This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json) Hash identifier: 4mvA9cw81aWZa2+dulKLMzzZ2KNqMGK/tcmBJykz1j0= Subject key identifier: 7A:A1:02:B9:96:5E:80:9B:D9:56:0B:04:8C:E9:66:9D:09:75:76:20 Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f Certificate serial: 019B27ADE3067953CB06C42C9865C6F92373 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft Manifest number: 125D Signing time: Tue 16 Dec 2025 15:01:05 +0000 Manifest this update: Tue 16 Dec 2025 15:01:05 +0000 Manifest next update: Wed 17 Dec 2025 15:01:05 +0000 Files and hashes: 1: 0SWPLRWTYkJG7421JHXOtiDBZR4.roa (hash: 6unS6vuhfVD53i6+xoXsZBSCsuic5U4lcQX4ccwpcWM=) 2: WbzMJtvriwpBLgG099PPDIe8VG4.roa (hash: Ug409g0I8zLQGsJbLA43Dct7NIITII3VJknFQnHFZYo=) 3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: mG7zzSHvAbBCe/kNfSDTNqf+/3vlPt8P4cQL2duqeQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ad:e3:06:79:53:cb:06:c4:2c:98:65:c6:f9:23:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f Validity Not Before: Dec 16 15:01:05 2025 GMT Not After : Dec 17 15:01:05 2025 GMT Subject: CN=7aa102b9965e809bd9560b048ce9669d09757620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cd:9f:e6:05:d0:04:db:d0:4b:84:23:7f:e7: 84:34:03:dd:58:33:47:04:70:ea:71:09:23:80:fe: c7:38:5c:60:e6:1b:a6:9b:87:e9:f1:c0:c8:be:bf: 13:1e:64:fc:0d:3b:b9:a0:a8:36:e4:6e:08:ba:83: 7c:cd:24:9c:b9:42:bd:8b:11:2c:31:36:7e:2d:fd: 82:e1:22:dd:b5:47:a0:6a:d4:b9:e3:72:fe:3d:f5: f4:f6:18:f7:b9:fc:80:ff:de:d4:1e:a1:c1:58:ce: 40:0e:8c:bb:89:c6:66:b3:f8:b4:48:89:67:5f:b3: 2b:5c:82:94:34:79:2f:15:98:8a:bc:c9:c1:41:e3: 87:a4:50:31:29:62:fc:db:28:ae:7d:90:93:76:a8: 61:bd:89:c5:e5:cb:bd:c6:97:05:a0:22:d5:fc:44: 22:c4:cd:e7:7c:7c:1c:48:5d:66:5a:f2:a8:66:c5: a7:46:17:36:3a:23:d5:1c:7d:82:ac:cf:09:f1:87: ac:8e:f8:2b:79:8b:01:be:c7:4b:e4:d1:e2:4b:35: da:c4:f3:8c:fb:1a:4e:d9:2a:ed:48:92:86:be:6f: 5b:36:ee:a5:cb:56:9b:53:f6:fa:03:3e:99:ba:46: 2c:5e:e2:33:56:da:82:35:58:d2:b5:30:a5:f0:36: 80:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A1:02:B9:96:5E:80:9B:D9:56:0B:04:8C:E9:66:9D:09:75:76:20 X509v3 Authority Key Identifier: keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:b6:b2:5c:25:50:a3:5a:55:9a:21:97:65:47:24:39:3a:ee: 43:d1:e4:c8:81:5c:ed:c2:07:ed:2c:f8:b9:9e:67:5f:d2:1b: 2c:ad:94:f5:94:7a:90:c5:c6:dc:6d:d7:11:4d:02:68:1c:cb: 70:ea:2a:a3:34:87:b9:9c:d0:5c:a6:a4:af:35:e7:7f:68:7d: 60:06:c7:b6:cd:0e:75:b9:c8:b2:79:2f:e0:88:38:9d:39:f9: cd:ce:c8:6c:0f:e0:1b:22:16:a6:15:f8:5d:c1:79:61:51:50: 01:67:8d:3a:f7:92:8e:c9:35:ef:bd:a7:62:10:59:df:80:be: d1:6c:6e:e6:86:17:1e:a6:81:6f:16:cb:17:ba:42:f7:4c:66: 11:b8:99:af:b8:af:46:4f:a0:fe:0e:7c:f3:cb:06:03:77:c7: ce:b5:4a:64:8e:e0:80:60:7c:44:c3:e2:6a:c5:3a:1f:f5:85: 74:c3:a5:7f:89:ef:27:bd:1c:66:76:fc:14:15:08:fb:bb:66: a7:45:00:3f:9e:4b:85:a4:c1:ab:1f:9d:d9:5b:31:2b:c3:63: ab:bb:52:5e:fe:99:81:67:1e:9f:8b:a4:15:c0:69:d4:55:a9: a6:85:43:d5:19:37:fa:74:81:1e:ec:83:ad:f7:18:0c:81:fd: 72:2d:9e:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnreMGeVPLBsQsmGXG+SNzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZDVhYTcwMzQyNTBhYjFhODc4OWFjODZjYzBlZWYzYmZj OWRiNWYwHhcNMjUxMjE2MTUwMTA1WhcNMjUxMjE3MTUwMTA1WjAzMTEwLwYDVQQD Eyg3YWExMDJiOTk2NWU4MDliZDk1NjBiMDQ4Y2U5NjY5ZDA5NzU3NjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3c2f5gXQBNvQS4Qjf+eENAPdWDNH BHDqcQkjgP7HOFxg5humm4fp8cDIvr8THmT8DTu5oKg25G4IuoN8zSScuUK9ixEs MTZ+Lf2C4SLdtUegatS543L+PfX09hj3ufyA/97UHqHBWM5ADoy7icZms/i0SIln X7MrXIKUNHkvFZiKvMnBQeOHpFAxKWL82yiufZCTdqhhvYnF5cu9xpcFoCLV/EQi xM3nfHwcSF1mWvKoZsWnRhc2OiPVHH2CrM8J8YesjvgreYsBvsdL5NHiSzXaxPOM +xpO2SrtSJKGvm9bNu6ly1abU/b6Az6ZukYsXuIzVtqCNVjStTCl8DaAkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqhArmWXoCb2VYLBIzpZp0JdXYgMB8GA1UdIwQY MBaAFMjVqnA0JQqxqHiayGzA7vO/ydtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yZDQ5MGMtNmZmOC00NzFkLTk3ZDIt MmQ3MmYyMzE5M2RiLzEveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yZDQ5MGMtNmZmOC00NzFkLTk3ZDItMmQ3MmYyMzE5M2Ri LzEveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArayXCVQ o1pVmiGXZUckOTruQ9HkyIFc7cIH7Sz4uZ5nX9IbLK2U9ZR6kMXG3G3XEU0CaBzL cOoqozSHuZzQXKakrzXnf2h9YAbHts0OdbnIsnkv4Ig4nTn5zc7IbA/gGyIWphX4 XcF5YVFQAWeNOveSjsk1772nYhBZ34C+0Wxu5oYXHqaBbxbLF7pC90xmEbiZr7iv Rk+g/g5888sGA3fHzrVKZI7ggGB8RMPiasU6H/WFdMOlf4nvJ70cZnb8FBUI+7tm p0UAP55LhaTBqx+d2VsxK8Njq7tSXv6ZgWcen4ukFcBp1FWppoVD1Rk3+nSBHuyD rfcYDIH9ci2e9Q== -----END CERTIFICATE-----Generated at Tue Dec 16 18:00:28 2025 by rpki-client