This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft File: yCIG9QbIJusQV-XCabNxDjiraWw.mft (raw, json) Hash identifier: jo7TG97DUtLdI6OJwIms8nCC/ig8w/PscQvLGbkgmvE= Subject key identifier: ED:30:77:74:41:43:FA:FB:F2:8D:34:0C:6C:13:DC:83:11:96:84:7F Authority key identifier: C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C Certificate issuer: /CN=c82206f506c826eb1057e5c269b3710e38ab696c Certificate serial: 019B1B3C0624A4F7A4664B10CE6AF90DD14A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft Manifest number: 140A Signing time: Sun 14 Dec 2025 05:01:17 +0000 Manifest this update: Sun 14 Dec 2025 05:01:17 +0000 Manifest next update: Mon 15 Dec 2025 05:01:17 +0000 Files and hashes: 1: J64w76zXIm6hBV_NCpHfs00xQ5M.roa (hash: tW24A+133JMJcQQWR3X2EMPjynjBMoPzLLODpQzP0s0=) 2: yCIG9QbIJusQV-XCabNxDjiraWw.crl (hash: a7g7apmeFctHYzgkszlIeSYlbMsENhxgA9I/r+NiRg4=) 3: zs6ZXDVhulOywUO2T8QRP9BjX5c.roa (hash: mDD3P3Ub10TzUpELhZJa1aGQdkKfYd5Nh93FhhJJLs0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3c:06:24:a4:f7:a4:66:4b:10:ce:6a:f9:0d:d1:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c82206f506c826eb1057e5c269b3710e38ab696c Validity Not Before: Dec 14 05:01:17 2025 GMT Not After : Dec 15 05:01:17 2025 GMT Subject: CN=ed3077744143fafbf28d340c6c13dc831196847f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:66:56:44:2c:f3:c2:e3:bf:ed:4b:17:f2:2d: a0:6b:02:f9:6f:7d:f3:b0:d3:31:2d:6e:da:95:cd: 78:64:59:4e:1f:e0:80:db:e9:7d:55:95:c0:51:8b: 97:9e:e1:63:75:22:a3:0e:fa:45:44:4e:68:d2:a4: 60:2a:e9:c5:32:3a:39:7b:54:d5:36:7c:e5:b4:98: ff:63:59:b3:79:17:37:47:03:85:af:1b:a2:ad:5f: a4:90:0d:1f:1d:c3:50:5a:b8:00:65:83:3a:a3:dc: 28:5a:ca:f1:d6:a9:1d:e1:69:b0:bb:e4:c7:32:0e: 27:04:35:de:2e:28:70:06:55:74:62:a6:77:4c:a8: 8d:fa:85:ac:57:0a:1e:e8:29:d3:9d:40:dd:de:c7: 00:77:62:c7:6b:2b:46:bc:8b:7f:6c:d0:3f:73:eb: 07:9d:5c:41:e6:28:77:1f:61:37:35:4a:56:a2:2d: 2a:7b:f6:c3:98:76:33:ff:7f:a3:43:ae:91:a6:25: 57:36:48:fa:3b:fb:ec:a2:65:bc:1e:26:d2:d4:05: bf:ca:f1:32:56:ce:e4:8f:89:ad:d6:52:f6:45:dc: c6:81:6d:05:8b:4c:d6:af:c9:d5:6c:97:9b:17:18: c9:5e:e3:66:18:bc:08:7f:14:96:f9:cf:8f:da:f2: 5b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:30:77:74:41:43:FA:FB:F2:8D:34:0C:6C:13:DC:83:11:96:84:7F X509v3 Authority Key Identifier: keyid:C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:42:c0:3e:75:64:aa:aa:89:3b:47:85:b7:7b:20:07:ca:e9: 84:2f:fd:54:c2:5d:0a:ab:86:55:11:83:c6:9c:ca:86:36:9a: 6e:63:d4:e8:bb:49:dc:54:41:b8:c3:44:2b:92:96:e6:fe:31: 53:12:4b:67:1c:85:2b:39:cf:ac:46:cb:8f:f2:fd:b8:64:0a: 9c:15:50:61:93:af:13:b4:cd:7b:1f:5c:27:fc:9f:99:87:84: ab:68:d5:b1:19:25:27:60:f6:4d:a1:d5:94:8a:3e:cc:32:50: 3a:53:9e:3c:60:3e:04:c2:44:90:d6:48:77:c7:74:d4:f8:07: 7b:03:78:3b:45:3a:f5:b1:b5:42:69:ed:e1:5d:c8:70:48:16: 68:e2:89:c4:01:45:a5:85:7d:7b:90:8a:74:47:7a:20:f6:14: 06:b3:a5:fa:39:4a:34:ea:11:15:f8:a8:e8:f6:b6:fa:68:74: 8e:b0:38:83:32:a9:db:64:b4:97:04:a1:14:67:d3:4a:9d:ab: 96:7a:35:8d:40:40:9a:78:19:a2:99:da:c5:b4:eb:f9:d6:09: c1:5a:96:d8:32:fe:a4:89:1a:46:0c:c1:5e:0a:67:63:0b:87: f9:8c:01:b0:8f:e1:a7:f6:47:21:bd:34:66:cb:7a:ee:78:51: 53:74:94:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbPAYkpPekZksQzmr5DdFKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MjIwNmY1MDZjODI2ZWIxMDU3ZTVjMjY5YjM3MTBlMzhh YjY5NmMwHhcNMjUxMjE0MDUwMTE3WhcNMjUxMjE1MDUwMTE3WjAzMTEwLwYDVQQD EyhlZDMwNzc3NDQxNDNmYWZiZjI4ZDM0MGM2YzEzZGM4MzExOTY4NDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02ZWRCzzwuO/7UsX8i2gawL5b33z sNMxLW7alc14ZFlOH+CA2+l9VZXAUYuXnuFjdSKjDvpFRE5o0qRgKunFMjo5e1TV NnzltJj/Y1mzeRc3RwOFrxuirV+kkA0fHcNQWrgAZYM6o9woWsrx1qkd4Wmwu+TH Mg4nBDXeLihwBlV0YqZ3TKiN+oWsVwoe6CnTnUDd3scAd2LHaytGvIt/bNA/c+sH nVxB5ih3H2E3NUpWoi0qe/bDmHYz/3+jQ66RpiVXNkj6O/vsomW8HibS1AW/yvEy Vs7kj4mt1lL2RdzGgW0Fi0zWr8nVbJebFxjJXuNmGLwIfxSW+c+P2vJbQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0wd3RBQ/r78o00DGwT3IMRloR/MB8GA1UdIwQY MBaAFMgiBvUGyCbrEFflwmmzcQ44q2lsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUNJRzlRYklKdXNRVi1YQ2FiTnhEamlyYVd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yOWIwODItZDZkMS00MTQ3LWFmMWMt NjFiMGM3ZmYyZTRlLzEveUNJRzlRYklKdXNRVi1YQ2FiTnhEamlyYVd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yOWIwODItZDZkMS00MTQ3LWFmMWMtNjFiMGM3ZmYyZTRl LzEveUNJRzlRYklKdXNRVi1YQ2FiTnhEamlyYVd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmkLAPnVk qqqJO0eFt3sgB8rphC/9VMJdCquGVRGDxpzKhjaabmPU6LtJ3FRBuMNEK5KW5v4x UxJLZxyFKznPrEbLj/L9uGQKnBVQYZOvE7TNex9cJ/yfmYeEq2jVsRklJ2D2TaHV lIo+zDJQOlOePGA+BMJEkNZId8d01PgHewN4O0U69bG1Qmnt4V3IcEgWaOKJxAFF pYV9e5CKdEd6IPYUBrOl+jlKNOoRFfio6Pa2+mh0jrA4gzKp22S0lwShFGfTSp2r lno1jUBAmngZopnaxbTr+dYJwVqW2DL+pIkaRgzBXgpnYwuH+YwBsI/hp/ZHIb00 Zst67nhRU3SUqQ== -----END CERTIFICATE-----Generated at Sun Dec 14 07:43:21 2025 by rpki-client