This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft File: yE1hzRftkuVLszl_HlprOQSsbwU.mft (raw, json) Hash identifier: 97HR7A9wJHybOPjEZjebhC2jzboZJ9aZ2b/MlB5z3G4= Subject key identifier: B7:27:38:F9:C4:69:4F:FF:E0:0E:85:3B:4F:28:E7:1B:1F:0D:A5:47 Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05 Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05 Certificate serial: 019AF540D4457CB2D08ADF1BBCE7D4B9F5A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft Manifest number: 176E Signing time: Sat 06 Dec 2025 20:00:57 +0000 Manifest this update: Sat 06 Dec 2025 20:00:57 +0000 Manifest next update: Sun 07 Dec 2025 20:00:57 +0000 Files and hashes: 1: 7lgq0ctAzIlTDcpOLaQGdaGThZk.roa (hash: e5z2Mfd4VCKCw2JmNleVEdAAScHXO8Xd9p2GShP5Y6E=) 2: L_lziZvf0rcW2nhVL69U2cxHt5E.roa (hash: pANePALmK/hOXRwbvUEA/qtpc0qlGhfdWdBBREZqc1k=) 3: YtSu06eBvsaI_VOFmqz1IslXnNc.roa (hash: 0dn7VD8ICYAbfWAEObXxBVJEjbsCWfJ8U7nwROGAGsU=) 4: ckan5dvz7J1ZSK30Drxlo4PWhMs.roa (hash: F1BRb89WpgPtx0JUztwDXeDnh4+IrOFx75odNR04usQ=) 5: dLz_hs_QORbsBLSIa-GqwYxnFoY.roa (hash: +fTN+O03RfwmbM+R0hQdMI6NFyRIvlQwmN4JSANhNh0=) 6: flXkvhrZJ0ZeBKtpmmtVGzFsQKI.roa (hash: Y9UGCFlpeU/Vq7d3cJo997/pq2lWNIQ3AFJn/rIco44=) 7: ikN4SSSIJdpATfbTuF1aqPVQm8w.roa (hash: gunzQ7zSHNaZSvXp8QC6wdbsRU0gF2fXQubVjTHi9K8=) 8: nBGnunXHIlzfqmh1yvjBYc2bnwI.roa (hash: AE0YoKWgcnhxm5wM19OntmREG6LsPgDjKTOjRjiZyzs=) 9: yE1hzRftkuVLszl_HlprOQSsbwU.crl (hash: SLQGCEnUuxdP2xdjLVW7KOEHocxV3sh7vePMYE57CL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:d4:45:7c:b2:d0:8a:df:1b:bc:e7:d4:b9:f5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05 Validity Not Before: Dec 6 20:00:57 2025 GMT Not After : Dec 7 20:00:57 2025 GMT Subject: CN=b72738f9c4694fffe00e853b4f28e71b1f0da547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:93:b9:11:11:1d:b1:ad:62:e9:83:ad:76:36: 5e:25:9a:69:5b:e1:3b:c2:f4:f6:64:64:b5:2c:74: 54:07:0a:be:ce:b5:00:83:08:27:c8:bb:02:df:6e: 66:8a:54:e4:1a:eb:81:4e:81:81:ed:65:f6:88:c9: 30:f8:2c:14:db:38:67:e0:6e:2f:82:00:ed:67:de: 7a:8c:1e:75:ba:b7:26:7d:78:fd:65:62:9a:41:5c: 4f:c5:2a:9a:e0:e1:20:19:82:28:ad:cd:d8:98:5f: 14:2a:3e:44:e7:9e:6a:6b:6d:1f:d6:d1:6e:4a:68: f4:9b:47:37:c2:d7:ef:23:22:91:69:f5:66:ac:aa: 42:49:35:79:ce:65:58:f9:cb:8d:81:27:28:ed:a4: 64:ad:81:f0:28:89:eb:26:71:ce:87:43:2d:9c:98: 11:f4:82:d0:a3:e9:eb:f6:53:ec:b7:f1:97:82:d4: e2:3c:b4:07:09:dd:fc:1f:03:f1:dc:29:f0:d1:88: dc:a4:0b:d9:69:ea:32:07:67:45:3a:a5:6e:e2:0f: 69:90:0f:2a:bf:11:22:bc:6e:28:f8:08:03:0b:26: 0c:82:2f:26:51:d4:60:46:41:ca:a7:c1:3d:84:08: c4:fa:e9:94:10:ff:ad:f2:2b:8d:b6:44:57:51:65: 17:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:27:38:F9:C4:69:4F:FF:E0:0E:85:3B:4F:28:E7:1B:1F:0D:A5:47 X509v3 Authority Key Identifier: keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:b5:3e:0a:6c:c2:26:14:25:cd:31:f0:68:97:17:a4:bb:02: 49:58:3d:c4:eb:f7:6f:fa:ce:08:c9:ce:0a:fe:9c:79:ac:80: aa:7f:e0:a3:8e:05:40:f5:0d:da:9e:fb:61:05:9c:2e:19:1a: ec:4b:9f:21:69:3f:b7:3c:0d:5b:7b:18:d1:52:25:d4:ff:7a: ac:86:22:73:e4:ef:ab:b1:85:12:14:df:44:f3:e7:85:eb:27: fc:81:ab:72:24:60:02:76:2b:44:ee:91:95:51:ef:34:82:dd: 5f:c5:2a:ba:cb:0f:5a:8a:83:cd:ef:36:3d:06:d8:fc:9a:3a: 5a:51:2e:ce:3c:0e:25:64:ab:96:2c:f2:f1:99:c2:42:56:43: 74:b9:80:65:08:77:5e:e4:f1:de:c8:1a:86:43:9e:e0:5f:12: 56:f1:ce:2e:9f:b8:02:c0:43:d9:38:c9:37:a7:45:f2:48:5b: 8b:fa:49:c8:67:01:f6:b4:b7:4e:a2:91:f0:80:84:7f:5e:7c: de:ea:99:47:cf:23:79:8f:c4:40:ce:92:6f:5e:86:d3:cb:b7: 63:41:30:df:31:09:2c:22:2b:0a:42:2d:ba:79:a3:fe:3e:20: 8f:38:fd:4a:6f:b9:05:e3:67:2d:00:74:bb:6b:7e:55:c7:42: 14:a8:c3:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QNRFfLLQit8bvOfUufWgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NGQ2MWNkMTdlZDkyZTU0YmIzMzk3ZjFlNWE2YjM5MDRh YzZmMDUwHhcNMjUxMjA2MjAwMDU3WhcNMjUxMjA3MjAwMDU3WjAzMTEwLwYDVQQD EyhiNzI3MzhmOWM0Njk0ZmZmZTAwZTg1M2I0ZjI4ZTcxYjFmMGRhNTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JO5EREdsa1i6YOtdjZeJZppW+E7 wvT2ZGS1LHRUBwq+zrUAgwgnyLsC325milTkGuuBToGB7WX2iMkw+CwU2zhn4G4v ggDtZ956jB51urcmfXj9ZWKaQVxPxSqa4OEgGYIorc3YmF8UKj5E555qa20f1tFu Smj0m0c3wtfvIyKRafVmrKpCSTV5zmVY+cuNgSco7aRkrYHwKInrJnHOh0MtnJgR 9ILQo+nr9lPst/GXgtTiPLQHCd38HwPx3Cnw0YjcpAvZaeoyB2dFOqVu4g9pkA8q vxEivG4o+AgDCyYMgi8mUdRgRkHKp8E9hAjE+umUEP+t8iuNtkRXUWUXoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcnOPnEaU//4A6FO08o5xsfDaVHMB8GA1UdIwQY MBaAFMhNYc0X7ZLlS7M5fx5aazkErG8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGIt YzI1Nzc5MmRhZGM0LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGItYzI1Nzc5MmRhZGM0 LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArbU+CmzC JhQlzTHwaJcXpLsCSVg9xOv3b/rOCMnOCv6ceayAqn/go44FQPUN2p77YQWcLhka 7EufIWk/tzwNW3sY0VIl1P96rIYic+Tvq7GFEhTfRPPnhesn/IGrciRgAnYrRO6R lVHvNILdX8UqussPWoqDze82PQbY/Jo6WlEuzjwOJWSrlizy8ZnCQlZDdLmAZQh3 XuTx3sgahkOe4F8SVvHOLp+4AsBD2TjJN6dF8khbi/pJyGcB9rS3TqKR8ICEf158 3uqZR88jeY/EQM6Sb16G08u3Y0Ew3zEJLCIrCkItunmj/j4gjzj9Sm+5BeNnLQB0 u2t+VcdCFKjDhg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:18:43 2025 by rpki-client