This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft File: yvYTMRp4acM1ymbLQjzG6LL6kCw.mft (raw, json) Hash identifier: uAuFFsW/PTytOwUaQB9xQLmnnmXssUpF9DbaOr5Qd4s= Subject key identifier: F9:39:8C:01:6E:01:1C:CE:04:5F:2F:6D:79:02:AF:31:92:04:99:9B Authority key identifier: CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C Certificate issuer: /CN=caf613311a7869c335ca66cb423cc6e8b2fa902c Certificate serial: 019B34C65E66BA7EFE06B3CCEC4C9C747708 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 04:02:54 +0000 Manifest this update: Fri 19 Dec 2025 04:02:54 +0000 Manifest next update: Sat 20 Dec 2025 04:02:54 +0000 Files and hashes: 1: gWMrTu8Of2Dx3uAeFmzVA6qXGew.roa (hash: 8qHiVPNeypQh4D2Me20Hi3HMwJdiHI6/+GwoODvt2Bo=) 2: yvYTMRp4acM1ymbLQjzG6LL6kCw.crl (hash: XqwBq/u5tAqELnVYq9wcZo9AOz5dKb50LLVICZXdvns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c6:5e:66:ba:7e:fe:06:b3:cc:ec:4c:9c:74:77:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf613311a7869c335ca66cb423cc6e8b2fa902c Validity Not Before: Dec 19 04:02:54 2025 GMT Not After : Dec 20 04:02:54 2025 GMT Subject: CN=f9398c016e011cce045f2f6d7902af319204999b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:44:6d:03:b2:b1:60:81:b9:79:80:c4:62:64: 0a:b1:a0:d9:c9:d5:7a:58:78:59:9f:ad:30:6f:f6: 4f:8a:ac:3a:15:10:e7:67:e7:e6:c2:0d:87:f4:de: f9:7d:40:f4:e8:b0:0e:69:6b:f8:5b:5e:ff:1a:8d: 3b:9d:31:23:dd:98:35:d4:b7:ce:ff:5c:f5:fb:0d: dd:55:50:4d:eb:e9:cc:26:87:e9:fb:b0:9b:fc:c3: ac:02:ee:b2:80:00:8a:42:b6:ce:e5:ac:69:a8:81: 52:75:e6:f0:71:3e:f2:b6:1c:13:ad:6f:61:ff:a3: c7:50:a2:00:38:31:67:fb:e0:35:f1:ec:df:2d:e4: a4:20:42:e1:9c:cf:12:35:2b:19:97:59:e0:21:60: 18:d0:ce:c6:7e:33:ca:71:f7:b9:a5:9f:7c:b0:18: c3:61:54:cc:d5:eb:a5:60:57:61:7c:2e:58:36:b5: 5b:ed:9b:c0:5b:1f:2b:a3:00:05:a4:40:e8:5b:b1: 10:f7:ed:87:d2:29:f4:45:55:3a:22:5f:15:a4:7c: 21:7a:9b:86:cc:8a:da:5f:22:1b:8b:17:c9:bf:23: a9:5e:db:13:6b:28:78:26:22:c2:20:8c:86:13:f8: 8f:ba:34:bc:e3:6d:25:93:33:07:c7:16:6a:2c:d8: d0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:39:8C:01:6E:01:1C:CE:04:5F:2F:6D:79:02:AF:31:92:04:99:9B X509v3 Authority Key Identifier: keyid:CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:1c:42:79:2e:9b:31:b6:fe:2b:4d:24:89:31:09:0a:0b:16: f5:00:b4:a7:43:d0:5c:c2:49:2d:85:cc:90:14:58:ce:0c:14: b0:36:c4:63:95:a6:85:77:6e:13:b3:93:cc:29:82:4b:ca:26: 25:31:35:70:9f:41:91:d6:8d:5f:b7:e7:ac:a4:bc:01:66:16: 69:be:fd:89:a7:75:8a:f2:1c:e1:49:98:d3:1e:52:c9:54:47: b4:56:f6:79:90:ca:a7:fd:89:7c:43:9c:b5:4c:cb:b9:60:be: aa:5e:fe:40:55:3b:04:c6:6b:6c:12:b4:5e:80:1b:62:ac:e6: bb:5c:b1:1b:fa:b7:9b:4d:ca:03:af:f3:14:8b:19:d9:e1:2b: af:8d:12:74:21:65:97:36:16:bd:a7:ed:94:9b:40:82:c9:f0: ee:2d:38:f1:03:ab:03:1d:fd:48:ad:dc:1c:5b:a9:9a:6a:fb: fd:6e:62:af:49:e1:a7:80:a1:d3:aa:e4:be:5c:64:e8:9c:de: 8a:a0:fd:12:ef:f4:64:81:a6:b2:25:c3:23:5c:69:c0:ae:58: 53:19:73:f3:29:4c:62:ae:29:a5:36:5d:f8:3c:25:c4:54:e2: 5c:f6:37:0b:fb:b0:5c:48:5a:85:6b:d5:51:41:4a:b9:a3:a6: 7c:9b:f3:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xl5mun7+BrPM7EycdHcIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZjYxMzMxMWE3ODY5YzMzNWNhNjZjYjQyM2NjNmU4YjJm YTkwMmMwHhcNMjUxMjE5MDQwMjU0WhcNMjUxMjIwMDQwMjU0WjAzMTEwLwYDVQQD EyhmOTM5OGMwMTZlMDExY2NlMDQ1ZjJmNmQ3OTAyYWYzMTkyMDQ5OTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsERtA7KxYIG5eYDEYmQKsaDZydV6 WHhZn60wb/ZPiqw6FRDnZ+fmwg2H9N75fUD06LAOaWv4W17/Go07nTEj3Zg11LfO /1z1+w3dVVBN6+nMJofp+7Cb/MOsAu6ygACKQrbO5axpqIFSdebwcT7ythwTrW9h /6PHUKIAODFn++A18ezfLeSkIELhnM8SNSsZl1ngIWAY0M7GfjPKcfe5pZ98sBjD YVTM1eulYFdhfC5YNrVb7ZvAWx8rowAFpEDoW7EQ9+2H0in0RVU6Il8VpHwhepuG zIraXyIbixfJvyOpXtsTayh4JiLCIIyGE/iPujS8420lkzMHxxZqLNjQqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPk5jAFuARzOBF8vbXkCrzGSBJmbMB8GA1UdIwQY MBaAFMr2EzEaeGnDNcpmy0I8xuiy+pAsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXZZVE1ScDRhY00xeW1iTFFqekc2TEw2a0N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85NGVhNGItM2ZmMC00ZjdiLTlkODMt YzMxMGVjYTNjMDdiLzEveXZZVE1ScDRhY00xeW1iTFFqekc2TEw2a0N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85NGVhNGItM2ZmMC00ZjdiLTlkODMtYzMxMGVjYTNjMDdi LzEveXZZVE1ScDRhY00xeW1iTFFqekc2TEw2a0N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxxCeS6b Mbb+K00kiTEJCgsW9QC0p0PQXMJJLYXMkBRYzgwUsDbEY5WmhXduE7OTzCmCS8om JTE1cJ9BkdaNX7fnrKS8AWYWab79iad1ivIc4UmY0x5SyVRHtFb2eZDKp/2JfEOc tUzLuWC+ql7+QFU7BMZrbBK0XoAbYqzmu1yxG/q3m03KA6/zFIsZ2eErr40SdCFl lzYWvaftlJtAgsnw7i048QOrAx39SK3cHFupmmr7/W5ir0nhp4Ch06rkvlxk6Jze iqD9Eu/0ZIGmsiXDI1xpwK5YUxlz8ylMYq4ppTZd+DwlxFTiXPY3C/uwXEhahWvV UUFKuaOmfJvz0A== -----END CERTIFICATE-----Generated at Fri Dec 19 08:27:26 2025 by rpki-client