This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft File: yjevCVET2t1bxRveu_CtNNbu22Q.mft (raw, json) Hash identifier: o+Cbsu4kjSeaGSU4+SZJagwvWONhNTbZh0scouDYK3k= Subject key identifier: EF:5E:6D:B2:AA:79:73:04:63:80:62:CC:AE:1B:29:E6:C7:32:A0:A1 Authority key identifier: CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64 Certificate issuer: /CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64 Certificate serial: 019B34C44F036B28F2C4C84CEEB14FBA959E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft Manifest number: 1394 Signing time: Fri 19 Dec 2025 04:00:38 +0000 Manifest this update: Fri 19 Dec 2025 04:00:38 +0000 Manifest next update: Sat 20 Dec 2025 04:00:38 +0000 Files and hashes: 1: FMnMJSika8qzHn3rA1gugh6bskk.roa (hash: ifB+hpHW1Zidp1iRq+x5utdXKTTiyitHTNMMB+oocZw=) 2: yjevCVET2t1bxRveu_CtNNbu22Q.crl (hash: gLoCDfuNQzY281kXnw5RSL478l8blq2b6ixYImSzOss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:4f:03:6b:28:f2:c4:c8:4c:ee:b1:4f:ba:95:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64 Validity Not Before: Dec 19 04:00:38 2025 GMT Not After : Dec 20 04:00:38 2025 GMT Subject: CN=ef5e6db2aa797304638062ccae1b29e6c732a0a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:16:c4:29:ff:ed:82:90:da:00:97:93:b6:f0: 42:7b:a0:a3:01:2d:54:6e:75:d8:d8:3f:be:6a:be: 7d:3d:43:ca:0f:09:b6:c7:8c:79:8d:71:be:d2:5e: 85:80:ee:71:dc:7f:1f:40:4d:4d:3c:cc:04:88:0c: e2:2d:59:37:d6:6b:69:c5:47:cc:a6:7a:51:66:e6: eb:f9:6c:17:ec:d4:2c:53:f4:bb:9c:9f:55:e9:cb: 5a:be:40:27:5e:4b:90:e9:af:8d:2a:13:be:cd:b9: d3:6a:97:33:3b:a2:00:70:6f:7a:c7:5a:ef:8c:dd: 33:d6:e0:85:d1:da:5a:71:1a:e9:b3:31:82:2b:dd: 26:85:4c:f6:cb:14:47:ee:0a:83:f4:5c:b2:28:56: 50:2e:a6:a8:e3:25:58:6b:c0:8c:be:88:15:de:07: 23:c6:7c:46:c3:1c:2f:c5:0f:8b:62:51:6c:f3:a6: dd:26:82:5d:17:06:30:74:61:67:1c:86:4f:c3:ba: ae:8c:ad:95:9e:60:49:16:06:1e:a6:33:50:1c:e5: eb:ed:78:16:e7:0f:ee:2c:8f:80:36:7a:f8:6a:87: 1d:96:54:57:c0:87:43:c9:10:c5:b9:31:e4:8d:d5: 36:2f:fd:82:5b:d8:1c:b2:4a:ec:32:16:2f:22:04: 6f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:5E:6D:B2:AA:79:73:04:63:80:62:CC:AE:1B:29:E6:C7:32:A0:A1 X509v3 Authority Key Identifier: keyid:CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:90:92:48:ae:8a:3f:a2:fb:2d:ac:5c:54:01:b3:10:f2:a1: 55:83:b8:54:b1:81:53:d7:f3:2e:46:03:10:f7:9d:64:96:85: 0d:37:e1:19:3d:6c:0b:e0:25:2a:4a:8f:ac:3a:89:af:ee:43: c4:67:1f:eb:20:05:c6:f2:49:e4:fd:5d:ef:c5:de:41:57:f5: 60:d4:00:1f:a3:ef:0d:79:fa:e8:7b:b7:5d:95:af:bb:a7:da: 70:04:c0:66:40:f5:47:70:62:3d:62:41:16:45:c0:76:79:dd: a0:f1:ff:0e:74:c5:2a:c3:a2:80:50:9b:61:eb:f5:fb:ac:2d: 01:71:06:1d:95:18:b2:19:3a:d4:5c:bb:93:4c:f5:69:01:db: 7b:fa:98:24:0b:1b:81:c8:38:57:2e:d5:9a:9a:ea:f6:d1:22: b7:d5:98:a1:00:61:d7:fb:6e:fe:81:23:8c:63:7c:4b:39:0e: 44:97:5d:c0:a0:13:ad:60:c2:7a:37:7d:07:1d:ce:4f:af:45: 15:b9:9b:36:83:9c:8c:1d:40:0c:1d:0f:e1:74:ad:0a:3f:27: 5c:a5:20:50:d2:40:c4:31:9f:ee:c2:6c:32:96:d3:30:dc:f9: 8e:81:44:00:08:7b:7c:61:82:6e:b4:5f:1f:1c:1f:3d:42:29: 8e:29:aa:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xE8DayjyxMhM7rFPupWeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzdhZjA5NTExM2RhZGQ1YmM1MWJkZWJiZjBhZDM0ZDZl ZWRiNjQwHhcNMjUxMjE5MDQwMDM4WhcNMjUxMjIwMDQwMDM4WjAzMTEwLwYDVQQD EyhlZjVlNmRiMmFhNzk3MzA0NjM4MDYyY2NhZTFiMjllNmM3MzJhMGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BbEKf/tgpDaAJeTtvBCe6CjAS1U bnXY2D++ar59PUPKDwm2x4x5jXG+0l6FgO5x3H8fQE1NPMwEiAziLVk31mtpxUfM pnpRZubr+WwX7NQsU/S7nJ9V6ctavkAnXkuQ6a+NKhO+zbnTapczO6IAcG96x1rv jN0z1uCF0dpacRrpszGCK90mhUz2yxRH7gqD9FyyKFZQLqao4yVYa8CMvogV3gcj xnxGwxwvxQ+LYlFs86bdJoJdFwYwdGFnHIZPw7qujK2VnmBJFgYepjNQHOXr7XgW 5w/uLI+ANnr4aocdllRXwIdDyRDFuTHkjdU2L/2CW9gcskrsMhYvIgRvTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9ebbKqeXMEY4BizK4bKebHMqChMB8GA1UdIwQY MBaAFMo3rwlRE9rdW8Ub3rvwrTTW7ttkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hZDZjODMtZTVmZC00NDE3LWJmZjkt ZWI2OGVmYzQ3NDhiLzEveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9hZDZjODMtZTVmZC00NDE3LWJmZjktZWI2OGVmYzQ3NDhi LzEveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqpCSSK6K P6L7LaxcVAGzEPKhVYO4VLGBU9fzLkYDEPedZJaFDTfhGT1sC+AlKkqPrDqJr+5D xGcf6yAFxvJJ5P1d78XeQVf1YNQAH6PvDXn66Hu3XZWvu6facATAZkD1R3BiPWJB FkXAdnndoPH/DnTFKsOigFCbYev1+6wtAXEGHZUYshk61Fy7k0z1aQHbe/qYJAsb gcg4Vy7Vmprq9tEit9WYoQBh1/tu/oEjjGN8SzkORJddwKATrWDCejd9Bx3OT69F FbmbNoOcjB1ADB0P4XStCj8nXKUgUNJAxDGf7sJsMpbTMNz5joFEAAh7fGGCbrRf HxwfPUIpjimqog== -----END CERTIFICATE-----Generated at Fri Dec 19 14:20:37 2025 by rpki-client