This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft File: ydy2lccNtLljcGAHUJGKSzqKIak.mft (raw, json) Hash identifier: yVG9AmauxfA9wmbPBqt8cH/cHhnKu/oFhG91W6CUVCU= Subject key identifier: 9A:8D:EA:F5:84:22:37:C4:37:D2:E2:0A:30:84:F7:7D:42:7A:02:DE Authority key identifier: C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9 Certificate issuer: /CN=c9dcb695c70db4b96370600750918a4b3a8a21a9 Certificate serial: 019B35321C9491DCDF0F19E3439261A39379 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft Manifest number: 178B Signing time: Fri 19 Dec 2025 06:00:35 +0000 Manifest this update: Fri 19 Dec 2025 06:00:35 +0000 Manifest next update: Sat 20 Dec 2025 06:00:35 +0000 Files and hashes: 1: 08KPrzvK2WRWpD6p5CJ-Ul7cl9I.roa (hash: sfh9qqw8GmrlQX4Jo45lPqyd4sncTsU6nFud/SZKyQU=) 2: Mq4KEjTO5-3eXlg2Z24LUeQDfPk.roa (hash: iw4ECgSPXnY1fZL4AMAR4ZlIFQjssIsKBQeuJNCApWM=) 3: ydy2lccNtLljcGAHUJGKSzqKIak.crl (hash: FJ56TGT9/DHlqeloEjCAKbyVwoQySjJWKRmep0lHWRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:1c:94:91:dc:df:0f:19:e3:43:92:61:a3:93:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9dcb695c70db4b96370600750918a4b3a8a21a9 Validity Not Before: Dec 19 06:00:35 2025 GMT Not After : Dec 20 06:00:35 2025 GMT Subject: CN=9a8deaf5842237c437d2e20a3084f77d427a02de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c6:82:5e:1c:e4:f4:01:ea:cc:65:76:b4:61: 2c:4d:3b:54:6c:a4:47:05:dd:9a:b4:61:53:63:de: c7:3e:1f:fa:b3:16:63:29:fe:7e:a2:0c:3e:e6:c7: 15:34:09:bf:3a:8b:34:61:f9:55:6b:8b:65:9f:26: 17:18:2f:e5:1c:f4:eb:1f:50:93:c4:ea:da:44:2b: c5:a2:82:e6:60:7c:7f:ba:4e:49:84:3f:32:bf:86: 89:02:4a:c5:08:bd:fd:f1:8d:37:ac:b7:de:83:ff: a1:75:f4:14:2b:7a:ea:90:32:51:e1:59:0f:90:30: 56:11:99:27:2f:b1:f8:84:ab:4f:28:7c:d3:11:78: 59:c3:e9:ce:e8:aa:ea:de:f7:c0:fc:93:f7:35:da: c1:5a:ab:a2:ca:61:2b:16:62:d4:22:6b:3e:cd:06: 7f:34:36:54:aa:b0:63:3a:bb:b5:6a:0a:71:d6:a1: 91:37:91:4c:5f:2d:1e:7e:05:38:7a:31:22:a2:63: 39:d0:c2:ec:49:57:56:89:65:60:70:75:fa:94:31: 8a:83:6a:8d:45:5c:83:15:d7:b9:ff:b2:5c:ea:ce: a0:4e:b0:2d:3b:9a:a2:e8:4a:a8:70:30:f4:c3:26: 45:aa:67:15:8d:91:42:ad:cb:6c:5b:56:dd:18:9e: e5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:8D:EA:F5:84:22:37:C4:37:D2:E2:0A:30:84:F7:7D:42:7A:02:DE X509v3 Authority Key Identifier: keyid:C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:1d:1b:7d:56:53:bb:25:13:e7:65:f4:2b:61:06:e5:4d:3b: 01:9a:27:44:ec:99:02:52:d8:8c:9a:89:d1:8a:6f:2a:56:74: 92:0d:b2:9a:70:cc:0b:61:15:93:73:bd:b9:a8:89:8e:60:cc: ff:7a:20:10:e1:71:c5:07:fc:ca:b2:37:13:da:a6:51:79:ec: 18:2f:5d:cd:af:40:b7:5a:37:97:e6:55:6c:22:dc:c1:6d:21: 89:9c:0a:13:87:43:30:90:d4:a9:8e:09:82:b5:f2:95:e1:00: 2d:5b:b5:99:9e:26:92:44:00:ea:98:d1:41:1f:c4:83:4d:f1: 5f:20:1b:97:82:4d:25:9d:9c:75:7e:37:c7:af:a4:2f:64:18: 56:70:37:a5:5a:f5:d6:64:7b:3d:73:ad:5b:37:ff:15:e2:81: 60:25:24:99:8e:7d:fc:b6:49:57:ce:36:57:83:d7:c4:ae:2c: 2a:45:bb:5c:12:44:17:ae:d2:5b:82:f4:a0:41:53:90:4a:32: 0d:12:25:0f:f0:b7:40:5f:b0:43:52:1e:4c:90:dc:6a:ee:cb: 47:7f:0a:e1:ef:ec:83:bf:e4:7d:a2:8e:b3:24:49:d6:a8:33: dd:ce:2a:7e:7d:39:d2:53:e0:bd:33:a1:ad:36:ec:f8:ae:73: 16:0a:97:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MhyUkdzfDxnjQ5Jho5N5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZGNiNjk1YzcwZGI0Yjk2MzcwNjAwNzUwOTE4YTRiM2E4 YTIxYTkwHhcNMjUxMjE5MDYwMDM1WhcNMjUxMjIwMDYwMDM1WjAzMTEwLwYDVQQD Eyg5YThkZWFmNTg0MjIzN2M0MzdkMmUyMGEzMDg0Zjc3ZDQyN2EwMmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcaCXhzk9AHqzGV2tGEsTTtUbKRH Bd2atGFTY97HPh/6sxZjKf5+ogw+5scVNAm/Oos0YflVa4tlnyYXGC/lHPTrH1CT xOraRCvFooLmYHx/uk5JhD8yv4aJAkrFCL398Y03rLfeg/+hdfQUK3rqkDJR4VkP kDBWEZknL7H4hKtPKHzTEXhZw+nO6Krq3vfA/JP3NdrBWquiymErFmLUIms+zQZ/ NDZUqrBjOru1agpx1qGRN5FMXy0efgU4ejEiomM50MLsSVdWiWVgcHX6lDGKg2qN RVyDFde5/7Jc6s6gTrAtO5qi6EqocDD0wyZFqmcVjZFCrctsW1bdGJ7lwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqN6vWEIjfEN9LiCjCE931CegLeMB8GA1UdIwQY MBaAFMnctpXHDbS5Y3BgB1CRiks6iiGpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWR5MmxjY050TGxqY0dBSFVKR0tTenFLSWFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wMjIyZmUtZGNjOC00YTdkLWJmYTIt ZWNhOTc4YzNjYjg1LzEveWR5MmxjY050TGxqY0dBSFVKR0tTenFLSWFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8wMjIyZmUtZGNjOC00YTdkLWJmYTItZWNhOTc4YzNjYjg1 LzEveWR5MmxjY050TGxqY0dBSFVKR0tTenFLSWFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABR0bfVZT uyUT52X0K2EG5U07AZonROyZAlLYjJqJ0YpvKlZ0kg2ymnDMC2EVk3O9uaiJjmDM /3ogEOFxxQf8yrI3E9qmUXnsGC9dza9At1o3l+ZVbCLcwW0hiZwKE4dDMJDUqY4J grXyleEALVu1mZ4mkkQA6pjRQR/Eg03xXyAbl4JNJZ2cdX43x6+kL2QYVnA3pVr1 1mR7PXOtWzf/FeKBYCUkmY59/LZJV842V4PXxK4sKkW7XBJEF67SW4L0oEFTkEoy DRIlD/C3QF+wQ1IeTJDcau7LR38K4e/sg7/kfaKOsyRJ1qgz3c4qfn050lPgvTOh rTbs+K5zFgqXBA== -----END CERTIFICATE-----Generated at Fri Dec 19 07:45:42 2025 by rpki-client