This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft File: yYoYbo7rhxTtylsNcW5R1mwWjOE.mft (raw, json) Hash identifier: CaAeKvwp4TMaGBrC6MCti3y6q4yshjyFlqSEjI7XyOo= Subject key identifier: 34:1E:8A:55:E6:4E:46:02:F8:2D:68:F6:32:29:61:12:CB:2F:47:9C Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1 Certificate issuer: /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1 Certificate serial: 019B439337E28CA275DDE40A8C46A66367B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft Manifest number: 178B Signing time: Mon 22 Dec 2025 01:01:19 +0000 Manifest this update: Mon 22 Dec 2025 01:01:19 +0000 Manifest next update: Tue 23 Dec 2025 01:01:19 +0000 Files and hashes: 1: Y9vHd81ibfUetGxJah-LnbSDV5g.roa (hash: 4fkHfBFVcEfZDutW6y6I1HuGuOEE4ACtS7MPP484LwM=) 2: yYoYbo7rhxTtylsNcW5R1mwWjOE.crl (hash: kYTBQ6Q3g+JXEGYgvnaOaUL2T7+agv7ppy/zyug41l8=) 3: zBGnHPAUEWWCm_u3jtGTRqp9xHs.roa (hash: WhdGn2fRgjfQdOUl3EYSHsYRvd0466eSDsxZA6Pu8m8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:93:37:e2:8c:a2:75:dd:e4:0a:8c:46:a6:63:67:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1 Validity Not Before: Dec 22 01:01:19 2025 GMT Not After : Dec 23 01:01:19 2025 GMT Subject: CN=341e8a55e64e4602f82d68f632296112cb2f479c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f1:5d:c4:0d:5e:b8:df:3a:3b:fd:63:1d:e8: 8d:ef:8e:c5:73:62:92:f8:51:e8:f1:81:09:3c:5b: 3f:de:8f:2b:a0:2f:6a:78:39:2c:04:bd:ed:86:fd: cf:97:9e:4a:7b:c5:ef:e9:a8:41:8e:48:cf:ef:af: af:94:ff:4e:42:e2:c3:d9:e1:24:08:aa:ef:02:50: 79:86:ee:66:7b:23:b0:37:64:d0:53:8f:a5:4d:00: e4:46:71:25:c8:8a:6f:30:b7:4b:ce:79:43:62:49: 30:6e:8b:3c:f9:d8:5c:8f:f1:7f:1b:87:6f:a8:ba: 9c:b1:3a:3b:3e:37:13:63:dc:71:48:7f:cd:40:9c: bf:bf:72:e7:d6:fb:8f:dc:d4:9e:21:1b:70:cf:83: b3:2f:fd:85:79:df:6f:70:ef:9b:dd:50:ed:40:e0: 51:e7:17:e9:2c:db:fa:5f:41:59:a9:24:69:a6:dd: 58:41:d3:5d:6e:00:ea:f1:e4:b7:e6:86:e2:f9:7e: 75:a9:2f:3a:a3:aa:63:a3:1a:be:a6:78:ac:cd:36: 95:31:25:7e:0b:0b:26:dc:aa:c0:de:0f:c0:3d:65: 5a:6f:94:44:45:f7:b3:d9:02:3b:1c:c4:b7:5d:91: bc:ee:f6:46:22:f0:8b:90:8c:f8:57:18:7e:82:fb: 7a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1E:8A:55:E6:4E:46:02:F8:2D:68:F6:32:29:61:12:CB:2F:47:9C X509v3 Authority Key Identifier: keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:38:42:23:56:4c:f5:47:63:24:ef:45:d8:9a:87:e1:f7:1e: b7:25:e8:cd:8a:aa:cf:46:80:ca:a5:d9:21:20:30:dc:fb:1b: 5a:56:09:7a:14:e0:b8:0c:2a:77:25:8c:f4:49:5d:0b:7f:0f: e5:f0:06:e5:e1:cc:6d:a8:57:f0:35:b4:c6:4e:af:f0:5f:bb: 65:8e:35:39:8b:54:21:10:91:33:62:92:6c:c0:9a:9d:7d:ad: 38:a0:c4:2b:7a:ce:d5:49:f1:06:3d:49:78:14:64:ca:da:c4: c1:92:ec:72:7e:1b:70:0b:d1:a5:96:18:e3:6c:51:66:8d:66: f2:a9:25:fa:50:6d:ff:49:fc:ee:53:7f:bd:24:14:6d:6d:5e: 68:16:2f:01:96:58:3f:9e:4e:b3:70:b9:03:d2:9c:2a:76:32: ea:99:55:9b:13:61:3e:a1:35:47:49:ca:82:aa:06:7a:ef:fc: ac:72:c2:2b:0a:a0:86:7d:cc:e6:31:47:6e:85:54:19:5e:70: 0a:96:3c:0f:7d:26:6e:7f:37:34:fa:00:60:3f:06:9e:38:af: 63:1f:20:ed:7e:d2:67:3b:ce:92:12:51:a2:8a:ff:71:41:d6: 53:80:28:0c:a7:ef:1d:bf:52:41:a0:28:3e:c9:95:b2:cd:7a: 02:31:72:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkzfijKJ13eQKjEamY2e1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OGExODZlOGVlYjg3MTRlZGNhNWIwZDcxNmU1MWQ2NmMx NjhjZTEwHhcNMjUxMjIyMDEwMTE5WhcNMjUxMjIzMDEwMTE5WjAzMTEwLwYDVQQD EygzNDFlOGE1NWU2NGU0NjAyZjgyZDY4ZjYzMjI5NjExMmNiMmY0NzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPFdxA1euN86O/1jHeiN747Fc2KS +FHo8YEJPFs/3o8roC9qeDksBL3thv3Pl55Ke8Xv6ahBjkjP76+vlP9OQuLD2eEk CKrvAlB5hu5meyOwN2TQU4+lTQDkRnElyIpvMLdLznlDYkkwbos8+dhcj/F/G4dv qLqcsTo7PjcTY9xxSH/NQJy/v3Ln1vuP3NSeIRtwz4OzL/2Fed9vcO+b3VDtQOBR 5xfpLNv6X0FZqSRppt1YQdNdbgDq8eS35obi+X51qS86o6pjoxq+pniszTaVMSV+ Cwsm3KrA3g/APWVab5RERfez2QI7HMS3XZG87vZGIvCLkIz4Vxh+gvt6EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQeilXmTkYC+C1o9jIpYRLLL0ecMB8GA1UdIwQY MBaAFMmKGG6O64cU7cpbDXFuUdZsFozhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVlvWWJvN3JoeFR0eWxzTmNXNVIxbXdXak9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iYTcyMTQtNTU2OC00YTQyLWE5OTkt N2E1YThkMDk2N2M4LzEveVlvWWJvN3JoeFR0eWxzTmNXNVIxbXdXak9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iYTcyMTQtNTU2OC00YTQyLWE5OTktN2E1YThkMDk2N2M4 LzEveVlvWWJvN3JoeFR0eWxzTmNXNVIxbXdXak9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWThCI1ZM 9UdjJO9F2JqH4fcetyXozYqqz0aAyqXZISAw3PsbWlYJehTguAwqdyWM9EldC38P 5fAG5eHMbahX8DW0xk6v8F+7ZY41OYtUIRCRM2KSbMCanX2tOKDEK3rO1UnxBj1J eBRkytrEwZLscn4bcAvRpZYY42xRZo1m8qkl+lBt/0n87lN/vSQUbW1eaBYvAZZY P55Os3C5A9KcKnYy6plVmxNhPqE1R0nKgqoGeu/8rHLCKwqghn3M5jFHboVUGV5w CpY8D30mbn83NPoAYD8GnjivYx8g7X7SZzvOkhJRoor/cUHWU4AoDKfvHb9SQaAo PsmVss16AjFyQQ== -----END CERTIFICATE-----Generated at Mon Dec 22 06:53:08 2025 by rpki-client