This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft File: yciBJHytvL9SqirXYsx0VKeocm4.mft (raw, json) Hash identifier: VliptwzNPf8v14S9yQCOdfex5LMiEUvDs76thqD2aWk= Subject key identifier: 7B:6E:CA:68:BD:2C:2C:9D:D5:6B:2C:5A:4C:5A:F4:8F:11:A9:DD:C2 Authority key identifier: C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E Certificate issuer: /CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e Certificate serial: 019AF3F71454BB7AEC12FE126148E75B88CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft Manifest number: 1629 Signing time: Sat 06 Dec 2025 14:00:47 +0000 Manifest this update: Sat 06 Dec 2025 14:00:47 +0000 Manifest next update: Sun 07 Dec 2025 14:00:47 +0000 Files and hashes: 1: jOZRDN_BFHgGfDMvwJ0jkJTVBko.roa (hash: v7urVrLJEvfyeck+EYvOP/ZepjN99wS4T6ZKWFITJzs=) 2: yciBJHytvL9SqirXYsx0VKeocm4.crl (hash: 3Hv0zK+3JqgNrr4w4CWydMv2ly7YCZT9QrPrDZ3tvgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:14:54:bb:7a:ec:12:fe:12:61:48:e7:5b:88:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e Validity Not Before: Dec 6 14:00:47 2025 GMT Not After : Dec 7 14:00:47 2025 GMT Subject: CN=7b6eca68bd2c2c9dd56b2c5a4c5af48f11a9ddc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c5:b9:cf:08:b6:87:15:ca:6d:fb:a4:2a:4c: ae:90:d7:e0:ad:a2:4b:fc:aa:b7:dd:40:b4:cf:a6: 34:9c:08:3a:20:fb:9e:03:bf:d9:33:47:62:03:16: a6:e9:5a:a8:a5:c4:d9:30:e0:f1:74:37:1f:97:5b: e3:4f:c6:13:2a:89:4f:59:95:eb:f6:1f:dd:66:b4: a1:5e:d1:06:e7:e6:d5:61:7b:29:85:f9:ef:cb:51: df:1c:e1:83:1e:2a:0d:1d:ac:c7:69:9a:b5:3a:2b: 70:94:de:86:4a:a3:57:4b:5e:f9:ff:93:98:49:99: 73:d3:f0:7f:6d:02:65:72:57:60:58:ee:81:a3:dd: 41:0f:d1:e2:1e:3e:ef:9f:96:26:86:90:4e:e2:3c: 85:2c:9e:31:9c:c9:9d:31:0c:2c:28:8e:10:73:46: ee:77:ab:4b:ba:16:e8:84:33:98:a7:4d:3b:41:c9: af:ea:70:18:2c:6c:dc:bc:6e:54:07:ab:4f:39:7d: 30:c8:b2:89:00:2e:d9:c2:31:41:2e:e6:20:9c:87: 7d:34:42:35:56:af:78:36:9a:f4:fc:ec:8d:63:a7: 4a:c0:7a:f9:9a:a5:45:22:b1:97:8d:b1:10:b7:be: 0f:59:99:30:9e:42:68:06:2b:ed:eb:c1:cc:60:20: dc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6E:CA:68:BD:2C:2C:9D:D5:6B:2C:5A:4C:5A:F4:8F:11:A9:DD:C2 X509v3 Authority Key Identifier: keyid:C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:23:0f:df:46:73:a8:bc:1b:d5:64:9f:53:a7:12:ac:ca:64: 72:fb:b8:be:ba:1d:a2:c4:d2:63:a7:98:45:86:d7:29:51:92: b4:34:4c:74:fd:73:6f:9b:18:77:d7:c0:dd:36:09:34:10:0b: ac:2e:2f:da:9b:df:77:9f:8e:57:44:98:4a:95:c7:30:54:62: 08:42:9f:7a:64:26:ed:a6:d5:92:f1:c1:97:71:db:5c:da:93: 87:aa:da:58:f4:00:32:f2:93:12:1f:54:29:ec:43:d7:dd:3b: 09:8e:e2:ca:1b:87:24:ec:89:24:cc:40:62:e6:b2:d0:a2:19: ca:0b:9b:d1:ab:a9:e7:0e:38:2d:8d:7d:9e:af:38:5a:67:2c: e1:af:64:66:ef:b5:b8:71:af:bc:55:5a:b3:ee:c9:b4:8c:12: d2:9d:63:39:ad:ff:33:04:5e:ac:8f:63:40:0b:2f:9d:1f:fe: 78:75:3a:c0:c0:cc:d1:0e:55:6b:28:8a:ae:0c:7d:70:90:e8: fe:74:13:c4:bd:d9:f8:88:6b:17:8e:e7:3e:33:26:e9:ca:37: 54:a0:48:52:d3:55:bc:e6:cc:48:25:85:d4:0c:c8:4c:9e:9a: 7b:dc:e3:3f:32:b1:01:2d:5c:bc:10:80:36:e8:43:72:90:93: bf:1f:e2:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9xRUu3rsEv4SYUjnW4jOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5Yzg4MTI0N2NhZGJjYmY1MmFhMmFkNzYyY2M3NDU0YTdh ODcyNmUwHhcNMjUxMjA2MTQwMDQ3WhcNMjUxMjA3MTQwMDQ3WjAzMTEwLwYDVQQD Eyg3YjZlY2E2OGJkMmMyYzlkZDU2YjJjNWE0YzVhZjQ4ZjExYTlkZGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8W5zwi2hxXKbfukKkyukNfgraJL /Kq33UC0z6Y0nAg6IPueA7/ZM0diAxam6VqopcTZMODxdDcfl1vjT8YTKolPWZXr 9h/dZrShXtEG5+bVYXsphfnvy1HfHOGDHioNHazHaZq1OitwlN6GSqNXS175/5OY SZlz0/B/bQJlcldgWO6Bo91BD9HiHj7vn5YmhpBO4jyFLJ4xnMmdMQwsKI4Qc0bu d6tLuhbohDOYp007Qcmv6nAYLGzcvG5UB6tPOX0wyLKJAC7ZwjFBLuYgnId9NEI1 Vq94Npr0/OyNY6dKwHr5mqVFIrGXjbEQt74PWZkwnkJoBivt68HMYCDcXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHtuymi9LCyd1WssWkxa9I8Rqd3CMB8GA1UdIwQY MBaAFMnIgSR8rby/Uqoq12LMdFSnqHJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWNpQkpIeXR2TDlTcWlyWFlzeDBWS2VvY200LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZDZiNTMtOTVhOS00ZDYwLWI0NmQt N2VmZTkwNWZmMjkxLzEveWNpQkpIeXR2TDlTcWlyWFlzeDBWS2VvY200Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi82ZDZiNTMtOTVhOS00ZDYwLWI0NmQtN2VmZTkwNWZmMjkx LzEveWNpQkpIeXR2TDlTcWlyWFlzeDBWS2VvY200LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHiMP30Zz qLwb1WSfU6cSrMpkcvu4vrodosTSY6eYRYbXKVGStDRMdP1zb5sYd9fA3TYJNBAL rC4v2pvfd5+OV0SYSpXHMFRiCEKfemQm7abVkvHBl3HbXNqTh6raWPQAMvKTEh9U KexD1907CY7iyhuHJOyJJMxAYuay0KIZygub0aup5w44LY19nq84Wmcs4a9kZu+1 uHGvvFVas+7JtIwS0p1jOa3/MwRerI9jQAsvnR/+eHU6wMDM0Q5VayiKrgx9cJDo /nQTxL3Z+IhrF47nPjMm6co3VKBIUtNVvObMSCWF1AzITJ6ae9zjPzKxAS1cvBCA NuhDcpCTvx/ipw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:36:54 2025 by rpki-client