This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft File: ypAPHhHi0l0LIxatbgEmhIOayB4.mft (raw, json) Hash identifier: JdEvbNcYmvjkjnMbtf6qGy1aEuPnWJZ9rRl5u9scncA= Subject key identifier: 24:1B:E2:20:44:04:F9:18:E0:55:95:22:08:F1:00:9B:A1:1C:98:3F Authority key identifier: CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E Certificate issuer: /CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e Certificate serial: 019B240836D889FB9BF59DD120A0C74BF107 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft Manifest number: 177C Signing time: Mon 15 Dec 2025 22:01:16 +0000 Manifest this update: Mon 15 Dec 2025 22:01:16 +0000 Manifest next update: Tue 16 Dec 2025 22:01:16 +0000 Files and hashes: 1: UvHXXFoVL7W8kRf_CmjRtC48uH4.roa (hash: E8q/i3b6Anio6852XqG98vgAFVWa9Xn560kQh/u0aSY=) 2: ypAPHhHi0l0LIxatbgEmhIOayB4.crl (hash: +jOvcwY7o6OkIU3PsO3BUEzTOTeD9yKyS3hghgodY+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:08:36:d8:89:fb:9b:f5:9d:d1:20:a0:c7:4b:f1:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e Validity Not Before: Dec 15 22:01:16 2025 GMT Not After : Dec 16 22:01:16 2025 GMT Subject: CN=241be2204404f918e055952208f1009ba11c983f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3c:ea:da:b0:b1:a4:77:90:6e:1d:31:e7:00: be:2e:88:41:8e:0a:52:de:8b:d3:bd:28:07:2e:fa: 92:76:03:74:e3:36:c5:37:68:04:8d:dc:55:fc:f1: aa:f5:14:74:57:cc:8e:29:ea:7a:56:3d:15:a7:77: dc:4b:c4:d3:6d:23:ca:1f:4a:bc:d2:f8:f0:68:77: c6:5a:43:4c:45:88:42:00:a5:19:f3:2c:e9:4f:be: 54:70:bb:99:fe:fd:a1:51:77:dd:11:5f:b8:ae:b7: 96:13:5e:5d:e4:0c:10:b6:64:f8:d0:18:78:7c:ca: 95:1a:fa:96:55:f4:6a:e0:b8:35:9c:01:3e:19:30: 1c:69:c2:67:3e:92:1c:46:e4:72:e9:4c:c2:30:3c: 12:a0:48:4f:d0:9e:3d:8a:ab:93:de:7b:d4:60:22: 76:b3:d5:8e:e9:1a:8c:e6:54:29:55:dd:e0:a3:c6: 64:ed:ca:ae:71:37:c4:15:4d:fb:93:21:a6:53:89: cf:33:fd:cf:62:da:ee:0a:d6:1b:5a:79:c5:09:11: bf:b7:2e:64:f3:4e:bd:00:8d:d7:ce:c6:4f:20:d1: 38:c0:20:0c:2b:f8:13:25:fe:05:91:de:1e:bf:79: c1:47:c9:42:7f:d1:d7:82:f4:6d:f4:c8:b1:9f:93: 1b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1B:E2:20:44:04:F9:18:E0:55:95:22:08:F1:00:9B:A1:1C:98:3F X509v3 Authority Key Identifier: keyid:CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:9e:80:45:d1:56:c9:06:3b:b6:b8:da:23:06:9d:a7:4f:18: b5:a8:11:d7:51:7a:e0:6b:78:87:48:db:ce:4b:c3:cb:71:ba: 8d:d5:7e:38:0e:f9:66:3b:d1:0d:c3:c0:0b:e3:50:14:f1:30: 1e:d4:1c:0b:1b:39:bb:a8:58:ee:79:3d:6d:7e:2e:31:09:03: 3c:ef:0f:c0:d5:04:c0:6f:ac:fd:ba:f4:3f:98:33:47:ab:de: 86:6e:17:d4:4a:f8:2e:3a:bf:a7:9d:c8:e1:63:a9:b1:0d:90: 17:63:be:d4:85:b4:04:ab:2c:75:63:8e:0b:f0:47:1b:fe:6d: 46:18:72:5b:97:3b:6a:7c:99:6d:7d:65:f8:53:fd:87:e0:93: 49:f5:d5:f6:03:d2:a6:05:06:1b:eb:77:da:13:6a:99:5b:27: 16:69:61:9d:ef:ed:56:0d:19:aa:dc:74:33:4a:3f:e5:27:da: 80:1c:47:4e:47:a8:bb:53:f6:da:da:6b:e3:fb:8b:39:76:62: 4f:7f:83:6b:be:d5:22:ce:3f:70:e0:92:3f:1b:bd:19:43:ec: 0f:c9:1a:3a:d5:19:2b:1b:7d:03:4b:05:a5:6f:69:05:2c:a3: b8:94:55:b5:c2:e6:10:5c:ea:eb:46:2c:a8:c1:b3:01:a2:05: d5:4e:bb:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskCDbYifub9Z3RIKDHS/EHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhOTAwZjFlMTFlMmQyNWQwYjIzMTZhZDZlMDEyNjg0ODM5 YWM4MWUwHhcNMjUxMjE1MjIwMTE2WhcNMjUxMjE2MjIwMTE2WjAzMTEwLwYDVQQD EygyNDFiZTIyMDQ0MDRmOTE4ZTA1NTk1MjIwOGYxMDA5YmExMWM5ODNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujzq2rCxpHeQbh0x5wC+LohBjgpS 3ovTvSgHLvqSdgN04zbFN2gEjdxV/PGq9RR0V8yOKep6Vj0Vp3fcS8TTbSPKH0q8 0vjwaHfGWkNMRYhCAKUZ8yzpT75UcLuZ/v2hUXfdEV+4rreWE15d5AwQtmT40Bh4 fMqVGvqWVfRq4Lg1nAE+GTAcacJnPpIcRuRy6UzCMDwSoEhP0J49iquT3nvUYCJ2 s9WO6RqM5lQpVd3go8Zk7cqucTfEFU37kyGmU4nPM/3PYtruCtYbWnnFCRG/ty5k 8069AI3XzsZPINE4wCAMK/gTJf4Fkd4ev3nBR8lCf9HXgvRt9Mixn5MbswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQb4iBEBPkY4FWVIgjxAJuhHJg/MB8GA1UdIwQY MBaAFMqQDx4R4tJdCyMWrW4BJoSDmsgeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXBBUEhoSGkwbDBMSXhhdGJnRW1oSU9heUI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9mNjk2OWMtM2E2ZS00YmVjLTk3NDIt ZWNlODdjNmEwMzE4LzEveXBBUEhoSGkwbDBMSXhhdGJnRW1oSU9heUI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9mNjk2OWMtM2E2ZS00YmVjLTk3NDItZWNlODdjNmEwMzE4 LzEveXBBUEhoSGkwbDBMSXhhdGJnRW1oSU9heUI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJ6ARdFW yQY7trjaIwadp08YtagR11F64Gt4h0jbzkvDy3G6jdV+OA75ZjvRDcPAC+NQFPEw HtQcCxs5u6hY7nk9bX4uMQkDPO8PwNUEwG+s/br0P5gzR6vehm4X1Er4Ljq/p53I 4WOpsQ2QF2O+1IW0BKssdWOOC/BHG/5tRhhyW5c7anyZbX1l+FP9h+CTSfXV9gPS pgUGG+t32hNqmVsnFmlhne/tVg0Zqtx0M0o/5SfagBxHTkeou1P22tpr4/uLOXZi T3+Da77VIs4/cOCSPxu9GUPsD8kaOtUZKxt9A0sFpW9pBSyjuJRVtcLmEFzq60Ys qMGzAaIF1U67Yg== -----END CERTIFICATE-----Generated at Tue Dec 16 04:39:56 2025 by rpki-client