This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft File: yRggtQAH5BxT3WAps3lU01cvTCk.mft (raw, json) Hash identifier: S0bz4ulIu38N4S/oeaO8oacsCbCm8L2KDqHUIob8uLM= Subject key identifier: 7E:3A:42:F2:B1:10:90:56:A2:E7:D2:0C:22:DE:8D:65:D8:36:D0:AB Authority key identifier: C9:18:20:B5:00:07:E4:1C:53:DD:60:29:B3:79:54:D3:57:2F:4C:29 Certificate issuer: /CN=c91820b50007e41c53dd6029b37954d3572f4c29 Certificate serial: 019B10B87AE588AB8C640CC39450EEC18D14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft Manifest number: 12B5 Signing time: Fri 12 Dec 2025 04:01:23 +0000 Manifest this update: Fri 12 Dec 2025 04:01:23 +0000 Manifest next update: Sat 13 Dec 2025 04:01:23 +0000 Files and hashes: 1: juTNVsKtR118cxI6QcWd767caRM.roa (hash: MCsaWupCkvlIsE0i3wi2ave3G1GEJt2KTaWMIAFFXxI=) 2: yRggtQAH5BxT3WAps3lU01cvTCk.crl (hash: grjzHr1InGLZpXKYef0+pDGBPN066WVkx6qwhIQmBEc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 04:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:7a:e5:88:ab:8c:64:0c:c3:94:50:ee:c1:8d:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91820b50007e41c53dd6029b37954d3572f4c29 Validity Not Before: Dec 12 04:01:23 2025 GMT Not After : Dec 13 04:01:23 2025 GMT Subject: CN=7e3a42f2b1109056a2e7d20c22de8d65d836d0ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:42:d4:f2:e8:48:5e:bc:e4:ea:18:4e:ea:3e: 18:fe:6e:e6:56:5d:11:83:39:a6:3a:26:a4:d3:43: 0e:66:43:d6:0a:3f:58:7a:d5:5f:05:68:c4:ea:d4: 02:34:b4:b4:4f:48:2a:0d:6f:e6:eb:03:2e:74:1b: 56:03:a2:f8:24:5f:ca:b1:95:57:d9:f8:a3:49:bd: 50:f5:03:23:1e:db:02:d9:96:a0:ed:e0:e9:12:8a: 79:51:83:99:55:03:e7:14:54:8f:41:ea:44:65:5e: 7c:c3:ef:9a:6b:68:0b:b8:66:45:3f:1c:c6:0e:6b: 1e:e1:ec:1f:69:6e:55:ff:a5:2f:ad:f7:66:a0:a8: f4:11:69:3f:2a:7e:ed:13:ab:40:76:6b:75:b6:e1: 4f:69:09:2b:c1:3c:8e:ee:06:21:8a:55:b3:52:4d: c5:52:56:1f:a3:a5:e9:3b:08:d2:f3:b7:79:4c:78: 8d:5e:eb:61:fb:31:26:b1:3b:19:d1:3d:44:3b:d7: 99:f9:0a:48:ff:a6:e9:f2:27:f9:2d:90:41:c3:8e: 5f:f5:e9:b3:fb:45:39:ec:42:7e:57:5e:14:1e:c6: cd:04:d4:e4:be:01:fc:08:af:3b:ad:cc:57:45:46: 95:d8:cc:47:2b:75:14:0f:20:da:d6:22:78:d0:64: c1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3A:42:F2:B1:10:90:56:A2:E7:D2:0C:22:DE:8D:65:D8:36:D0:AB X509v3 Authority Key Identifier: keyid:C9:18:20:B5:00:07:E4:1C:53:DD:60:29:B3:79:54:D3:57:2F:4C:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:f9:82:df:92:65:19:c7:64:7c:3a:54:f0:f5:61:1c:94:2e: 84:60:28:98:bc:43:c0:85:2e:71:f8:43:12:d1:06:95:44:f6: 09:29:19:47:bb:f3:15:fc:55:db:81:fb:8e:e1:d0:06:c2:e5: ff:98:9a:d4:fd:c4:a0:78:2f:8c:44:1d:93:33:e6:ae:c8:97: 88:70:b3:a6:a7:9b:45:ef:d9:89:41:7a:7d:20:c0:8c:1a:fb: b1:e1:82:a8:0c:fa:43:09:72:1e:91:6f:f7:66:0a:0b:86:03: e0:fa:6a:62:fe:d8:79:b1:6d:1d:cc:f5:57:8a:e0:5b:0a:0e: 3e:6c:50:d6:b7:24:62:18:94:8e:19:84:02:85:4d:c9:53:fc: f0:6f:75:68:0e:ec:94:4c:64:6e:4a:f0:e6:72:01:2e:dd:00: ba:4b:5d:a4:a3:bd:93:54:b1:ac:4b:a1:bf:75:a7:0c:8a:cf: 90:54:7d:07:05:52:38:4b:7c:e4:44:c9:51:a1:0f:bb:3e:c4: 45:09:c4:fc:d5:08:39:41:2b:ce:ba:a2:4f:a4:70:da:e8:a4: 77:38:72:1d:d6:ba:ad:df:7d:42:10:fc:42:55:62:d0:fd:2d: 18:bf:b3:96:43:cd:1e:cb:5b:97:b4:00:ab:49:78:de:34:26: 9d:91:0e:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuHrliKuMZAzDlFDuwY0UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MTgyMGI1MDAwN2U0MWM1M2RkNjAyOWIzNzk1NGQzNTcy ZjRjMjkwHhcNMjUxMjEyMDQwMTIzWhcNMjUxMjEzMDQwMTIzWjAzMTEwLwYDVQQD Eyg3ZTNhNDJmMmIxMTA5MDU2YTJlN2QyMGMyMmRlOGQ2NWQ4MzZkMGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0LU8uhIXrzk6hhO6j4Y/m7mVl0R gzmmOiak00MOZkPWCj9YetVfBWjE6tQCNLS0T0gqDW/m6wMudBtWA6L4JF/KsZVX 2fijSb1Q9QMjHtsC2Zag7eDpEop5UYOZVQPnFFSPQepEZV58w++aa2gLuGZFPxzG Dmse4ewfaW5V/6UvrfdmoKj0EWk/Kn7tE6tAdmt1tuFPaQkrwTyO7gYhilWzUk3F UlYfo6XpOwjS87d5THiNXuth+zEmsTsZ0T1EO9eZ+QpI/6bp8if5LZBBw45f9emz +0U57EJ+V14UHsbNBNTkvgH8CK87rcxXRUaV2MxHK3UUDyDa1iJ40GTBSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH46QvKxEJBWoufSDCLejWXYNtCrMB8GA1UdIwQY MBaAFMkYILUAB+QcU91gKbN5VNNXL0wpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVJnZ3RRQUg1QnhUM1dBcHMzbFUwMWN2VENrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYTcxMjEtNTQxNC00NDg0LTkxODUt ZWVjMTRjOTcxYzRkLzEveVJnZ3RRQUg1QnhUM1dBcHMzbFUwMWN2VENrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYTcxMjEtNTQxNC00NDg0LTkxODUtZWVjMTRjOTcxYzRk LzEveVJnZ3RRQUg1QnhUM1dBcHMzbFUwMWN2VENrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPmC35Jl GcdkfDpU8PVhHJQuhGAomLxDwIUucfhDEtEGlUT2CSkZR7vzFfxV24H7juHQBsLl /5ia1P3EoHgvjEQdkzPmrsiXiHCzpqebRe/ZiUF6fSDAjBr7seGCqAz6QwlyHpFv 92YKC4YD4PpqYv7YebFtHcz1V4rgWwoOPmxQ1rckYhiUjhmEAoVNyVP88G91aA7s lExkbkrw5nIBLt0AuktdpKO9k1SxrEuhv3WnDIrPkFR9BwVSOEt85ETJUaEPuz7E RQnE/NUIOUErzrqiT6Rw2uikdzhyHda6rd99QhD8QlVi0P0tGL+zlkPNHstbl7QA q0l43jQmnZEOYA== -----END CERTIFICATE-----Generated at Fri Dec 12 13:36:36 2025 by rpki-client