This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft File: yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft (raw, json) Hash identifier: AVqdYtzBr4qPSRQ8JxcQf9w434zU28Ol3E6VgaHPNW4= Subject key identifier: 0B:1F:98:FF:B8:E4:51:D1:F0:55:ED:FF:9C:FD:ED:81:13:65:03:74 Authority key identifier: C8:29:4A:2C:0C:49:DC:93:6C:B9:88:B6:85:B3:A7:D9:5C:8F:E0:B7 Certificate issuer: /CN=c8294a2c0c49dc936cb988b685b3a7d95c8fe0b7 Certificate serial: 019B311E9AC0E01839DB3F71D489E343AE31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft Manifest number: 02FD Signing time: Thu 18 Dec 2025 11:00:47 +0000 Manifest this update: Thu 18 Dec 2025 11:00:47 +0000 Manifest next update: Fri 19 Dec 2025 11:00:47 +0000 Files and hashes: 1: hGnhNt09WVSvAvlRb80VOz0njRw.roa (hash: reYotro4wzpVN+aJarCV//yL8yhlq3gQQiQttC9Xbrk=) 2: yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl (hash: wC6TRYCVjM5eLDhq3RzM9qKR5g0l9cuJnvSbaLk5++o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:1e:9a:c0:e0:18:39:db:3f:71:d4:89:e3:43:ae:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8294a2c0c49dc936cb988b685b3a7d95c8fe0b7 Validity Not Before: Dec 18 11:00:47 2025 GMT Not After : Dec 19 11:00:47 2025 GMT Subject: CN=0b1f98ffb8e451d1f055edff9cfded8113650374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:68:a1:59:83:bb:56:d3:b1:2d:5e:ed:0a:db: 7e:d0:ca:e7:36:a0:cc:33:a3:fd:cd:97:f5:4e:83: 3f:3b:2f:29:f0:b1:25:71:c7:a5:36:6c:a8:e1:90: dc:f7:f5:90:c0:c1:7b:ed:e6:ab:ed:db:26:60:7c: a5:45:a8:7f:92:bb:50:84:74:32:ee:71:30:45:ef: c0:12:0d:97:56:ce:67:cc:88:a1:c3:2f:57:44:66: a6:f9:e0:5d:a2:00:65:f8:6e:ef:94:d4:ff:6e:9e: c0:e9:77:66:5c:08:be:b7:e9:2b:30:c0:e0:59:fd: b2:3b:f4:e0:84:f9:b0:9f:66:4c:4a:65:a8:18:b1: 3f:ff:29:d6:ed:85:19:45:57:6c:a9:01:65:b6:51: a6:c4:95:33:d1:01:cd:81:ba:a2:72:1d:d0:61:59: ef:38:72:f5:32:d4:01:f9:d9:f8:49:e8:90:01:98: 2b:3a:fd:c3:52:23:43:00:f7:d0:17:ce:e4:7d:73: 3f:df:55:c1:0a:fb:9a:4f:0c:bc:64:51:27:71:88: 1c:41:0f:ac:32:71:40:04:2d:a3:a8:a7:9e:e7:64: 66:a1:7f:47:19:95:94:aa:26:b6:55:f7:13:f0:78: 57:b1:94:02:07:22:37:4f:60:d6:c0:72:ad:65:be: 89:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1F:98:FF:B8:E4:51:D1:F0:55:ED:FF:9C:FD:ED:81:13:65:03:74 X509v3 Authority Key Identifier: keyid:C8:29:4A:2C:0C:49:DC:93:6C:B9:88:B6:85:B3:A7:D9:5C:8F:E0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:3b:9b:a6:06:14:54:3c:d9:bf:64:29:39:36:1f:1f:fe:cc: f1:ba:62:78:76:e8:95:ab:4a:2e:09:47:4f:66:57:ea:aa:93: bf:28:e6:d5:8c:bc:e1:2f:bb:aa:03:d8:db:f5:16:4c:ae:15: a4:59:4f:54:85:27:a6:b4:94:79:47:ba:5e:a1:e0:a2:59:77: ae:9b:7a:1c:0e:3b:55:aa:ac:6b:79:06:37:c0:20:8b:dc:02: 79:04:ed:2b:61:06:df:cd:93:ac:a4:62:4d:52:52:0f:1c:14: 75:23:61:b4:a0:63:b6:23:40:5f:50:14:28:b8:12:38:01:45: 44:21:c8:9d:ff:78:88:bd:ac:9e:b0:d0:d2:72:c1:9c:35:c9: 82:d0:d3:e4:dd:db:9b:fe:8d:9c:8e:8c:4b:f2:29:92:f6:9d: ad:64:a8:53:51:3f:e7:96:13:ce:4c:37:0a:6a:d2:25:94:83: 65:ec:0a:0b:95:1c:13:fd:1b:7f:75:e3:52:09:4a:5f:e5:cf: d0:7c:58:0e:6c:10:24:69:3c:6e:39:fe:0e:2a:7d:47:ff:91: 6b:00:27:48:92:ac:9a:8c:d4:55:b2:92:e3:45:b3:75:73:6e: 5e:78:66:94:a7:25:fa:e0:e6:55:92:88:3a:bc:f0:0d:6d:ea: 9f:76:06:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxHprA4Bg52z9x1InjQ64xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4Mjk0YTJjMGM0OWRjOTM2Y2I5ODhiNjg1YjNhN2Q5NWM4 ZmUwYjcwHhcNMjUxMjE4MTEwMDQ3WhcNMjUxMjE5MTEwMDQ3WjAzMTEwLwYDVQQD EygwYjFmOThmZmI4ZTQ1MWQxZjA1NWVkZmY5Y2ZkZWQ4MTEzNjUwMzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmihWYO7VtOxLV7tCtt+0MrnNqDM M6P9zZf1ToM/Oy8p8LElccelNmyo4ZDc9/WQwMF77ear7dsmYHylRah/krtQhHQy 7nEwRe/AEg2XVs5nzIihwy9XRGam+eBdogBl+G7vlNT/bp7A6XdmXAi+t+krMMDg Wf2yO/TghPmwn2ZMSmWoGLE//ynW7YUZRVdsqQFltlGmxJUz0QHNgbqich3QYVnv OHL1MtQB+dn4SeiQAZgrOv3DUiNDAPfQF87kfXM/31XBCvuaTwy8ZFEncYgcQQ+s MnFABC2jqKee52RmoX9HGZWUqia2VfcT8HhXsZQCByI3T2DWwHKtZb6JtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsfmP+45FHR8FXt/5z97YETZQN0MB8GA1UdIwQY MBaAFMgpSiwMSdyTbLmItoWzp9lcj+C3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUNsS0xBeEozSk5zdVlpMmhiT24yVnlQNExjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80Nzg5NzctMDViYi00M2ZlLTllYWQt OWNlZjc5MmE1ZjZiLzEveUNsS0xBeEozSk5zdVlpMmhiT24yVnlQNExjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC80Nzg5NzctMDViYi00M2ZlLTllYWQtOWNlZjc5MmE1ZjZi LzEveUNsS0xBeEozSk5zdVlpMmhiT24yVnlQNExjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAjubpgYU VDzZv2QpOTYfH/7M8bpieHbolatKLglHT2ZX6qqTvyjm1Yy84S+7qgPY2/UWTK4V pFlPVIUnprSUeUe6XqHgoll3rpt6HA47Vaqsa3kGN8Agi9wCeQTtK2EG382TrKRi TVJSDxwUdSNhtKBjtiNAX1AUKLgSOAFFRCHInf94iL2snrDQ0nLBnDXJgtDT5N3b m/6NnI6MS/IpkvadrWSoU1E/55YTzkw3CmrSJZSDZewKC5UcE/0bf3XjUglKX+XP 0HxYDmwQJGk8bjn+Dip9R/+RawAnSJKsmozUVbKS40WzdXNuXnhmlKcl+uDmVZKI OrzwDW3qn3YG6A== -----END CERTIFICATE-----Generated at Thu Dec 18 14:09:27 2025 by rpki-client