This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft File: yNMivrfjY_TUV14eT-7lzLhOEnU.mft (raw, json) Hash identifier: +P8uU961yp9L2qXeheXt+xNnDqKwdaxwJbgWoyXGIkY= Subject key identifier: C8:69:9A:1D:FF:A7:70:C1:A0:BA:DD:D7:28:0D:E1:3F:C2:27:45:3A Authority key identifier: C8:D3:22:BE:B7:E3:63:F4:D4:57:5E:1E:4F:EE:E5:CC:B8:4E:12:75 Certificate issuer: /CN=c8d322beb7e363f4d4575e1e4feee5ccb84e1275 Certificate serial: 019B3344678FFFD92FBF343C16990EAA7DCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 21:01:19 +0000 Manifest this update: Thu 18 Dec 2025 21:01:19 +0000 Manifest next update: Fri 19 Dec 2025 21:01:19 +0000 Files and hashes: 1: nvq-TJNbL0ajM2TA5cfgJ-DqXBg.roa (hash: pDByD6dp3Va0k7qBPd8tHFheIh5zQKazx/nAE02gXa4=) 2: yNMivrfjY_TUV14eT-7lzLhOEnU.crl (hash: K/poKNdOXkkw+y1qVBAq+Y8/fTkuF2xf1jbBN6JLFHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:67:8f:ff:d9:2f:bf:34:3c:16:99:0e:aa:7d:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8d322beb7e363f4d4575e1e4feee5ccb84e1275 Validity Not Before: Dec 18 21:01:19 2025 GMT Not After : Dec 19 21:01:19 2025 GMT Subject: CN=c8699a1dffa770c1a0baddd7280de13fc227453a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b5:70:4c:2d:c4:f8:62:11:7e:cf:01:45:cd: ab:a8:40:c2:13:0b:98:77:d4:c3:d2:ba:c9:d3:5a: 7b:1b:c3:ad:67:d2:9d:3c:21:72:c3:e1:68:37:ac: 42:30:40:b8:13:ec:e8:b6:ab:b6:58:1a:06:b3:aa: f2:a1:4c:de:dd:16:df:5a:33:fa:5a:3d:69:22:08: fc:01:b7:4c:8f:06:2d:5a:15:75:87:81:fb:1c:cc: ce:5e:54:44:cb:d6:2f:3e:ed:17:04:ac:15:4e:e7: fe:8d:f8:90:e3:94:e9:00:5a:58:81:e4:03:b4:9b: 7f:4a:66:07:83:b3:8c:ac:48:71:df:11:91:0a:21: 2b:7c:7a:d6:2b:1d:15:36:02:e8:f2:1d:67:cc:1c: bd:26:cd:6c:cf:38:de:07:e2:9e:d9:0c:4b:cd:63: 4e:32:d5:30:c6:11:1b:e3:51:c8:94:98:9a:9b:0d: c5:29:1b:5a:13:cc:85:64:9c:29:56:42:fd:de:78: ab:70:51:b4:8d:83:09:f8:96:db:55:e1:9d:a2:b1: c6:26:5a:c5:32:4e:42:d3:7a:97:99:4c:ad:3b:12: 8b:44:e6:f7:d7:a6:80:a8:8d:a0:60:23:9f:38:24: e1:21:76:ae:6d:03:b1:74:e6:5e:63:1e:16:d2:7f: 4d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:69:9A:1D:FF:A7:70:C1:A0:BA:DD:D7:28:0D:E1:3F:C2:27:45:3A X509v3 Authority Key Identifier: keyid:C8:D3:22:BE:B7:E3:63:F4:D4:57:5E:1E:4F:EE:E5:CC:B8:4E:12:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:c1:75:be:80:49:c7:96:e1:27:66:d0:cb:0d:90:48:e7:8e: 0f:ea:db:5e:12:fe:92:f2:08:a1:9e:2e:31:67:09:88:37:f2: c8:0b:ee:4d:0a:6c:c5:07:6f:3e:38:92:d7:a1:ae:9a:4a:60: 31:31:1d:47:47:dc:28:95:6e:ff:f4:e0:6e:f1:8e:cf:cd:76: 44:dc:37:f5:01:12:03:85:55:25:93:42:ed:a0:97:9b:21:be: 4e:e8:8b:da:e0:d6:c6:bf:8c:5e:e2:31:40:fd:e2:cd:ba:1d: 38:53:f6:97:63:5e:02:24:4c:4d:7d:88:6f:15:76:09:00:24: 54:ea:94:4a:ca:6c:08:0b:f5:7d:ac:a9:07:b0:9c:b9:61:28: 63:9b:b0:50:4c:f9:72:fb:91:29:7b:dd:11:a4:f4:44:77:9d: 7e:a7:1e:0d:6b:30:1c:42:5a:01:11:be:bc:cb:7e:0a:71:db: 91:22:25:34:71:06:4c:20:3a:d8:8c:6d:a8:18:53:b7:9c:ed: e6:54:42:65:cc:a4:ca:97:ae:ab:d4:27:04:d0:ad:08:79:63: ef:74:83:f9:5b:b4:00:a8:32:a8:d2:bc:84:05:61:d2:46:93: f2:ac:2c:85:8d:66:8d:43:73:3e:70:7e:24:2a:86:9a:86:a3: 1e:7a:25:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRGeP/9kvvzQ8FpkOqn3OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZDMyMmJlYjdlMzYzZjRkNDU3NWUxZTRmZWVlNWNjYjg0 ZTEyNzUwHhcNMjUxMjE4MjEwMTE5WhcNMjUxMjE5MjEwMTE5WjAzMTEwLwYDVQQD EyhjODY5OWExZGZmYTc3MGMxYTBiYWRkZDcyODBkZTEzZmMyMjc0NTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLVwTC3E+GIRfs8BRc2rqEDCEwuY d9TD0rrJ01p7G8OtZ9KdPCFyw+FoN6xCMEC4E+zotqu2WBoGs6ryoUze3RbfWjP6 Wj1pIgj8AbdMjwYtWhV1h4H7HMzOXlREy9YvPu0XBKwVTuf+jfiQ45TpAFpYgeQD tJt/SmYHg7OMrEhx3xGRCiErfHrWKx0VNgLo8h1nzBy9Js1szzjeB+Ke2QxLzWNO MtUwxhEb41HIlJiamw3FKRtaE8yFZJwpVkL93nircFG0jYMJ+JbbVeGdorHGJlrF Mk5C03qXmUytOxKLROb316aAqI2gYCOfOCThIXaubQOxdOZeYx4W0n9NUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhpmh3/p3DBoLrd1ygN4T/CJ0U6MB8GA1UdIwQY MBaAFMjTIr6342P01FdeHk/u5cy4ThJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU5NaXZyZmpZX1RVVjE0ZVQtN2x6TGhPRW5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lZjRkYjAtYjZjOS00N2FhLTg0YzEt ZGMzNzY5ZThmNmExLzEveU5NaXZyZmpZX1RVVjE0ZVQtN2x6TGhPRW5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9lZjRkYjAtYjZjOS00N2FhLTg0YzEtZGMzNzY5ZThmNmEx LzEveU5NaXZyZmpZX1RVVjE0ZVQtN2x6TGhPRW5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtMF1voBJ x5bhJ2bQyw2QSOeOD+rbXhL+kvIIoZ4uMWcJiDfyyAvuTQpsxQdvPjiS16Gumkpg MTEdR0fcKJVu//TgbvGOz812RNw39QESA4VVJZNC7aCXmyG+TuiL2uDWxr+MXuIx QP3izbodOFP2l2NeAiRMTX2IbxV2CQAkVOqUSspsCAv1faypB7CcuWEoY5uwUEz5 cvuRKXvdEaT0RHedfqceDWswHEJaARG+vMt+CnHbkSIlNHEGTCA62IxtqBhTt5zt 5lRCZcykypeuq9QnBNCtCHlj73SD+Vu0AKgyqNK8hAVh0kaT8qwshY1mjUNzPnB+ JCqGmoajHnolig== -----END CERTIFICATE-----Generated at Fri Dec 19 01:56:10 2025 by rpki-client