This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft File: yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft (raw, json) Hash identifier: mkUwbm3ow0GPDGMgAST5qk6zjtgaTxV/zk168BZQPZY= Subject key identifier: 79:6B:29:93:3E:25:68:E9:42:0A:5A:93:EF:69:44:CB:AF:C4:38:5D Authority key identifier: C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68 Certificate issuer: /CN=c82bedbcf7b5360fee245b7a255f6640b7276968 Certificate serial: 019B2D0B05AE1EB4893B43E632023B7DB532 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft Manifest number: 0857 Signing time: Wed 17 Dec 2025 16:00:55 +0000 Manifest this update: Wed 17 Dec 2025 16:00:55 +0000 Manifest next update: Thu 18 Dec 2025 16:00:55 +0000 Files and hashes: 1: Hjt16ZgJYnsTZcWE0Va13YoIt7M.roa (hash: xjrK/sVAC5wf26/BaujuTP3RD5GR/bbBxu4fokZn8xY=) 2: yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl (hash: blL3pacD9KQqxZ58Lv8HkAsebWOm9GoKfJAjOiZEVEc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:05:ae:1e:b4:89:3b:43:e6:32:02:3b:7d:b5:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c82bedbcf7b5360fee245b7a255f6640b7276968 Validity Not Before: Dec 17 16:00:55 2025 GMT Not After : Dec 18 16:00:55 2025 GMT Subject: CN=796b29933e2568e9420a5a93ef6944cbafc4385d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6a:52:15:bb:ce:14:4e:f6:bd:da:23:d8:a3: 44:81:8a:74:0b:76:59:85:85:3d:4c:3d:ca:6b:41: d7:d7:17:48:bd:9f:fd:ed:f2:b7:3c:73:d5:a1:4a: 4a:0e:4a:65:5a:1b:cc:ce:31:7e:a2:41:65:d5:0d: ce:6d:4e:05:1e:54:de:44:37:8b:19:ac:a5:3e:4f: d2:cd:28:38:ad:d6:f2:ea:da:d5:03:6c:14:14:46: 56:96:bd:b3:16:4b:ad:3d:c8:94:53:b9:07:16:e9: 64:10:a5:34:14:a6:e2:f9:4e:87:6d:37:a6:35:ba: 84:bc:73:b1:39:e8:d1:36:f8:0f:e6:2d:22:5a:d7: 12:87:15:e1:28:96:af:9f:f5:7b:94:f8:01:74:73: 2f:d4:4c:20:18:b3:95:11:26:19:85:1f:f2:e0:51: 95:ca:37:6d:f7:b7:e5:6f:82:28:ae:e8:69:cb:25: 3f:ad:a7:4d:e1:5a:63:b0:b6:e7:9d:b3:c0:15:70: a9:1a:c8:b9:57:7c:ba:a1:a5:71:06:d2:71:07:70: 2c:74:36:41:6a:4d:1e:1d:a7:bd:f2:01:83:12:d0: 95:05:d2:10:39:98:22:f4:30:41:2a:4b:8a:2a:c4: b0:9b:03:83:bd:20:5d:2e:8b:c7:78:e9:bd:2e:d1: 6d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6B:29:93:3E:25:68:E9:42:0A:5A:93:EF:69:44:CB:AF:C4:38:5D X509v3 Authority Key Identifier: keyid:C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:8d:93:b2:0e:57:26:6c:52:ae:77:4f:aa:28:38:12:38:59: a8:b7:79:1e:ee:09:84:e0:3f:bd:a4:de:68:be:9d:e6:86:ca: 7d:0b:f0:75:bd:b9:be:c5:87:6e:a9:7c:b2:e8:a6:36:dd:ff: ab:2b:d9:e7:3d:f6:bb:c8:af:b5:3b:40:13:d6:02:99:17:df: 03:16:44:99:37:2b:a7:46:49:df:61:3a:a1:cc:27:5c:7e:97: 64:26:35:d4:83:a3:92:5d:a7:2f:79:c8:8d:7d:51:10:2f:16: 5a:cb:90:9d:25:ab:00:03:c2:0d:ab:f5:ac:e5:7a:f2:54:98: 6b:ba:f3:4f:9f:25:ba:82:e8:f9:51:de:f4:80:ac:21:34:c1: 2d:ed:2f:3c:cc:f9:51:d9:11:f9:56:f9:36:14:31:d4:f7:80: 31:86:88:78:29:b0:05:c1:73:42:f3:15:e2:73:9a:6d:98:d5: 42:3d:63:2e:a5:bd:98:4a:a7:b2:a1:f0:69:af:23:5c:4d:de: 54:e1:40:c2:08:df:85:85:49:67:7b:bd:c6:d3:88:b5:c8:44: d3:1c:92:5d:16:d0:9f:fc:67:98:2d:d9:de:d3:6d:3a:f8:2a: 4e:3f:dc:77:9d:51:65:02:ab:ef:1e:2c:c0:ed:4e:bb:7f:53: bf:a8:2e:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstCwWuHrSJO0PmMgI7fbUyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MmJlZGJjZjdiNTM2MGZlZTI0NWI3YTI1NWY2NjQwYjcy NzY5NjgwHhcNMjUxMjE3MTYwMDU1WhcNMjUxMjE4MTYwMDU1WjAzMTEwLwYDVQQD Eyg3OTZiMjk5MzNlMjU2OGU5NDIwYTVhOTNlZjY5NDRjYmFmYzQzODVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGpSFbvOFE72vdoj2KNEgYp0C3ZZ hYU9TD3Ka0HX1xdIvZ/97fK3PHPVoUpKDkplWhvMzjF+okFl1Q3ObU4FHlTeRDeL GaylPk/SzSg4rdby6trVA2wUFEZWlr2zFkutPciUU7kHFulkEKU0FKbi+U6HbTem NbqEvHOxOejRNvgP5i0iWtcShxXhKJavn/V7lPgBdHMv1EwgGLOVESYZhR/y4FGV yjdt97flb4IoruhpyyU/radN4VpjsLbnnbPAFXCpGsi5V3y6oaVxBtJxB3AsdDZB ak0eHae98gGDEtCVBdIQOZgi9DBBKkuKKsSwmwODvSBdLovHeOm9LtFt5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlrKZM+JWjpQgpak+9pRMuvxDhdMB8GA1UdIwQY MBaAFMgr7bz3tTYP7iRbeiVfZkC3J2loMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUN2dHZQZTFOZ191SkZ0NkpWOW1RTGNuYVdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9kZDU5ZDktZWFkZi00NzEzLTg5Nzct NDJmYTNjZmJiNTAzLzEveUN2dHZQZTFOZ191SkZ0NkpWOW1RTGNuYVdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9kZDU5ZDktZWFkZi00NzEzLTg5NzctNDJmYTNjZmJiNTAz LzEveUN2dHZQZTFOZ191SkZ0NkpWOW1RTGNuYVdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiI2Tsg5X JmxSrndPqig4EjhZqLd5Hu4JhOA/vaTeaL6d5obKfQvwdb25vsWHbql8suimNt3/ qyvZ5z32u8ivtTtAE9YCmRffAxZEmTcrp0ZJ32E6ocwnXH6XZCY11IOjkl2nL3nI jX1REC8WWsuQnSWrAAPCDav1rOV68lSYa7rzT58luoLo+VHe9ICsITTBLe0vPMz5 UdkR+Vb5NhQx1PeAMYaIeCmwBcFzQvMV4nOabZjVQj1jLqW9mEqnsqHwaa8jXE3e VOFAwgjfhYVJZ3u9xtOItchE0xySXRbQn/xnmC3Z3tNtOvgqTj/cd51RZQKr7x4s wO1Ou39Tv6guxQ== -----END CERTIFICATE-----Generated at Wed Dec 17 18:45:51 2025 by rpki-client