This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft File: yL68_oKyYn6o3oFhy5J7JFsFjmk.mft (raw, json) Hash identifier: m017w0lJRBNcvi9RTBmXQ+gMU9eUcGu0FpMmCitFspE= Subject key identifier: 99:65:BF:76:04:D7:29:F6:29:AC:37:59:3E:D3:A4:5F:4D:FD:42:AE Authority key identifier: C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69 Certificate issuer: /CN=c8bebcfe82b2627ea8de8161cb927b245b058e69 Certificate serial: 019B511737B18C146B5C2ED4817334BE7CEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft Manifest number: 1354 Signing time: Wed 24 Dec 2025 16:00:34 +0000 Manifest this update: Wed 24 Dec 2025 16:00:34 +0000 Manifest next update: Thu 25 Dec 2025 16:00:34 +0000 Files and hashes: 1: Dfh76wqLJFFyVrWGvNQ86Cd1ugg.roa (hash: cQ3NC144NOW+txHpDNWV4+CIEXIR87Btz3V4GE61yOA=) 2: yL68_oKyYn6o3oFhy5J7JFsFjmk.crl (hash: vRnpea1Vhv0fBkZ8ZLM5oybcP2TD7+FZiBfdqa9nKhU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:37:b1:8c:14:6b:5c:2e:d4:81:73:34:be:7c:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8bebcfe82b2627ea8de8161cb927b245b058e69 Validity Not Before: Dec 24 16:00:34 2025 GMT Not After : Dec 25 16:00:34 2025 GMT Subject: CN=9965bf7604d729f629ac37593ed3a45f4dfd42ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c2:bf:c8:a5:38:6e:2b:d8:f1:ac:7e:49:0a: c5:4b:70:42:18:4c:a6:84:00:76:7f:05:02:af:33: d4:20:db:2f:12:eb:e9:c6:cc:2b:27:70:38:bb:14: 96:83:1e:63:11:db:67:42:6a:a3:0b:d8:ad:40:c0: 7f:22:c0:ae:ec:0c:02:dc:83:8c:69:79:e3:4e:2f: ba:ee:04:1f:b2:9f:6d:08:73:52:3b:43:47:44:d3: 7a:02:ad:f2:46:e7:2c:32:18:c2:f5:11:e7:a5:98: b1:34:25:f7:d4:82:19:39:97:75:65:08:80:df:e1: 10:b1:b9:7c:de:78:e3:eb:11:7c:28:04:17:77:d2: 68:25:94:8a:75:6f:e1:03:a8:39:23:59:bd:c1:0e: 4f:df:4a:85:d3:74:0a:3d:13:24:3b:55:9c:42:15: e9:91:72:eb:71:0b:d9:ca:7e:c5:05:11:03:c6:56: ac:34:1e:10:5d:b6:ac:cd:de:d3:6c:d9:90:99:a2: d8:d0:30:f3:c7:4e:a8:21:82:7a:4f:34:0d:e8:d5: f7:a3:27:16:82:ed:bd:d7:42:2f:c2:a0:01:fd:eb: 78:31:2b:79:0b:4c:38:88:e7:ab:2b:03:50:d9:fb: 4c:77:ac:40:5a:8e:43:a1:15:07:98:0f:a4:1e:35: 31:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:65:BF:76:04:D7:29:F6:29:AC:37:59:3E:D3:A4:5F:4D:FD:42:AE X509v3 Authority Key Identifier: keyid:C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:3f:93:82:a5:5b:32:45:6a:65:a8:3a:e2:55:1e:e9:cb:62: 47:7d:f4:f5:18:0d:58:8c:55:13:01:6d:93:bd:67:3d:1b:79: a8:c5:d2:a1:72:5f:7c:10:1a:9c:ec:77:bf:2e:7d:66:2d:a4: f6:42:48:b5:6b:36:0b:1f:5e:1e:19:c9:71:c7:39:83:0f:27: 7b:52:18:a6:d5:0f:39:95:ce:00:d7:55:8d:85:af:74:55:a5: e3:88:90:7b:f5:bd:bf:eb:ea:07:5a:91:44:a4:86:2f:ba:51: b1:9b:d4:d2:d2:c4:1b:54:7f:a5:c2:24:6a:37:87:cb:c3:62: 0e:0c:72:75:69:4d:63:93:5a:50:39:ce:d4:73:6a:aa:50:0d: ee:ee:e8:1b:fc:f3:f9:f0:0d:58:5e:ab:18:9c:b6:e2:df:05: 59:9f:f4:a1:71:a4:db:95:d9:68:8f:2c:ec:6d:44:1a:52:06: 4d:d3:4c:cc:84:bb:19:ce:5d:91:9d:d8:40:3e:68:44:70:5f: b8:2c:b5:3e:2b:39:de:74:9d:40:01:bd:65:64:69:d8:32:73: 5d:39:55:19:d5:95:bc:5a:69:6e:0e:28:34:f5:11:de:2a:fd: 6b:2a:8a:e6:58:82:88:6c:48:68:c4:55:56:ca:e3:4f:d3:da: 40:57:25:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRFzexjBRrXC7UgXM0vnzuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4YmViY2ZlODJiMjYyN2VhOGRlODE2MWNiOTI3YjI0NWIw NThlNjkwHhcNMjUxMjI0MTYwMDM0WhcNMjUxMjI1MTYwMDM0WjAzMTEwLwYDVQQD Eyg5OTY1YmY3NjA0ZDcyOWY2MjlhYzM3NTkzZWQzYTQ1ZjRkZmQ0MmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcK/yKU4bivY8ax+SQrFS3BCGEym hAB2fwUCrzPUINsvEuvpxswrJ3A4uxSWgx5jEdtnQmqjC9itQMB/IsCu7AwC3IOM aXnjTi+67gQfsp9tCHNSO0NHRNN6Aq3yRucsMhjC9RHnpZixNCX31IIZOZd1ZQiA 3+EQsbl83njj6xF8KAQXd9JoJZSKdW/hA6g5I1m9wQ5P30qF03QKPRMkO1WcQhXp kXLrcQvZyn7FBREDxlasNB4QXbaszd7TbNmQmaLY0DDzx06oIYJ6TzQN6NX3oycW gu2910IvwqAB/et4MSt5C0w4iOerKwNQ2ftMd6xAWo5DoRUHmA+kHjUxEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJllv3YE1yn2Kaw3WT7TpF9N/UKuMB8GA1UdIwQY MBaAFMi+vP6CsmJ+qN6BYcuSeyRbBY5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUw2OF9vS3lZbjZvM29GaHk1SjdKRnNGam1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYTE3YjMtZDU0ZS00Mjc5LWFkOTgt ZGVlZjdmMTUxZThlLzEveUw2OF9vS3lZbjZvM29GaHk1SjdKRnNGam1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9lYTE3YjMtZDU0ZS00Mjc5LWFkOTgtZGVlZjdmMTUxZThl LzEveUw2OF9vS3lZbjZvM29GaHk1SjdKRnNGam1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaj+TgqVb MkVqZag64lUe6ctiR3309RgNWIxVEwFtk71nPRt5qMXSoXJffBAanOx3vy59Zi2k 9kJItWs2Cx9eHhnJccc5gw8ne1IYptUPOZXOANdVjYWvdFWl44iQe/W9v+vqB1qR RKSGL7pRsZvU0tLEG1R/pcIkajeHy8NiDgxydWlNY5NaUDnO1HNqqlAN7u7oG/zz +fANWF6rGJy24t8FWZ/0oXGk25XZaI8s7G1EGlIGTdNMzIS7Gc5dkZ3YQD5oRHBf uCy1Pis53nSdQAG9ZWRp2DJzXTlVGdWVvFppbg4oNPUR3ir9ayqK5liCiGxIaMRV VsrjT9PaQFclVg== -----END CERTIFICATE-----Generated at Wed Dec 24 21:46:58 2025 by rpki-client