This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft File: yMHp4LxfXaGOMkoYEltCeAGoB_E.mft (raw, json) Hash identifier: GUex1iAFP/ZOlBouhQ94wp2ipqTizwxwDsl+AUvXoxE= Subject key identifier: F8:11:D8:1A:9C:70:5A:15:F8:B5:B9:D2:D5:CF:2F:9F:08:AC:32:F3 Authority key identifier: C8:C1:E9:E0:BC:5F:5D:A1:8E:32:4A:18:12:5B:42:78:01:A8:07:F1 Certificate issuer: /CN=c8c1e9e0bc5f5da18e324a18125b427801a807f1 Certificate serial: 019B5DC0B4150EA7E8E88E6745ADFDFDCD9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft Manifest number: 08F1 Signing time: Sat 27 Dec 2025 03:01:08 +0000 Manifest this update: Sat 27 Dec 2025 03:01:08 +0000 Manifest next update: Sun 28 Dec 2025 03:01:08 +0000 Files and hashes: 1: KzFfCDjHV6hqDoqqVxbHisFAzqw.roa (hash: EJN3VDm9IKnbYFgaxZt9SIfMAHKvU3wGx8Z5+gCSQRo=) 2: yMHp4LxfXaGOMkoYEltCeAGoB_E.crl (hash: HIMfwCZaxVLuchsdGVeYlagnxl7fav0i0XWGKgQoTwU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:c0:b4:15:0e:a7:e8:e8:8e:67:45:ad:fd:fd:cd:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8c1e9e0bc5f5da18e324a18125b427801a807f1 Validity Not Before: Dec 27 03:01:08 2025 GMT Not After : Dec 28 03:01:08 2025 GMT Subject: CN=f811d81a9c705a15f8b5b9d2d5cf2f9f08ac32f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:41:95:0d:63:1a:68:7e:89:2d:b3:5b:4e:9f: bb:72:f6:d4:f7:02:c3:ce:aa:0d:91:d3:d2:25:7b: d2:61:68:fc:24:4a:6c:79:eb:30:4d:dc:04:83:98: 26:c0:22:b2:1f:2a:54:62:c8:0d:2a:1f:0e:6f:0c: 40:05:7a:00:0b:d4:61:78:40:1e:3f:31:29:c2:99: a8:60:01:58:e2:ee:d4:25:58:f3:d3:44:80:2f:28: a1:7c:82:fc:40:d3:9b:d9:9d:1d:5d:07:63:3a:f7: 04:35:a0:7d:5a:df:cc:f1:fc:bd:43:db:29:d7:81: db:88:91:84:a7:12:31:75:22:a1:d9:44:7b:dc:91: bc:99:40:7f:e7:ec:2c:6d:86:8c:59:4a:b4:b9:e3: 25:5a:66:18:e7:ab:38:14:60:bc:8d:06:6c:23:80: 04:41:92:43:6b:66:2f:98:9d:54:93:50:00:62:cd: dd:5f:f2:dd:1f:8f:15:57:62:57:7c:b5:73:e9:83: 62:30:cf:90:2f:bc:85:a0:2c:54:b6:a4:c1:47:eb: 14:18:3f:fc:21:20:49:e9:0f:a2:b4:b8:63:df:13: 27:fa:f7:c2:e7:09:a0:bc:f9:90:1d:69:b3:ea:74: b1:2e:55:90:ab:ae:e2:33:1e:14:1d:b9:75:82:ea: 12:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:11:D8:1A:9C:70:5A:15:F8:B5:B9:D2:D5:CF:2F:9F:08:AC:32:F3 X509v3 Authority Key Identifier: keyid:C8:C1:E9:E0:BC:5F:5D:A1:8E:32:4A:18:12:5B:42:78:01:A8:07:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:4e:37:1a:e9:c0:c6:a1:76:a3:ea:43:6c:12:fe:d7:6d:7c: 70:e9:57:cb:a1:bd:7a:d2:4c:e2:32:5f:c3:cc:6b:87:84:4e: db:dd:e0:6b:28:9e:a1:55:5a:5c:7b:a5:df:99:ce:a1:12:1c: 61:92:d1:cd:fc:bb:6f:29:88:32:ef:80:f3:31:23:30:86:26: 19:35:f6:97:59:79:06:3e:96:26:70:1c:7e:65:e2:db:fd:6e: 8c:5a:7b:96:09:1c:c0:30:02:0b:df:81:3b:2a:13:80:fc:e0: 33:25:c4:2f:cf:78:c0:de:62:c9:b5:2d:91:2b:31:0d:3d:2b: 15:ee:a7:7f:ed:de:6f:01:bb:8b:39:b7:36:19:09:6f:97:b1: 2f:8c:96:88:c2:18:2e:44:f7:9c:bc:0d:b1:83:3e:8c:df:8c: cc:5a:17:78:b6:23:22:b6:8e:ba:c8:47:72:a1:59:04:a1:f3: ce:a5:0f:dd:9f:cf:08:5e:cb:a6:ba:b5:79:f3:40:7a:26:80: e1:b6:6f:e4:ab:45:f0:3c:cd:e9:56:6f:25:9c:24:a3:dc:f4: 18:bd:c1:f7:64:2d:83:e3:8a:db:80:dd:fa:b8:3f:65:9a:89: c5:0e:4d:ca:ef:16:47:70:dd:1d:64:84:25:bf:a3:7a:35:98: 9d:8a:80:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdwLQVDqfo6I5nRa39/c2eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4YzFlOWUwYmM1ZjVkYTE4ZTMyNGExODEyNWI0Mjc4MDFh ODA3ZjEwHhcNMjUxMjI3MDMwMTA4WhcNMjUxMjI4MDMwMTA4WjAzMTEwLwYDVQQD EyhmODExZDgxYTljNzA1YTE1ZjhiNWI5ZDJkNWNmMmY5ZjA4YWMzMmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUGVDWMaaH6JLbNbTp+7cvbU9wLD zqoNkdPSJXvSYWj8JEpseeswTdwEg5gmwCKyHypUYsgNKh8ObwxABXoAC9RheEAe PzEpwpmoYAFY4u7UJVjz00SALyihfIL8QNOb2Z0dXQdjOvcENaB9Wt/M8fy9Q9sp 14HbiJGEpxIxdSKh2UR73JG8mUB/5+wsbYaMWUq0ueMlWmYY56s4FGC8jQZsI4AE QZJDa2YvmJ1Uk1AAYs3dX/LdH48VV2JXfLVz6YNiMM+QL7yFoCxUtqTBR+sUGD/8 ISBJ6Q+itLhj3xMn+vfC5wmgvPmQHWmz6nSxLlWQq67iMx4UHbl1guoS/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgR2BqccFoV+LW50tXPL58IrDLzMB8GA1UdIwQY MBaAFMjB6eC8X12hjjJKGBJbQngBqAfxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU1IcDRMeGZYYUdPTWtvWUVsdENlQUdvQl9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS80ZjZmNDMtODVmNC00MDFhLWEzMmYt ZTFlMzlmOTU2MDgxLzEveU1IcDRMeGZYYUdPTWtvWUVsdENlQUdvQl9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS80ZjZmNDMtODVmNC00MDFhLWEzMmYtZTFlMzlmOTU2MDgx LzEveU1IcDRMeGZYYUdPTWtvWUVsdENlQUdvQl9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl043GunA xqF2o+pDbBL+1218cOlXy6G9etJM4jJfw8xrh4RO293gayieoVVaXHul35nOoRIc YZLRzfy7bymIMu+A8zEjMIYmGTX2l1l5Bj6WJnAcfmXi2/1ujFp7lgkcwDACC9+B OyoTgPzgMyXEL894wN5iybUtkSsxDT0rFe6nf+3ebwG7izm3NhkJb5exL4yWiMIY LkT3nLwNsYM+jN+MzFoXeLYjIraOushHcqFZBKHzzqUP3Z/PCF7Lprq1efNAeiaA 4bZv5KtF8DzN6VZvJZwko9z0GL3B92Qtg+OK24Dd+rg/ZZqJxQ5Nyu8WR3DdHWSE Jb+jejWYnYqAOg== -----END CERTIFICATE-----Generated at Sat Dec 27 05:39:33 2025 by rpki-client