This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft File: yq46VN0DiVaD7tvDedHg27Brm9s.mft (raw, json) Hash identifier: cphzeMdtFKxM76LmFn7JyeH9AEESQ+1tIEQIIuk3Bok= Subject key identifier: 16:01:9B:32:17:1F:27:D0:1E:E3:42:70:4D:C6:55:47:64:59:2A:5F Authority key identifier: CA:AE:3A:54:DD:03:89:56:83:EE:DB:C3:79:D1:E0:DB:B0:6B:9B:DB Certificate issuer: /CN=caae3a54dd03895683eedbc379d1e0dbb06b9bdb Certificate serial: 019B36E9C9CF33A3B29F81C82BEB0941FEA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft Manifest number: 0212 Signing time: Fri 19 Dec 2025 14:00:49 +0000 Manifest this update: Fri 19 Dec 2025 14:00:49 +0000 Manifest next update: Sat 20 Dec 2025 14:00:49 +0000 Files and hashes: 1: IqlpwJ2xW0fAs8ZGPBfSTtIDhwE.roa (hash: qbO1Ww6u5GvjQ0O8Z6mDFqL7l1gHc63dxnum3Lg38lg=) 2: yq46VN0DiVaD7tvDedHg27Brm9s.crl (hash: mo4mTngZtIbOG73EL8GKRJoWZlJ2zMVCRNcfNu4P2Ns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:e9:c9:cf:33:a3:b2:9f:81:c8:2b:eb:09:41:fe:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caae3a54dd03895683eedbc379d1e0dbb06b9bdb Validity Not Before: Dec 19 14:00:49 2025 GMT Not After : Dec 20 14:00:49 2025 GMT Subject: CN=16019b32171f27d01ee342704dc6554764592a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:84:1c:be:4b:a0:c7:32:b6:c6:ed:73:84:0f: 34:a1:e2:af:a7:38:30:e0:db:c9:18:45:3a:0a:c1: 4d:0b:ae:2f:f4:64:f2:b5:4f:23:97:a5:50:30:70: fb:f8:e2:c0:a5:6c:b2:d7:ae:7b:9a:1e:35:87:26: ea:54:07:6f:43:2d:b9:7e:96:c2:90:3c:c1:6d:6e: ce:cc:04:b6:8b:99:ff:59:e7:0e:8b:27:02:34:1e: 4c:8d:00:9e:24:13:64:21:3b:a6:aa:2b:6b:22:21: c7:3f:d0:7b:79:62:12:1a:b9:28:d9:a6:2c:41:a7: 2b:90:2e:9f:ca:c7:79:02:32:13:67:16:6f:86:8d: ed:e7:9a:6f:1d:f0:f3:e7:73:89:bc:b5:2e:4f:55: 59:1c:91:2c:87:1a:a3:51:30:1a:ff:5d:a0:91:d5: 83:7f:d8:0b:31:08:df:69:b9:78:40:d0:ab:14:e4: b7:6e:f9:c4:85:67:64:bc:59:e2:29:ac:f9:c6:fc: db:d3:a3:ef:f5:3f:6b:05:59:74:c0:4f:bd:2d:95: c8:a4:f4:99:57:91:2b:79:44:24:ae:64:4a:16:be: f0:6a:7c:9c:11:d0:10:59:af:da:6c:bd:21:6a:95: ff:6a:17:01:38:07:c8:fc:4b:09:9e:d2:31:9e:00: 3a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:01:9B:32:17:1F:27:D0:1E:E3:42:70:4D:C6:55:47:64:59:2A:5F X509v3 Authority Key Identifier: keyid:CA:AE:3A:54:DD:03:89:56:83:EE:DB:C3:79:D1:E0:DB:B0:6B:9B:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:42:b2:d5:c8:5f:ff:f8:c4:db:b8:05:3b:da:2a:f3:f2:cb: 1f:96:f0:87:16:31:21:5f:92:59:14:62:11:99:57:e5:f2:c7: d9:b7:55:a4:61:16:49:a6:13:a1:43:e6:1b:57:93:f2:4e:bb: f3:73:79:8c:67:f8:84:78:46:e0:e1:a4:3c:a9:e7:1f:9d:36: 14:ff:cb:75:2b:99:4b:5c:18:5c:a9:06:e6:a3:db:5c:5a:8f: 8a:ec:31:f9:e4:cd:88:ad:6a:a2:75:29:1e:bf:33:e6:96:50: ef:36:f7:49:c0:e6:50:dd:3f:c3:30:be:91:84:4e:09:c4:b3: 99:be:f2:06:dd:67:7e:7f:29:8a:90:53:9a:ea:f3:2d:2c:f6: be:b2:d5:6d:9b:ff:6e:2d:0f:50:bc:c7:0b:11:ee:5f:ea:e7: 45:31:5c:2a:a9:2f:45:03:53:f8:64:56:80:29:ea:69:b7:53: b1:55:db:92:68:90:54:8e:28:1f:38:8b:c2:90:76:91:37:de: c2:2a:60:3a:b6:4d:14:d3:33:60:c6:42:ce:42:2c:b3:2c:66: e1:f1:f5:b2:e6:40:ee:75:08:55:80:79:36:80:d6:6b:ab:30: 34:af:76:10:75:15:fd:78:dd:d8:d7:6c:89:af:71:a6:dd:7e: 42:b3:50:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26cnPM6Oyn4HIK+sJQf6iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYWUzYTU0ZGQwMzg5NTY4M2VlZGJjMzc5ZDFlMGRiYjA2 YjliZGIwHhcNMjUxMjE5MTQwMDQ5WhcNMjUxMjIwMTQwMDQ5WjAzMTEwLwYDVQQD EygxNjAxOWIzMjE3MWYyN2QwMWVlMzQyNzA0ZGM2NTU0NzY0NTkyYTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIQcvkugxzK2xu1zhA80oeKvpzgw 4NvJGEU6CsFNC64v9GTytU8jl6VQMHD7+OLApWyy1657mh41hybqVAdvQy25fpbC kDzBbW7OzAS2i5n/WecOiycCNB5MjQCeJBNkITumqitrIiHHP9B7eWISGrko2aYs QacrkC6fysd5AjITZxZvho3t55pvHfDz53OJvLUuT1VZHJEshxqjUTAa/12gkdWD f9gLMQjfabl4QNCrFOS3bvnEhWdkvFniKaz5xvzb06Pv9T9rBVl0wE+9LZXIpPSZ V5EreUQkrmRKFr7wanycEdAQWa/abL0hapX/ahcBOAfI/EsJntIxngA68wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYBmzIXHyfQHuNCcE3GVUdkWSpfMB8GA1UdIwQY MBaAFMquOlTdA4lWg+7bw3nR4Nuwa5vbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXE0NlZOMERpVmFEN3R2RGVkSGcyN0JybTlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jODNkY2UtMjk1NS00OGU2LWJkN2Mt NWJlYWZjODY2NTFiLzEveXE0NlZOMERpVmFEN3R2RGVkSGcyN0JybTlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jODNkY2UtMjk1NS00OGU2LWJkN2MtNWJlYWZjODY2NTFi LzEveXE0NlZOMERpVmFEN3R2RGVkSGcyN0JybTlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVEKy1chf //jE27gFO9oq8/LLH5bwhxYxIV+SWRRiEZlX5fLH2bdVpGEWSaYToUPmG1eT8k67 83N5jGf4hHhG4OGkPKnnH502FP/LdSuZS1wYXKkG5qPbXFqPiuwx+eTNiK1qonUp Hr8z5pZQ7zb3ScDmUN0/wzC+kYROCcSzmb7yBt1nfn8pipBTmurzLSz2vrLVbZv/ bi0PULzHCxHuX+rnRTFcKqkvRQNT+GRWgCnqabdTsVXbkmiQVI4oHziLwpB2kTfe wipgOrZNFNMzYMZCzkIssyxm4fH1suZA7nUIVYB5NoDWa6swNK92EHUV/Xjd2Nds ia9xpt1+QrNQEQ== -----END CERTIFICATE-----Generated at Fri Dec 19 22:09:57 2025 by rpki-client