This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft File: yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft (raw, json) Hash identifier: Iz6lpyzdpjg0ZfX9kDcbWFuv56TgOAX+W1zJKLxs6Q0= Subject key identifier: F5:7F:CA:D0:96:AA:72:6B:0A:75:70:78:9C:5E:CE:24:34:31:03:9E Authority key identifier: C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64 Certificate issuer: /CN=c86406264e49cf6f89ca5d2c6af750b36e156564 Certificate serial: 019B5A522CE88E17282D56F0334C137C4782 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft Manifest number: 05CD Signing time: Fri 26 Dec 2025 11:01:33 +0000 Manifest this update: Fri 26 Dec 2025 11:01:33 +0000 Manifest next update: Sat 27 Dec 2025 11:01:33 +0000 Files and hashes: 1: de76rG8nL4tZzOssRD1ykxkBwJQ.roa (hash: PZ6Gs/7Ric8QzvgdkQxDNgPGEbYADwXFDmxjygY8QME=) 2: yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl (hash: PAqsXpzuP3g+/EuPROLvVM50LsX/QL4ynqofzcblv1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:2c:e8:8e:17:28:2d:56:f0:33:4c:13:7c:47:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c86406264e49cf6f89ca5d2c6af750b36e156564 Validity Not Before: Dec 26 11:01:33 2025 GMT Not After : Dec 27 11:01:33 2025 GMT Subject: CN=f57fcad096aa726b0a7570789c5ece243431039e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:49:37:05:bc:a5:26:18:8a:dd:72:e9:62:a7: e4:57:9a:c3:cb:aa:f6:46:5a:c0:1e:9e:cf:3b:f9: ea:8c:4e:1c:81:c0:47:6f:7c:b7:9e:f8:4d:f9:94: 73:06:8b:29:de:be:22:34:7f:bb:08:f6:4b:4f:ec: dd:93:fd:47:77:10:e4:4b:1e:21:5e:fe:52:01:99: 54:20:32:26:d4:dd:0e:9b:7e:fe:1d:bd:eb:9e:56: c7:e7:ce:1e:bc:41:1d:30:fe:05:4e:76:10:70:78: b0:60:69:dc:ea:21:ca:03:26:98:c9:bc:db:77:ae: 99:a5:f8:cc:0f:a7:03:1b:ab:33:bc:e1:72:51:18: f8:39:62:a6:2f:3a:ff:cd:d2:9c:f0:9a:3c:dc:0a: 66:fa:34:cf:e9:65:8a:84:1d:04:4a:bd:03:c3:dc: cc:69:d6:bd:c4:37:19:a5:61:9d:45:ab:8f:0b:f8: d0:65:3c:e5:25:12:28:6d:32:ee:f1:bf:51:71:e3: f6:db:a4:34:85:79:9e:59:15:20:2a:c5:29:4e:b5: aa:76:5d:53:34:28:ae:f3:01:9d:57:7a:96:99:98: 87:86:c4:7c:b1:4a:87:74:31:e2:43:75:60:ea:67: 35:0e:ec:69:a6:3b:ef:8f:18:c4:cf:b7:8a:a4:9e: ea:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:7F:CA:D0:96:AA:72:6B:0A:75:70:78:9C:5E:CE:24:34:31:03:9E X509v3 Authority Key Identifier: keyid:C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ec:45:9d:4f:c6:a1:e7:1d:1e:57:0a:93:02:20:66:29:1a: 34:13:53:87:40:bd:b4:3f:b1:23:0f:61:67:c8:d3:3e:ff:ae: cc:44:43:49:c1:5b:24:7f:15:0c:a3:5b:37:d2:b4:77:4a:94: 70:af:ab:65:2b:6b:c6:14:53:c0:6c:e4:5a:d6:b3:14:dd:dd: e3:97:41:00:ad:27:c4:27:87:d5:18:7c:4a:26:2c:f2:4f:35: 45:c8:a5:df:6d:33:41:c3:b9:ee:b6:ec:26:66:92:12:ff:6f: 50:a2:23:aa:12:b1:3c:b3:b2:4a:85:a7:ba:e8:b1:64:34:2b: 44:07:50:fb:bc:b0:aa:fb:00:0e:da:99:b4:10:7c:38:89:57: 2e:c8:25:04:66:c8:12:90:b9:37:9d:5f:c2:61:d4:ec:39:aa: cd:76:40:ff:06:6b:8a:5c:f0:3a:25:70:c7:ed:e0:46:8b:e9: 93:78:0f:0f:69:34:2f:1a:36:77:61:3d:0a:3b:e0:0f:9c:07: 04:0e:93:25:6e:24:f1:30:59:d4:d7:77:ec:b8:16:d0:f9:0e: aa:4a:5a:5e:72:9a:ce:be:eb:2e:40:9d:9c:74:5d:f7:08:9d: 2a:76:04:9b:d0:03:1d:6e:30:ff:c9:0c:8c:ae:31:d8:9e:89: 23:54:4f:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUizojhcoLVbwM0wTfEeCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NjQwNjI2NGU0OWNmNmY4OWNhNWQyYzZhZjc1MGIzNmUx NTY1NjQwHhcNMjUxMjI2MTEwMTMzWhcNMjUxMjI3MTEwMTMzWjAzMTEwLwYDVQQD EyhmNTdmY2FkMDk2YWE3MjZiMGE3NTcwNzg5YzVlY2UyNDM0MzEwMzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40k3BbylJhiK3XLpYqfkV5rDy6r2 RlrAHp7PO/nqjE4cgcBHb3y3nvhN+ZRzBosp3r4iNH+7CPZLT+zdk/1HdxDkSx4h Xv5SAZlUIDIm1N0Om37+Hb3rnlbH584evEEdMP4FTnYQcHiwYGnc6iHKAyaYybzb d66ZpfjMD6cDG6szvOFyURj4OWKmLzr/zdKc8Jo83Apm+jTP6WWKhB0ESr0Dw9zM ada9xDcZpWGdRauPC/jQZTzlJRIobTLu8b9RceP226Q0hXmeWRUgKsUpTrWqdl1T NCiu8wGdV3qWmZiHhsR8sUqHdDHiQ3Vg6mc1DuxppjvvjxjEz7eKpJ7q9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPV/ytCWqnJrCnVweJxeziQ0MQOeMB8GA1UdIwQY MBaAFMhkBiZOSc9vicpdLGr3ULNuFWVkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUdRR0prNUp6Mi1KeWwwc2F2ZFFzMjRWWldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC84NzRiM2ItNjdkZS00OWVmLThmYzEt NjJkZDZlY2ZlNzI1LzEveUdRR0prNUp6Mi1KeWwwc2F2ZFFzMjRWWldRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC84NzRiM2ItNjdkZS00OWVmLThmYzEtNjJkZDZlY2ZlNzI1 LzEveUdRR0prNUp6Mi1KeWwwc2F2ZFFzMjRWWldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOxFnU/G oecdHlcKkwIgZikaNBNTh0C9tD+xIw9hZ8jTPv+uzERDScFbJH8VDKNbN9K0d0qU cK+rZStrxhRTwGzkWtazFN3d45dBAK0nxCeH1Rh8SiYs8k81Rcil320zQcO57rbs JmaSEv9vUKIjqhKxPLOySoWnuuixZDQrRAdQ+7ywqvsADtqZtBB8OIlXLsglBGbI EpC5N51fwmHU7DmqzXZA/wZrilzwOiVwx+3gRovpk3gPD2k0Lxo2d2E9CjvgD5wH BA6TJW4k8TBZ1Nd37LgW0PkOqkpaXnKazr7rLkCdnHRd9widKnYEm9ADHW4w/8kM jK4x2J6JI1RPyg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:54 2025 by rpki-client