This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft File: yq7leeATIY9XE4ZBPixbK8JFqDY.mft (raw, json) Hash identifier: U9z4siuMJHWRjaUixh6AqU1/FOMhaKvmm8xrKiFsjco= Subject key identifier: 82:26:44:09:05:C3:9A:29:A0:4D:08:09:30:B1:A9:40:C5:26:7B:90 Authority key identifier: CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36 Certificate issuer: /CN=caaee579e013218f571386413e2c5b2bc245a836 Certificate serial: 019B3C10065B23F6646ACF74A8E44BEEC311 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft Manifest number: 14CF Signing time: Sat 20 Dec 2025 14:00:41 +0000 Manifest this update: Sat 20 Dec 2025 14:00:41 +0000 Manifest next update: Sun 21 Dec 2025 14:00:41 +0000 Files and hashes: 1: GEnuOQleBBUDKJ-4Y-M3IyBH42g.roa (hash: OrN9ZjjDEjR1Mar15xKYXAUpkqA7O1AMRBJLOwwo76o=) 2: yq7leeATIY9XE4ZBPixbK8JFqDY.crl (hash: uQBjoTa1dz2px6gq+8z5fQwQb8dUGWU/PbJ/yixidnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:06:5b:23:f6:64:6a:cf:74:a8:e4:4b:ee:c3:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caaee579e013218f571386413e2c5b2bc245a836 Validity Not Before: Dec 20 14:00:41 2025 GMT Not After : Dec 21 14:00:41 2025 GMT Subject: CN=8226440905c39a29a04d080930b1a940c5267b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c3:37:52:ab:6d:44:5f:2a:96:0a:43:33:01: 8b:7d:3c:b9:2c:0c:cf:75:65:84:fc:df:ba:50:05: 93:97:a3:22:48:f8:c7:29:2d:39:05:03:64:e6:4d: 71:6e:93:3f:11:8c:36:7a:44:82:44:9f:b8:4d:15: 76:33:95:f8:02:8b:7c:1f:ab:ff:c6:09:16:d4:dc: 79:b5:c2:44:a8:ff:43:c8:e4:7d:6a:05:f4:54:9c: 1f:7d:f9:27:36:23:23:86:08:9c:ca:1e:dd:f8:3d: 8f:e7:a4:b2:cd:b9:a5:04:ae:66:8e:1f:db:e4:9d: bc:08:5b:55:d0:1f:19:2b:ec:66:90:d3:5a:97:aa: f1:d3:cc:bf:e6:0b:3c:bd:97:55:75:da:8d:32:ad: d4:68:67:56:7c:a7:83:38:57:d4:d4:ea:ee:e5:98: fd:35:f9:f4:e4:bc:16:30:ff:75:92:34:4c:95:b3: d1:16:b2:8a:a6:49:3f:04:81:65:51:8e:01:14:74: f8:24:ec:86:17:83:e7:78:45:7a:71:b8:dd:cf:e1: b7:64:fa:c7:a4:52:45:f6:ee:4b:f1:49:20:4f:1a: ce:54:3e:75:51:7b:30:b6:14:d4:5f:cc:40:c8:f3: 86:0f:e5:88:84:f7:d7:0e:56:c3:9c:9e:a8:86:15: 0e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:26:44:09:05:C3:9A:29:A0:4D:08:09:30:B1:A9:40:C5:26:7B:90 X509v3 Authority Key Identifier: keyid:CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:90:b6:1d:c5:7f:7b:65:c5:c9:5a:08:6b:c8:d8:21:94:e1: 04:58:a3:98:fd:42:67:e0:3e:e4:2a:83:89:6d:6b:62:70:ab: 8e:2f:d2:82:c6:0f:01:88:0d:ff:58:07:cb:c1:fd:fc:33:77: 10:92:1f:fe:81:a6:64:e1:04:07:aa:ca:89:29:13:a9:19:02: 64:e3:14:b2:3c:09:37:fa:85:5d:36:20:ba:9c:df:20:74:ad: 8d:58:c7:69:4e:8a:37:69:e9:7f:00:ce:b1:29:b8:fa:79:5c: c5:bc:f4:ec:ee:00:aa:17:f7:6b:06:04:1b:66:23:81:47:9d: 76:b5:7b:40:df:37:ce:d5:d0:fd:d6:fd:db:ab:02:a4:f3:f1: f1:8a:ee:13:3b:cf:48:4a:7f:b0:d0:b6:9c:6b:1f:e2:aa:c1: 16:ea:5a:7a:e1:d0:38:b6:eb:e6:6f:2d:40:5a:95:9d:23:ef: 17:ea:f0:3d:b0:2b:cd:c8:e3:b8:e4:87:d8:6a:28:12:73:df: 2c:34:b3:1a:63:6c:0c:ad:5d:d9:07:64:5f:a3:51:30:f3:28: b2:68:88:bb:95:b4:3f:3d:f0:00:52:39:bc:cd:9e:e8:cb:d1: b0:f6:37:6a:9b:13:6f:7a:9e:12:f8:b3:1f:f5:01:a8:3f:58: 60:b0:d6:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EAZbI/Zkas90qORL7sMRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYWVlNTc5ZTAxMzIxOGY1NzEzODY0MTNlMmM1YjJiYzI0 NWE4MzYwHhcNMjUxMjIwMTQwMDQxWhcNMjUxMjIxMTQwMDQxWjAzMTEwLwYDVQQD Eyg4MjI2NDQwOTA1YzM5YTI5YTA0ZDA4MDkzMGIxYTk0MGM1MjY3YjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMM3UqttRF8qlgpDMwGLfTy5LAzP dWWE/N+6UAWTl6MiSPjHKS05BQNk5k1xbpM/EYw2ekSCRJ+4TRV2M5X4Aot8H6v/ xgkW1Nx5tcJEqP9DyOR9agX0VJwfffknNiMjhgicyh7d+D2P56SyzbmlBK5mjh/b 5J28CFtV0B8ZK+xmkNNal6rx08y/5gs8vZdVddqNMq3UaGdWfKeDOFfU1Oru5Zj9 Nfn05LwWMP91kjRMlbPRFrKKpkk/BIFlUY4BFHT4JOyGF4PneEV6cbjdz+G3ZPrH pFJF9u5L8UkgTxrOVD51UXswthTUX8xAyPOGD+WIhPfXDlbDnJ6ohhUOlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIImRAkFw5opoE0ICTCxqUDFJnuQMB8GA1UdIwQY MBaAFMqu5XngEyGPVxOGQT4sWyvCRag2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXE3bGVlQVRJWTlYRTRaQlBpeGJLOEpGcURZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83NTk4NzQtZTdmMi00NWZkLTgxOWQt YTVkMTE0OGYyNWJkLzEveXE3bGVlQVRJWTlYRTRaQlBpeGJLOEpGcURZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC83NTk4NzQtZTdmMi00NWZkLTgxOWQtYTVkMTE0OGYyNWJk LzEveXE3bGVlQVRJWTlYRTRaQlBpeGJLOEpGcURZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5C2HcV/ e2XFyVoIa8jYIZThBFijmP1CZ+A+5CqDiW1rYnCrji/SgsYPAYgN/1gHy8H9/DN3 EJIf/oGmZOEEB6rKiSkTqRkCZOMUsjwJN/qFXTYgupzfIHStjVjHaU6KN2npfwDO sSm4+nlcxbz07O4Aqhf3awYEG2YjgUeddrV7QN83ztXQ/db926sCpPPx8YruEzvP SEp/sNC2nGsf4qrBFupaeuHQOLbr5m8tQFqVnSPvF+rwPbArzcjjuOSH2GooEnPf LDSzGmNsDK1d2QdkX6NRMPMosmiIu5W0Pz3wAFI5vM2e6MvRsPY3apsTb3qeEviz H/UBqD9YYLDWxw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:12:20 2025 by rpki-client