This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft File: Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft (raw, json) Hash identifier: XMs0UqMMbAKqUp0wsFzP4PVGN917zNORrARZ7CSbj4U= Subject key identifier: 00:7D:7D:3D:B2:66:72:A7:8F:4C:A9:F1:88:1C:C5:4D:B7:AC:5A:B4 Authority key identifier: 62:BB:1C:6E:5E:88:65:88:CD:47:61:6B:AC:BD:7C:CB:64:AB:F4:78 Certificate issuer: /CN=62bb1c6e5e886588cd47616bacbd7ccb64abf478 Certificate serial: 019B30E85042D35F157AE296BD637EA92643 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 10:01:29 +0000 Manifest this update: Thu 18 Dec 2025 10:01:29 +0000 Manifest next update: Fri 19 Dec 2025 10:01:29 +0000 Files and hashes: 1: INqFD0SeOva_N0mDabBvhXvH4vM.roa (hash: KbPWp3TtuAL2F9RTHf55y2zxM43B8AT5l9geZLgdP6A=) 2: Yrscbl6IZYjNR2FrrL18y2Sr9Hg.crl (hash: RZqq6QqC8yYFGWkorXc+YzYUZYD6Xp24CFXticr1L1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:50:42:d3:5f:15:7a:e2:96:bd:63:7e:a9:26:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62bb1c6e5e886588cd47616bacbd7ccb64abf478 Validity Not Before: Dec 18 10:01:29 2025 GMT Not After : Dec 19 10:01:29 2025 GMT Subject: CN=007d7d3db26672a78f4ca9f1881cc54db7ac5ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a7:a6:16:33:e1:fe:82:e8:73:da:1c:db:d7: de:5e:32:42:1f:6f:9b:25:21:d3:bd:43:05:aa:05: cc:9e:5f:d6:0e:9c:13:51:b7:60:79:c7:00:bc:0e: 0d:c0:55:5e:13:70:b5:96:8e:b7:9e:46:34:e7:e0: 57:8c:e7:73:54:e8:fb:83:5c:60:97:e4:00:57:82: c8:a8:06:d5:ed:8e:8a:8e:62:d7:51:78:02:be:65: de:86:18:3e:a3:97:71:69:71:27:43:8a:f4:de:95: 76:a1:75:2f:94:64:63:4f:5d:b4:96:cf:99:33:c6: 9a:43:b1:f8:6d:43:4d:79:bf:63:91:f0:e9:1a:66: 10:30:3f:c2:22:f8:be:95:d5:ea:80:82:fe:3f:d6: 3b:4a:37:22:15:d7:68:06:25:be:3f:dd:d1:73:c0: 41:bd:77:97:25:d7:a9:85:b4:f1:c3:2f:7a:33:10: e3:f5:0b:f5:c6:c1:73:48:76:32:a7:2f:52:c7:e1: e8:5b:f1:55:0c:ff:5c:8c:43:ad:f7:10:b6:73:ec: 9b:a2:d0:80:f5:34:28:4e:c6:c2:c3:ff:0b:6f:2d: 77:71:41:56:06:f6:88:1e:dd:29:b0:ca:b5:d8:27: 5e:76:85:59:b5:95:77:a2:da:02:94:3f:9f:a1:fe: ab:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7D:7D:3D:B2:66:72:A7:8F:4C:A9:F1:88:1C:C5:4D:B7:AC:5A:B4 X509v3 Authority Key Identifier: keyid:62:BB:1C:6E:5E:88:65:88:CD:47:61:6B:AC:BD:7C:CB:64:AB:F4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:6d:60:3f:fb:e9:37:be:33:58:83:34:00:d6:f2:9d:78:e7: 67:c7:8f:c0:d0:6e:88:d7:9e:27:b3:f4:a0:2d:31:e0:e5:35: 17:23:8d:d4:fa:7e:2b:c9:61:5d:73:37:6a:e7:4c:b6:87:20: 3f:5b:47:79:49:16:22:57:b1:e9:85:d5:7d:9e:04:28:95:48: 08:6e:32:77:e6:fd:da:3a:c0:e2:6c:02:f9:45:4f:27:57:2f: 3d:7e:b8:0d:76:7d:8f:8a:99:a1:5e:73:4a:71:4b:05:f4:3b: 66:c6:f9:45:4f:f1:f2:c3:24:fc:3a:1d:6b:a8:64:99:d5:f4: 78:33:d2:cb:c5:92:42:d2:51:26:7d:37:3c:d8:a2:6d:c7:d5: ed:c2:4f:c1:61:96:22:45:e1:69:c2:53:56:97:c4:d2:b5:ce: 9c:e3:86:5e:4c:19:d8:68:83:e3:19:de:54:3d:78:93:53:c1: d3:0f:86:12:cd:74:92:33:79:2c:72:fd:35:c9:31:39:ae:7d: 5a:fb:79:4e:3a:2b:f1:96:75:68:63:4f:55:82:51:dc:43:b7: cd:73:fc:29:0a:22:32:fc:fc:4c:3b:2b:c3:e8:4d:74:5f:8d: f5:82:70:9a:a7:d7:d5:8d:ce:f9:a7:41:d7:9b:02:5f:94:c1: b5:28:43:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6FBC018VeuKWvWN+qSZDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYmIxYzZlNWU4ODY1ODhjZDQ3NjE2YmFjYmQ3Y2NiNjRh YmY0NzgwHhcNMjUxMjE4MTAwMTI5WhcNMjUxMjE5MTAwMTI5WjAzMTEwLwYDVQQD EygwMDdkN2QzZGIyNjY3MmE3OGY0Y2E5ZjE4ODFjYzU0ZGI3YWM1YWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqemFjPh/oLoc9oc29feXjJCH2+b JSHTvUMFqgXMnl/WDpwTUbdgeccAvA4NwFVeE3C1lo63nkY05+BXjOdzVOj7g1xg l+QAV4LIqAbV7Y6KjmLXUXgCvmXehhg+o5dxaXEnQ4r03pV2oXUvlGRjT120ls+Z M8aaQ7H4bUNNeb9jkfDpGmYQMD/CIvi+ldXqgIL+P9Y7SjciFddoBiW+P93Rc8BB vXeXJdephbTxwy96MxDj9Qv1xsFzSHYypy9Sx+HoW/FVDP9cjEOt9xC2c+ybotCA 9TQoTsbCw/8Lby13cUFWBvaIHt0psMq12CdedoVZtZV3otoClD+fof6rgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAB9fT2yZnKnj0yp8YgcxU23rFq0MB8GA1UdIwQY MBaAFGK7HG5eiGWIzUdha6y9fMtkq/R4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXJzY2JsNklaWWpOUjJGcnJMMTh5MlNyOUhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85Zjk0NDAtNTkxYi00NGQzLTg3ZDYt N2M0NDViM2Y5ZmMzLzEvWXJzY2JsNklaWWpOUjJGcnJMMTh5MlNyOUhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85Zjk0NDAtNTkxYi00NGQzLTg3ZDYtN2M0NDViM2Y5ZmMz LzEvWXJzY2JsNklaWWpOUjJGcnJMMTh5MlNyOUhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiG1gP/vp N74zWIM0ANbynXjnZ8ePwNBuiNeeJ7P0oC0x4OU1FyON1Pp+K8lhXXM3audMtocg P1tHeUkWIlex6YXVfZ4EKJVICG4yd+b92jrA4mwC+UVPJ1cvPX64DXZ9j4qZoV5z SnFLBfQ7Zsb5RU/x8sMk/Doda6hkmdX0eDPSy8WSQtJRJn03PNiibcfV7cJPwWGW IkXhacJTVpfE0rXOnOOGXkwZ2GiD4xneVD14k1PB0w+GEs10kjN5LHL9NckxOa59 Wvt5Tjor8ZZ1aGNPVYJR3EO3zXP8KQoiMvz8TDsrw+hNdF+N9YJwmqfX1Y3O+adB 15sCX5TBtShD6A== -----END CERTIFICATE-----Generated at Thu Dec 18 13:04:45 2025 by rpki-client