This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft File: yp4g0QNLRO916V_ffriIFbb30vg.mft (raw, json) Hash identifier: Sp+f1lADtZSaa1lFUYw79bMbrbdw4fOi4Hs6D2hTy1s= Subject key identifier: D5:4D:B7:7A:A3:79:1C:06:CB:0E:6E:EC:FC:6C:D0:D6:7C:05:B9:E0 Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8 Certificate issuer: /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8 Certificate serial: 019B39B3B40D22084927A23E58330BC39E4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft Manifest number: 0FE2 Signing time: Sat 20 Dec 2025 03:00:36 +0000 Manifest this update: Sat 20 Dec 2025 03:00:36 +0000 Manifest next update: Sun 21 Dec 2025 03:00:36 +0000 Files and hashes: 1: KJabg-goYfqIShBpOYNsGhfln78.roa (hash: 5RhSWnJ06JVLJawdnqYDlBh1ZbuwgFFPRLF+/W6LgAk=) 2: kwy8KgUICcwuEJop_j-CKqXu_cg.roa (hash: VpzhVsmBR8ZtX+oH6lHXeHMgxo/zL5mzYyLWURLNaRU=) 3: yp4g0QNLRO916V_ffriIFbb30vg.crl (hash: DjG+6T/xHgauFwWAI1r/x62+DbiV4uewmzjL/ExsWFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:b4:0d:22:08:49:27:a2:3e:58:33:0b:c3:9e:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8 Validity Not Before: Dec 20 03:00:36 2025 GMT Not After : Dec 21 03:00:36 2025 GMT Subject: CN=d54db77aa3791c06cb0e6eecfc6cd0d67c05b9e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3a:62:8e:8d:ba:97:e4:4c:07:9e:06:66:76: 35:9d:2e:e1:3e:5d:61:6f:e7:a5:5e:c5:dd:67:f4: b4:a9:17:b8:0f:31:34:93:a3:59:3d:4b:22:2e:df: fe:67:1b:9d:70:0d:d3:7a:6b:b3:64:e7:57:ed:c8: 10:d9:6a:2d:d9:4d:96:45:1a:cd:e4:5f:07:f2:54: ff:07:98:b0:5c:66:4a:e4:0e:19:28:4f:df:81:cc: 82:6c:bf:cd:70:fb:9f:ab:b0:87:ad:82:2a:a8:c1: 5f:7c:df:a8:93:29:c8:21:bc:ea:60:09:01:eb:cd: c6:04:68:66:f3:b8:42:44:e2:1f:47:5e:1b:2d:71: 70:44:95:5f:77:bb:18:b1:77:d7:87:7d:e2:31:4e: 75:9e:02:89:ab:71:b2:6e:c0:56:f1:cf:1e:3a:2f: ab:7b:2d:e2:03:ae:a7:20:c3:10:4b:cd:2c:4f:64: bc:a2:56:54:dd:e3:85:1d:0e:4f:6b:2e:ff:a7:c7: b8:c0:59:4c:10:a2:0d:ee:96:84:fe:4b:2f:3f:fa: 6d:53:ea:35:62:f2:3a:99:20:a4:8d:c9:62:b7:2a: 29:e5:ee:1c:63:42:50:9a:c8:b8:5f:1a:9f:38:e2: 19:1d:6f:cd:83:7e:a6:bd:50:56:47:ea:97:cd:11: 65:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:4D:B7:7A:A3:79:1C:06:CB:0E:6E:EC:FC:6C:D0:D6:7C:05:B9:E0 X509v3 Authority Key Identifier: keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e7:b6:e1:b0:31:b2:75:73:91:5f:80:ae:69:1a:b8:ab:48: 9f:38:3e:3b:98:5b:76:16:99:8c:db:15:4d:ee:5f:e6:2c:13: d0:ef:ce:45:e9:5a:ee:84:00:93:58:ae:b8:bd:30:61:f5:39: 06:0f:19:c1:b6:8b:4d:c9:47:5a:4d:1b:85:ef:47:0e:32:e2: 0a:b2:f5:09:49:a9:f7:b3:31:3f:61:66:b8:ab:5f:9b:f2:4d: d1:15:75:a7:6f:32:84:1f:38:64:cc:82:92:10:ab:a3:76:74: 8a:f6:c6:6f:a3:fc:22:fa:36:1c:0a:4a:1a:67:5e:ed:50:42: 37:2e:8f:86:5d:6e:7b:9f:5f:33:2a:87:9d:ab:9a:21:a1:4a: 38:52:8d:c1:09:22:dd:9c:86:e1:0a:d1:49:a1:6e:88:a1:d9: 1d:50:63:96:2f:25:e1:4e:2b:ad:f8:e2:84:bd:94:d5:48:11: 6b:5c:65:cb:3f:89:75:a1:76:4d:de:8a:28:e0:a6:21:1b:7a: 3a:9e:43:d2:76:85:aa:ea:66:93:17:f7:e3:bc:24:5f:33:e7: 32:0c:ad:21:bb:f6:e9:54:1f:9c:ee:d0:f6:01:e4:d5:e4:54: 99:34:1f:46:af:48:92:4f:86:58:38:26:db:04:30:e6:88:69: b0:21:23:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s7QNIghJJ6I+WDMLw55MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhOWUyMGQxMDM0YjQ0ZWY3NWU5NWZkZjdlYjg4ODE1YjZm N2QyZjgwHhcNMjUxMjIwMDMwMDM2WhcNMjUxMjIxMDMwMDM2WjAzMTEwLwYDVQQD EyhkNTRkYjc3YWEzNzkxYzA2Y2IwZTZlZWNmYzZjZDBkNjdjMDViOWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Dpijo26l+RMB54GZnY1nS7hPl1h b+elXsXdZ/S0qRe4DzE0k6NZPUsiLt/+ZxudcA3TemuzZOdX7cgQ2Wot2U2WRRrN 5F8H8lT/B5iwXGZK5A4ZKE/fgcyCbL/NcPufq7CHrYIqqMFffN+okynIIbzqYAkB 683GBGhm87hCROIfR14bLXFwRJVfd7sYsXfXh33iMU51ngKJq3GybsBW8c8eOi+r ey3iA66nIMMQS80sT2S8olZU3eOFHQ5Pay7/p8e4wFlMEKIN7paE/ksvP/ptU+o1 YvI6mSCkjclityop5e4cY0JQmsi4XxqfOOIZHW/Ng36mvVBWR+qXzRFlvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVNt3qjeRwGyw5u7Pxs0NZ8BbngMB8GA1UdIwQY MBaAFMqeINEDS0Tvdelf3364iBW299L4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXA0ZzBRTkxSTzkxNlZfZmZyaUlGYmIzMHZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xM2E2ODAtZjY5OC00Yzk3LTliYjYt MTI3MDFhYjUxYWNmLzEveXA0ZzBRTkxSTzkxNlZfZmZyaUlGYmIzMHZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8xM2E2ODAtZjY5OC00Yzk3LTliYjYtMTI3MDFhYjUxYWNm LzEveXA0ZzBRTkxSTzkxNlZfZmZyaUlGYmIzMHZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATee24bAx snVzkV+ArmkauKtInzg+O5hbdhaZjNsVTe5f5iwT0O/ORela7oQAk1iuuL0wYfU5 Bg8ZwbaLTclHWk0bhe9HDjLiCrL1CUmp97MxP2FmuKtfm/JN0RV1p28yhB84ZMyC khCro3Z0ivbGb6P8Ivo2HApKGmde7VBCNy6Phl1ue59fMyqHnauaIaFKOFKNwQki 3ZyG4QrRSaFuiKHZHVBjli8l4U4rrfjihL2U1UgRa1xlyz+JdaF2Td6KKOCmIRt6 Op5D0naFqupmkxf347wkXzPnMgytIbv26VQfnO7Q9gHk1eRUmTQfRq9Ikk+GWDgm 2wQw5ohpsCEj/A== -----END CERTIFICATE-----Generated at Sat Dec 20 09:34:44 2025 by rpki-client