This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft File: yCnhDha8eb_FbFNVflsapVnMdDU.mft (raw, json) Hash identifier: qF20yTBpQsJTS9r3WymdK7b7OiFuYc/fb7EEUm5pAxU= Subject key identifier: 80:01:08:DF:BA:40:44:ED:29:7A:F0:55:16:EF:9B:DF:A1:B8:A4:E4 Authority key identifier: C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35 Certificate issuer: /CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435 Certificate serial: 019B3DFE5DEEE8596F26DE0E29C4CB940886 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft Manifest number: 0A56 Signing time: Sat 20 Dec 2025 23:00:38 +0000 Manifest this update: Sat 20 Dec 2025 23:00:38 +0000 Manifest next update: Sun 21 Dec 2025 23:00:38 +0000 Files and hashes: 1: jr7Oi-VOBv_LBDGgARbH5yi0fCE.roa (hash: 9cEsiuQyqTFkaGMrbbHrCUpW4clJajhU8ds2+OGo5cc=) 2: yCnhDha8eb_FbFNVflsapVnMdDU.crl (hash: gTzOTPuZaskZ88As7gu0ACeaNKkwpC6SynrlmUqh+bY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:5d:ee:e8:59:6f:26:de:0e:29:c4:cb:94:08:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435 Validity Not Before: Dec 20 23:00:38 2025 GMT Not After : Dec 21 23:00:38 2025 GMT Subject: CN=800108dfba4044ed297af05516ef9bdfa1b8a4e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:20:4e:5a:6f:95:40:01:c5:fa:40:d5:7b:2f: c3:7c:44:1c:db:40:32:0c:75:5e:30:c4:e5:7f:da: f9:21:d4:93:1d:54:5f:dd:54:2a:5d:d8:09:14:6c: 0b:c9:ef:68:30:58:f8:89:df:8a:3a:00:14:e3:fa: 40:2b:34:a7:0e:fc:cc:72:83:7a:35:6e:89:ee:ab: 1f:be:96:83:46:a3:32:5c:42:ef:b3:1e:85:44:9d: ff:7d:88:3f:58:3b:f0:f6:bc:d1:6c:35:1b:b9:87: 6e:19:4b:d4:b1:f2:f7:15:f2:0c:c9:7d:45:15:67: e5:2a:f8:37:f3:65:80:e4:eb:75:99:b5:a1:78:92: 48:d8:23:5d:86:20:83:de:5c:50:a8:8d:c4:9b:31: af:ea:5b:de:d2:4f:fd:55:cc:ea:4b:d0:66:a8:bc: 1a:52:5b:b3:20:17:a8:74:37:5f:3f:dd:9f:80:fe: 6e:f6:09:17:fd:5c:e0:03:fb:59:b8:a9:9a:08:d4: c4:ea:cd:d5:6c:9f:e0:ce:b8:99:10:7f:cd:2d:f6: c2:d8:38:4c:74:f6:98:56:e7:75:0f:f7:47:c7:ad: 89:74:08:cd:40:dc:21:3b:87:21:5a:d1:d4:b8:57: 2e:65:0e:70:85:a2:5e:43:d9:24:a9:60:1f:fb:e1: 9d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:01:08:DF:BA:40:44:ED:29:7A:F0:55:16:EF:9B:DF:A1:B8:A4:E4 X509v3 Authority Key Identifier: keyid:C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:bf:a7:ff:dd:df:17:74:6c:11:c8:b1:77:bd:1c:09:23:32: fa:90:03:9e:1d:8b:fe:29:93:90:cd:3b:ff:6e:0d:a9:9e:6e: c1:ea:9c:8a:44:7b:74:fa:c8:3e:45:bd:bf:92:98:33:b3:1b: 8b:a5:21:3a:5d:d8:57:81:1d:93:c8:01:db:0e:e5:a7:a9:17: 5b:1f:e0:64:c3:1b:64:04:1c:5c:21:19:f3:b0:ea:95:91:10: 46:4d:1b:29:4c:e2:2e:bc:09:e1:80:f1:be:48:ea:08:53:0c: 62:e5:83:06:fb:8e:c1:27:42:4b:82:ea:ec:03:4f:63:a0:60: c1:77:a4:16:6f:23:f9:f7:fb:b0:43:ff:95:10:fb:db:63:76: 13:91:8a:c0:f5:1d:1e:e8:80:81:f3:b4:5b:72:10:45:80:17: 25:e7:ec:0f:29:1c:9e:98:a8:d6:97:ab:da:0c:76:63:39:97: 2f:3d:80:67:46:cc:2b:27:7e:41:68:db:72:98:6e:5a:0d:ad: 38:f0:58:c7:a6:cc:50:48:67:dc:f5:fb:f7:5e:a0:8b:9f:c9: 0a:b6:7d:7c:b2:45:bd:c4:f9:a1:bc:19:64:a3:f8:8f:12:2e: f1:ba:ba:22:96:96:9f:c6:52:33:4c:cb:f2:63:59:40:49:73: 6a:8a:ef:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/l3u6FlvJt4OKcTLlAiGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MjllMTBlMTZiYzc5YmZjNTZjNTM1NTdlNWIxYWE1NTlj Yzc0MzUwHhcNMjUxMjIwMjMwMDM4WhcNMjUxMjIxMjMwMDM4WjAzMTEwLwYDVQQD Eyg4MDAxMDhkZmJhNDA0NGVkMjk3YWYwNTUxNmVmOWJkZmExYjhhNGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yBOWm+VQAHF+kDVey/DfEQc20Ay DHVeMMTlf9r5IdSTHVRf3VQqXdgJFGwLye9oMFj4id+KOgAU4/pAKzSnDvzMcoN6 NW6J7qsfvpaDRqMyXELvsx6FRJ3/fYg/WDvw9rzRbDUbuYduGUvUsfL3FfIMyX1F FWflKvg382WA5Ot1mbWheJJI2CNdhiCD3lxQqI3EmzGv6lve0k/9VczqS9BmqLwa UluzIBeodDdfP92fgP5u9gkX/VzgA/tZuKmaCNTE6s3VbJ/gzriZEH/NLfbC2DhM dPaYVud1D/dHx62JdAjNQNwhO4chWtHUuFcuZQ5whaJeQ9kkqWAf++GdWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIABCN+6QETtKXrwVRbvm9+huKTkMB8GA1UdIwQY MBaAFMgp4Q4WvHm/xWxTVX5bGqVZzHQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUNuaERoYThlYl9GYkZOVmZsc2FwVm5NZERVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS82NjdhNGQtNGEzYS00OGY1LWEyNmEt Yjg0NTNlZWJiMjY3LzEveUNuaERoYThlYl9GYkZOVmZsc2FwVm5NZERVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS82NjdhNGQtNGEzYS00OGY1LWEyNmEtYjg0NTNlZWJiMjY3 LzEveUNuaERoYThlYl9GYkZOVmZsc2FwVm5NZERVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKr+n/93f F3RsEcixd70cCSMy+pADnh2L/imTkM07/24NqZ5uweqcikR7dPrIPkW9v5KYM7Mb i6UhOl3YV4Edk8gB2w7lp6kXWx/gZMMbZAQcXCEZ87DqlZEQRk0bKUziLrwJ4YDx vkjqCFMMYuWDBvuOwSdCS4Lq7ANPY6BgwXekFm8j+ff7sEP/lRD722N2E5GKwPUd HuiAgfO0W3IQRYAXJefsDykcnpio1per2gx2YzmXLz2AZ0bMKyd+QWjbcphuWg2t OPBYx6bMUEhn3PX7916gi5/JCrZ9fLJFvcT5obwZZKP4jxIu8bq6IpaWn8ZSM0zL 8mNZQElzaorv9w== -----END CERTIFICATE-----Generated at Sun Dec 21 02:25:18 2025 by rpki-client