This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft File: ycTTQSeR46PplAQFieyK0vWP4xI.mft (raw, json) Hash identifier: ObDxx02dLtbT2nfAdAHopakwa75sFn4ZFyQFTWpjKxw= Subject key identifier: 21:78:1B:FA:C6:15:40:CE:98:08:00:90:34:D8:1D:23:7E:B9:18:D8 Authority key identifier: C9:C4:D3:41:27:91:E3:A3:E9:94:04:05:89:EC:8A:D2:F5:8F:E3:12 Certificate issuer: /CN=c9c4d3412791e3a3e994040589ec8ad2f58fe312 Certificate serial: 019AF208E0C8070555755F8612D049D61D29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 05:00:59 +0000 Manifest this update: Sat 06 Dec 2025 05:00:59 +0000 Manifest next update: Sun 07 Dec 2025 05:00:59 +0000 Files and hashes: 1: mMGnUGaN6rsw58xOd0MAF_HAY9o.roa (hash: 0HzReZTMzsNR7hcuVRKNU/DysaBkSSFxX1IonoMajpg=) 2: ycTTQSeR46PplAQFieyK0vWP4xI.crl (hash: UWPn8tlGxXCrHDIp3JuVL59Xp4DBsSa6LXrd8nu61tE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e0:c8:07:05:55:75:5f:86:12:d0:49:d6:1d:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9c4d3412791e3a3e994040589ec8ad2f58fe312 Validity Not Before: Dec 6 05:00:59 2025 GMT Not After : Dec 7 05:00:59 2025 GMT Subject: CN=21781bfac61540ce9808009034d81d237eb918d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:09:03:d8:79:a0:cf:43:70:ad:b4:57:15:c5: 77:91:fd:bb:99:84:01:c9:fc:48:29:fd:b9:f8:73: bc:9b:38:be:f9:be:29:e6:29:48:fd:e9:b6:20:1f: 42:b0:9a:31:86:82:c4:5f:6e:f6:69:5f:e9:4a:4e: 9a:66:25:cf:0e:04:9a:a7:82:61:59:40:b4:81:9c: 7d:6a:40:04:a0:6b:67:c4:37:5c:7c:e4:0a:0d:83: 64:3c:ec:37:c8:af:2a:72:35:96:5b:8f:67:d4:26: fd:38:11:ff:2a:87:ca:c5:ca:52:96:ab:50:01:ea: e2:60:31:47:15:70:e0:28:d6:3f:29:0f:89:0b:1c: c2:be:16:86:8d:40:99:9a:dd:3a:27:72:81:80:e6: dc:4d:08:71:1a:72:e1:7e:30:75:16:82:85:ca:47: 0a:b3:2a:c5:e7:de:50:f5:34:f1:b2:9e:11:9a:64: 94:6d:fc:1e:cf:f5:ff:62:40:26:d1:2c:4a:85:20: e2:f2:62:8a:44:59:4d:30:34:81:70:69:61:40:23: d1:15:3a:81:9f:94:20:78:66:6c:af:a6:04:47:e6: 6f:63:8e:25:3d:31:9c:82:9c:bb:d8:bb:b6:ae:64: dd:86:32:56:1c:d5:0a:40:26:d8:14:24:60:65:0f: 99:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:78:1B:FA:C6:15:40:CE:98:08:00:90:34:D8:1D:23:7E:B9:18:D8 X509v3 Authority Key Identifier: keyid:C9:C4:D3:41:27:91:E3:A3:E9:94:04:05:89:EC:8A:D2:F5:8F:E3:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:1a:be:d4:72:c6:90:51:65:b1:08:e7:29:58:a7:f3:a4:39: d9:e5:49:e7:ca:7c:f3:de:29:4a:59:2a:f7:0d:e5:0e:a4:3f: 34:21:1d:90:2e:0b:b9:e0:b3:f5:df:8f:1b:27:58:6b:65:c4: 26:d9:c0:2a:f2:57:97:cf:4f:26:5c:5c:9a:1d:a5:b2:06:f7: 17:9e:a2:b9:c1:26:9d:64:4c:1b:8f:73:38:10:87:0a:81:92: a9:85:29:e7:0c:65:79:6f:35:d5:44:b6:34:1b:18:a3:53:af: e4:42:ed:7c:96:ea:56:df:1d:6e:2e:63:d3:87:4c:f1:98:99: b4:70:c8:b9:51:89:55:c8:8d:5f:94:16:eb:60:df:28:8d:6c: 7b:70:e1:df:71:02:4e:4e:79:17:7b:f5:36:43:49:76:25:d6: c2:5e:8d:96:ce:56:1c:a1:63:b3:71:89:fe:d1:8d:14:f9:78: db:bd:b8:05:31:f0:2d:01:f5:f8:c7:af:19:13:4e:bc:02:4f: e0:21:68:19:f2:ba:db:b6:30:78:35:07:ad:c7:61:df:51:10: fb:eb:58:23:bd:3b:6b:13:ef:40:c8:d8:42:11:cd:d0:50:d5: 8e:8f:5c:08:dd:8b:7a:11:7f:b0:1c:cc:a2:54:21:30:b2:8e: e5:d6:41:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCODIBwVVdV+GEtBJ1h0pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YzRkMzQxMjc5MWUzYTNlOTk0MDQwNTg5ZWM4YWQyZjU4 ZmUzMTIwHhcNMjUxMjA2MDUwMDU5WhcNMjUxMjA3MDUwMDU5WjAzMTEwLwYDVQQD EygyMTc4MWJmYWM2MTU0MGNlOTgwODAwOTAzNGQ4MWQyMzdlYjkxOGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgkD2Hmgz0NwrbRXFcV3kf27mYQB yfxIKf25+HO8mzi++b4p5ilI/em2IB9CsJoxhoLEX272aV/pSk6aZiXPDgSap4Jh WUC0gZx9akAEoGtnxDdcfOQKDYNkPOw3yK8qcjWWW49n1Cb9OBH/KofKxcpSlqtQ AeriYDFHFXDgKNY/KQ+JCxzCvhaGjUCZmt06J3KBgObcTQhxGnLhfjB1FoKFykcK syrF595Q9TTxsp4RmmSUbfwez/X/YkAm0SxKhSDi8mKKRFlNMDSBcGlhQCPRFTqB n5QgeGZsr6YER+ZvY44lPTGcgpy72Lu2rmTdhjJWHNUKQCbYFCRgZQ+ZhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCF4G/rGFUDOmAgAkDTYHSN+uRjYMB8GA1UdIwQY MBaAFMnE00EnkeOj6ZQEBYnsitL1j+MSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWNUVFFTZVI0NlBwbEFRRmlleUswdldQNHhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jMmM4YmYtZGNlNC00MjgzLWJmNzIt Y2M3Zjg3ZjRhOTUwLzEveWNUVFFTZVI0NlBwbEFRRmlleUswdldQNHhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jMmM4YmYtZGNlNC00MjgzLWJmNzItY2M3Zjg3ZjRhOTUw LzEveWNUVFFTZVI0NlBwbEFRRmlleUswdldQNHhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjRq+1HLG kFFlsQjnKVin86Q52eVJ58p8894pSlkq9w3lDqQ/NCEdkC4LueCz9d+PGydYa2XE JtnAKvJXl89PJlxcmh2lsgb3F56iucEmnWRMG49zOBCHCoGSqYUp5wxleW811US2 NBsYo1Ov5ELtfJbqVt8dbi5j04dM8ZiZtHDIuVGJVciNX5QW62DfKI1se3Dh33EC Tk55F3v1NkNJdiXWwl6Nls5WHKFjs3GJ/tGNFPl42724BTHwLQH1+MevGRNOvAJP 4CFoGfK627YweDUHrcdh31EQ++tYI707axPvQMjYQhHN0FDVjo9cCN2LehF/sBzM olQhMLKO5dZByA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:15:41 2025 by rpki-client