This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft File: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json) Hash identifier: KXzAjnQ4DP3Hf4U0VnElBp8k2L36Q7W77wr9SLolHWE= Subject key identifier: 88:1E:8E:C6:C6:38:44:13:0D:70:EB:9E:5A:45:03:BB:0A:51:C7:32 Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33 Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33 Certificate serial: 019B2E1D768F42EC2CDC9C6582336F0943D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft Manifest number: 1782 Signing time: Wed 17 Dec 2025 21:00:41 +0000 Manifest this update: Wed 17 Dec 2025 21:00:41 +0000 Manifest next update: Thu 18 Dec 2025 21:00:41 +0000 Files and hashes: 1: DfudKWBsua2Qw82vhg_Oro_4T98.roa (hash: XG4PsPIlXqIkgFnmlSjnQQmXXe49OoS+FFltYc4QbS8=) 2: ddzuJKDdfBfD05pd5AAViQoA2Pc.roa (hash: 2lQWzIDIqMXuR/qxqLFrOSTAaFdBjF2vdhRCL0julW4=) 3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: nlBeuxEgVlp+n4Gx8RbXJz28AFE4y03QFh39z6hYYTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:1d:76:8f:42:ec:2c:dc:9c:65:82:33:6f:09:43:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33 Validity Not Before: Dec 17 21:00:41 2025 GMT Not After : Dec 18 21:00:41 2025 GMT Subject: CN=881e8ec6c63844130d70eb9e5a4503bb0a51c732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b2:c0:aa:1d:ba:7f:64:77:e9:26:09:ea:ec: 4a:4a:d0:1e:c6:5f:ff:4a:07:1e:da:8f:e8:db:93: 3b:d5:be:b3:87:8d:62:6a:5d:36:55:8b:ad:12:d0: 9e:e0:52:9e:a8:b7:87:7e:21:80:2f:f1:3b:f5:8e: 7e:2b:ff:46:a2:b3:08:0a:2c:0c:52:cc:80:26:fa: ea:0c:4c:e4:47:87:20:bb:f0:7f:ed:b6:9b:f7:90: 95:81:ea:41:56:5c:0a:9c:11:25:95:cf:d3:35:5d: 97:de:5f:e1:b5:5d:88:81:32:99:4e:b2:98:63:f6: ed:b1:54:7e:21:48:25:f4:55:45:69:a3:09:2a:91: 39:a9:34:55:3a:35:98:21:2c:94:22:c3:25:30:1a: 3c:6e:c5:41:2b:9c:dd:e3:36:52:0a:99:e9:d0:b2: bc:37:0e:48:0f:98:73:15:5a:8e:78:86:47:37:45: d5:03:d6:00:4d:1b:02:8e:b4:63:38:3d:32:48:71: a9:75:d4:d8:5a:93:2a:ea:2c:d1:06:50:37:ed:cb: 6d:57:ab:11:d3:65:b5:64:86:08:46:a9:77:64:cb: 38:f2:96:60:8b:16:2f:33:91:a8:da:27:12:91:57: e6:81:45:20:12:43:e2:b7:6b:f4:4c:b1:8b:49:7c: c5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1E:8E:C6:C6:38:44:13:0D:70:EB:9E:5A:45:03:BB:0A:51:C7:32 X509v3 Authority Key Identifier: keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:d5:99:21:c1:03:0f:24:ff:71:37:ab:fc:9e:6f:8d:ab:82: 09:ed:f1:71:11:21:24:1a:78:c1:d3:af:67:0b:b0:ea:f2:5f: 17:60:3d:3f:6f:97:75:13:aa:77:11:d0:d3:95:7e:80:8d:fc: e6:c0:af:5b:72:79:3f:a8:86:e2:e7:4b:8e:a5:96:6c:6e:ff: e6:d9:ba:91:61:91:4c:95:4a:cb:b1:aa:4f:1c:88:26:2d:d4: 1e:28:57:3e:72:c1:6e:67:3f:2a:ba:b3:2c:ca:ef:9a:f6:d2: 73:c2:10:53:42:79:d6:81:7a:90:66:44:fd:84:be:16:cb:7a: 62:79:94:4c:2e:9a:f3:45:6b:aa:b0:9c:ab:89:98:3f:88:02: fd:6f:20:17:73:cd:8c:20:d1:6b:cc:02:22:a9:bd:91:8a:7f: a5:73:af:99:bb:1f:13:7b:c6:f4:33:bc:85:33:bf:0d:c8:12: ec:93:6b:14:32:c3:4d:1f:d0:30:0d:3c:c3:30:4b:c2:b8:96: f0:d6:e9:3e:cf:61:17:1e:7b:49:6f:11:3f:1b:41:45:5d:80: 2a:ac:43:2c:71:84:d9:20:40:d5:e9:f7:7b:4d:2f:f7:21:51: 8c:07:19:d7:d1:31:96:24:e2:64:fb:e5:05:00:06:ad:d3:d9: 5f:64:72:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuHXaPQuws3JxlgjNvCUPUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZWQ2NGM5M2RkZmRmMmY0OWI3ZWExYzIzZWFhZDA4NzAy NDlhMzMwHhcNMjUxMjE3MjEwMDQxWhcNMjUxMjE4MjEwMDQxWjAzMTEwLwYDVQQD Eyg4ODFlOGVjNmM2Mzg0NDEzMGQ3MGViOWU1YTQ1MDNiYjBhNTFjNzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7LAqh26f2R36SYJ6uxKStAexl// Sgce2o/o25M71b6zh41ial02VYutEtCe4FKeqLeHfiGAL/E79Y5+K/9GorMICiwM UsyAJvrqDEzkR4cgu/B/7bab95CVgepBVlwKnBEllc/TNV2X3l/htV2IgTKZTrKY Y/btsVR+IUgl9FVFaaMJKpE5qTRVOjWYISyUIsMlMBo8bsVBK5zd4zZSCpnp0LK8 Nw5ID5hzFVqOeIZHN0XVA9YATRsCjrRjOD0ySHGpddTYWpMq6izRBlA37cttV6sR 02W1ZIYIRql3ZMs48pZgixYvM5Go2icSkVfmgUUgEkPit2v0TLGLSXzFzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIgejsbGOEQTDXDrnlpFA7sKUccyMB8GA1UdIwQY MBaAFMntZMk9398vSbfqHCPqrQhwJJozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yYTJhYjItMzA5OC00YTBmLTgwOWMt MzVlZDViNTNkYTA1LzEveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8yYTJhYjItMzA5OC00YTBmLTgwOWMtMzVlZDViNTNkYTA1 LzEveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN9WZIcED DyT/cTer/J5vjauCCe3xcREhJBp4wdOvZwuw6vJfF2A9P2+XdROqdxHQ05V+gI38 5sCvW3J5P6iG4udLjqWWbG7/5tm6kWGRTJVKy7GqTxyIJi3UHihXPnLBbmc/Krqz LMrvmvbSc8IQU0J51oF6kGZE/YS+Fst6YnmUTC6a80VrqrCcq4mYP4gC/W8gF3PN jCDRa8wCIqm9kYp/pXOvmbsfE3vG9DO8hTO/DcgS7JNrFDLDTR/QMA08wzBLwriW 8NbpPs9hFx57SW8RPxtBRV2AKqxDLHGE2SBA1en3e00v9yFRjAcZ19ExliTiZPvl BQAGrdPZX2Rysw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:06:30 2025 by rpki-client