This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft File: YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft (raw, json) Hash identifier: RWcBvRut6tvIqL0OuQmoTYbvFc4ehvS9o53gLIfcQMM= Subject key identifier: 21:70:B5:35:9F:27:A9:C9:ED:C7:C3:04:1E:1B:9A:40:E2:00:42:2B Authority key identifier: 62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58 Certificate issuer: /CN=626752d870c6696f012b2f465d549f4000fe1858 Certificate serial: 019B3EDA5BD33124A180935071519A127017 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft Manifest number: 0374 Signing time: Sun 21 Dec 2025 03:00:56 +0000 Manifest this update: Sun 21 Dec 2025 03:00:56 +0000 Manifest next update: Mon 22 Dec 2025 03:00:56 +0000 Files and hashes: 1: YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl (hash: z2CGZxrF25K5qfSrbgqqT130yZl/V3VmOr81PMnL0hM=) 2: qn60XTUhVIHXIbT-HvehrrpwogU.roa (hash: qJSoQQbXyMZY80sZe+6a8U7g7EqUHMfReU7Wd4AfetU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:5b:d3:31:24:a1:80:93:50:71:51:9a:12:70:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=626752d870c6696f012b2f465d549f4000fe1858 Validity Not Before: Dec 21 03:00:56 2025 GMT Not After : Dec 22 03:00:56 2025 GMT Subject: CN=2170b5359f27a9c9edc7c3041e1b9a40e200422b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:c9:ba:f6:ab:3c:b3:99:35:c0:23:f8:de:7c: cf:68:74:2c:4e:45:67:99:b6:f7:5a:4f:f5:b0:e5: 49:57:62:7d:5f:81:8d:f2:6c:61:59:b9:14:57:40: 55:27:0c:15:d3:11:ac:40:f6:25:57:e4:a7:9c:62: 0f:46:bc:ae:b3:cb:5c:60:40:af:40:a0:0a:1f:80: c8:52:da:59:ff:f5:8c:16:13:c9:7f:25:e7:3b:b8: c1:b0:5e:88:72:fa:05:75:a4:cd:66:71:e9:42:6f: 30:6f:72:2f:a0:b4:22:c0:d0:04:59:f3:bb:a4:54: 50:54:c9:52:38:72:b8:ad:d9:18:e4:45:72:e4:3f: 5f:04:a2:e5:82:3f:57:d1:6e:60:73:6a:a9:ff:00: 0b:0a:37:d3:a3:dd:4c:b0:69:62:2d:4e:47:ec:94: d2:28:0c:62:de:b3:97:1f:24:ec:44:4a:cc:48:bc: d6:20:3e:50:14:c4:0d:5a:74:cc:26:93:96:d6:c6: 50:e8:e6:d3:4a:cb:7b:e5:96:07:fb:98:f9:9e:a4: 69:32:e4:dc:10:65:f6:cd:72:bf:ec:3a:70:50:73: b7:cd:4f:1b:46:b5:0a:fd:41:c5:9a:e5:11:dd:3d: b7:9c:0a:d7:9d:8d:44:3f:7a:e3:1a:06:2b:69:48: 4e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:70:B5:35:9F:27:A9:C9:ED:C7:C3:04:1E:1B:9A:40:E2:00:42:2B X509v3 Authority Key Identifier: keyid:62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:14:77:4d:74:bc:90:78:d3:ab:3d:2f:8e:53:4b:c0:1c:8e: 1d:f8:14:d2:43:83:13:97:4e:6f:fa:7d:eb:bc:d9:27:30:b9: 02:b6:03:67:dc:07:9e:4f:7d:c9:fd:42:f5:de:5a:8c:ed:85: 4a:e8:6c:a7:ae:be:82:ff:f7:54:e5:e5:00:6e:b1:d3:1d:1a: 38:04:65:4c:d0:fa:07:d1:32:95:ed:6f:b4:bc:7a:37:d2:01: c1:fb:6d:f8:6e:35:b5:f7:53:fc:64:9a:f4:c0:e4:ee:8e:57: f2:15:af:cb:af:b3:b3:2b:e6:5d:7c:72:7f:09:38:96:36:93: 63:82:63:3a:c4:6d:26:50:fb:9c:12:a6:a7:dd:6d:f7:55:bc: 64:01:22:d0:d5:56:6d:b5:aa:6b:65:2d:a1:91:a9:59:86:8b: 74:9f:62:54:0f:3f:5f:aa:a9:64:79:7c:c7:c1:60:f9:09:c8: 6e:6d:ee:da:aa:a3:12:b1:5f:9e:be:31:16:5e:16:4c:88:b5: 65:12:a8:4d:8e:1e:51:23:09:4c:a3:a3:c6:35:91:73:01:67: c8:19:07:61:b5:a0:52:7f:53:74:c6:13:57:9a:7f:e8:a5:e7: 0e:48:80:a4:bb:a0:b3:6d:31:84:7f:0c:69:4b:a3:f9:c1:35: c4:05:a6:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2lvTMSShgJNQcVGaEnAXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNjc1MmQ4NzBjNjY5NmYwMTJiMmY0NjVkNTQ5ZjQwMDBm ZTE4NTgwHhcNMjUxMjIxMDMwMDU2WhcNMjUxMjIyMDMwMDU2WjAzMTEwLwYDVQQD EygyMTcwYjUzNTlmMjdhOWM5ZWRjN2MzMDQxZTFiOWE0MGUyMDA0MjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA88m69qs8s5k1wCP43nzPaHQsTkVn mbb3Wk/1sOVJV2J9X4GN8mxhWbkUV0BVJwwV0xGsQPYlV+SnnGIPRryus8tcYECv QKAKH4DIUtpZ//WMFhPJfyXnO7jBsF6IcvoFdaTNZnHpQm8wb3IvoLQiwNAEWfO7 pFRQVMlSOHK4rdkY5EVy5D9fBKLlgj9X0W5gc2qp/wALCjfTo91MsGliLU5H7JTS KAxi3rOXHyTsRErMSLzWID5QFMQNWnTMJpOW1sZQ6ObTSst75ZYH+5j5nqRpMuTc EGX2zXK/7DpwUHO3zU8bRrUK/UHFmuUR3T23nArXnY1EP3rjGgYraUhOEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFwtTWfJ6nJ7cfDBB4bmkDiAEIrMB8GA1UdIwQY MBaAFGJnUthwxmlvASsvRl1Un0AA/hhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1kUzJIREdhVzhCS3k5R1hWU2ZRQUQtR0ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9iZmJiMmYtYjY3MS00ODE0LTg2Mjct YmEyNjQ4ZjE1MWQzLzEvWW1kUzJIREdhVzhCS3k5R1hWU2ZRQUQtR0ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9iZmJiMmYtYjY3MS00ODE0LTg2MjctYmEyNjQ4ZjE1MWQz LzEvWW1kUzJIREdhVzhCS3k5R1hWU2ZRQUQtR0ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBR3TXS8 kHjTqz0vjlNLwByOHfgU0kODE5dOb/p967zZJzC5ArYDZ9wHnk99yf1C9d5ajO2F Suhsp66+gv/3VOXlAG6x0x0aOARlTND6B9Eyle1vtLx6N9IBwftt+G41tfdT/GSa 9MDk7o5X8hWvy6+zsyvmXXxyfwk4ljaTY4JjOsRtJlD7nBKmp91t91W8ZAEi0NVW bbWqa2UtoZGpWYaLdJ9iVA8/X6qpZHl8x8Fg+QnIbm3u2qqjErFfnr4xFl4WTIi1 ZRKoTY4eUSMJTKOjxjWRcwFnyBkHYbWgUn9TdMYTV5p/6KXnDkiApLugs20xhH8M aUuj+cE1xAWmWQ== -----END CERTIFICATE-----Generated at Sun Dec 21 13:07:36 2025 by rpki-client