This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft File: yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft (raw, json) Hash identifier: +ve0Ltt2mwbj6yTm3kRpUo60BC8SDjUK8c2MY1rwNrc= Subject key identifier: 74:32:15:59:37:FD:84:24:1F:62:DA:19:74:30:9D:A2:3A:D3:15:11 Authority key identifier: C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5 Certificate issuer: /CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5 Certificate serial: 019B3C7F83B14F565550F374DE30B1401795 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft Manifest number: 0BAB Signing time: Sat 20 Dec 2025 16:02:28 +0000 Manifest this update: Sat 20 Dec 2025 16:02:28 +0000 Manifest next update: Sun 21 Dec 2025 16:02:28 +0000 Files and hashes: 1: YIzXk3w2A_mHXnQwfHIRuGRDzO0.roa (hash: w+KFjfkzM8iWvfdH1LsSPeTDcAp7/XS8C3VsFxe8b1Q=) 2: yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl (hash: h1nttEnUrLFwdr9dyBdNAIKsFk9EU+y+QZelQYKviG4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:83:b1:4f:56:55:50:f3:74:de:30:b1:40:17:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5 Validity Not Before: Dec 20 16:02:28 2025 GMT Not After : Dec 21 16:02:28 2025 GMT Subject: CN=7432155937fd84241f62da1974309da23ad31511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:35:07:35:3b:11:f7:e7:ae:59:be:d0:3c:3e: a3:9c:55:26:c3:9c:3a:a2:6e:d5:ec:2a:ca:b0:17: 9f:8f:9d:3a:ed:b3:bc:09:58:e0:39:d1:79:8b:ff: 37:97:f1:13:11:4e:d2:eb:2a:ed:7a:fb:68:c3:28: 89:12:be:32:83:e6:25:d5:61:9b:f4:d8:fe:41:63: b5:84:23:a1:80:db:3d:ab:3f:bd:62:ca:18:b1:91: f1:f0:18:44:01:40:29:4e:77:5d:7c:90:b0:96:aa: 91:a7:67:34:b0:a7:84:af:30:9b:60:85:53:c6:81: 0d:c7:08:a2:2e:00:87:76:a4:f8:a9:f6:fe:93:c5: 5a:c1:cb:53:e9:86:69:b4:81:da:ec:41:58:d9:55: 62:19:82:02:11:1c:50:1e:ed:4e:00:1c:23:04:ac: c3:03:62:9a:1c:6f:bb:05:28:d7:b6:65:c2:8f:e6: 2d:fe:75:ab:b6:52:d9:21:c0:30:84:58:5c:44:8c: c3:48:85:93:43:a0:90:df:52:a6:2d:29:b6:53:66: 4c:d3:6c:12:9a:80:9c:20:a4:43:24:b2:7b:50:9b: 71:50:1a:5e:94:89:de:fb:f7:d8:39:ec:5d:f7:73: a1:be:c5:d3:15:eb:6d:63:04:5f:0a:d2:ce:0d:01: 45:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:32:15:59:37:FD:84:24:1F:62:DA:19:74:30:9D:A2:3A:D3:15:11 X509v3 Authority Key Identifier: keyid:C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:5e:81:fe:a8:7b:24:93:20:54:0a:01:79:81:de:78:bd:bc: 7b:36:e8:bd:61:20:af:c9:14:1e:f2:e2:af:e3:42:b3:5d:0f: f7:63:47:12:fb:b0:53:44:6b:93:51:7f:93:bb:46:97:9e:82: 25:19:cc:ef:96:59:ad:e5:ab:6e:c3:02:2b:a4:61:53:91:2e: 54:18:35:67:36:50:48:d2:4e:e9:dd:f8:ee:c8:28:d2:5f:01: 1c:a7:3d:fc:eb:ed:78:b9:88:b5:53:e4:15:ad:a4:73:9d:6a: c9:b0:de:0e:7c:92:76:71:9d:13:97:6d:f3:67:ec:cb:60:0b: e7:17:5b:b4:9c:c5:2c:3e:9c:13:fc:1a:3b:f6:7f:99:2c:da: 6b:ce:f4:bb:f5:3e:5a:a0:bd:7f:f3:73:ab:2b:8c:6b:ad:c0: 44:54:ad:2b:f2:02:cc:4c:5c:5a:3f:af:70:06:4b:87:ea:6a: cb:d6:8b:5a:97:6a:d4:39:6a:f2:e4:f5:f0:f5:ce:ee:0d:11: 87:49:2c:a0:fb:4d:b0:55:8e:be:80:45:10:9b:91:ed:f1:98: 7d:cd:ba:23:2c:a0:8c:f5:23:40:9e:7a:82:a5:48:9a:45:2b: 27:0e:b6:f1:14:c0:ae:51:9c:18:7a:fa:cb:e7:dc:f3:0c:48: d6:27:e6:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f4OxT1ZVUPN03jCxQBeVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZjliYWFiMWExM2RmMzBlZmYwZmNkNzgwYzRiYmM1NGJj M2U2ZDUwHhcNMjUxMjIwMTYwMjI4WhcNMjUxMjIxMTYwMjI4WjAzMTEwLwYDVQQD Eyg3NDMyMTU1OTM3ZmQ4NDI0MWY2MmRhMTk3NDMwOWRhMjNhZDMxNTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozUHNTsR9+euWb7QPD6jnFUmw5w6 om7V7CrKsBefj5067bO8CVjgOdF5i/83l/ETEU7S6yrtevtowyiJEr4yg+Yl1WGb 9Nj+QWO1hCOhgNs9qz+9YsoYsZHx8BhEAUApTnddfJCwlqqRp2c0sKeErzCbYIVT xoENxwiiLgCHdqT4qfb+k8VawctT6YZptIHa7EFY2VViGYICERxQHu1OABwjBKzD A2KaHG+7BSjXtmXCj+Yt/nWrtlLZIcAwhFhcRIzDSIWTQ6CQ31KmLSm2U2ZM02wS moCcIKRDJLJ7UJtxUBpelIne+/fYOexd93OhvsXTFettYwRfCtLODQFF5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQyFVk3/YQkH2LaGXQwnaI60xURMB8GA1UdIwQY MBaAFMj5uqsaE98w7/D814DEu8VLw+bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVBtNnF4b1QzekR2OFB6WGdNUzd4VXZENXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZTY3NjItMDk4OS00OGVmLWE4ZDIt ZGI0ODRjY2U3MjkzLzEveVBtNnF4b1QzekR2OFB6WGdNUzd4VXZENXRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8zZTY3NjItMDk4OS00OGVmLWE4ZDItZGI0ODRjY2U3Mjkz LzEveVBtNnF4b1QzekR2OFB6WGdNUzd4VXZENXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALF6B/qh7 JJMgVAoBeYHeeL28ezbovWEgr8kUHvLir+NCs10P92NHEvuwU0Rrk1F/k7tGl56C JRnM75ZZreWrbsMCK6RhU5EuVBg1ZzZQSNJO6d347sgo0l8BHKc9/OvteLmItVPk Fa2kc51qybDeDnySdnGdE5dt82fsy2AL5xdbtJzFLD6cE/waO/Z/mSzaa870u/U+ WqC9f/NzqyuMa63ARFStK/ICzExcWj+vcAZLh+pqy9aLWpdq1Dlq8uT18PXO7g0R h0ksoPtNsFWOvoBFEJuR7fGYfc26IyygjPUjQJ56gqVImkUrJw628RTArlGcGHr6 y+fc8wxI1ifmng== -----END CERTIFICATE-----Generated at Sat Dec 20 23:37:54 2025 by rpki-client