This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft File: yRggtQAH5BxT3WAps3lU01cvTCk.mft (raw, json) Hash identifier: ix0/9plERbYyptP3m0YTZC1eM14/fltpOlZjXCSwCJs= Subject key identifier: B2:51:E8:F6:1F:23:CD:D4:9A:AD:B7:7C:E2:7B:AF:3A:15:44:28:61 Authority key identifier: C9:18:20:B5:00:07:E4:1C:53:DD:60:29:B3:79:54:D3:57:2F:4C:29 Certificate issuer: /CN=c91820b50007e41c53dd6029b37954d3572f4c29 Certificate serial: 019B46CAA025F9C7A5EF407B2E3F8BBFAA87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft Manifest number: 12D1 Signing time: Mon 22 Dec 2025 16:00:42 +0000 Manifest this update: Mon 22 Dec 2025 16:00:42 +0000 Manifest next update: Tue 23 Dec 2025 16:00:42 +0000 Files and hashes: 1: juTNVsKtR118cxI6QcWd767caRM.roa (hash: MCsaWupCkvlIsE0i3wi2ave3G1GEJt2KTaWMIAFFXxI=) 2: yRggtQAH5BxT3WAps3lU01cvTCk.crl (hash: OjsyuGq8QqOLa4V2W40sRy1kZ//NixlD+pLF/ty9VIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:ca:a0:25:f9:c7:a5:ef:40:7b:2e:3f:8b:bf:aa:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91820b50007e41c53dd6029b37954d3572f4c29 Validity Not Before: Dec 22 16:00:42 2025 GMT Not After : Dec 23 16:00:42 2025 GMT Subject: CN=b251e8f61f23cdd49aadb77ce27baf3a15442861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:44:a5:76:43:58:96:26:03:b6:76:87:1a:b0: 61:4e:1f:09:34:bf:2f:37:4d:15:09:85:28:89:14: 33:68:25:f3:7f:26:23:38:8d:aa:50:02:8c:03:b5: 27:e6:4e:28:1b:00:11:12:20:e7:c3:75:36:57:49: f3:1a:77:6b:aa:9d:9f:88:0e:87:2d:52:c6:60:da: 27:8b:ce:94:36:9c:c5:27:73:d2:1b:fa:2a:d0:0d: 8d:d0:0b:18:d7:ab:e4:6b:65:41:90:b6:4d:3e:e3: 63:be:25:1f:8a:39:9f:6f:fd:d2:4f:f4:df:74:62: 1f:36:b2:49:16:6b:00:f3:36:65:3b:c3:d9:71:da: 7c:ce:93:00:a1:10:eb:67:ed:e3:31:54:d7:7b:91: ef:a7:27:81:93:26:e5:67:c2:8c:0e:fc:98:e9:b5: bb:f7:c4:35:97:48:82:39:34:1b:e6:04:99:66:c3: 13:87:93:d5:5d:f0:37:68:fa:47:8e:03:17:0b:b4: 82:e6:08:bc:98:ee:0f:6a:05:9b:8e:57:27:b9:fa: 6a:28:b9:46:f0:8d:1e:da:7f:76:bf:f6:57:fb:78: f7:af:c6:16:23:7c:37:0e:57:13:56:0a:9e:ea:3c: b0:a0:07:65:5e:13:d0:59:a0:a5:c9:ab:d7:be:93: fe:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:51:E8:F6:1F:23:CD:D4:9A:AD:B7:7C:E2:7B:AF:3A:15:44:28:61 X509v3 Authority Key Identifier: keyid:C9:18:20:B5:00:07:E4:1C:53:DD:60:29:B3:79:54:D3:57:2F:4C:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:f7:90:51:1e:72:fc:47:97:e2:21:c5:b0:77:7e:c3:b3:34: d5:85:17:73:a6:90:b8:25:5e:d8:b8:80:e8:e3:d0:00:ef:3c: dd:03:ce:3e:3a:8b:13:21:2e:e9:ea:d0:49:cf:ff:a5:fb:dd: c0:9e:b0:a7:a5:4a:a4:15:76:45:a3:75:dc:02:b4:0e:ad:7e: 54:0f:bc:93:65:d8:ff:25:ac:57:2c:55:9d:62:04:8f:e1:a1: 7e:25:34:70:f2:00:7a:bf:f0:0f:62:31:e4:e9:b2:1a:d3:ba: 0c:02:ce:45:a8:71:cd:94:fd:04:ea:51:92:37:d7:ad:36:11: 7d:28:47:d4:5e:51:17:65:79:03:da:ff:10:57:33:f5:8d:07: aa:a0:cc:95:2d:d1:7c:8e:fb:f9:7a:bc:a6:4c:91:68:ea:32: 4b:c3:c4:c2:05:62:95:a1:71:27:86:07:a6:78:8b:89:ad:36: 6a:0c:6c:a9:36:3c:69:71:4e:2e:9f:49:4a:9f:03:3d:82:19: 97:aa:20:67:40:9d:57:c3:c5:76:e9:ff:8c:72:40:bb:ea:8d: e1:dc:e9:14:f9:cd:be:90:15:ca:2a:bc:71:84:15:a6:33:65: 4f:99:fc:92:a9:1f:a0:2c:ac:77:f5:8b:01:22:18:b4:ad:dc: d3:99:f2:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGyqAl+cel70B7Lj+Lv6qHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MTgyMGI1MDAwN2U0MWM1M2RkNjAyOWIzNzk1NGQzNTcy ZjRjMjkwHhcNMjUxMjIyMTYwMDQyWhcNMjUxMjIzMTYwMDQyWjAzMTEwLwYDVQQD EyhiMjUxZThmNjFmMjNjZGQ0OWFhZGI3N2NlMjdiYWYzYTE1NDQyODYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkSldkNYliYDtnaHGrBhTh8JNL8v N00VCYUoiRQzaCXzfyYjOI2qUAKMA7Un5k4oGwAREiDnw3U2V0nzGndrqp2fiA6H LVLGYNoni86UNpzFJ3PSG/oq0A2N0AsY16vka2VBkLZNPuNjviUfijmfb/3ST/Tf dGIfNrJJFmsA8zZlO8PZcdp8zpMAoRDrZ+3jMVTXe5HvpyeBkyblZ8KMDvyY6bW7 98Q1l0iCOTQb5gSZZsMTh5PVXfA3aPpHjgMXC7SC5gi8mO4PagWbjlcnufpqKLlG 8I0e2n92v/ZX+3j3r8YWI3w3DlcTVgqe6jywoAdlXhPQWaClyavXvpP+2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJR6PYfI83Umq23fOJ7rzoVRChhMB8GA1UdIwQY MBaAFMkYILUAB+QcU91gKbN5VNNXL0wpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVJnZ3RRQUg1QnhUM1dBcHMzbFUwMWN2VENrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYTcxMjEtNTQxNC00NDg0LTkxODUt ZWVjMTRjOTcxYzRkLzEveVJnZ3RRQUg1QnhUM1dBcHMzbFUwMWN2VENrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYTcxMjEtNTQxNC00NDg0LTkxODUtZWVjMTRjOTcxYzRk LzEveVJnZ3RRQUg1QnhUM1dBcHMzbFUwMWN2VENrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAveQUR5y /EeX4iHFsHd+w7M01YUXc6aQuCVe2LiA6OPQAO883QPOPjqLEyEu6erQSc//pfvd wJ6wp6VKpBV2RaN13AK0Dq1+VA+8k2XY/yWsVyxVnWIEj+GhfiU0cPIAer/wD2Ix 5OmyGtO6DALORahxzZT9BOpRkjfXrTYRfShH1F5RF2V5A9r/EFcz9Y0HqqDMlS3R fI77+Xq8pkyRaOoyS8PEwgVilaFxJ4YHpniLia02agxsqTY8aXFOLp9JSp8DPYIZ l6ogZ0CdV8PFdun/jHJAu+qN4dzpFPnNvpAVyiq8cYQVpjNlT5n8kqkfoCysd/WL ASIYtK3c05nyzg== -----END CERTIFICATE-----Generated at Mon Dec 22 20:31:06 2025 by rpki-client