This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft File: yZE15YfLs4vh63tt6cSAKdBF0nM.mft (raw, json) Hash identifier: GVAeQXmpCLyo0G5zPK06pAao80rE22Cf+v7j4p2FMrk= Subject key identifier: B8:F5:CF:7D:6D:3B:38:BE:CB:1B:BD:2D:15:B5:30:F9:16:A7:35:51 Authority key identifier: C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73 Certificate issuer: /CN=c99135e587cbb38be1eb7b6de9c48029d045d273 Certificate serial: 019B39B4606D2E9A3616E49E65C3F61AE053 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft Manifest number: 04DA Signing time: Sat 20 Dec 2025 03:01:21 +0000 Manifest this update: Sat 20 Dec 2025 03:01:21 +0000 Manifest next update: Sun 21 Dec 2025 03:01:21 +0000 Files and hashes: 1: DRY2u3TUS-wJQ8xa8rjRSpoapeo.roa (hash: wBdx6PRDwqiRs1k8IOdYm4GWe7EZE4vtyKYESIsAUKo=) 2: ItPmNdTjNgHqBxANMhUVH1DC5UU.roa (hash: QPQB5rA9kwVStlIhdq0li1+Di1amgsoq6BbyBsFXRrc=) 3: xKKq4SF6-ObtvfC7jpcnypKexwg.roa (hash: qw4y1FHQavkl3C0h/hnsN3/lIOTC2hyOIzm3AanVe3c=) 4: yZE15YfLs4vh63tt6cSAKdBF0nM.crl (hash: C/yiS9VYKl/e0AvU8yjTasJbUJhE8H8Jgxeo+AwJQt8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 03:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:60:6d:2e:9a:36:16:e4:9e:65:c3:f6:1a:e0:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c99135e587cbb38be1eb7b6de9c48029d045d273 Validity Not Before: Dec 20 03:01:21 2025 GMT Not After : Dec 21 03:01:21 2025 GMT Subject: CN=b8f5cf7d6d3b38becb1bbd2d15b530f916a73551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0a:52:c7:b2:90:c2:e7:84:0c:73:16:65:09: 4f:43:36:e1:a8:76:9e:e4:a2:03:63:b5:e7:9d:08: 37:83:34:0e:2d:27:f5:ac:12:a5:c3:ac:91:58:5f: c7:58:ae:83:71:3b:ca:8f:a1:8d:1c:23:04:c3:16: 16:d0:c8:37:31:2b:62:7a:47:4f:59:62:7f:8d:99: 12:a0:c1:ca:8d:01:4e:c2:85:7e:97:2b:01:f9:ad: d6:af:da:cf:3e:d3:b0:bb:1a:4b:d2:9c:ab:02:7d: 19:36:d0:15:30:44:58:1e:54:20:95:e1:06:9f:28: 47:89:a7:a1:77:09:f6:ca:ff:aa:08:b3:fd:1b:2c: 7c:74:0c:e4:28:44:8c:cb:7c:72:55:7c:46:4b:85: b5:cd:4f:85:50:d2:ae:91:2c:93:63:ef:67:1b:82: fb:9b:d9:50:97:7e:73:0c:f6:e5:73:98:02:dc:9d: d9:2e:30:48:a5:cb:42:e8:47:31:59:59:d0:ba:d5: 98:99:71:e8:81:8a:e0:23:66:47:0a:cd:be:07:1b: f4:46:18:ef:4c:d0:02:bf:da:5a:7a:c6:98:e2:a7: 40:a1:9e:9d:a8:22:09:ab:5d:4f:84:01:bd:66:0a: 29:6e:71:88:d7:02:e0:95:a2:a3:54:53:0c:16:b9: 51:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F5:CF:7D:6D:3B:38:BE:CB:1B:BD:2D:15:B5:30:F9:16:A7:35:51 X509v3 Authority Key Identifier: keyid:C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:cb:1c:44:db:2b:aa:91:f2:44:96:5f:5f:96:4c:8f:d3:ce: e8:52:3b:a5:cc:ca:7e:f2:33:a8:d7:8d:76:75:e5:31:4c:46: 16:16:8b:4f:0c:df:f5:f7:11:e2:a3:ab:cd:71:2a:2a:63:57: fa:c9:9e:9e:92:86:35:06:9b:0f:f8:37:69:61:6d:b3:71:d3: 0f:8b:c8:ae:77:4d:f7:34:a8:ee:82:f7:9a:fb:99:97:91:85: 7c:63:41:95:b8:68:74:6f:43:bf:ea:7e:60:3d:81:02:5c:15: af:76:03:7a:67:7b:e6:5d:d1:fc:37:69:19:29:31:fc:0a:c5: 0f:c2:a3:10:01:07:1b:1e:b1:76:48:2d:2e:60:fa:d0:f3:e2: 24:9c:ae:a0:62:10:36:35:8d:01:62:97:dc:88:39:1b:30:be: 69:9a:d7:0b:22:85:ba:9f:65:18:87:94:34:58:c0:fb:d8:c4: f6:11:c5:e7:1b:fd:b4:1e:f1:82:b7:07:57:ff:08:8e:ad:50: 3b:97:d4:9f:68:41:aa:fe:de:17:45:96:24:d4:26:87:a6:8a: 94:c5:7c:ee:3c:b9:9b:a1:83:5e:11:f9:ce:9e:ce:70:ed:b3: 59:02:d2:bf:84:60:45:63:eb:44:7b:99:9e:5d:d3:f9:81:2c: 8a:a6:41:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tGBtLpo2FuSeZcP2GuBTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OTEzNWU1ODdjYmIzOGJlMWViN2I2ZGU5YzQ4MDI5ZDA0 NWQyNzMwHhcNMjUxMjIwMDMwMTIxWhcNMjUxMjIxMDMwMTIxWjAzMTEwLwYDVQQD EyhiOGY1Y2Y3ZDZkM2IzOGJlY2IxYmJkMmQxNWI1MzBmOTE2YTczNTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvApSx7KQwueEDHMWZQlPQzbhqHae 5KIDY7XnnQg3gzQOLSf1rBKlw6yRWF/HWK6DcTvKj6GNHCMEwxYW0Mg3MStiekdP WWJ/jZkSoMHKjQFOwoV+lysB+a3Wr9rPPtOwuxpL0pyrAn0ZNtAVMERYHlQgleEG nyhHiaehdwn2yv+qCLP9Gyx8dAzkKESMy3xyVXxGS4W1zU+FUNKukSyTY+9nG4L7 m9lQl35zDPblc5gC3J3ZLjBIpctC6EcxWVnQutWYmXHogYrgI2ZHCs2+Bxv0Rhjv TNACv9paesaY4qdAoZ6dqCIJq11PhAG9ZgopbnGI1wLglaKjVFMMFrlRNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLj1z31tOzi+yxu9LRW1MPkWpzVRMB8GA1UdIwQY MBaAFMmRNeWHy7OL4et7benEgCnQRdJzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVpFMTVZZkxzNHZoNjN0dDZjU0FLZEJGMG5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zMDk1MWUtYTMwOS00NWMzLWJhMTYt MTM0ZDk1M2NhMDkzLzEveVpFMTVZZkxzNHZoNjN0dDZjU0FLZEJGMG5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8zMDk1MWUtYTMwOS00NWMzLWJhMTYtMTM0ZDk1M2NhMDkz LzEveVpFMTVZZkxzNHZoNjN0dDZjU0FLZEJGMG5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbMscRNsr qpHyRJZfX5ZMj9PO6FI7pczKfvIzqNeNdnXlMUxGFhaLTwzf9fcR4qOrzXEqKmNX +smenpKGNQabD/g3aWFts3HTD4vIrndN9zSo7oL3mvuZl5GFfGNBlbhodG9Dv+p+ YD2BAlwVr3YDemd75l3R/DdpGSkx/ArFD8KjEAEHGx6xdkgtLmD60PPiJJyuoGIQ NjWNAWKX3Ig5GzC+aZrXCyKFup9lGIeUNFjA+9jE9hHF5xv9tB7xgrcHV/8Ijq1Q O5fUn2hBqv7eF0WWJNQmh6aKlMV87jy5m6GDXhH5zp7OcO2zWQLSv4RgRWPrRHuZ nl3T+YEsiqZB8Q== -----END CERTIFICATE-----Generated at Sat Dec 20 12:39:33 2025 by rpki-client