This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft File: yzNdxv6zhfaiM0QFahPCxZUCjpE.mft (raw, json) Hash identifier: GCCIj6v6TGlvTXZEIcMvcxCteCaIRTd43FwjaSWzuHc= Subject key identifier: 9E:63:57:BE:F1:93:C2:60:E3:41:E5:5F:D6:43:9E:66:2E:69:D8:8B Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91 Certificate issuer: /CN=cb335dc6feb385f6a23344056a13c2c595028e91 Certificate serial: 019B183B4475BDE0D89BA1B2C6B2035DC9D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft Manifest number: 177C Signing time: Sat 13 Dec 2025 15:01:35 +0000 Manifest this update: Sat 13 Dec 2025 15:01:35 +0000 Manifest next update: Sun 14 Dec 2025 15:01:35 +0000 Files and hashes: 1: 174WdkpYr9777ZFQazXJ-iMRM-8.roa (hash: /zP6InCFbWaOP8FrHR5Yt4Nt/uR42z5t9/lR4P3NjaA=) 2: 4tF4-i9U2calaQJH5W9DdonR7g8.roa (hash: c6hF2fcYIr6EH2qbgW+meE0n3KbUVbdo/KfH+zDiN2k=) 3: k5xMorPADX6pjlz13eIpCR1YD6Y.roa (hash: zYtUaU0ku4oMSnzZFqoPkHIdrXIDxibBJ6DcraKtexc=) 4: yzNdxv6zhfaiM0QFahPCxZUCjpE.crl (hash: y3ttODRwn0WdIfTVfYddygg6WGlpWTf01+rycokhFVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 15:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:3b:44:75:bd:e0:d8:9b:a1:b2:c6:b2:03:5d:c9:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91 Validity Not Before: Dec 13 15:01:35 2025 GMT Not After : Dec 14 15:01:35 2025 GMT Subject: CN=9e6357bef193c260e341e55fd6439e662e69d88b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3c:6b:4d:2b:32:6e:67:6a:50:64:e2:31:75: c4:82:44:09:3b:e1:24:d8:85:45:14:24:11:fd:bc: ec:a9:1d:54:92:0f:84:ea:fa:21:be:61:92:9f:55: 99:2d:d0:4e:4d:ab:41:ad:cb:37:ab:a1:c1:da:7e: 3b:61:9e:61:4e:4d:38:33:67:73:2d:7c:4b:18:34: 0d:55:6c:d6:42:bb:1a:51:11:27:59:d6:72:46:e6: 4c:00:3a:b3:63:d3:83:91:c4:90:ec:b9:3d:20:5f: 38:f8:d2:fa:eb:b4:34:62:32:91:d3:eb:78:39:ea: b1:3b:82:36:8f:11:a3:3e:26:9c:5d:c0:67:03:94: 6f:90:87:48:71:c7:43:08:01:07:4a:32:16:cf:5a: 71:e5:47:67:f4:f7:48:e9:6a:60:c4:de:1c:70:e9: 3f:0b:fc:9d:7b:91:00:14:1d:5e:cf:b9:e9:db:ab: 06:f8:1f:ce:44:33:60:05:e7:7d:36:13:32:d6:93: 73:5a:83:dd:9d:8a:49:46:da:92:a6:cc:cc:89:36: 1b:89:d0:79:92:30:a4:65:e1:7d:2e:24:48:12:c5: 38:9e:52:09:c9:5b:8b:4c:2c:c8:c2:fd:d3:11:d8: 1c:d9:83:79:c2:55:a0:c4:8a:ac:b0:fb:43:ea:bf: 0e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:63:57:BE:F1:93:C2:60:E3:41:E5:5F:D6:43:9E:66:2E:69:D8:8B X509v3 Authority Key Identifier: keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:58:4c:ee:46:2a:c7:6d:87:28:46:92:cb:53:b7:5a:a5:72: 58:65:27:4e:f0:43:ee:df:1b:01:79:15:05:2b:23:d5:9b:7f: e0:4c:16:58:48:92:4a:eb:35:81:63:c1:1e:b7:19:63:ec:ba: 37:73:94:91:d4:0f:c3:00:3d:5e:88:0e:41:33:0c:5d:ad:06: 74:00:f1:77:62:64:b3:72:7f:a5:88:90:a1:11:8d:90:9a:34: ea:00:7a:5b:52:27:53:f8:d6:86:e7:46:29:e5:25:a4:1d:91: 9c:b1:67:d2:79:fa:8a:83:69:e5:ff:53:5e:0f:0d:e1:a0:f3: 08:cd:1c:e9:c6:63:0f:82:93:56:1a:16:9f:33:65:fe:57:4a: c0:d1:49:3a:f1:c3:57:ff:a1:09:96:e0:5e:31:0c:82:05:69: a1:2b:bd:3a:d7:33:f3:76:59:bf:5f:30:d5:15:58:f1:7f:b2: 4e:e1:68:cc:6a:88:18:3d:50:fc:02:12:6c:19:2a:28:06:81: 1a:cd:6f:35:a6:33:36:76:bc:fb:86:6d:af:90:81:ee:9e:74: 77:7a:05:ab:33:1d:5b:50:a5:b3:d8:9b:ac:20:8a:a8:fd:fa: b6:07:de:a9:b9:4e:c1:8b:93:0f:1a:0d:cc:7b:e9:0b:37:de: 13:3e:e8:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYO0R1veDYm6GyxrIDXcnUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMzM1ZGM2ZmViMzg1ZjZhMjMzNDQwNTZhMTNjMmM1OTUw MjhlOTEwHhcNMjUxMjEzMTUwMTM1WhcNMjUxMjE0MTUwMTM1WjAzMTEwLwYDVQQD Eyg5ZTYzNTdiZWYxOTNjMjYwZTM0MWU1NWZkNjQzOWU2NjJlNjlkODhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TxrTSsybmdqUGTiMXXEgkQJO+Ek 2IVFFCQR/bzsqR1Ukg+E6vohvmGSn1WZLdBOTatBrcs3q6HB2n47YZ5hTk04M2dz LXxLGDQNVWzWQrsaUREnWdZyRuZMADqzY9ODkcSQ7Lk9IF84+NL667Q0YjKR0+t4 OeqxO4I2jxGjPiacXcBnA5RvkIdIccdDCAEHSjIWz1px5Udn9PdI6WpgxN4ccOk/ C/yde5EAFB1ez7np26sG+B/ORDNgBed9NhMy1pNzWoPdnYpJRtqSpszMiTYbidB5 kjCkZeF9LiRIEsU4nlIJyVuLTCzIwv3TEdgc2YN5wlWgxIqssPtD6r8OYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5jV77xk8Jg40HlX9ZDnmYuadiLMB8GA1UdIwQY MBaAFMszXcb+s4X2ojNEBWoTwsWVAo6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mYTM0MmUtYjNiYy00MzczLThjNmIt ODg1NGM4MmI1NDVkLzEveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9mYTM0MmUtYjNiYy00MzczLThjNmItODg1NGM4MmI1NDVk LzEveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqlhM7kYq x22HKEaSy1O3WqVyWGUnTvBD7t8bAXkVBSsj1Zt/4EwWWEiSSus1gWPBHrcZY+y6 N3OUkdQPwwA9XogOQTMMXa0GdADxd2Jks3J/pYiQoRGNkJo06gB6W1InU/jWhudG KeUlpB2RnLFn0nn6ioNp5f9TXg8N4aDzCM0c6cZjD4KTVhoWnzNl/ldKwNFJOvHD V/+hCZbgXjEMggVpoSu9Otcz83ZZv18w1RVY8X+yTuFozGqIGD1Q/AISbBkqKAaB Gs1vNaYzNna8+4Ztr5CB7p50d3oFqzMdW1Cls9ibrCCKqP36tgfeqblOwYuTDxoN zHvpCzfeEz7okw== -----END CERTIFICATE-----Generated at Sat Dec 13 21:20:43 2025 by rpki-client