This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft File: YeENrB93PFWiRHUzRnGeiZ9NRDI.mft (raw, json) Hash identifier: o/6t3cIa8IPscSyC9NziVbcmRIrsHPTTd4GCsXEupwk= Subject key identifier: 22:A8:BA:05:55:0B:DA:BD:00:A1:04:A5:DC:2F:3A:8B:CF:AD:CF:92 Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32 Certificate issuer: /CN=61e10dac1f773c55a244753346719e899f4d4432 Certificate serial: 019B3D908B0F532BD53DCE5DB0DF8C55F84E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 21:00:41 +0000 Manifest this update: Sat 20 Dec 2025 21:00:41 +0000 Manifest next update: Sun 21 Dec 2025 21:00:41 +0000 Files and hashes: 1: YeENrB93PFWiRHUzRnGeiZ9NRDI.crl (hash: RhQUIbW7s18bYdKsKE0ukTIwfI+CmgzB+Jo+plnfoD0=) 2: qHh2dMf6gzsBLZi2QJoOFRMxXUE.roa (hash: +vCZjhtO1NUwTGmpJoWATWE7GuZBiydhqPS4mtxNcUM=) 3: xEEfHzO6g6rZeT9FwkUuiWjw_Xw.roa (hash: 0+Wkhje+So8WuPHD5PcbqywDfHJV+b9Sf51efUGfd24=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:8b:0f:53:2b:d5:3d:ce:5d:b0:df:8c:55:f8:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432 Validity Not Before: Dec 20 21:00:41 2025 GMT Not After : Dec 21 21:00:41 2025 GMT Subject: CN=22a8ba05550bdabd00a104a5dc2f3a8bcfadcf92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cb:0b:2f:d1:b6:b3:ed:5e:a2:06:18:17:12: 85:a8:bf:15:cb:25:ee:ee:0f:2f:13:11:75:3c:d3: 81:ae:bf:c3:28:0b:4e:37:62:9a:61:7f:42:d8:de: f5:02:e1:9c:93:d9:90:64:fc:56:10:f6:43:36:91: 0f:98:5d:0d:88:64:a9:a1:3a:74:80:cc:c1:7e:b4: 90:da:b6:27:ec:48:68:c2:6b:ec:38:80:b2:49:47: 5e:9f:c1:cc:f2:12:8f:b8:92:2c:b8:ce:c1:2b:93: bf:ab:5a:76:31:dc:07:2b:34:67:23:46:a5:4f:df: 1b:ed:1a:83:d9:bd:2d:68:5f:17:13:97:57:48:6c: 0c:06:40:07:0c:e7:33:b8:78:a3:84:85:af:eb:de: e0:16:53:13:6c:2c:48:8a:dd:89:50:dc:9f:49:10: 4b:70:47:fb:09:0f:9a:27:85:ca:af:71:13:a4:0c: aa:e9:f4:79:16:3f:25:1d:34:f6:2f:a2:98:ef:de: 00:22:48:60:00:46:86:c0:28:1b:d3:b9:f1:26:5e: c4:ff:77:17:6a:ae:71:fc:dc:a5:9d:e8:57:b0:04: 63:93:e9:1c:3b:b9:8b:6b:3f:63:e0:6d:f2:61:51: 1f:c4:75:e0:79:84:a7:f2:d7:4d:ce:7e:e9:63:b9: b8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A8:BA:05:55:0B:DA:BD:00:A1:04:A5:DC:2F:3A:8B:CF:AD:CF:92 X509v3 Authority Key Identifier: keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:b5:25:6a:87:3c:b5:30:ae:20:35:e4:91:af:e7:25:79:62: ee:8c:e1:b5:68:ea:48:10:b7:b9:f8:10:b2:a2:ca:ae:e7:6d: c6:36:2a:78:a3:1d:60:40:13:af:12:e9:ed:fb:8f:aa:19:f6: 5c:dc:55:ad:46:bc:9a:20:bc:f6:74:87:ae:8a:f8:a8:b9:70: 5a:fc:d1:27:3a:91:9e:ae:75:32:da:3a:c8:ba:4f:56:13:30: ed:7d:2d:eb:a3:23:f3:39:19:0f:27:1e:c6:42:ae:65:1e:3f: 04:47:27:91:91:49:9a:a6:67:e1:23:32:4c:f6:91:10:67:be: 66:41:96:d0:cc:31:43:ef:bf:51:32:2f:ea:2e:86:74:69:d4: b6:09:bd:c2:ce:77:a1:e5:3f:aa:ac:3f:39:96:78:1b:4e:69: 67:c5:97:34:48:a4:6b:f1:60:85:d7:f7:27:01:cd:3a:47:76: eb:71:53:b6:e7:ef:f4:2f:7c:a0:4f:63:c1:b6:dd:55:f2:03: 37:e5:b9:a7:95:00:31:56:b5:2c:7b:70:35:4b:b1:ea:8a:c7: c0:35:29:59:66:9b:13:8e:70:9a:fd:49:a5:f2:0f:69:38:37: 2a:17:9e:91:0e:fc:6e:9d:fd:a6:23:30:15:48:e3:d8:9f:42: 1e:d0:29:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kIsPUyvVPc5dsN+MVfhOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxZTEwZGFjMWY3NzNjNTVhMjQ0NzUzMzQ2NzE5ZTg5OWY0 ZDQ0MzIwHhcNMjUxMjIwMjEwMDQxWhcNMjUxMjIxMjEwMDQxWjAzMTEwLwYDVQQD EygyMmE4YmEwNTU1MGJkYWJkMDBhMTA0YTVkYzJmM2E4YmNmYWRjZjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcsLL9G2s+1eogYYFxKFqL8VyyXu 7g8vExF1PNOBrr/DKAtON2KaYX9C2N71AuGck9mQZPxWEPZDNpEPmF0NiGSpoTp0 gMzBfrSQ2rYn7EhowmvsOICySUden8HM8hKPuJIsuM7BK5O/q1p2MdwHKzRnI0al T98b7RqD2b0taF8XE5dXSGwMBkAHDOczuHijhIWv697gFlMTbCxIit2JUNyfSRBL cEf7CQ+aJ4XKr3ETpAyq6fR5Fj8lHTT2L6KY794AIkhgAEaGwCgb07nxJl7E/3cX aq5x/NylnehXsARjk+kcO7mLaz9j4G3yYVEfxHXgeYSn8tdNzn7pY7m45wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKougVVC9q9AKEEpdwvOovPrc+SMB8GA1UdIwQY MBaAFGHhDawfdzxVokR1M0ZxnomfTUQyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWVFTnJCOTNQRldpUkhVelJuR2VpWjlOUkRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84NWVmMzUtNjQ3YS00MTcyLThjNjQt NmRiM2NhZWY3M2Q5LzEvWWVFTnJCOTNQRldpUkhVelJuR2VpWjlOUkRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS84NWVmMzUtNjQ3YS00MTcyLThjNjQtNmRiM2NhZWY3M2Q5 LzEvWWVFTnJCOTNQRldpUkhVelJuR2VpWjlOUkRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbUlaoc8 tTCuIDXkka/nJXli7ozhtWjqSBC3ufgQsqLKrudtxjYqeKMdYEATrxLp7fuPqhn2 XNxVrUa8miC89nSHror4qLlwWvzRJzqRnq51Mto6yLpPVhMw7X0t66Mj8zkZDyce xkKuZR4/BEcnkZFJmqZn4SMyTPaREGe+ZkGW0MwxQ++/UTIv6i6GdGnUtgm9ws53 oeU/qqw/OZZ4G05pZ8WXNEika/Fghdf3JwHNOkd263FTtufv9C98oE9jwbbdVfID N+W5p5UAMVa1LHtwNUux6orHwDUpWWabE45wmv1JpfIPaTg3KheekQ78bp39piMw FUjj2J9CHtApow== -----END CERTIFICATE-----Generated at Sun Dec 21 02:22:49 2025 by rpki-client