This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft File: __YE3HiSupn1NSlrkQLY16GEQ4g.mft (raw, json) Hash identifier: NgEB0HM1NtGq0oeow2mAOAGKsW/9KCNgrmFqzqJnkMI= Subject key identifier: 1F:2E:3F:4A:02:5D:A0:1B:B6:0A:E5:75:09:3C:52:18:02:21:7F:D9 Authority key identifier: FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88 Certificate issuer: /CN=fff604dc7892ba99f535296b9102d8d7a1844388 Certificate serial: 019B35D782D8D4C2630B26A21624EEDA94B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft Manifest number: 1716 Signing time: Fri 19 Dec 2025 09:01:14 +0000 Manifest this update: Fri 19 Dec 2025 09:01:14 +0000 Manifest next update: Sat 20 Dec 2025 09:01:14 +0000 Files and hashes: 1: __YE3HiSupn1NSlrkQLY16GEQ4g.crl (hash: 56D0S7/ACuWAMGwxBuIoAiBOfQKF1WoXv6RJ5c2oxY8=) 2: eNa9shPNfJuzCCd26UNFwFr7enQ.roa (hash: Pk/A2JGNB1YeZQ3WAmhEqcfQTtjVI6QLZ8AAQbj5fY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 09:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:82:d8:d4:c2:63:0b:26:a2:16:24:ee:da:94:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fff604dc7892ba99f535296b9102d8d7a1844388 Validity Not Before: Dec 19 09:01:14 2025 GMT Not After : Dec 20 09:01:14 2025 GMT Subject: CN=1f2e3f4a025da01bb60ae575093c521802217fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6a:2a:78:7d:f8:bf:4f:ad:18:bb:f5:b8:2a: 50:41:c0:5f:b9:c3:85:5b:32:11:40:b8:4d:3f:73: 46:80:ea:d1:71:9e:c6:57:e4:43:3f:5e:2a:f1:9b: ad:24:de:da:9d:16:66:d2:1b:27:ba:a1:7e:39:0e: 47:64:c9:af:fa:c6:24:a4:1b:ba:26:95:52:1e:d5: e9:c8:bf:e4:ae:d4:0a:71:2a:f6:30:66:2d:23:ff: 7c:d8:15:84:56:64:66:da:07:f8:16:96:be:63:41: cc:b6:b2:ff:a5:21:0c:c1:8f:11:f4:f0:33:16:fd: e9:7b:de:2e:96:47:48:8e:73:ae:47:63:b1:24:b4: 6e:b0:63:24:ee:d5:15:92:37:65:ee:cf:45:72:c0: 40:53:97:3e:52:84:af:07:36:6e:4a:82:74:4d:14: ec:1b:74:71:79:29:5c:b7:06:0f:9e:b6:74:71:9d: cb:c1:5f:2b:35:14:cd:9f:99:23:5e:35:32:07:11: e5:20:77:f4:05:32:7c:54:15:a6:af:6e:59:8a:3d: 54:4f:c8:18:f7:16:de:d1:d7:87:a9:d7:f9:02:7a: de:2e:36:71:14:27:ac:b4:f5:69:e8:51:22:6a:e6: 6f:44:bf:ce:19:70:69:02:51:76:63:f5:65:ee:ad: 68:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2E:3F:4A:02:5D:A0:1B:B6:0A:E5:75:09:3C:52:18:02:21:7F:D9 X509v3 Authority Key Identifier: keyid:FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:d2:c6:ec:17:43:c0:bb:37:a0:30:3d:5c:76:8b:a5:d5:fc: b9:52:5b:0c:0e:60:20:5f:3f:90:ff:78:32:e2:df:59:43:a3: ef:a2:b8:6b:96:85:e8:96:ac:ce:19:22:2a:c7:cd:44:15:fd: de:a7:b5:75:13:3a:13:32:76:62:b8:8c:f0:cd:ea:51:8d:63: ac:6f:eb:e9:08:95:4a:d8:14:96:4e:7b:a7:89:34:76:c3:65: bf:21:54:7f:2b:3f:90:87:bd:fd:51:0f:dc:b1:bc:d3:fe:87: 5c:c9:48:4f:bf:27:4b:2a:e2:4b:2a:c0:91:d5:8c:57:ac:98: af:c3:1c:52:6b:8a:18:07:c9:84:bd:e4:c2:0c:ec:8d:bb:a8: 3b:43:4b:e2:0d:ab:b3:7c:36:28:83:d8:7b:1c:40:a6:22:35: 8e:56:cd:c4:82:40:f0:5e:3e:73:bc:25:e6:c7:1a:7d:13:8b: fd:43:bc:43:eb:5e:69:3a:7c:bc:b3:f2:21:b4:64:42:b1:36: 51:1e:30:56:d7:67:85:f1:48:42:38:6b:cf:f1:aa:b5:5b:94: 7c:35:5e:28:b1:2d:4d:a3:fe:1a:ad:e5:be:bc:02:00:c7:18: 4e:f8:ba:74:60:08:1f:fc:1b:ab:ad:a0:01:07:cd:77:03:cd: 2d:b2:28:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs114LY1MJjCyaiFiTu2pS3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZjYwNGRjNzg5MmJhOTlmNTM1Mjk2YjkxMDJkOGQ3YTE4 NDQzODgwHhcNMjUxMjE5MDkwMTE0WhcNMjUxMjIwMDkwMTE0WjAzMTEwLwYDVQQD EygxZjJlM2Y0YTAyNWRhMDFiYjYwYWU1NzUwOTNjNTIxODAyMjE3ZmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGoqeH34v0+tGLv1uCpQQcBfucOF WzIRQLhNP3NGgOrRcZ7GV+RDP14q8ZutJN7anRZm0hsnuqF+OQ5HZMmv+sYkpBu6 JpVSHtXpyL/krtQKcSr2MGYtI/982BWEVmRm2gf4Fpa+Y0HMtrL/pSEMwY8R9PAz Fv3pe94ulkdIjnOuR2OxJLRusGMk7tUVkjdl7s9FcsBAU5c+UoSvBzZuSoJ0TRTs G3RxeSlctwYPnrZ0cZ3LwV8rNRTNn5kjXjUyBxHlIHf0BTJ8VBWmr25Zij1UT8gY 9xbe0deHqdf5AnreLjZxFCestPVp6FEiauZvRL/OGXBpAlF2Y/Vl7q1o5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8uP0oCXaAbtgrldQk8UhgCIX/ZMB8GA1UdIwQY MBaAFP/2BNx4krqZ9TUpa5EC2NehhEOIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX19ZRTNIaVN1cG4xTlNscmtRTFkxNkdFUTRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iMzc4YTEtNWIxYi00Yzg5LThiYzUt MWMxOTk0OWI5NmI2LzEvX19ZRTNIaVN1cG4xTlNscmtRTFkxNkdFUTRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9iMzc4YTEtNWIxYi00Yzg5LThiYzUtMWMxOTk0OWI5NmI2 LzEvX19ZRTNIaVN1cG4xTlNscmtRTFkxNkdFUTRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9LG7BdD wLs3oDA9XHaLpdX8uVJbDA5gIF8/kP94MuLfWUOj76K4a5aF6JaszhkiKsfNRBX9 3qe1dRM6EzJ2YriM8M3qUY1jrG/r6QiVStgUlk57p4k0dsNlvyFUfys/kIe9/VEP 3LG80/6HXMlIT78nSyriSyrAkdWMV6yYr8McUmuKGAfJhL3kwgzsjbuoO0NL4g2r s3w2KIPYexxApiI1jlbNxIJA8F4+c7wl5scafROL/UO8Q+teaTp8vLPyIbRkQrE2 UR4wVtdnhfFIQjhrz/GqtVuUfDVeKLEtTaP+Gq3lvrwCAMcYTvi6dGAIH/wbq62g AQfNdwPNLbIoKg== -----END CERTIFICATE-----Generated at Fri Dec 19 18:22:37 2025 by rpki-client