl1Fd3V0Jw0C5lDhbA.roa (hash: hC6TckJd7vZ/EVDDKvs8SlMNOJG6j0LoJJkkefT5TcY=) 4: MjdKbFiEyBYefwEqDa5k32efH84.roa (hash: yMrvEUe4dfvDGnvXjb6T/gK+z8B3+E50n+nxlmXb8j8=) 5: bAetBQfQtIL8HDlRLQtzqRXsmJw.roa (hash: KlLcSQqNQG0Ri5k3fpJMz79RuQ+R0fvjpj0v09+VZkU=) 6: yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl (hash: GpEbRMJfMBK+deQMp/fJNbcd3VU9GUMbD65+faTMVo8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:a2:f0:57:55:0c:ee:e5:05:41:a9:30:8f:55:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622 Validity Not Before: Dec 19 08:01:18 2025 GMT Not After : Dec 20 08:01:18 2025 GMT Subject: CN=b21a33f6a9542b91912d92203362c170f49d0000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fc:b8:71:b7:fd:42:5c:a3:64:c2:c5:01:d7: 88:34:05:07:c8:a7:43:8a:a2:00:f9:d6:9b:e0:dd: 93:31:f1:aa:7d:7a:69:b0:98:93:7d:9f:8e:ea:a2: d7:40:a4:57:81:ba:5e:c8:bb:80:c0:d2:0f:ea:d1: ac:e1:76:2f:49:53:98:ae:a6:62:f2:79:5a:f5:cd: f2:a1:08:f1:21:8e:2f:e6:69:82:b3:5e:33:8b:ef: 38:8f:ae:b5:52:ba:b7:d5:19:96:ba:94:a9:7f:27: 80:e1:3e:28:df:db:22:79:33:e3:c7:00:c8:5b:9a: e4:33:43:a3:ed:c2:cc:35:2e:20:05:1d:d5:b4:8c: cb:15:f3:b0:08:0d:a4:2e:96:01:7b:dc:fd:ad:71: be:62:7c:48:df:6c:ca:d0:6e:a8:8f:9f:62:ba:c3: ca:00:28:6e:5f:e8:3d:24:a3:52:47:80:58:0a:fd: 7e:4a:26:b9:d9:39:79:d4:ba:b9:f1:04:16:51:a5: d5:b9:fa:42:81:31:27:d4:81:d2:d6:5e:1f:7b:a7: 63:be:5e:75:38:dc:76:4c:bf:2a:ef:01:b7:59:a3: 5b:dc:ac:90:c3:0c:ed:9c:ba:ca:a6:93:ba:c9:24: e4:70:fc:c5:bc:ac:c9:04:1f:7a:e9:97:7a:f6:ce: 7f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1A:33:F6:A9:54:2B:91:91:2D:92:20:33:62:C1:70:F4:9D:00:00 X509v3 Authority Key Identifier: keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:cd:de:69:78:99:bf:30:5d:68:c9:84:52:5d:3d:0b:4d:dc: 8c:d4:d6:c9:b1:90:0d:4b:16:a7:c2:3a:00:61:58:80:dd:7f: ef:30:4d:e9:f4:da:4d:7f:b7:b3:46:98:33:e9:c2:ba:cf:8c: 6b:90:19:7f:b1:f6:45:9c:05:f8:12:25:0f:64:88:c4:2a:8f: 26:a6:87:2f:7d:d0:fd:84:37:b8:ac:55:4a:fb:55:8c:14:63: 43:57:0f:ab:06:84:ad:76:13:01:89:43:19:bd:8a:41:2c:c1: c1:5b:5b:c8:1f:4b:73:62:af:6a:f7:96:ba:30:51:f5:26:5d: ed:57:ec:0d:a3:1f:fb:8c:51:86:f1:b7:da:0b:79:0a:22:83: 4d:03:44:b4:ae:e1:f2:12:8e:4d:68:af:7a:78:5d:29:2b:b8: f1:7a:02:40:ed:9c:7e:19:89:b2:7a:d2:0f:94:13:89:3f:c2: af:18:f7:84:35:15:bf:58:5c:be:bb:36:f6:6d:a0:c3:86:3a: af:4d:c4:b8:ad:58:db:be:99:65:6f:31:6f:02:07:82:7a:34: e5:78:eb:5f:6a:dc:f2:73:ba:92:f5:6c:41:fb:3e:9a:64:fd: b3:83:42:c3:a1:15:17:a9:bc:2a:40:cb:d0:5e:f0:7f:16:6c: d3:b2:7c:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oKLwV1UM7uUFQakwj1XsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZDVlMzcxNzhkODUyNGM3MjY2MGExZDc5NjE2NTk5OWU1 ODY2MjIwHhcNMjUxMjE5MDgwMTE4WhcNMjUxMjIwMDgwMTE4WjAzMTEwLwYDVQQD EyhiMjFhMzNmNmE5NTQyYjkxOTEyZDkyMjAzMzYyYzE3MGY0OWQwMDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPy4cbf9QlyjZMLFAdeINAUHyKdD iqIA+dab4N2TMfGqfXppsJiTfZ+O6qLXQKRXgbpeyLuAwNIP6tGs4XYvSVOYrqZi 8nla9c3yoQjxIY4v5mmCs14zi+84j661Urq31RmWupSpfyeA4T4o39sieTPjxwDI W5rkM0Oj7cLMNS4gBR3VtIzLFfOwCA2kLpYBe9z9rXG+YnxI32zK0G6oj59iusPK AChuX+g9JKNSR4BYCv1+Sia52Tl51Lq58QQWUaXVufpCgTEn1IHS1l4fe6djvl51 ONx2TL8q7wG3WaNb3KyQwwztnLrKppO6ySTkcPzFvKzJBB966Zd69s5/IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIaM/apVCuRkS2SIDNiwXD0nQAAMB8GA1UdIwQY MBaAFMjV43F42FJMcmYKHXlhZZmeWGYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODIt OWUwYWVkMmZiOGVjLzEveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODItOWUwYWVkMmZiOGVj LzEveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADM3eaXiZ vzBdaMmEUl09C03cjNTWybGQDUsWp8I6AGFYgN1/7zBN6fTaTX+3s0aYM+nCus+M a5AZf7H2RZwF+BIlD2SIxCqPJqaHL33Q/YQ3uKxVSvtVjBRjQ1cPqwaErXYTAYlD Gb2KQSzBwVtbyB9Lc2KvaveWujBR9SZd7VfsDaMf+4xRhvG32gt5CiKDTQNEtK7h 8hKOTWivenhdKSu48XoCQO2cfhmJsnrSD5QTiT/Crxj3hDUVv1hcvrs29m2gw4Y6 r03EuK1Y276ZZW8xbwIHgno05XjrX2rc8nO6kvVsQfs+mmT9s4NCw6EVF6m8KkDL 0F7wfxZs07J8tQ== -----END CERTIFICATE-----Generated at Fri Dec 19 10:39:09 2025 by rpki-client