This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft File: yri42pzNTSYbcq2gNKCHVmWmRIc.mft (raw, json) Hash identifier: 0EXN0d1DCfO3MhYthG5rNSCur01/ElPTuK/UXY69UoY= Subject key identifier: FB:57:7B:6A:62:80:BC:CC:5F:9C:A6:CF:FA:67:33:5B:21:93:5E:C1 Authority key identifier: CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87 Certificate issuer: /CN=cab8b8da9ccd4d261b72ada034a0875665a64487 Certificate serial: 019B1A6032E7C63B6B94B132E8B8B0BAB97D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft Manifest number: 16BB Signing time: Sun 14 Dec 2025 01:01:10 +0000 Manifest this update: Sun 14 Dec 2025 01:01:10 +0000 Manifest next update: Mon 15 Dec 2025 01:01:10 +0000 Files and hashes: 1: iv4w_q_Q0lB1UAUD7TgMR_xxyYA.roa (hash: fMZ0QGK6B5sX/J++IQoulADhQ3kbWhx95qL8TpCZZ84=) 2: yri42pzNTSYbcq2gNKCHVmWmRIc.crl (hash: ujQorYoDO7V1oeVfJNhBBLNsk66exwBWJcExCrJNzzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 01:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:60:32:e7:c6:3b:6b:94:b1:32:e8:b8:b0:ba:b9:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cab8b8da9ccd4d261b72ada034a0875665a64487 Validity Not Before: Dec 14 01:01:10 2025 GMT Not After : Dec 15 01:01:10 2025 GMT Subject: CN=fb577b6a6280bccc5f9ca6cffa67335b21935ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:24:d9:5c:12:c7:a2:c3:cf:66:44:20:b7:50: b1:17:8f:17:b7:e8:db:79:57:10:c7:f7:51:a7:8b: a1:a8:3d:13:10:11:40:a6:e9:02:6b:1a:b9:88:94: fd:74:3b:1d:5f:a0:eb:c9:96:54:7a:2a:a0:c7:d4: 3f:23:0d:1b:79:90:04:ba:15:18:fc:ef:8b:10:a8: e0:90:ae:5a:8a:48:7e:fe:43:f9:07:03:32:e4:0b: 48:4b:ab:05:1f:63:1a:f5:a3:ee:25:95:e4:bc:34: 7f:a7:28:ee:dd:07:95:c6:77:7d:8c:e8:be:13:64: 41:07:4b:92:63:ff:55:81:eb:62:51:e2:63:f4:25: 24:dd:17:0e:b5:f8:fb:58:48:27:f0:8a:0f:d9:32: 2c:86:39:26:2b:17:91:f3:06:6b:7d:e5:18:6c:59: dd:9b:24:be:f4:02:d4:ba:c1:6e:6d:ea:e3:0d:85: 34:77:70:93:da:8a:20:55:8b:e0:28:d7:b5:30:c6: 21:3c:5a:64:6a:8b:a8:22:62:c1:ca:a6:d9:ad:65: f9:9b:11:bb:96:93:c4:ea:46:ab:13:4f:81:aa:fd: d7:5f:93:e0:f4:bd:48:b6:6e:83:e0:b9:e1:82:4c: 55:d5:92:29:aa:88:18:f6:34:a6:c6:e7:67:6b:98: d1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:57:7B:6A:62:80:BC:CC:5F:9C:A6:CF:FA:67:33:5B:21:93:5E:C1 X509v3 Authority Key Identifier: keyid:CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:7e:f3:8c:65:8d:ea:67:e2:29:ed:e4:51:42:26:e5:cc:08: a2:22:ce:1f:03:19:9c:e9:eb:15:2f:07:3d:32:c8:f3:db:50: ca:8d:c6:53:07:03:fc:4a:6a:32:77:6c:01:46:d5:e1:a3:d1: 43:f8:ef:60:02:e9:4f:ea:a2:1e:9b:81:a0:c5:86:22:ec:f7: 48:68:58:98:a8:91:66:28:df:82:0e:e0:cd:61:01:07:4e:ed: f0:05:50:ed:05:c4:82:06:79:73:a2:2c:ba:af:fb:33:c1:de: 6d:bb:d2:cc:3b:4a:a2:81:65:24:a7:0b:57:78:b1:41:d7:c6: 8a:18:ab:89:19:e5:d6:46:8b:7c:0a:57:eb:19:ac:c7:91:dc: cd:2f:1e:8f:ff:9c:60:f4:9e:a1:57:b8:a4:f4:12:69:ec:ef: 77:3f:e0:2a:75:ab:03:07:c7:a8:d3:5f:d9:f3:48:66:ce:9c: 28:a6:31:56:70:c0:43:53:e9:ea:ab:38:93:f7:df:ba:4f:0a: ca:b4:a1:f7:3e:0e:13:ed:2f:ee:96:57:11:97:38:a3:ac:54: 42:45:f2:e7:cb:f7:96:7f:1b:aa:ad:1b:a3:8d:9d:f1:19:f5: f8:97:91:f2:2c:0d:8f:60:cb:87:d3:15:54:55:3d:79:6e:e4: c0:e2:d8:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaYDLnxjtrlLEy6Liwurl9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYjhiOGRhOWNjZDRkMjYxYjcyYWRhMDM0YTA4NzU2NjVh NjQ0ODcwHhcNMjUxMjE0MDEwMTEwWhcNMjUxMjE1MDEwMTEwWjAzMTEwLwYDVQQD EyhmYjU3N2I2YTYyODBiY2NjNWY5Y2E2Y2ZmYTY3MzM1YjIxOTM1ZWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCTZXBLHosPPZkQgt1CxF48Xt+jb eVcQx/dRp4uhqD0TEBFApukCaxq5iJT9dDsdX6DryZZUeiqgx9Q/Iw0beZAEuhUY /O+LEKjgkK5aikh+/kP5BwMy5AtIS6sFH2Ma9aPuJZXkvDR/pyju3QeVxnd9jOi+ E2RBB0uSY/9VgetiUeJj9CUk3RcOtfj7WEgn8IoP2TIshjkmKxeR8wZrfeUYbFnd myS+9ALUusFuberjDYU0d3CT2oogVYvgKNe1MMYhPFpkaouoImLByqbZrWX5mxG7 lpPE6karE0+Bqv3XX5Pg9L1Itm6D4LnhgkxV1ZIpqogY9jSmxudna5jRRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtXe2pigLzMX5ymz/pnM1shk17BMB8GA1UdIwQY MBaAFMq4uNqczU0mG3KtoDSgh1ZlpkSHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXJpNDJwek5UU1liY3EyZ05LQ0hWbVdtUkljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9kYjQxYzktZThhMC00ZjkwLWEwZDUt ODg3NTA5YzQ2MDJhLzEveXJpNDJwek5UU1liY3EyZ05LQ0hWbVdtUkljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9kYjQxYzktZThhMC00ZjkwLWEwZDUtODg3NTA5YzQ2MDJh LzEveXJpNDJwek5UU1liY3EyZ05LQ0hWbVdtUkljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANX7zjGWN 6mfiKe3kUUIm5cwIoiLOHwMZnOnrFS8HPTLI89tQyo3GUwcD/EpqMndsAUbV4aPR Q/jvYALpT+qiHpuBoMWGIuz3SGhYmKiRZijfgg7gzWEBB07t8AVQ7QXEggZ5c6Is uq/7M8HebbvSzDtKooFlJKcLV3ixQdfGihiriRnl1kaLfApX6xmsx5HczS8ej/+c YPSeoVe4pPQSaezvdz/gKnWrAwfHqNNf2fNIZs6cKKYxVnDAQ1Pp6qs4k/ffuk8K yrSh9z4OE+0v7pZXEZc4o6xUQkXy58v3ln8bqq0bo42d8Rn1+JeR8iwNj2DLh9MV VFU9eW7kwOLYlA== -----END CERTIFICATE-----Generated at Sun Dec 14 07:42:15 2025 by rpki-client