This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft File: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft (raw, json) Hash identifier: PzFI+lx8WSsg4nO3kS4bV7tagWvJBOt+b/ppfk5EAB8= Subject key identifier: CF:48:A6:D8:D9:4E:80:41:75:CC:32:49:24:8D:94:DC:23:1E:9D:11 Authority key identifier: C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94 Certificate issuer: /CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94 Certificate serial: 019B3C7F6DD9ACD41235D6607B11D3F428FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft Manifest number: 13FB Signing time: Sat 20 Dec 2025 16:02:22 +0000 Manifest this update: Sat 20 Dec 2025 16:02:22 +0000 Manifest next update: Sun 21 Dec 2025 16:02:22 +0000 Files and hashes: 1: APe792PPzgn2UcG2RsKnM9NZvXY.roa (hash: P5YJH0mHT12JV4knVxcd215g8BRGbGqkMZPdkHPu8r8=) 2: VgTi5tlMVXsu097Zaw82JIsKmhI.roa (hash: yaSgz1DC1PHPNVrBtX09+Wm5+D0DsnRGuOyAfnA8DC0=) 3: olC5ZpSEtozZndm4qi7fm722epU.roa (hash: osI53NMsoiUBoOeQCVmzdMQWvODeVRAe3gG8Sio/M8A=) 4: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl (hash: h5FULOoM02HWnpSQh25xyIoQ3fLqfvp7XER4qfNZHsk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:6d:d9:ac:d4:12:35:d6:60:7b:11:d3:f4:28:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94 Validity Not Before: Dec 20 16:02:22 2025 GMT Not After : Dec 21 16:02:22 2025 GMT Subject: CN=cf48a6d8d94e804175cc3249248d94dc231e9d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ca:14:1d:cf:9e:13:c9:f5:9c:97:b9:5c:6f: 4e:4d:ee:4e:22:6a:6b:7c:db:b9:6c:36:a2:8f:6f: 8d:bd:f6:d4:3a:e0:b4:e3:9f:35:8c:e7:f4:95:07: 5e:90:06:23:f8:1f:50:75:86:60:db:41:fd:dd:86: 25:bc:69:24:28:1b:63:4a:29:f3:6b:a0:7c:da:31: b9:c7:1d:1b:43:60:f4:81:74:71:a4:e8:49:62:88: a5:d4:48:bb:3a:6b:06:62:0a:50:92:14:a9:96:62: 08:15:f3:f2:97:6f:c6:97:3e:ca:0b:9d:32:28:ec: 69:01:ef:2b:c2:1a:aa:04:dd:42:ce:91:33:48:b1: 01:98:8d:ee:4c:3d:44:12:f9:97:ec:a3:bf:77:db: 0d:71:48:dc:b9:29:e5:b6:e3:db:27:ab:f9:4c:31: c6:c1:8e:f5:bb:91:fd:ed:ca:d1:a7:42:36:98:e3: 1f:f0:4e:79:54:a6:2b:16:37:cc:c5:c6:02:53:d1: 08:7d:63:cf:5f:f3:38:92:d7:42:16:1f:74:f2:a8: f7:65:5d:3b:3e:f2:b4:18:97:4e:34:5b:c4:d0:ec: 65:f4:de:3a:1d:8f:1c:1f:a1:d8:eb:de:c6:18:ea: 8b:87:90:5b:1f:f8:54:84:63:45:4f:72:dc:5a:a2: 22:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:48:A6:D8:D9:4E:80:41:75:CC:32:49:24:8D:94:DC:23:1E:9D:11 X509v3 Authority Key Identifier: keyid:C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:6d:06:57:d5:10:80:de:cf:02:9f:17:23:e4:70:47:37:ff: 75:be:a4:a8:26:d6:a6:75:5e:1f:67:cc:90:3b:70:ed:d2:b8: 1d:8b:23:0b:96:01:f5:cb:5b:24:a1:cf:64:a4:10:86:da:22: 93:85:d5:32:4e:93:47:5d:96:d4:87:82:58:d9:75:b7:9c:22: 1f:a8:a8:b1:2f:e6:f7:ca:25:29:da:59:71:12:44:71:69:eb: 38:5b:a7:4a:7a:6c:09:73:76:7f:1d:f9:94:18:a1:9d:f9:e5: cd:0d:3f:ed:8a:64:ab:ef:1f:f2:31:78:03:10:fc:2e:76:0f: ec:52:91:ec:6b:5e:49:21:f5:d5:ca:0d:c7:c3:8c:ec:c2:25: 6f:4c:1a:13:32:16:65:cd:7e:93:4a:f8:b0:83:95:dc:24:22: 94:80:15:68:80:29:4b:1b:a7:b8:ea:cd:21:98:9f:19:fb:b3: 1a:f6:d7:6b:c9:6f:b8:12:48:68:9e:df:99:93:2e:3e:9d:95: 94:e2:21:dc:8c:03:0a:b7:89:46:92:85:b5:eb:fa:d9:5f:b1: 9f:47:88:85:f6:58:9e:0a:e7:93:35:15:85:a6:fb:f6:6b:8e: a5:0d:ce:17:d6:bf:3b:83:5c:74:d5:72:8b:29:ba:1c:3c:dc: 40:f6:ee:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f23ZrNQSNdZgexHT9Cj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5NTBkN2IxOTc1YTM3MDNhZTI3YjMxYWQyZjkzMmFlNDZh NGNjOTQwHhcNMjUxMjIwMTYwMjIyWhcNMjUxMjIxMTYwMjIyWjAzMTEwLwYDVQQD EyhjZjQ4YTZkOGQ5NGU4MDQxNzVjYzMyNDkyNDhkOTRkYzIzMWU5ZDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1soUHc+eE8n1nJe5XG9OTe5OImpr fNu5bDaij2+NvfbUOuC04581jOf0lQdekAYj+B9QdYZg20H93YYlvGkkKBtjSinz a6B82jG5xx0bQ2D0gXRxpOhJYoil1Ei7OmsGYgpQkhSplmIIFfPyl2/Glz7KC50y KOxpAe8rwhqqBN1CzpEzSLEBmI3uTD1EEvmX7KO/d9sNcUjcuSnltuPbJ6v5TDHG wY71u5H97crRp0I2mOMf8E55VKYrFjfMxcYCU9EIfWPPX/M4ktdCFh908qj3ZV07 PvK0GJdONFvE0Oxl9N46HY8cH6HY697GGOqLh5BbH/hUhGNFT3LcWqIiSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9IptjZToBBdcwySSSNlNwjHp0RMB8GA1UdIwQY MBaAFMlQ17GXWjcDriezGtL5Mq5GpMyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wYzczMTgtYjM0OC00YjI0LWI5ZTUt YzZhODgyMWFkZWE5LzEveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wYzczMTgtYjM0OC00YjI0LWI5ZTUtYzZhODgyMWFkZWE5 LzEveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp20GV9UQ gN7PAp8XI+RwRzf/db6kqCbWpnVeH2fMkDtw7dK4HYsjC5YB9ctbJKHPZKQQhtoi k4XVMk6TR12W1IeCWNl1t5wiH6iosS/m98olKdpZcRJEcWnrOFunSnpsCXN2fx35 lBihnfnlzQ0/7Ypkq+8f8jF4AxD8LnYP7FKR7GteSSH11coNx8OM7MIlb0waEzIW Zc1+k0r4sIOV3CQilIAVaIApSxunuOrNIZifGfuzGvbXa8lvuBJIaJ7fmZMuPp2V lOIh3IwDCreJRpKFtev62V+xn0eIhfZYngrnkzUVhab79muOpQ3OF9a/O4NcdNVy iym6HDzcQPbusQ== -----END CERTIFICATE-----Generated at Sat Dec 20 17:55:20 2025 by rpki-client