This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft File: ynSM0AzX_mohdVr2QtiBuN2aOfc.mft (raw, json) Hash identifier: BpnCDhW3zrgaX3Y4wN819HH2h+2FI6jwpFlOmAW1Zlk= Subject key identifier: CE:17:E9:C5:AE:5C:35:2A:8D:74:39:4E:67:C0:64:6F:29:21:B3:56 Authority key identifier: CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7 Certificate issuer: /CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7 Certificate serial: 019B19164BE98D59437C2B81C5A5D1B04784 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft Manifest number: 1777 Signing time: Sat 13 Dec 2025 19:00:50 +0000 Manifest this update: Sat 13 Dec 2025 19:00:50 +0000 Manifest next update: Sun 14 Dec 2025 19:00:50 +0000 Files and hashes: 1: s9EuqX5b9zt_Znw1hEoBNVzx0co.roa (hash: MS1QUNemj9oOGEXp2GgN/ppihkcGaOAMbcG5uVtKAdE=) 2: ynSM0AzX_mohdVr2QtiBuN2aOfc.crl (hash: jvTnjKN/ubl6ir6+hIt4MnaF3m5zHzD/iO9E0X7fVgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:4b:e9:8d:59:43:7c:2b:81:c5:a5:d1:b0:47:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7 Validity Not Before: Dec 13 19:00:50 2025 GMT Not After : Dec 14 19:00:50 2025 GMT Subject: CN=ce17e9c5ae5c352a8d74394e67c0646f2921b356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ee:cc:aa:95:b6:8f:67:d9:ba:5c:67:1a:41: 93:86:2e:5e:c8:8a:f9:3e:7b:ec:df:bf:06:d8:38: d3:07:20:17:fb:11:9e:c5:59:40:7a:dd:f9:6c:31: 8d:6b:b7:1f:69:15:eb:58:7a:b3:69:b9:7c:d8:c6: a7:cb:a4:a6:86:de:ae:be:00:1c:76:be:81:ea:b5: 7d:a3:47:b6:e4:85:31:51:47:8d:e3:67:d6:57:bc: 4c:b3:39:4f:74:cf:1b:0a:3f:fd:a9:83:7f:da:95: 0a:29:82:7b:68:a3:e2:ce:44:8f:f6:5b:1b:83:9e: 88:18:27:2e:5c:df:ac:bb:2a:d9:f8:8c:49:d6:5f: 22:10:54:33:df:d8:a4:18:21:fe:db:1e:93:43:6c: 2f:6c:cc:ef:95:df:22:17:73:5d:a9:d3:9b:54:0f: 49:5d:7a:99:eb:40:a1:bd:57:86:55:2c:4a:6f:79: 4b:44:97:7f:78:f2:f7:bf:98:f9:9e:15:fe:c7:5a: 3e:be:05:4f:00:5c:8a:46:c1:3d:f2:14:cc:3e:2e: ee:13:c2:d8:96:f8:25:f3:67:8b:14:8e:c5:d4:0b: a9:f3:d1:bd:2c:6f:8b:e7:94:c3:e7:ab:da:b1:15: e8:98:8a:80:db:c4:5d:5c:b0:89:13:e1:b9:11:b3: f7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:17:E9:C5:AE:5C:35:2A:8D:74:39:4E:67:C0:64:6F:29:21:B3:56 X509v3 Authority Key Identifier: keyid:CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:14:75:a1:8f:43:b8:87:f4:2a:af:85:f8:c7:5d:8a:d0:ab: 20:50:51:af:f0:8c:c4:f0:73:1c:1f:80:e4:e0:e4:9a:7d:52: 71:cf:a5:7d:b1:d6:b2:58:51:54:e9:46:c9:1d:37:6f:51:6c: cb:2c:a1:7b:b5:c5:c0:cf:2e:82:31:87:ae:db:8e:c9:a2:6e: 37:4a:d5:4a:26:0c:75:0f:a7:c7:fe:50:a5:9b:c1:39:18:6b: 00:71:49:19:32:63:4e:6f:9a:95:ca:8c:70:9d:f4:b6:40:f6: b5:a0:82:7e:f8:ea:67:b6:d3:cc:e0:c4:a3:35:71:7e:46:97: 6e:e1:80:39:58:5a:e2:b6:eb:d7:97:63:50:16:84:27:0b:d8: 4e:7b:c5:41:4c:aa:95:e7:7b:d0:3d:1d:de:71:99:e2:43:2e: 49:99:3d:6a:11:25:d0:9b:4d:b6:60:95:ab:a7:84:55:66:56: d4:45:dc:10:9b:2d:ca:5c:70:bd:c4:3d:4b:ad:81:f6:eb:48: 49:3b:35:7e:51:02:62:58:51:a8:14:32:dc:6f:e1:c1:7e:a7: 16:ee:a2:d2:6f:80:72:33:06:83:fb:77:1e:cd:2e:38:f3:bc: 94:c3:6f:aa:dc:40:32:bd:2f:4e:a9:ce:5f:22:5a:5b:66:f2: cf:eb:ef:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFkvpjVlDfCuBxaXRsEeEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNzQ4Y2QwMGNkN2ZlNmEyMTc1NWFmNjQyZDg4MWI4ZGQ5 YTM5ZjcwHhcNMjUxMjEzMTkwMDUwWhcNMjUxMjE0MTkwMDUwWjAzMTEwLwYDVQQD EyhjZTE3ZTljNWFlNWMzNTJhOGQ3NDM5NGU2N2MwNjQ2ZjI5MjFiMzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO7MqpW2j2fZulxnGkGThi5eyIr5 Pnvs378G2DjTByAX+xGexVlAet35bDGNa7cfaRXrWHqzabl82Many6Smht6uvgAc dr6B6rV9o0e25IUxUUeN42fWV7xMszlPdM8bCj/9qYN/2pUKKYJ7aKPizkSP9lsb g56IGCcuXN+suyrZ+IxJ1l8iEFQz39ikGCH+2x6TQ2wvbMzvld8iF3NdqdObVA9J XXqZ60ChvVeGVSxKb3lLRJd/ePL3v5j5nhX+x1o+vgVPAFyKRsE98hTMPi7uE8LY lvgl82eLFI7F1Aup89G9LG+L55TD56vasRXomIqA28RdXLCJE+G5EbP3GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4X6cWuXDUqjXQ5TmfAZG8pIbNWMB8GA1UdIwQY MBaAFMp0jNAM1/5qIXVa9kLYgbjdmjn3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW5TTTBBelhfbW9oZFZyMlF0aUJ1TjJhT2ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xNmVlYjItYzgyNy00MmM5LThlNDgt MmEzZGY5YjMzMzEzLzEveW5TTTBBelhfbW9oZFZyMlF0aUJ1TjJhT2ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8xNmVlYjItYzgyNy00MmM5LThlNDgtMmEzZGY5YjMzMzEz LzEveW5TTTBBelhfbW9oZFZyMlF0aUJ1TjJhT2ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoRR1oY9D uIf0Kq+F+MdditCrIFBRr/CMxPBzHB+A5ODkmn1Scc+lfbHWslhRVOlGyR03b1Fs yyyhe7XFwM8ugjGHrtuOyaJuN0rVSiYMdQ+nx/5QpZvBORhrAHFJGTJjTm+alcqM cJ30tkD2taCCfvjqZ7bTzODEozVxfkaXbuGAOVha4rbr15djUBaEJwvYTnvFQUyq led70D0d3nGZ4kMuSZk9ahEl0JtNtmCVq6eEVWZW1EXcEJstylxwvcQ9S62B9utI STs1flECYlhRqBQy3G/hwX6nFu6i0m+AcjMGg/t3Hs0uOPO8lMNvqtxAMr0vTqnO XyJaW2byz+vvuQ== -----END CERTIFICATE-----Generated at Sun Dec 14 01:06:50 2025 by rpki-client