This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft File: yMLHMUWTBCz3QhD38DvnEGwiT4k.mft (raw, json) Hash identifier: +hVcUwNjMymsd4ZPTVFwP/96JoxfspiWIAz1bcthv6k= Subject key identifier: C4:F8:C4:9A:05:F6:4A:F8:06:F4:B3:6B:1B:EC:99:31:80:6A:AB:02 Authority key identifier: C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89 Certificate issuer: /CN=c8c2c7314593042cf74210f7f03be7106c224f89 Certificate serial: 019B5004DD6B61152F3F9BB9198AA2C893D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft Manifest number: 159C Signing time: Wed 24 Dec 2025 11:00:54 +0000 Manifest this update: Wed 24 Dec 2025 11:00:54 +0000 Manifest next update: Thu 25 Dec 2025 11:00:54 +0000 Files and hashes: 1: 3dzOq8G9IRlpRN6VYAesJxFCM9I.roa (hash: pZlE7f/kxQT336UtrvzPnURvz6UI7VQoJaImOOVWpDM=) 2: JJmF9idPFAXWWPX9AjfEMsS8Ozk.roa (hash: Z6lxpjHZf+bFBTA5z2r8BCssBYWOfAe+nD+SW+UaYNE=) 3: YIJ2Q4Qz_oqoPZT1pP6ZmbNImuw.roa (hash: rwfSsDFI+XR6+eARP8r7vKDq4E96cyyI5p0FkLq3uMA=) 4: _RcJWBC9z2DoyJEEVJqiJ3iNmSY.roa (hash: shwbQcS4UjqPIXlBcN1Jjj6/KYNyV5tzzIShWjZk6kQ=) 5: nuCFwAqyzaBDOFqPTOr9WxwYvF0.roa (hash: s0EEOYTzU+K4DwXB/HLNvSrguhiOGINJ5MGi2FWEkwk=) 6: yMLHMUWTBCz3QhD38DvnEGwiT4k.crl (hash: ha8p+gxrFWHKdROtZ/2IRfHLEJvwh0mTXtr1aQdP2WE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:04:dd:6b:61:15:2f:3f:9b:b9:19:8a:a2:c8:93:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8c2c7314593042cf74210f7f03be7106c224f89 Validity Not Before: Dec 24 11:00:54 2025 GMT Not After : Dec 25 11:00:54 2025 GMT Subject: CN=c4f8c49a05f64af806f4b36b1bec9931806aab02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:df:16:b3:21:ab:30:00:27:e6:9a:42:33:ad: 86:9c:fe:85:75:db:8e:4e:9b:12:c0:9f:bb:d9:14: ca:eb:5d:f2:26:68:f7:eb:d4:f2:2c:90:b0:57:ce: 5d:61:9b:22:cc:44:64:01:c0:63:44:77:54:93:0b: c1:2c:1e:e9:f5:39:7b:6e:00:3b:ba:6d:9b:56:5a: 27:06:54:30:a4:59:97:50:97:18:9a:f8:fa:6b:43: cd:3c:2d:30:b4:37:11:88:25:7b:6a:c6:72:4f:84: b9:3c:b8:63:f0:c3:1d:4d:03:90:90:df:43:da:d6: e7:5c:88:ff:c7:ae:76:c2:81:1f:a2:bd:2a:74:f5: 9e:ee:66:00:8c:4e:a3:47:02:00:cf:f0:10:77:cd: e4:d5:c7:3a:02:13:81:e1:f4:2c:ac:bf:c5:db:93: 47:e8:9c:f5:a2:a8:26:38:b4:73:ab:50:f9:3f:a7: f0:a5:63:ba:f2:cb:b3:1b:2b:21:9c:76:4f:ea:13: fa:23:36:32:6d:0a:08:c6:65:b1:18:b2:32:d7:c7: e7:a2:5b:10:b2:98:98:d3:3d:c7:e8:ad:7e:2c:b1: 06:c7:ff:ca:35:5d:48:76:0d:02:5b:63:05:0e:9b: 37:aa:27:d6:61:63:ae:3c:fd:61:25:3a:4c:52:ac: 3d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F8:C4:9A:05:F6:4A:F8:06:F4:B3:6B:1B:EC:99:31:80:6A:AB:02 X509v3 Authority Key Identifier: keyid:C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:1c:1f:62:ba:ff:c2:b6:3f:38:ab:02:93:ba:15:d5:1f:ed: da:fe:52:dc:05:c0:df:48:af:da:66:d0:45:81:9f:24:6d:65: 2c:a8:43:bb:2f:09:82:56:4f:8e:1d:e4:cd:10:27:99:c1:09: 77:83:b1:4b:c0:f6:1c:3c:59:d3:0b:a8:91:54:d3:a2:81:63: 1d:ec:33:8f:db:e6:d7:e3:eb:18:8d:4c:c0:56:97:a6:33:eb: f9:46:68:91:11:14:85:ef:cf:f7:a4:4f:4c:82:64:cc:98:77: db:07:09:af:8e:bd:ee:75:08:f6:45:a3:96:d5:23:07:72:9a: 55:b9:5a:8f:9f:cc:cb:91:62:a0:cc:65:6c:0d:14:ad:f6:eb: 8d:ab:ae:e4:4a:0e:79:52:53:ca:25:aa:a0:68:3c:90:b4:84: 0f:71:fd:2f:18:ce:01:fa:56:40:ed:12:7c:ef:8d:9a:fc:ee: 50:f6:8e:5d:f8:56:6d:16:7c:ae:25:97:b0:13:7e:8a:60:6f: 51:a0:7a:9f:29:0c:e6:0f:ac:72:01:2d:94:e1:4d:1c:d2:5b: 43:46:00:a4:e1:a4:07:f5:56:f7:e5:16:52:3f:e9:79:89:29: 79:c5:45:03:2d:13:38:f6:0c:05:3b:8a:48:98:6c:06:9c:fe: a8:7b:fc:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQBN1rYRUvP5u5GYqiyJPXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4YzJjNzMxNDU5MzA0MmNmNzQyMTBmN2YwM2JlNzEwNmMy MjRmODkwHhcNMjUxMjI0MTEwMDU0WhcNMjUxMjI1MTEwMDU0WjAzMTEwLwYDVQQD EyhjNGY4YzQ5YTA1ZjY0YWY4MDZmNGIzNmIxYmVjOTkzMTgwNmFhYjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt98WsyGrMAAn5ppCM62GnP6FdduO TpsSwJ+72RTK613yJmj369TyLJCwV85dYZsizERkAcBjRHdUkwvBLB7p9Tl7bgA7 um2bVlonBlQwpFmXUJcYmvj6a0PNPC0wtDcRiCV7asZyT4S5PLhj8MMdTQOQkN9D 2tbnXIj/x652woEfor0qdPWe7mYAjE6jRwIAz/AQd83k1cc6AhOB4fQsrL/F25NH 6Jz1oqgmOLRzq1D5P6fwpWO68suzGyshnHZP6hP6IzYybQoIxmWxGLIy18fnolsQ spiY0z3H6K1+LLEGx//KNV1Idg0CW2MFDps3qifWYWOuPP1hJTpMUqw9jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMT4xJoF9kr4BvSzaxvsmTGAaqsCMB8GA1UdIwQY MBaAFMjCxzFFkwQs90IQ9/A75xBsIk+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU1MSE1VV1RCQ3ozUWhEMzhEdm5FR3dpVDRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iMmRiZTAtMDRjNS00MWJhLWFjNjIt M2E1M2QwZWY4YjVhLzEveU1MSE1VV1RCQ3ozUWhEMzhEdm5FR3dpVDRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9iMmRiZTAtMDRjNS00MWJhLWFjNjItM2E1M2QwZWY4YjVh LzEveU1MSE1VV1RCQ3ozUWhEMzhEdm5FR3dpVDRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARhwfYrr/ wrY/OKsCk7oV1R/t2v5S3AXA30iv2mbQRYGfJG1lLKhDuy8JglZPjh3kzRAnmcEJ d4OxS8D2HDxZ0wuokVTTooFjHewzj9vm1+PrGI1MwFaXpjPr+UZokREUhe/P96RP TIJkzJh32wcJr4697nUI9kWjltUjB3KaVblaj5/My5FioMxlbA0Urfbrjauu5EoO eVJTyiWqoGg8kLSED3H9LxjOAfpWQO0SfO+NmvzuUPaOXfhWbRZ8riWXsBN+imBv UaB6nykM5g+scgEtlOFNHNJbQ0YApOGkB/VW9+UWUj/peYkpecVFAy0TOPYMBTuK SJhsBpz+qHv8jw== -----END CERTIFICATE-----Generated at Wed Dec 24 18:05:32 2025 by rpki-client