This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft File: y748bZmBGBnO3dzSfkviW8DPUG8.mft (raw, json) Hash identifier: f0RCZU5bHkiXC8zXnupSjbnDZLTCujit7SNeaTI/36M= Subject key identifier: 84:67:50:00:D5:FB:D1:C1:5B:B3:30:E0:C4:DA:69:1A:22:C3:D8:97 Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F Certificate issuer: /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f Certificate serial: 019B507333C18EB3217724C7B18A1F35898B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft Manifest number: 12BE Signing time: Wed 24 Dec 2025 13:01:25 +0000 Manifest this update: Wed 24 Dec 2025 13:01:25 +0000 Manifest next update: Thu 25 Dec 2025 13:01:25 +0000 Files and hashes: 1: ghqg6ujuEOV4Vw3b6x6YkQU8aSs.roa (hash: IATpDK+kaz0czhsEzmLbtPDJ492YJfivjvGQ/3AgHO8=) 2: rMy8dPPnYigzc4tv_MpgYXZWjBU.roa (hash: nHe7eBjoA3VTymKpGX1+aRKhTfLD28hgYmPFTLI6+4M=) 3: x5FwTTVorsGfIV2MDa8IC9dozSI.roa (hash: cVCSNkZBBh3ZJGnim77LdgANipO1Ai7iWjVLFMe9HIY=) 4: y748bZmBGBnO3dzSfkviW8DPUG8.crl (hash: 7Cc/qrDPj0pFBOQv51admdhbe07SwUHrtoo2erdOhhc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:73:33:c1:8e:b3:21:77:24:c7:b1:8a:1f:35:89:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f Validity Not Before: Dec 24 13:01:25 2025 GMT Not After : Dec 25 13:01:25 2025 GMT Subject: CN=84675000d5fbd1c15bb330e0c4da691a22c3d897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ed:31:f5:4a:90:35:dd:01:99:c9:a3:35:e3: 45:96:a2:0b:cf:d9:53:a0:d3:a4:96:2b:09:d3:60: b8:50:b8:1b:af:41:cf:cc:b3:1e:de:e7:c5:69:f8: 9e:1f:bf:98:52:8e:12:81:61:05:5c:03:14:90:c1: fd:82:bc:03:7c:a5:4e:fb:ea:5c:96:75:08:5f:ba: 6a:83:b6:a7:6a:de:0b:22:20:24:92:51:cb:5c:ba: 81:13:c3:9e:76:86:b5:f8:1b:28:1e:f9:4d:94:6f: 0a:35:91:56:7e:e9:12:70:cd:6d:c1:e3:1a:18:f6: 76:0b:b7:de:d2:7f:b2:06:af:6a:de:93:c0:53:df: 52:3f:ae:a9:85:43:63:ff:ac:37:39:5b:9a:de:54: 13:63:f9:24:7c:18:63:5b:e0:31:87:a8:a8:c6:9c: 16:c2:08:5b:34:8e:da:6d:1a:8b:f4:ca:d1:6a:2f: 9d:09:10:19:9f:8b:6e:dc:7b:4e:e4:dc:c9:9b:ad: 77:96:af:9c:a4:e8:cc:7b:32:d1:68:99:8c:6e:32: 15:4c:33:d5:b1:65:52:88:ae:ed:27:69:0e:88:e4: 83:18:be:53:d4:cf:68:36:ec:97:31:d5:b1:15:d0: db:b2:25:62:e5:62:6a:8d:7d:1a:b3:b4:aa:2f:84: 5c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:67:50:00:D5:FB:D1:C1:5B:B3:30:E0:C4:DA:69:1A:22:C3:D8:97 X509v3 Authority Key Identifier: keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:1b:f1:18:1d:2c:70:04:e4:11:bf:b7:3b:44:e9:99:b0:6e: 56:ca:37:c4:60:83:1e:8c:c6:1a:e1:86:5c:3c:21:5b:2b:a9: ab:8e:fa:79:0e:54:3d:59:47:96:16:d8:cb:19:0a:25:e9:b9: d1:8b:55:cf:bd:c1:3d:6d:38:ed:e7:4b:15:da:21:88:b9:8c: ee:93:3b:30:79:b7:33:4c:a3:3c:91:25:27:ba:d9:98:7c:55: 7f:95:e0:0c:47:de:01:4a:45:55:49:c7:2b:87:90:33:af:f7: 3b:0a:cf:05:27:82:0e:db:7a:94:fd:b7:f5:30:b8:ed:bd:c9: a5:09:59:84:2e:28:42:5a:70:1a:25:b0:be:cb:47:1b:d7:b7: 5d:b3:69:ef:ac:35:da:23:cb:b2:85:e7:29:84:0f:fc:10:02: 0b:12:6d:65:f5:a2:10:83:ee:58:0e:a5:79:9c:f2:f7:53:53: ab:98:01:04:c5:f6:9e:75:2c:c9:bc:30:a5:9a:e3:56:e4:e7: 2d:9e:b2:c2:ac:4d:c8:34:53:99:89:54:93:9b:96:9d:77:e9: de:d4:92:97:a3:87:f1:59:0f:3e:bb:d7:eb:0f:fe:c3:bf:2b: cb:5f:da:05:ba:ab:77:66:45:b2:36:8e:de:77:1c:fe:f9:7d: d3:8b:4e:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQczPBjrMhdyTHsYofNYmLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYmUzYzZkOTk4MTE4MTljZWRkZGNkMjdlNGJlMjViYzBj ZjUwNmYwHhcNMjUxMjI0MTMwMTI1WhcNMjUxMjI1MTMwMTI1WjAzMTEwLwYDVQQD Eyg4NDY3NTAwMGQ1ZmJkMWMxNWJiMzMwZTBjNGRhNjkxYTIyYzNkODk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO0x9UqQNd0BmcmjNeNFlqILz9lT oNOklisJ02C4ULgbr0HPzLMe3ufFafieH7+YUo4SgWEFXAMUkMH9grwDfKVO++pc lnUIX7pqg7anat4LIiAkklHLXLqBE8Oedoa1+BsoHvlNlG8KNZFWfukScM1tweMa GPZ2C7fe0n+yBq9q3pPAU99SP66phUNj/6w3OVua3lQTY/kkfBhjW+Axh6ioxpwW wghbNI7abRqL9MrRai+dCRAZn4tu3HtO5NzJm613lq+cpOjMezLRaJmMbjIVTDPV sWVSiK7tJ2kOiOSDGL5T1M9oNuyXMdWxFdDbsiVi5WJqjX0as7SqL4RcUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRnUADV+9HBW7Mw4MTaaRoiw9iXMB8GA1UdIwQY MBaAFMu+PG2ZgRgZzt3c0n5L4lvAz1BvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84NDhjOGItMGU5Yy00ZDZlLTg3M2Ut OGNmN2Q0NDkzMzU4LzEveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS84NDhjOGItMGU5Yy00ZDZlLTg3M2UtOGNmN2Q0NDkzMzU4 LzEveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxvxGB0s cATkEb+3O0TpmbBuVso3xGCDHozGGuGGXDwhWyupq476eQ5UPVlHlhbYyxkKJem5 0YtVz73BPW047edLFdohiLmM7pM7MHm3M0yjPJElJ7rZmHxVf5XgDEfeAUpFVUnH K4eQM6/3OwrPBSeCDtt6lP239TC47b3JpQlZhC4oQlpwGiWwvstHG9e3XbNp76w1 2iPLsoXnKYQP/BACCxJtZfWiEIPuWA6leZzy91NTq5gBBMX2nnUsybwwpZrjVuTn LZ6ywqxNyDRTmYlUk5uWnXfp3tSSl6OH8VkPPrvX6w/+w78ry1/aBbqrd2ZFsjaO 3ncc/vl904tOIQ== -----END CERTIFICATE-----Generated at Wed Dec 24 16:41:52 2025 by rpki-client