This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft File: yex331ntcqVFfezmpT0F7QrmAKo.mft (raw, json) Hash identifier: wKBwyiA/m1+UYHqalTJpT2KOCvIR0i5gEDZzhYRrFOY= Subject key identifier: 5D:93:46:6E:B8:0C:E1:29:B6:D0:54:E5:FA:90:8B:67:39:09:44:3D Authority key identifier: C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA Certificate issuer: /CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa Certificate serial: 019B2C2F053EBD58360ACEC5CD3A10EE0134 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 12:00:37 +0000 Manifest this update: Wed 17 Dec 2025 12:00:37 +0000 Manifest next update: Thu 18 Dec 2025 12:00:37 +0000 Files and hashes: 1: usN8GZVfJ54q0l8hKewfBSWmGHw.roa (hash: IakOdZo+PiFdg1ApCygqDDOunMse1hhehFbuFFIfZ5o=) 2: yex331ntcqVFfezmpT0F7QrmAKo.crl (hash: eLEQMk3DTUX0fK6wJCMDv8rWRUDBlyao0udF50Cnp3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.crl rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:05:3e:bd:58:36:0a:ce:c5:cd:3a:10:ee:01:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa Validity Not Before: Dec 17 12:00:37 2025 GMT Not After : Dec 18 12:00:37 2025 GMT Subject: CN=5d93466eb80ce129b6d054e5fa908b673909443d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:75:bc:01:8b:f5:a5:e5:43:61:9b:f0:97:d6: 0f:e1:eb:14:13:7b:c0:b0:27:51:7f:3d:75:d3:75: c6:7d:c1:e5:e4:36:77:23:4c:a7:fe:58:a8:a0:f9: df:3d:20:2c:59:af:b7:35:b1:81:03:99:00:90:17: 62:40:79:ab:05:88:e2:cc:5b:17:48:37:04:f9:6d: 23:d9:f6:72:5a:af:6a:b1:d8:4c:4e:18:61:18:87: 7e:58:1d:f9:16:22:e2:a4:61:4f:28:c3:b4:c9:47: c5:99:fa:40:a3:25:4b:70:59:92:19:70:2a:34:d9: 70:32:1a:ea:c2:cc:d8:3e:14:64:c0:e3:36:af:20: 97:1a:44:de:ba:47:5d:07:12:9d:09:39:43:44:b4: 1b:09:51:8d:45:c1:71:a3:5d:b8:fc:1f:52:ea:d9: 25:fa:f4:41:52:3b:09:1b:85:5e:65:6b:d5:5c:47: f0:d4:39:65:f5:be:8f:2c:06:32:f9:b7:f9:cb:84: 71:e7:58:90:af:9c:50:45:f7:ba:7a:6f:d8:b4:4f: 45:69:1a:65:73:31:46:a7:9e:ca:cb:cd:93:3b:ed: bc:57:48:fb:f9:13:24:71:c7:2a:48:44:41:30:3b: bd:30:84:9b:05:dd:17:66:ce:68:bc:6f:11:a7:56: c4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:93:46:6E:B8:0C:E1:29:B6:D0:54:E5:FA:90:8B:67:39:09:44:3D X509v3 Authority Key Identifier: keyid:C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:bc:32:d9:cc:7d:04:2b:05:b2:f6:3c:81:6b:24:7c:11:ad: 84:81:1d:94:4e:3b:f9:e8:29:d0:4e:d0:0d:dc:ea:81:4b:21: c2:24:65:95:aa:1e:e7:0e:2a:65:7f:04:10:b5:c8:06:f1:1f: dd:39:1c:1c:ec:52:0b:ec:44:21:4a:da:e1:9b:92:96:ca:aa: ef:27:f0:a1:7c:99:46:34:ab:4e:8b:ed:85:f4:bc:01:0e:0c: 77:20:6a:e8:b6:bc:bf:2a:9b:3b:67:10:91:ee:67:e3:25:9c: 10:c6:26:e5:f6:16:3b:da:b1:56:67:8a:19:52:81:41:5a:12: a5:12:ca:35:f1:11:02:f2:e0:46:72:45:ba:b2:e7:33:e3:ac: 32:fd:46:11:77:b7:be:94:a8:80:c9:29:fc:c4:aa:b5:20:5d: ef:0a:6c:21:d2:b3:11:f1:be:c8:25:12:42:3e:3a:eb:27:a9: 51:f8:4e:6c:9f:c4:32:11:03:d7:5a:40:70:6e:9e:e4:ce:9f: 7f:91:a9:2a:6b:c1:7c:5d:e2:31:5d:db:2f:d4:2e:95:c4:cd: 92:0f:97:61:57:f8:34:d5:c2:9d:6b:e2:2d:8c:2b:e1:45:c9: ce:94:40:23:6a:a4:24:ce:09:f2:4c:65:82:cf:1c:a1:63:9a: 42:26:bf:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssLwU+vVg2Cs7FzToQ7gE0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZWM3N2RmNTllZDcyYTU0NTdkZWNlNmE1M2QwNWVkMGFl NjAwYWEwHhcNMjUxMjE3MTIwMDM3WhcNMjUxMjE4MTIwMDM3WjAzMTEwLwYDVQQD Eyg1ZDkzNDY2ZWI4MGNlMTI5YjZkMDU0ZTVmYTkwOGI2NzM5MDk0NDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHW8AYv1peVDYZvwl9YP4esUE3vA sCdRfz1103XGfcHl5DZ3I0yn/liooPnfPSAsWa+3NbGBA5kAkBdiQHmrBYjizFsX SDcE+W0j2fZyWq9qsdhMThhhGId+WB35FiLipGFPKMO0yUfFmfpAoyVLcFmSGXAq NNlwMhrqwszYPhRkwOM2ryCXGkTeukddBxKdCTlDRLQbCVGNRcFxo124/B9S6tkl +vRBUjsJG4VeZWvVXEfw1Dll9b6PLAYy+bf5y4Rx51iQr5xQRfe6em/YtE9FaRpl czFGp57Ky82TO+28V0j7+RMkcccqSERBMDu9MISbBd0XZs5ovG8Rp1bEvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2TRm64DOEpttBU5fqQi2c5CUQ9MB8GA1UdIwQY MBaAFMnsd99Z7XKlRX3s5qU9Be0K5gCqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWV4MzMxbnRjcVZGZmV6bXBUMEY3UXJtQUtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9mOGVhODQtYzBkYi00YzVhLWEzYzYt M2ViMDllZGUzZWQ1LzEveWV4MzMxbnRjcVZGZmV6bXBUMEY3UXJtQUtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9mOGVhODQtYzBkYi00YzVhLWEzYzYtM2ViMDllZGUzZWQ1 LzEveWV4MzMxbnRjcVZGZmV6bXBUMEY3UXJtQUtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbwy2cx9 BCsFsvY8gWskfBGthIEdlE47+egp0E7QDdzqgUshwiRllaoe5w4qZX8EELXIBvEf 3TkcHOxSC+xEIUra4ZuSlsqq7yfwoXyZRjSrTovthfS8AQ4MdyBq6La8vyqbO2cQ ke5n4yWcEMYm5fYWO9qxVmeKGVKBQVoSpRLKNfERAvLgRnJFurLnM+OsMv1GEXe3 vpSogMkp/MSqtSBd7wpsIdKzEfG+yCUSQj466yepUfhObJ/EMhED11pAcG6e5M6f f5GpKmvBfF3iMV3bL9QulcTNkg+XYVf4NNXCnWviLYwr4UXJzpRAI2qkJM4J8kxl gs8coWOaQia/Lw== -----END CERTIFICATE-----Generated at Wed Dec 17 13:47:25 2025 by rpki-client