This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft File: yniqfjFrIfhDz7lYEMaAzdv6bm8.mft (raw, json) Hash identifier: EEnMSAgRthRbInibzEZy8aoqr78l/Xt69YTKt2o3FjM= Subject key identifier: 9F:54:FF:DA:55:24:74:FA:AB:AF:46:0F:76:8B:92:51:6F:49:D0:AF Authority key identifier: CA:78:AA:7E:31:6B:21:F8:43:CF:B9:58:10:C6:80:CD:DB:FA:6E:6F Certificate issuer: /CN=ca78aa7e316b21f843cfb95810c680cddbfa6e6f Certificate serial: 019B2B8AD6FF0C2335F55CF4C7B0762BE375 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft Manifest number: 04D0 Signing time: Wed 17 Dec 2025 09:01:17 +0000 Manifest this update: Wed 17 Dec 2025 09:01:17 +0000 Manifest next update: Thu 18 Dec 2025 09:01:17 +0000 Files and hashes: 1: KmT0zBeAxHbx64CqcJ4Kw-HSMGw.roa (hash: g294VQOsqRVKkLhlE8NKqam6KvGQ9H8e4fukJsFTk1Y=) 2: yniqfjFrIfhDz7lYEMaAzdv6bm8.crl (hash: uaFUHpdSY9xs7Iooodwm0MD54vtJ2OWU5GTXHQK9HsY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:d6:ff:0c:23:35:f5:5c:f4:c7:b0:76:2b:e3:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca78aa7e316b21f843cfb95810c680cddbfa6e6f Validity Not Before: Dec 17 09:01:17 2025 GMT Not After : Dec 18 09:01:17 2025 GMT Subject: CN=9f54ffda552474faabaf460f768b92516f49d0af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:75:f8:63:df:6f:13:25:e0:1d:d9:5a:5f:80: 3b:0d:60:62:d4:10:c3:2d:e8:b1:5b:d0:89:c8:d9: fc:f9:eb:a8:d1:eb:d8:65:80:c4:27:88:b2:a5:ff: a9:30:57:06:6e:f5:b8:d0:c7:a2:91:0e:f8:6b:f7: 28:37:14:f6:fe:b7:35:8d:53:c7:c9:dd:0e:9f:91: b6:8d:35:a1:8e:7a:f8:15:5e:6b:85:16:7e:d0:93: c3:8f:84:c9:2f:0e:64:f7:88:8f:b4:88:4f:09:3b: fb:e6:9a:66:2b:8f:ed:c0:b4:0f:be:f1:c1:10:ec: 4a:9c:a2:4a:0c:02:ea:89:a7:19:80:83:54:1e:ee: 4e:7d:d2:55:1b:7b:d9:10:b9:5c:36:f7:d6:25:53: bf:09:46:e2:e0:11:26:f5:f8:41:be:cf:82:53:7b: 75:e1:ea:ef:a5:15:d7:8d:55:5d:8f:6f:7e:2e:87: e6:e7:68:0b:97:85:39:c0:bf:28:13:9e:6a:4b:25: 24:a2:db:be:0b:61:d4:d7:c1:07:af:26:25:2d:15: c1:63:5d:c4:63:25:4d:2f:8c:27:c5:22:bc:68:73: 7f:a8:9c:01:ea:1a:2b:78:99:96:da:4b:99:fe:04: f0:cf:e3:2e:53:92:c6:e3:91:ee:2b:3f:d4:62:8a: f1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:54:FF:DA:55:24:74:FA:AB:AF:46:0F:76:8B:92:51:6F:49:D0:AF X509v3 Authority Key Identifier: keyid:CA:78:AA:7E:31:6B:21:F8:43:CF:B9:58:10:C6:80:CD:DB:FA:6E:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:fd:aa:d3:8d:7f:4d:08:af:75:31:c7:a8:4d:d4:87:de:df: c2:80:2d:41:ac:e1:f0:3d:6e:01:a1:14:bb:bb:30:63:d0:47: 19:7e:15:72:19:35:5b:5a:4d:65:bb:81:cb:3c:2f:5a:ff:f2: 0b:b3:5d:26:64:fe:30:0f:f4:55:26:d0:b0:90:81:d3:ab:8c: a2:5f:7b:52:e6:d4:1b:f8:16:59:bf:4d:5c:ef:c4:80:fc:ce: 6c:be:1e:00:30:cb:b2:45:de:02:da:ca:78:65:9a:de:e4:6c: 0d:16:02:14:67:cc:7a:f3:4d:6b:23:06:06:68:21:52:2c:48: c7:80:54:7f:02:f5:61:d3:f4:22:de:0f:87:20:a1:14:c0:0e: e5:5f:cb:ea:99:d1:78:dc:f3:1e:91:bc:a1:02:89:44:b5:0d: 14:93:57:8c:eb:c0:01:60:18:05:97:f4:ef:14:c7:18:bb:3d: a1:37:1e:70:6b:20:2a:be:32:58:45:4e:65:d3:94:5e:e4:30: 82:5b:a4:64:5b:49:9c:5d:09:90:1a:8c:74:4d:06:0b:00:12: 04:71:5a:6d:85:c9:a9:26:eb:90:80:c6:7d:0c:b3:6f:f5:ca: f9:03:41:38:cd:d4:50:04:a4:e9:94:7a:67:40:b6:ed:f2:cd: cf:d9:03:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsritb/DCM19Vz0x7B2K+N1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNzhhYTdlMzE2YjIxZjg0M2NmYjk1ODEwYzY4MGNkZGJm YTZlNmYwHhcNMjUxMjE3MDkwMTE3WhcNMjUxMjE4MDkwMTE3WjAzMTEwLwYDVQQD Eyg5ZjU0ZmZkYTU1MjQ3NGZhYWJhZjQ2MGY3NjhiOTI1MTZmNDlkMGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHX4Y99vEyXgHdlaX4A7DWBi1BDD LeixW9CJyNn8+euo0evYZYDEJ4iypf+pMFcGbvW40MeikQ74a/coNxT2/rc1jVPH yd0On5G2jTWhjnr4FV5rhRZ+0JPDj4TJLw5k94iPtIhPCTv75ppmK4/twLQPvvHB EOxKnKJKDALqiacZgINUHu5OfdJVG3vZELlcNvfWJVO/CUbi4BEm9fhBvs+CU3t1 4ervpRXXjVVdj29+Lofm52gLl4U5wL8oE55qSyUkotu+C2HU18EHryYlLRXBY13E YyVNL4wnxSK8aHN/qJwB6horeJmW2kuZ/gTwz+MuU5LG45HuKz/UYorx+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9U/9pVJHT6q69GD3aLklFvSdCvMB8GA1UdIwQY MBaAFMp4qn4xayH4Q8+5WBDGgM3b+m5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW5pcWZqRnJJZmhEejdsWUVNYUF6ZHY2Ym04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy83ZGEzNGMtMzk4NC00NDQyLWI2NDYt ZTMxMzhmZjFlODk5LzEveW5pcWZqRnJJZmhEejdsWUVNYUF6ZHY2Ym04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy83ZGEzNGMtMzk4NC00NDQyLWI2NDYtZTMxMzhmZjFlODk5 LzEveW5pcWZqRnJJZmhEejdsWUVNYUF6ZHY2Ym04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYf2q041/ TQivdTHHqE3Uh97fwoAtQazh8D1uAaEUu7swY9BHGX4Vchk1W1pNZbuByzwvWv/y C7NdJmT+MA/0VSbQsJCB06uMol97UubUG/gWWb9NXO/EgPzObL4eADDLskXeAtrK eGWa3uRsDRYCFGfMevNNayMGBmghUixIx4BUfwL1YdP0It4PhyChFMAO5V/L6pnR eNzzHpG8oQKJRLUNFJNXjOvAAWAYBZf07xTHGLs9oTcecGsgKr4yWEVOZdOUXuQw glukZFtJnF0JkBqMdE0GCwASBHFabYXJqSbrkIDGfQyzb/XK+QNBOM3UUASk6ZR6 Z0C27fLNz9kDLQ== -----END CERTIFICATE-----Generated at Wed Dec 17 16:42:27 2025 by rpki-client