This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json) Hash identifier: zX+w1NoXxyHO6TLaSe/fOt3OZXaIGuGAqRWS5GpYLGs= Subject key identifier: 8E:90:7F:E1:A8:86:17:D4:5E:20:91:93:67:7F:80:4E:C4:9C:52:B4 Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f Certificate serial: 019AF19BB9266AB9A51EA69324C1F00B8451 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft Manifest number: 1241 Signing time: Sat 06 Dec 2025 03:01:45 +0000 Manifest this update: Sat 06 Dec 2025 03:01:45 +0000 Manifest next update: Sun 07 Dec 2025 03:01:45 +0000 Files and hashes: 1: 0SWPLRWTYkJG7421JHXOtiDBZR4.roa (hash: 6unS6vuhfVD53i6+xoXsZBSCsuic5U4lcQX4ccwpcWM=) 2: WbzMJtvriwpBLgG099PPDIe8VG4.roa (hash: Ug409g0I8zLQGsJbLA43Dct7NIITII3VJknFQnHFZYo=) 3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: lPe67cFbbc9w0BSqZ6EN1L/b1plppmuE4Gi58AzZZ7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:b9:26:6a:b9:a5:1e:a6:93:24:c1:f0:0b:84:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f Validity Not Before: Dec 6 03:01:45 2025 GMT Not After : Dec 7 03:01:45 2025 GMT Subject: CN=8e907fe1a88617d45e209193677f804ec49c52b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6b:3d:d1:c5:83:02:bb:35:03:b0:41:eb:54: 0e:1d:c6:e0:7c:a2:ca:13:05:a5:1d:8e:dd:06:d0: 7f:c6:68:15:71:2c:58:ac:d3:e1:4f:c5:59:5d:13: c4:52:a6:1a:4d:f1:01:2b:f4:83:95:9a:27:70:ae: 70:06:79:5b:0b:86:f2:78:b0:b5:f8:a5:b2:c2:84: d1:0e:92:19:c2:b1:bd:63:4e:ef:f3:3b:50:a7:6c: 65:1d:95:be:24:6b:96:35:83:5c:85:08:9a:8e:d1: e9:4c:cf:bd:c5:d1:0e:1d:e5:3c:d2:26:aa:8a:b4: 5d:a4:16:2c:d5:12:8b:b8:3a:07:e5:18:18:bd:a6: af:c0:d6:65:a4:a9:09:da:83:d9:99:cc:fd:b6:32: 1b:56:7f:92:0d:ae:68:42:0f:6c:05:13:ca:78:c9: 7c:c3:b9:0d:37:f2:9d:76:c7:49:ec:ec:a5:28:3d: ad:75:ae:0b:dc:ce:be:f6:09:05:cd:e6:81:08:b0: 00:0e:75:7f:05:f0:be:b9:68:c3:42:15:94:5a:17: 78:44:80:f6:20:43:ca:2c:6a:19:70:ae:bf:b4:99: f9:4a:94:c0:1c:4f:2a:73:29:ee:ea:cc:65:d1:8d: 4a:5c:35:f8:90:45:bc:ce:55:3a:52:b8:0e:ae:b8: d6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:90:7F:E1:A8:86:17:D4:5E:20:91:93:67:7F:80:4E:C4:9C:52:B4 X509v3 Authority Key Identifier: keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:1b:c4:a9:67:66:34:a6:ff:37:38:d1:64:a1:9e:ab:a4:f3: fa:bc:9c:d8:0c:16:71:c0:ce:da:c9:04:5c:10:b5:5e:f1:5d: 1a:dd:f3:be:84:0c:13:68:4e:c9:68:25:78:9f:a0:c3:36:4c: 6c:39:8b:ee:8b:2c:57:69:b6:da:16:f0:1b:ee:29:1d:d2:e0: 8b:cc:70:b3:9b:60:1d:55:ab:68:77:ad:13:60:9b:d2:5d:33: 4b:30:c2:35:83:f1:80:4b:21:d9:f8:f5:9e:1f:c1:35:63:35: 7e:c2:a5:6f:d5:c9:ad:ce:ad:59:7b:64:39:1b:99:3d:3a:04: 68:a2:aa:ed:c9:8c:67:6e:d2:74:17:6f:33:67:b6:36:75:af: 2e:6b:ce:be:22:6b:ae:c0:f4:b7:dd:22:05:d6:1a:2c:05:13: 2b:19:d3:41:64:7a:ae:32:6b:f8:7e:25:08:a5:ce:f7:75:83: ca:1f:f7:90:31:aa:5e:33:74:ca:14:6c:9a:1b:68:68:b2:dc: e2:da:c1:5f:ca:2c:8b:b8:4c:d3:35:8f:6e:9e:b5:02:c0:b4: eb:fd:ac:57:ba:ef:87:86:6a:54:5c:5c:93:18:c3:82:46:7f: 29:a2:21:e9:f5:10:b0:fa:46:bb:fa:65:4f:d3:8a:60:75:4b: d4:b1:ba:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7kmarmlHqaTJMHwC4RRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZDVhYTcwMzQyNTBhYjFhODc4OWFjODZjYzBlZWYzYmZj OWRiNWYwHhcNMjUxMjA2MDMwMTQ1WhcNMjUxMjA3MDMwMTQ1WjAzMTEwLwYDVQQD Eyg4ZTkwN2ZlMWE4ODYxN2Q0NWUyMDkxOTM2NzdmODA0ZWM0OWM1MmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWs90cWDArs1A7BB61QOHcbgfKLK EwWlHY7dBtB/xmgVcSxYrNPhT8VZXRPEUqYaTfEBK/SDlZoncK5wBnlbC4byeLC1 +KWywoTRDpIZwrG9Y07v8ztQp2xlHZW+JGuWNYNchQiajtHpTM+9xdEOHeU80iaq irRdpBYs1RKLuDoH5RgYvaavwNZlpKkJ2oPZmcz9tjIbVn+SDa5oQg9sBRPKeMl8 w7kNN/KddsdJ7OylKD2tda4L3M6+9gkFzeaBCLAADnV/BfC+uWjDQhWUWhd4RID2 IEPKLGoZcK6/tJn5SpTAHE8qcynu6sxl0Y1KXDX4kEW8zlU6UrgOrrjWDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6Qf+GohhfUXiCRk2d/gE7EnFK0MB8GA1UdIwQY MBaAFMjVqnA0JQqxqHiayGzA7vO/ydtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yZDQ5MGMtNmZmOC00NzFkLTk3ZDIt MmQ3MmYyMzE5M2RiLzEveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yZDQ5MGMtNmZmOC00NzFkLTk3ZDItMmQ3MmYyMzE5M2Ri LzEveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMhvEqWdm NKb/NzjRZKGeq6Tz+ryc2AwWccDO2skEXBC1XvFdGt3zvoQME2hOyWgleJ+gwzZM bDmL7ossV2m22hbwG+4pHdLgi8xws5tgHVWraHetE2Cb0l0zSzDCNYPxgEsh2fj1 nh/BNWM1fsKlb9XJrc6tWXtkORuZPToEaKKq7cmMZ27SdBdvM2e2NnWvLmvOviJr rsD0t90iBdYaLAUTKxnTQWR6rjJr+H4lCKXO93WDyh/3kDGqXjN0yhRsmhtoaLLc 4trBX8osi7hM0zWPbp61AsC06/2sV7rvh4ZqVFxckxjDgkZ/KaIh6fUQsPpGu/pl T9OKYHVL1LG6vA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:14 2025 by rpki-client