This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft File: y748bZmBGBnO3dzSfkviW8DPUG8.mft (raw, json) Hash identifier: QV/nWizgyMFD7oaB16Up8Z6SY8P0DWUx7HWoOEJmIJM= Subject key identifier: 7D:A7:84:80:B2:87:48:5E:B2:AB:75:BB:32:8E:28:E5:EE:66:C0:5D Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F Certificate issuer: /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f Certificate serial: 019B3F111ECC6BB9A2D35A632ED123B57213 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft Manifest number: 12B5 Signing time: Sun 21 Dec 2025 04:00:45 +0000 Manifest this update: Sun 21 Dec 2025 04:00:45 +0000 Manifest next update: Mon 22 Dec 2025 04:00:45 +0000 Files and hashes: 1: ghqg6ujuEOV4Vw3b6x6YkQU8aSs.roa (hash: IATpDK+kaz0czhsEzmLbtPDJ492YJfivjvGQ/3AgHO8=) 2: rMy8dPPnYigzc4tv_MpgYXZWjBU.roa (hash: nHe7eBjoA3VTymKpGX1+aRKhTfLD28hgYmPFTLI6+4M=) 3: x5FwTTVorsGfIV2MDa8IC9dozSI.roa (hash: cVCSNkZBBh3ZJGnim77LdgANipO1Ai7iWjVLFMe9HIY=) 4: y748bZmBGBnO3dzSfkviW8DPUG8.crl (hash: jo4XIfL0m4LPFK6zmbpdTLdUNb2QqAVh5BDUSoxGASM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:1e:cc:6b:b9:a2:d3:5a:63:2e:d1:23:b5:72:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f Validity Not Before: Dec 21 04:00:45 2025 GMT Not After : Dec 22 04:00:45 2025 GMT Subject: CN=7da78480b287485eb2ab75bb328e28e5ee66c05d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ef:0b:50:16:18:7e:fd:0e:0e:cb:bb:64:7d: df:ff:6b:ef:58:d6:d5:4e:a0:84:03:7e:cf:c8:63: 1a:c1:1d:1e:8b:54:b8:95:e5:0a:9e:39:03:a3:85: 13:27:13:51:a9:34:4b:2e:31:9b:c0:64:e9:54:4f: 47:b6:c7:70:b7:92:ee:b9:c0:a8:e3:65:ae:d9:19: 61:19:f2:6a:dd:b4:36:72:a9:a6:a4:71:33:a0:37: ef:89:18:2e:f1:81:94:05:d6:76:83:10:b4:de:38: cd:a4:0e:c3:00:ce:df:ae:9a:cb:af:91:a3:c7:e4: ae:5a:78:b3:ed:46:c7:e9:31:47:ae:e9:36:fb:ee: 48:2f:f7:86:49:e1:e7:65:62:2e:08:2f:ff:a2:ba: 2b:10:46:a2:0d:f1:2f:ff:ee:a6:76:ff:09:e2:57: a7:9c:43:ea:90:d8:27:f3:35:73:c5:93:2e:81:f1: fd:9c:f8:24:8f:99:8b:92:9f:9c:02:be:cd:d7:f0: 8e:92:68:31:fe:17:db:42:82:0a:ae:b2:48:4b:e7: 28:c6:45:5f:97:62:30:d1:62:15:0a:c8:3b:f2:68: 62:07:05:fd:17:0d:62:fd:b9:29:11:78:6a:dd:b4: 20:7f:01:2e:21:bf:3a:ab:69:cc:1e:c7:47:e9:db: 51:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A7:84:80:B2:87:48:5E:B2:AB:75:BB:32:8E:28:E5:EE:66:C0:5D X509v3 Authority Key Identifier: keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:06:55:95:2a:16:23:3e:82:36:05:65:ae:b5:87:27:f3:51: a7:ab:a0:98:1f:3c:64:55:d7:4f:2d:55:2c:23:3f:c9:ba:5e: 44:24:c7:39:63:41:49:82:c9:8c:f1:27:50:89:f4:41:49:50: 27:d2:59:8d:44:9c:a0:d7:8a:c2:85:fa:88:5f:ea:1c:f5:56: 1e:fd:1c:64:c3:ab:71:00:8e:43:75:63:0f:48:a2:a3:e8:0d: fb:9d:1f:87:1f:5a:d7:3a:34:1b:3f:fa:63:39:6c:04:95:11: cf:e6:c0:d5:7f:27:a1:c6:65:b8:d2:b7:e2:ba:24:a6:2b:26: 86:71:03:a3:ec:fe:ac:95:29:11:ca:52:41:75:16:20:49:38: 42:1e:c6:49:4f:c6:13:a4:94:c5:36:6e:91:bb:ac:b8:38:8a: 77:45:30:1c:d2:56:99:5b:45:ad:c4:ea:57:02:be:55:c3:7a: 2d:66:34:fa:51:34:cf:be:78:23:a1:27:23:4f:a9:2a:ac:89: 27:40:43:d1:06:fb:90:45:ed:09:a2:76:66:5f:bf:0f:37:6b: 4c:d6:b2:15:37:dd:ed:82:dc:20:2b:b6:b2:7d:84:02:fc:e0: b7:a1:d1:23:65:8a:d7:ab:e6:fc:ab:f9:3b:86:85:e6:ef:1e: f5:de:99:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ER7Ma7mi01pjLtEjtXITMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYmUzYzZkOTk4MTE4MTljZWRkZGNkMjdlNGJlMjViYzBj ZjUwNmYwHhcNMjUxMjIxMDQwMDQ1WhcNMjUxMjIyMDQwMDQ1WjAzMTEwLwYDVQQD Eyg3ZGE3ODQ4MGIyODc0ODVlYjJhYjc1YmIzMjhlMjhlNWVlNjZjMDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxe8LUBYYfv0ODsu7ZH3f/2vvWNbV TqCEA37PyGMawR0ei1S4leUKnjkDo4UTJxNRqTRLLjGbwGTpVE9Htsdwt5LuucCo 42Wu2RlhGfJq3bQ2cqmmpHEzoDfviRgu8YGUBdZ2gxC03jjNpA7DAM7frprLr5Gj x+SuWniz7UbH6TFHruk2++5IL/eGSeHnZWIuCC//ororEEaiDfEv/+6mdv8J4len nEPqkNgn8zVzxZMugfH9nPgkj5mLkp+cAr7N1/COkmgx/hfbQoIKrrJIS+coxkVf l2Iw0WIVCsg78mhiBwX9Fw1i/bkpEXhq3bQgfwEuIb86q2nMHsdH6dtRWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2nhICyh0hesqt1uzKOKOXuZsBdMB8GA1UdIwQY MBaAFMu+PG2ZgRgZzt3c0n5L4lvAz1BvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84NDhjOGItMGU5Yy00ZDZlLTg3M2Ut OGNmN2Q0NDkzMzU4LzEveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS84NDhjOGItMGU5Yy00ZDZlLTg3M2UtOGNmN2Q0NDkzMzU4 LzEveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVgZVlSoW Iz6CNgVlrrWHJ/NRp6ugmB88ZFXXTy1VLCM/ybpeRCTHOWNBSYLJjPEnUIn0QUlQ J9JZjUScoNeKwoX6iF/qHPVWHv0cZMOrcQCOQ3VjD0iio+gN+50fhx9a1zo0Gz/6 YzlsBJURz+bA1X8nocZluNK34rokpismhnEDo+z+rJUpEcpSQXUWIEk4Qh7GSU/G E6SUxTZukbusuDiKd0UwHNJWmVtFrcTqVwK+VcN6LWY0+lE0z754I6EnI0+pKqyJ J0BD0Qb7kEXtCaJ2Zl+/DzdrTNayFTfd7YLcICu2sn2EAvzgt6HRI2WK16vm/Kv5 O4aF5u8e9d6ZAg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:43:07 2025 by rpki-client