This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft File: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft (raw, json) Hash identifier: yQfxR8PxoPMayz8z16MDXxDHWqKOrMYkSIHo9HwknBk= Subject key identifier: 20:27:D6:A9:55:17:02:24:62:C1:C1:DD:C0:64:45:C6:23:C6:29:D2 Authority key identifier: C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49 Certificate issuer: /CN=c8e50ca17134837a50d3063d43d443385abe6f49 Certificate serial: 019B3AC6C798BD48024772C556D5A27A759D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft Manifest number: 16FC Signing time: Sat 20 Dec 2025 08:01:04 +0000 Manifest this update: Sat 20 Dec 2025 08:01:04 +0000 Manifest next update: Sun 21 Dec 2025 08:01:04 +0000 Files and hashes: 1: kclBuRKTMfByXqrmrwIbc_lZEnM.roa (hash: MQr5fqlXn7Xd/Z8IgiENjDF+OVj4PMx+/5QB1sHm+8E=) 2: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl (hash: VZ5/m45MIwRGStfc9LaQL0Y9dJBJUZUp6lF2uEzXkg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:c7:98:bd:48:02:47:72:c5:56:d5:a2:7a:75:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8e50ca17134837a50d3063d43d443385abe6f49 Validity Not Before: Dec 20 08:01:04 2025 GMT Not After : Dec 21 08:01:04 2025 GMT Subject: CN=2027d6a95517022462c1c1ddc06445c623c629d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:eb:b1:14:09:3f:10:d2:fd:f9:5b:01:38:85: d0:ab:e5:6b:49:6f:bf:31:6c:c7:25:b0:5d:82:ac: e3:73:0f:87:c6:08:bc:00:3b:a5:6f:db:2c:39:18: 18:d6:3e:78:47:3c:bb:17:63:d8:35:da:32:5b:66: 8f:10:90:22:89:cf:f0:2e:33:fa:34:b5:9e:8f:c5: d8:54:85:ec:3e:e7:d9:f9:52:76:c8:30:3c:f7:50: b7:d9:6e:6d:33:62:82:d5:18:17:6b:65:1e:46:5e: 53:52:79:b5:3e:a6:70:7c:ad:64:6e:45:93:10:46: e6:d6:f9:39:44:6e:d4:39:8f:24:6b:00:52:02:1f: cf:14:9f:9d:41:03:91:4e:4e:62:73:69:3b:23:fd: e1:4b:c3:bf:f8:55:8b:99:d9:46:10:c6:91:80:69: a2:95:3c:c1:fa:be:01:8b:77:7f:5a:dc:de:06:1d: 3a:3e:8b:df:80:86:12:0e:83:e6:bb:2f:42:46:6a: ef:b8:64:f9:d6:9d:1f:8a:2e:e8:6a:29:4b:1c:7e: 54:ea:e4:e2:a1:16:4b:ec:a9:99:d4:a6:7d:7c:15: 8e:01:44:3e:15:62:da:5f:91:6e:44:29:89:b5:c3: 1a:e2:15:0b:63:87:de:ee:70:2f:44:7a:0c:06:2b: bd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:27:D6:A9:55:17:02:24:62:C1:C1:DD:C0:64:45:C6:23:C6:29:D2 X509v3 Authority Key Identifier: keyid:C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ad:df:f1:5b:85:a9:57:6a:c4:a7:d4:ca:c4:c7:d6:d2:95: 60:ca:c4:c5:73:fc:3b:73:b3:83:0a:e0:32:32:05:b4:56:1c: d6:77:8d:f5:f2:8e:8d:c6:42:ed:83:0b:8e:59:46:1f:05:67: ec:7d:04:e3:65:cc:15:96:7a:f5:6e:ae:e3:6c:45:08:fa:55: 50:c8:41:e6:95:5c:51:21:4d:e8:d5:3a:66:e3:9e:ad:7a:0e: aa:0a:34:6d:ef:fd:0e:0b:9e:b1:92:cf:4a:29:01:76:6a:a6: d2:78:d2:42:1d:a0:1c:f2:bb:d7:93:a8:2a:a5:aa:ea:1f:e7: 8a:06:85:a7:b8:b4:ea:c3:4a:ac:5e:1d:04:f2:18:bb:c6:b9: c9:dc:2e:5a:ee:31:03:a3:d4:c5:b5:d3:46:56:16:fa:6f:5a: ea:69:33:60:f1:35:07:5a:20:06:34:39:a0:52:1b:39:af:68: 7a:f9:cf:73:e6:af:fa:91:8d:e9:97:45:92:2a:ab:11:66:7a: 0c:a0:aa:16:1d:3a:cd:d4:6e:a3:c8:39:59:3e:06:c2:27:b3: dd:68:ba:1f:5e:d3:39:26:17:31:9c:2d:7a:2b:1a:8c:4e:fe: c9:af:b1:2c:61:cb:08:7e:24:00:1b:78:9a:93:0b:c2:6d:0b: 08:6f:e5:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xseYvUgCR3LFVtWienWdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZTUwY2ExNzEzNDgzN2E1MGQzMDYzZDQzZDQ0MzM4NWFi ZTZmNDkwHhcNMjUxMjIwMDgwMTA0WhcNMjUxMjIxMDgwMTA0WjAzMTEwLwYDVQQD EygyMDI3ZDZhOTU1MTcwMjI0NjJjMWMxZGRjMDY0NDVjNjIzYzYyOWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OuxFAk/ENL9+VsBOIXQq+VrSW+/ MWzHJbBdgqzjcw+Hxgi8ADulb9ssORgY1j54Rzy7F2PYNdoyW2aPEJAiic/wLjP6 NLWej8XYVIXsPufZ+VJ2yDA891C32W5tM2KC1RgXa2UeRl5TUnm1PqZwfK1kbkWT EEbm1vk5RG7UOY8kawBSAh/PFJ+dQQORTk5ic2k7I/3hS8O/+FWLmdlGEMaRgGmi lTzB+r4Bi3d/WtzeBh06PovfgIYSDoPmuy9CRmrvuGT51p0fii7oailLHH5U6uTi oRZL7KmZ1KZ9fBWOAUQ+FWLaX5FuRCmJtcMa4hULY4fe7nAvRHoMBiu9CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAn1qlVFwIkYsHB3cBkRcYjxinSMB8GA1UdIwQY MBaAFMjlDKFxNIN6UNMGPUPUQzhavm9JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU9VTW9YRTBnM3BRMHdZOVE5UkRPRnEtYjBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iMTMwYjUtNWZjYy00MTk2LTkwNzUt NWVmZjczZTg5ZmJiLzEveU9VTW9YRTBnM3BRMHdZOVE5UkRPRnEtYjBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9iMTMwYjUtNWZjYy00MTk2LTkwNzUtNWVmZjczZTg5ZmJi LzEveU9VTW9YRTBnM3BRMHdZOVE5UkRPRnEtYjBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeq3f8VuF qVdqxKfUysTH1tKVYMrExXP8O3OzgwrgMjIFtFYc1neN9fKOjcZC7YMLjllGHwVn 7H0E42XMFZZ69W6u42xFCPpVUMhB5pVcUSFN6NU6ZuOerXoOqgo0be/9DguesZLP SikBdmqm0njSQh2gHPK715OoKqWq6h/nigaFp7i06sNKrF4dBPIYu8a5ydwuWu4x A6PUxbXTRlYW+m9a6mkzYPE1B1ogBjQ5oFIbOa9oevnPc+av+pGN6ZdFkiqrEWZ6 DKCqFh06zdRuo8g5WT4Gwiez3Wi6H17TOSYXMZwteisajE7+ya+xLGHLCH4kABt4 mpMLwm0LCG/lOw== -----END CERTIFICATE-----Generated at Sat Dec 20 13:16:53 2025 by rpki-client