This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft File: yBhKRQWwV2BY_TMwWb_xU65urVs.mft (raw, json) Hash identifier: nANDg678qk2eUVMjaCEMLb1tUJI3Pt4Ew7Y7ERsHsuA= Subject key identifier: AE:8B:07:FD:AA:49:99:7C:12:9A:25:9A:A6:90:BC:7E:A0:0D:AF:58 Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B Certificate issuer: /CN=c8184a4505b0576058fd333059bff153ae6ead5b Certificate serial: 019B42EE7B7F2B54BF775E06D0E082DD4077 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft Manifest number: 0EC0 Signing time: Sun 21 Dec 2025 22:01:23 +0000 Manifest this update: Sun 21 Dec 2025 22:01:23 +0000 Manifest next update: Mon 22 Dec 2025 22:01:23 +0000 Files and hashes: 1: nc-Ut0N4YEzlSxLCriwNW3L5bJY.roa (hash: CpEDv7qT3u78wfAAABUYzMXZLOCk+u5BsQilcshLjO0=) 2: yBhKRQWwV2BY_TMwWb_xU65urVs.crl (hash: ozvhWbw3dPT9zqBZbsBOy1zQz4mVGXm4+DBubIyqCC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:7b:7f:2b:54:bf:77:5e:06:d0:e0:82:dd:40:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b Validity Not Before: Dec 21 22:01:23 2025 GMT Not After : Dec 22 22:01:23 2025 GMT Subject: CN=ae8b07fdaa49997c129a259aa690bc7ea00daf58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:15:69:7f:82:8d:bb:e7:2a:f8:22:fc:54:1a: 1c:66:06:0e:e3:5b:92:2e:ec:7b:a7:6b:15:2f:c1: 92:44:7f:f5:6b:55:98:8f:92:cd:b4:de:f4:d8:9d: 54:b3:29:0a:52:5b:d4:80:00:cc:da:a9:35:ce:c4: 43:4f:8d:c9:24:fe:eb:55:52:db:2d:37:82:f7:0f: 45:de:cd:42:25:12:f0:b9:e0:ff:3a:26:cc:de:54: 46:97:f5:80:da:22:bf:2a:1f:9c:3f:1a:f7:5f:a5: 11:de:b7:d3:89:f1:9d:d4:34:3b:b0:3f:8c:2f:4a: 61:f3:a9:ce:7c:c2:99:0a:f1:75:72:ac:43:83:f4: 0e:ef:f2:08:9c:a8:38:ac:9f:b8:42:33:2e:cb:43: af:6d:be:89:55:f2:34:d5:95:6e:ae:0a:d7:45:66: c8:6c:12:f5:95:40:1d:81:30:6c:a4:99:1d:60:da: 78:4e:6d:3d:7d:e1:b1:5b:6b:64:d3:8f:5f:aa:85: 7f:8f:ec:90:23:cf:26:12:c5:f6:6b:7a:5a:2f:21: bf:d3:97:a9:99:08:52:a6:7c:83:03:00:1a:d7:88: 47:8e:86:8d:98:b0:94:3d:8e:74:d6:af:24:1d:1b: 81:29:95:98:e1:fb:d2:37:78:d2:86:d2:d5:c5:12: 73:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8B:07:FD:AA:49:99:7C:12:9A:25:9A:A6:90:BC:7E:A0:0D:AF:58 X509v3 Authority Key Identifier: keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:57:60:7e:09:fd:ee:85:a2:c9:35:97:62:0d:81:75:7b:c9: 25:9c:42:33:3d:6b:25:b4:5f:e6:0d:00:8c:7c:31:b7:d5:af: 2c:95:78:dc:15:47:fb:5f:a4:0a:79:2b:96:c7:45:81:b2:37: ea:a1:f8:c2:01:e5:e4:ca:fd:a8:18:60:23:ad:58:1a:0b:10: 4f:1d:90:43:b5:07:b9:2b:05:14:86:a5:c1:a6:60:c1:07:27: f9:ff:b0:61:bb:ff:b5:5f:f2:0b:de:a3:09:03:9e:aa:29:a2: 0d:56:36:ee:45:28:2b:ac:7a:08:32:03:37:9c:1e:82:8c:e0: e5:fa:cf:31:7a:ad:d3:59:76:51:d8:bd:56:3a:bc:1d:7d:d3: 76:41:92:d0:f2:58:d7:a2:59:bf:c5:92:84:34:fb:cc:4e:37: b3:34:73:a9:e6:5a:78:52:30:9c:c9:ff:ec:5d:76:0c:50:cf: 0c:87:39:e6:fc:7e:b4:2b:f0:d0:95:f8:e2:dc:54:f0:51:e0: ca:d2:1b:76:b6:f8:c5:f6:1d:b5:9a:eb:b0:02:6f:3f:d3:a9: b6:af:2a:25:53:ae:13:bc:90:83:d5:1c:b8:d2:ee:4c:f4:bb: 34:64:b6:a4:70:b1:53:cc:a5:11:89:33:4a:d7:cb:ad:55:f5: 7d:0c:cc:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7nt/K1S/d14G0OCC3UB3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MTg0YTQ1MDViMDU3NjA1OGZkMzMzMDU5YmZmMTUzYWU2 ZWFkNWIwHhcNMjUxMjIxMjIwMTIzWhcNMjUxMjIyMjIwMTIzWjAzMTEwLwYDVQQD EyhhZThiMDdmZGFhNDk5OTdjMTI5YTI1OWFhNjkwYmM3ZWEwMGRhZjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxVpf4KNu+cq+CL8VBocZgYO41uS Lux7p2sVL8GSRH/1a1WYj5LNtN702J1UsykKUlvUgADM2qk1zsRDT43JJP7rVVLb LTeC9w9F3s1CJRLwueD/OibM3lRGl/WA2iK/Kh+cPxr3X6UR3rfTifGd1DQ7sD+M L0ph86nOfMKZCvF1cqxDg/QO7/IInKg4rJ+4QjMuy0Ovbb6JVfI01ZVurgrXRWbI bBL1lUAdgTBspJkdYNp4Tm09feGxW2tk049fqoV/j+yQI88mEsX2a3paLyG/05ep mQhSpnyDAwAa14hHjoaNmLCUPY501q8kHRuBKZWY4fvSN3jShtLVxRJzXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6LB/2qSZl8EpolmqaQvH6gDa9YMB8GA1UdIwQY MBaAFMgYSkUFsFdgWP0zMFm/8VOubq1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lYWRhZDMtY2VkOS00MWZhLThlNWYt NWZiZjMzYWNkODNlLzEveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9lYWRhZDMtY2VkOS00MWZhLThlNWYtNWZiZjMzYWNkODNl LzEveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1dgfgn9 7oWiyTWXYg2BdXvJJZxCMz1rJbRf5g0AjHwxt9WvLJV43BVH+1+kCnkrlsdFgbI3 6qH4wgHl5Mr9qBhgI61YGgsQTx2QQ7UHuSsFFIalwaZgwQcn+f+wYbv/tV/yC96j CQOeqimiDVY27kUoK6x6CDIDN5wegozg5frPMXqt01l2Udi9Vjq8HX3TdkGS0PJY 16JZv8WShDT7zE43szRzqeZaeFIwnMn/7F12DFDPDIc55vx+tCvw0JX44txU8FHg ytIbdrb4xfYdtZrrsAJvP9Optq8qJVOuE7yQg9UcuNLuTPS7NGS2pHCxU8ylEYkz StfLrVX1fQzMaA== -----END CERTIFICATE-----Generated at Mon Dec 22 08:06:50 2025 by rpki-client