This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft File: Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft (raw, json) Hash identifier: 93JOejBkjS6nfeL8LwaZaNRl4TUvpX1XnsmudoMO5RY= Subject key identifier: A2:DD:21:7D:82:04:86:71:75:8B:54:1D:E1:13:B9:43:7C:E6:AF:68 Authority key identifier: 62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0 Certificate issuer: /CN=622f517b08182c6eda1b3f988ee01816ee264dc0 Certificate serial: 019B59E3AC45468403ECBFAE392145061B10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 09:00:51 +0000 Manifest this update: Fri 26 Dec 2025 09:00:51 +0000 Manifest next update: Sat 27 Dec 2025 09:00:51 +0000 Files and hashes: 1: Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl (hash: H11SeNdMhB+DtqGL/srJBWSuFN2sG9372YJyWFfMAcY=) 2: riaXA0o3ztBtwF7sKqg1RflsJeI.roa (hash: PkRZUeqNmDsfT7G4mjGXrdMXe4M5/AEybH+EkbWMiv4=) 3: yYaisXyChRiN2DpvBoKyqem_xcE.roa (hash: 2YMiZxn9BzAJh7sY9ViGLpVIJNMsE1y+h4ErGfBrx8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:ac:45:46:84:03:ec:bf:ae:39:21:45:06:1b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=622f517b08182c6eda1b3f988ee01816ee264dc0 Validity Not Before: Dec 26 09:00:51 2025 GMT Not After : Dec 27 09:00:51 2025 GMT Subject: CN=a2dd217d82048671758b541de113b9437ce6af68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f7:5a:5d:55:75:b5:83:dd:25:99:16:60:81: 71:3d:7d:04:d0:29:5a:fd:25:72:00:f5:bc:87:49: ad:02:91:82:91:9b:c9:94:ad:ec:6e:5f:75:db:85: 39:0a:4c:63:70:4c:66:27:22:d0:de:0c:fc:18:80: d6:20:20:7a:31:93:d3:2a:01:f1:6d:59:3d:24:f3: 0b:f9:82:4a:cb:e6:98:fa:5c:35:68:a8:c4:58:a4: 23:d6:6a:89:17:28:48:2c:5e:b1:30:1d:c7:b6:bc: 06:fc:8e:83:9e:2e:e2:47:53:02:4b:c3:af:05:64: b5:1e:58:39:6b:f1:d7:ba:6b:1a:5d:88:d9:b5:e7: 84:18:39:7d:4e:c7:81:bc:8d:47:bd:b2:4e:25:54: 53:37:d3:a7:30:e6:db:f9:bf:66:a1:23:cd:38:1d: 6c:81:27:ad:d5:d1:e4:96:8b:2d:26:ea:25:3e:cf: bf:a8:8d:df:02:58:d4:5c:80:33:f9:b8:d0:b1:0d: bf:9c:58:16:b5:b7:8a:fc:84:22:e4:20:81:95:d7: 52:ee:f5:2c:6d:25:92:bb:23:bf:fe:e7:74:40:ee: ee:7c:a7:ac:c7:15:17:c9:69:7f:0c:c4:0e:32:f8: 2f:8a:7e:e5:bd:37:5e:24:b7:d0:e4:99:e4:05:b5: d0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:DD:21:7D:82:04:86:71:75:8B:54:1D:E1:13:B9:43:7C:E6:AF:68 X509v3 Authority Key Identifier: keyid:62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:f1:89:c2:a4:c2:6b:31:26:5a:b5:90:05:3f:e7:5d:88:a2: 2e:55:a4:3c:48:0b:10:e1:81:57:3d:e4:4b:a5:d9:55:4c:55: d4:71:de:ad:d1:86:55:d9:97:cb:80:bb:c2:d6:a7:04:a5:32: 13:a6:29:c4:3a:52:41:92:a7:df:82:6b:f6:4a:36:bc:7a:3c: e9:07:68:48:3a:d6:94:de:f8:f1:c3:fc:82:42:b2:42:cb:43: 2d:76:3c:d2:6e:f8:84:ad:a8:04:fb:2c:bc:a5:35:7b:8c:75: 22:5f:91:dd:3a:ac:4a:46:04:76:0b:be:2c:7b:87:1a:f9:1e: 20:ed:be:f9:2e:74:2a:fb:e0:b2:da:9c:82:d8:a6:22:9d:1b: b6:de:5c:4d:1f:a3:3c:db:9d:7d:79:bc:24:e8:0f:6f:fe:83: db:db:33:db:d6:95:1f:c7:aa:05:89:3d:35:e2:a1:1d:3d:07: 04:af:bf:ca:aa:12:b5:38:24:b3:5f:5f:81:b0:40:3b:cd:5d: 01:4a:f0:45:c6:06:6e:4f:31:48:eb:83:d0:d1:13:cb:f4:8b: a2:23:ba:15:c3:fe:23:10:28:24:96:14:b4:38:c4:d6:e2:0a: 43:c4:78:20:92:5d:12:9a:1f:b7:79:72:1f:1a:76:06:4b:ef: 35:d5:ee:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ46xFRoQD7L+uOSFFBhsQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMmY1MTdiMDgxODJjNmVkYTFiM2Y5ODhlZTAxODE2ZWUy NjRkYzAwHhcNMjUxMjI2MDkwMDUxWhcNMjUxMjI3MDkwMDUxWjAzMTEwLwYDVQQD EyhhMmRkMjE3ZDgyMDQ4NjcxNzU4YjU0MWRlMTEzYjk0MzdjZTZhZjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/daXVV1tYPdJZkWYIFxPX0E0Cla /SVyAPW8h0mtApGCkZvJlK3sbl9124U5CkxjcExmJyLQ3gz8GIDWICB6MZPTKgHx bVk9JPML+YJKy+aY+lw1aKjEWKQj1mqJFyhILF6xMB3HtrwG/I6Dni7iR1MCS8Ov BWS1Hlg5a/HXumsaXYjZteeEGDl9TseBvI1HvbJOJVRTN9OnMObb+b9moSPNOB1s gSet1dHklostJuolPs+/qI3fAljUXIAz+bjQsQ2/nFgWtbeK/IQi5CCBlddS7vUs bSWSuyO//ud0QO7ufKesxxUXyWl/DMQOMvgvin7lvTdeJLfQ5JnkBbXQcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLdIX2CBIZxdYtUHeETuUN85q9oMB8GA1UdIwQY MBaAFGIvUXsIGCxu2hs/mI7gGBbuJk3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWk5UmV3Z1lMRzdhR3otWWp1QVlGdTRtVGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8zNDUzYjItOTc3My00NTVlLThiMDgt ZDkyZGFlODYxYTdkLzEvWWk5UmV3Z1lMRzdhR3otWWp1QVlGdTRtVGNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8zNDUzYjItOTc3My00NTVlLThiMDgtZDkyZGFlODYxYTdk LzEvWWk5UmV3Z1lMRzdhR3otWWp1QVlGdTRtVGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVvGJwqTC azEmWrWQBT/nXYiiLlWkPEgLEOGBVz3kS6XZVUxV1HHerdGGVdmXy4C7wtanBKUy E6YpxDpSQZKn34Jr9ko2vHo86QdoSDrWlN748cP8gkKyQstDLXY80m74hK2oBPss vKU1e4x1Il+R3TqsSkYEdgu+LHuHGvkeIO2++S50KvvgstqcgtimIp0btt5cTR+j PNudfXm8JOgPb/6D29sz29aVH8eqBYk9NeKhHT0HBK+/yqoStTgks19fgbBAO81d AUrwRcYGbk8xSOuD0NETy/SLoiO6FcP+IxAoJJYUtDjE1uIKQ8R4IJJdEpoft3ly Hxp2BkvvNdXuSw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:59 2025 by rpki-client