This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft File: yvlojhds84ZDbXu4jTpAW0bQ4rk.mft (raw, json) Hash identifier: jWKmi0erdZXVrcUEVVNp3eQPxxsxjHNEo2ZoGJnBp8A= Subject key identifier: 0C:AA:21:C2:72:5B:22:05:3F:D1:1B:08:74:A7:92:61:9F:AA:0D:AA Authority key identifier: CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9 Certificate issuer: /CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9 Certificate serial: 019B67315544599F51A478ADA66635077438 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft Manifest number: 059F Signing time: Sun 28 Dec 2025 23:00:44 +0000 Manifest this update: Sun 28 Dec 2025 23:00:44 +0000 Manifest next update: Mon 29 Dec 2025 23:00:44 +0000 Files and hashes: 1: 1MXWay8i8Jgpl2Ec45766ozfEQI.roa (hash: iWtw4F9PH8kF6GGDUuqXl1iDAmwZFyA4kEph6c61hFg=) 2: yvlojhds84ZDbXu4jTpAW0bQ4rk.crl (hash: 8ngv3+kxvoTGAdQrhL5J1lNsOBhEIlRGwUSHLwof8a8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:31:55:44:59:9f:51:a4:78:ad:a6:66:35:07:74:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9 Validity Not Before: Dec 28 23:00:44 2025 GMT Not After : Dec 29 23:00:44 2025 GMT Subject: CN=0caa21c2725b22053fd11b0874a792619faa0daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f1:06:c7:d7:c8:48:52:b7:c0:58:ef:f3:c5: 05:82:ea:5b:3e:e6:f0:c0:81:6a:36:e8:b1:e1:6f: eb:cd:c6:a7:11:62:05:e8:97:38:14:2a:ee:5d:0e: c6:24:72:53:6d:ef:4e:6e:72:f7:c8:72:5a:49:dd: 29:34:62:4d:56:f2:94:23:d0:8c:54:5f:0f:aa:cc: 93:0f:46:5a:40:91:85:fd:b7:1b:17:ff:18:fc:b6: ed:fa:90:48:04:00:b5:80:6b:c8:0a:c9:86:fc:42: 7d:08:70:6e:63:84:28:c6:04:11:a6:f3:39:dd:a3: 74:95:59:b9:9c:1c:7c:af:c6:ec:99:d6:07:71:ea: 51:97:b1:4a:25:02:6f:a0:29:ce:b7:b5:61:be:00: 71:d6:0d:8a:61:0c:a2:c4:3f:52:00:df:99:01:29: 1c:dc:cd:91:69:5c:51:cc:1c:22:d9:a8:b5:55:4a: 17:d3:27:8e:c5:ec:f5:32:a8:56:dc:3d:61:a2:c1: a9:ba:74:b4:21:02:79:62:ca:86:7f:0c:59:fd:e9: d0:66:34:c0:a2:f4:97:08:54:1e:24:da:e8:f2:c8: 76:d4:37:0a:77:e2:74:bc:a6:2b:7f:ae:96:32:03: 73:2a:fb:78:ad:2a:cf:99:99:0c:61:51:88:ec:ec: 13:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AA:21:C2:72:5B:22:05:3F:D1:1B:08:74:A7:92:61:9F:AA:0D:AA X509v3 Authority Key Identifier: keyid:CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:d5:4a:b7:9a:67:59:66:c4:2c:95:dd:68:6e:c6:97:31:45: 38:0d:2e:36:9e:f2:55:11:c9:fa:55:43:f5:fb:25:f5:5e:fa: 95:67:ad:3a:4a:e2:aa:44:fb:44:d5:c2:98:3a:93:2e:e4:55: 12:b1:9c:70:92:89:28:3d:af:cc:5a:92:63:9b:59:6a:37:fd: cf:e8:a8:b1:54:0b:2a:06:3e:fc:5c:dd:88:fa:30:6a:cd:49: f3:a4:b5:b2:be:db:43:71:17:f3:ea:ac:2b:58:39:9d:3f:70: 0a:d7:11:65:33:e3:f7:d8:33:0b:21:77:fc:ff:92:ec:43:03: 27:9d:7b:e9:69:46:df:bc:6a:78:bd:39:50:1d:be:51:f0:f2: ec:bc:3b:73:7f:0a:43:11:0f:65:99:08:67:b3:64:e9:04:30: 62:c4:fb:2c:01:6c:45:8e:e5:d5:4a:ae:35:5e:41:49:22:a6: 8f:ac:8c:8e:3f:da:77:c5:fc:d6:5a:75:18:6b:45:6e:79:a1: 10:b5:3b:a0:42:c0:69:05:22:07:2c:46:52:96:8e:60:21:0a: cf:4a:02:14:94:5c:5e:de:c5:30:e5:23:68:83:88:5f:79:a1: b2:d9:c3:0e:db:0c:f1:5d:41:71:c0:f5:63:84:ac:3e:af:7b: d3:70:43:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnMVVEWZ9RpHitpmY1B3Q4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZjk2ODhlMTc2Y2YzODY0MzZkN2JiODhkM2E0MDViNDZk MGUyYjkwHhcNMjUxMjI4MjMwMDQ0WhcNMjUxMjI5MjMwMDQ0WjAzMTEwLwYDVQQD EygwY2FhMjFjMjcyNWIyMjA1M2ZkMTFiMDg3NGE3OTI2MTlmYWEwZGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfEGx9fISFK3wFjv88UFgupbPubw wIFqNuix4W/rzcanEWIF6Jc4FCruXQ7GJHJTbe9ObnL3yHJaSd0pNGJNVvKUI9CM VF8PqsyTD0ZaQJGF/bcbF/8Y/Lbt+pBIBAC1gGvICsmG/EJ9CHBuY4QoxgQRpvM5 3aN0lVm5nBx8r8bsmdYHcepRl7FKJQJvoCnOt7VhvgBx1g2KYQyixD9SAN+ZASkc 3M2RaVxRzBwi2ai1VUoX0yeOxez1MqhW3D1hosGpunS0IQJ5YsqGfwxZ/enQZjTA ovSXCFQeJNro8sh21DcKd+J0vKYrf66WMgNzKvt4rSrPmZkMYVGI7OwTdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAyqIcJyWyIFP9EbCHSnkmGfqg2qMB8GA1UdIwQY MBaAFMr5aI4XbPOGQ217uI06QFtG0OK5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXZsb2poZHM4NFpEYlh1NGpUcEFXMGJRNHJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iNGFhZjYtMTBmNC00MTcxLWFjNWEt YWIwYzFjNDQyZjVkLzEveXZsb2poZHM4NFpEYlh1NGpUcEFXMGJRNHJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9iNGFhZjYtMTBmNC00MTcxLWFjNWEtYWIwYzFjNDQyZjVk LzEveXZsb2poZHM4NFpEYlh1NGpUcEFXMGJRNHJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAutVKt5pn WWbELJXdaG7GlzFFOA0uNp7yVRHJ+lVD9fsl9V76lWetOkriqkT7RNXCmDqTLuRV ErGccJKJKD2vzFqSY5tZajf9z+iosVQLKgY+/FzdiPowas1J86S1sr7bQ3EX8+qs K1g5nT9wCtcRZTPj99gzCyF3/P+S7EMDJ5176WlG37xqeL05UB2+UfDy7Lw7c38K QxEPZZkIZ7Nk6QQwYsT7LAFsRY7l1UquNV5BSSKmj6yMjj/ad8X81lp1GGtFbnmh ELU7oELAaQUiByxGUpaOYCEKz0oCFJRcXt7FMOUjaIOIX3mhstnDDtsM8V1BccD1 Y4SsPq9703BDvg== -----END CERTIFICATE-----Generated at Mon Dec 29 01:32:25 2025 by rpki-client