This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft File: yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft (raw, json) Hash identifier: Li7AgtCcLgOnaeNlEDZ1fwFfDxa++fs03xXV3DSnw2A= Subject key identifier: 88:01:7C:A7:11:F0:09:34:ED:73:1D:86:E7:13:DC:69:5F:95:F8:17 Authority key identifier: C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77 Certificate issuer: /CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277 Certificate serial: 019B281BD30688905E5593A36A88CB73CE86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft Manifest number: 1402 Signing time: Tue 16 Dec 2025 17:01:10 +0000 Manifest this update: Tue 16 Dec 2025 17:01:10 +0000 Manifest next update: Wed 17 Dec 2025 17:01:10 +0000 Files and hashes: 1: 1-VGMXMMV2Cqy03R1ZIzIT8zjSHs.roa (hash: odkCOMHYYSyyI06jcNtcsAr7ZqbIzMS4uoFJAxDHurk=) 2: yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl (hash: qBh5BjouoTigw/10fX3VVHwx9soFSo1oHxmr1cBq22E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:d3:06:88:90:5e:55:93:a3:6a:88:cb:73:ce:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277 Validity Not Before: Dec 16 17:01:10 2025 GMT Not After : Dec 17 17:01:10 2025 GMT Subject: CN=88017ca711f00934ed731d86e713dc695f95f817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d0:0c:d7:2c:f4:be:f1:41:2b:b4:ec:c3:4f: 33:d1:d3:73:c6:e0:3f:56:c6:f1:69:09:d9:6d:4c: a2:a7:d7:e3:fb:01:97:4b:6a:c1:be:da:3d:57:94: 03:49:58:fa:2c:3d:9a:92:66:fe:1a:ac:4d:3c:e6: 8a:fc:25:cb:87:9f:b6:5e:35:85:8a:ed:2f:48:f5: 22:0e:0d:f5:53:99:07:4c:c9:3f:f7:8f:bc:af:00: 5b:5b:f8:1a:b2:33:bf:b5:9f:40:28:9f:a9:d7:a1: ac:33:43:8d:7e:b8:4f:4c:d4:05:65:b2:ef:52:fc: ea:22:eb:cd:42:74:7e:80:eb:fb:36:d2:8a:2d:b1: 4d:2c:40:f5:e5:b4:8e:1d:57:7e:1b:67:ae:06:af: 1a:e5:93:33:57:db:54:b1:0d:0d:2a:98:e8:c1:92: 66:9b:50:43:44:71:bd:fb:48:6e:4a:12:ec:ab:79: 09:e4:b9:48:94:70:d3:76:50:2b:d3:1f:55:65:df: 21:cb:5c:71:18:78:dd:8e:62:95:13:76:3a:dd:de: b8:c9:b3:46:64:19:db:10:26:64:fc:fb:34:35:73: e6:3a:f1:d3:33:6c:e4:72:d9:b1:69:ca:e8:37:5b: 61:f9:7f:41:f0:d7:c6:e3:c1:44:27:7b:36:d4:95: 54:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:01:7C:A7:11:F0:09:34:ED:73:1D:86:E7:13:DC:69:5F:95:F8:17 X509v3 Authority Key Identifier: keyid:C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b1:f4:da:8a:31:fc:42:21:8b:2b:b0:ce:8e:6d:fa:2f:30: 6c:ba:52:fb:e7:e9:1a:fe:59:e6:61:61:c4:87:24:50:92:8c: 21:1e:a4:1d:90:c7:a9:3b:0f:fa:a5:28:f1:ce:ce:80:49:b9: 9d:8b:a3:13:e9:81:55:d1:00:1d:36:1b:36:da:c4:da:c0:a1: 3c:1c:5d:de:2b:ce:1f:08:2f:a6:88:1e:91:fb:2c:7c:ba:77: 2c:5f:b8:f9:4c:24:6d:25:05:04:33:99:3f:4a:1f:90:ff:1a: b0:53:e4:f2:7d:62:11:df:0d:43:d9:04:5f:da:9c:fa:0e:a0: 61:03:11:4c:19:3d:6c:c8:89:d9:b0:27:a6:ea:10:cc:b7:b8: 8b:0f:94:4a:dd:0b:82:24:61:5a:7a:47:70:6c:1e:5c:3c:60: 6d:9c:2e:4b:a6:31:f0:07:6c:17:b0:13:95:4e:71:08:78:b3: 68:b1:d2:11:6e:86:f7:0d:1c:d2:c4:06:70:b2:3c:00:26:5b: 24:8d:45:b8:2f:9b:1c:5d:3b:95:a0:a5:22:40:f7:70:5c:46: 37:69:ae:22:cb:4a:44:cc:e8:89:8e:86:fd:9d:25:6f:34:65: 00:c7:a0:74:80:57:58:f3:9c:57:74:09:60:14:dc:60:5d:46: af:09:9b:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG9MGiJBeVZOjaojLc86GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4Mjg5NTM1ZTdlNGQyM2U2M2UxNzhlM2ZiNWJmMDU2ZmU4 YWUyNzcwHhcNMjUxMjE2MTcwMTEwWhcNMjUxMjE3MTcwMTEwWjAzMTEwLwYDVQQD Eyg4ODAxN2NhNzExZjAwOTM0ZWQ3MzFkODZlNzEzZGM2OTVmOTVmODE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tAM1yz0vvFBK7Tsw08z0dNzxuA/ VsbxaQnZbUyip9fj+wGXS2rBvto9V5QDSVj6LD2akmb+GqxNPOaK/CXLh5+2XjWF iu0vSPUiDg31U5kHTMk/94+8rwBbW/gasjO/tZ9AKJ+p16GsM0ONfrhPTNQFZbLv UvzqIuvNQnR+gOv7NtKKLbFNLED15bSOHVd+G2euBq8a5ZMzV9tUsQ0NKpjowZJm m1BDRHG9+0huShLsq3kJ5LlIlHDTdlAr0x9VZd8hy1xxGHjdjmKVE3Y63d64ybNG ZBnbECZk/Ps0NXPmOvHTM2zkctmxacroN1th+X9B8NfG48FEJ3s21JVUOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIgBfKcR8Ak07XMdhucT3GlflfgXMB8GA1UdIwQY MBaAFMgolTXn5NI+Y+F44/tb8Fb+iuJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUNpVk5lZmswajVqNFhqai0xdndWdjZLNG5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82ZGNlZGItY2EwYi00ODNhLWE2NjQt NjZhNWVjYzg0NjE2LzEveUNpVk5lZmswajVqNFhqai0xdndWdjZLNG5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82ZGNlZGItY2EwYi00ODNhLWE2NjQtNjZhNWVjYzg0NjE2 LzEveUNpVk5lZmswajVqNFhqai0xdndWdjZLNG5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLH02oox /EIhiyuwzo5t+i8wbLpS++fpGv5Z5mFhxIckUJKMIR6kHZDHqTsP+qUo8c7OgEm5 nYujE+mBVdEAHTYbNtrE2sChPBxd3ivOHwgvpogekfssfLp3LF+4+UwkbSUFBDOZ P0ofkP8asFPk8n1iEd8NQ9kEX9qc+g6gYQMRTBk9bMiJ2bAnpuoQzLe4iw+USt0L giRhWnpHcGweXDxgbZwuS6Yx8AdsF7ATlU5xCHizaLHSEW6G9w0c0sQGcLI8ACZb JI1FuC+bHF07laClIkD3cFxGN2muIstKRMzoiY6G/Z0lbzRlAMegdIBXWPOcV3QJ YBTcYF1GrwmbDg== -----END CERTIFICATE-----Generated at Tue Dec 16 20:21:17 2025 by rpki-client