This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft File: Yz51LKDcQjx09QhAW6UiiowuUVc.mft (raw, json) Hash identifier: 6wWPXH+TI3oPeOIIP5ptzOuPccpn7n/ZTpBfLr0f9h0= Subject key identifier: B1:A3:87:6A:B5:0C:FE:C6:D9:82:26:4F:3C:B5:A0:6F:58:2F:7E:F6 Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57 Certificate issuer: /CN=633e752ca0dc423c74f508405ba5228a8c2e5157 Certificate serial: 019B0F6ED666F21025D4EA8261CFF5065462 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft Manifest number: 0B2D Signing time: Thu 11 Dec 2025 22:01:20 +0000 Manifest this update: Thu 11 Dec 2025 22:01:20 +0000 Manifest next update: Fri 12 Dec 2025 22:01:20 +0000 Files and hashes: 1: GqEinr-m2CvDdye1xapcq5VjPrE.roa (hash: hcu+QYeC9yw9ZhpK8tmA+UALlykKOSidMF07viNJkGo=) 2: Yz51LKDcQjx09QhAW6UiiowuUVc.crl (hash: Zv71s1t9sYOxoET4/EpnkPCZbtbX4B609ExQzlXRpPc=) 3: hfOIiDf5LSUuZcT1PUl10jObmSE.roa (hash: 4rpFhpKYXZ4q/RScibgPwKMUZ18cthvaLWxbyNlA6YU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:d6:66:f2:10:25:d4:ea:82:61:cf:f5:06:54:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157 Validity Not Before: Dec 11 22:01:20 2025 GMT Not After : Dec 12 22:01:20 2025 GMT Subject: CN=b1a3876ab50cfec6d982264f3cb5a06f582f7ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b9:ef:03:c2:d4:f4:9d:48:2a:a5:c5:0a:f7: 09:82:39:97:22:bc:74:e1:55:e0:da:ca:89:79:2b: 30:08:cc:6b:b6:a2:79:be:d5:b7:7c:e4:44:f6:31: 22:9b:ac:a8:5d:84:35:39:ba:b6:25:3c:1a:6d:b4: 13:a4:ee:c9:9c:d6:45:73:6b:70:e8:bf:85:10:58: ee:69:3c:09:ef:de:9b:17:26:97:f5:62:6a:88:66: a9:04:12:b9:0b:39:06:70:f4:75:85:68:1c:e1:f2: 25:0c:c9:bd:d4:e6:b2:91:3e:a0:13:ff:0d:e0:b1: 19:d7:a3:e9:eb:15:1c:ff:54:12:cf:3c:0a:e1:b4: 6b:77:3f:84:bb:47:7b:c7:14:0c:c4:e6:71:2e:0c: 7f:5a:2f:7f:f9:cc:4b:57:35:fe:36:a7:8c:d4:df: 1f:d4:63:15:81:2c:ba:e2:ec:af:42:74:b1:a5:8f: e6:37:75:fc:c2:e4:b2:bf:9a:1f:1f:d8:79:d4:e3: f0:6b:7c:a3:24:2f:2b:6e:a4:7e:6f:4c:b4:c0:7f: ff:17:7b:a4:2f:47:3f:da:13:5d:21:49:47:8b:f8: dc:c3:4a:0c:f8:1c:a3:8f:1e:9a:80:c0:9f:a3:bb: 5c:09:d2:f8:b4:42:49:bc:60:fb:37:72:c4:14:6d: 3e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A3:87:6A:B5:0C:FE:C6:D9:82:26:4F:3C:B5:A0:6F:58:2F:7E:F6 X509v3 Authority Key Identifier: keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ec:26:a3:58:be:4f:05:5b:02:0a:bd:25:76:e9:7c:30:3d: d9:fa:d1:bd:69:78:95:a4:b0:85:66:4b:6d:d4:05:e5:55:41: aa:3b:53:f1:7a:07:e0:fa:4d:fa:2e:96:69:4e:e4:be:ff:8a: d9:e6:98:23:77:e6:8b:c9:35:f1:41:d1:c9:fd:b8:bd:2c:1d: 42:e3:f0:aa:6c:bd:29:b2:95:d9:24:be:26:c5:f1:6d:7f:06: c1:c2:ac:ac:16:98:eb:a6:1a:9c:55:4a:32:dd:27:39:4d:5e: 3b:d7:3c:19:85:08:f5:01:a9:86:b1:6b:fe:aa:9d:32:b3:da: 00:fa:0f:9f:12:72:f0:09:75:bc:7e:b5:e2:94:07:4f:18:19: 1c:94:f5:1c:39:ea:48:f0:2d:11:09:6e:da:51:df:e4:5d:5f: 3d:38:74:80:b6:fe:1d:6f:d5:ca:13:03:e1:37:35:19:86:90: 50:1f:40:88:ba:ab:73:e7:ba:4f:12:21:d1:72:4a:d0:a7:81: 0e:c2:d0:ca:4a:02:98:e8:9d:3f:56:29:84:33:2e:d3:43:57: 67:0e:5d:d3:e0:09:e9:f9:58:89:3f:ee:9a:44:5a:df:31:74: 0f:38:e1:a8:d8:87:6f:97:d5:3c:f4:4f:65:bc:9d:85:59:25: ac:7f:01:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbtZm8hAl1OqCYc/1BlRiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzM2U3NTJjYTBkYzQyM2M3NGY1MDg0MDViYTUyMjhhOGMy ZTUxNTcwHhcNMjUxMjExMjIwMTIwWhcNMjUxMjEyMjIwMTIwWjAzMTEwLwYDVQQD EyhiMWEzODc2YWI1MGNmZWM2ZDk4MjI2NGYzY2I1YTA2ZjU4MmY3ZWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrnvA8LU9J1IKqXFCvcJgjmXIrx0 4VXg2sqJeSswCMxrtqJ5vtW3fORE9jEim6yoXYQ1Obq2JTwabbQTpO7JnNZFc2tw 6L+FEFjuaTwJ796bFyaX9WJqiGapBBK5CzkGcPR1hWgc4fIlDMm91OaykT6gE/8N 4LEZ16Pp6xUc/1QSzzwK4bRrdz+Eu0d7xxQMxOZxLgx/Wi9/+cxLVzX+NqeM1N8f 1GMVgSy64uyvQnSxpY/mN3X8wuSyv5ofH9h51OPwa3yjJC8rbqR+b0y0wH//F3uk L0c/2hNdIUlHi/jcw0oM+Byjjx6agMCfo7tcCdL4tEJJvGD7N3LEFG0+zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGjh2q1DP7G2YImTzy1oG9YL372MB8GA1UdIwQY MBaAFGM+dSyg3EI8dPUIQFulIoqMLlFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXo1MUxLRGNRangwOVFoQVc2VWlpb3d1VVZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jOGUyMTQtOGU0NS00Yzk2LThhNzkt ZGU2MTg3YjcyOThhLzEvWXo1MUxLRGNRangwOVFoQVc2VWlpb3d1VVZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9jOGUyMTQtOGU0NS00Yzk2LThhNzktZGU2MTg3YjcyOThh LzEvWXo1MUxLRGNRangwOVFoQVc2VWlpb3d1VVZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALewmo1i+ TwVbAgq9JXbpfDA92frRvWl4laSwhWZLbdQF5VVBqjtT8XoH4PpN+i6WaU7kvv+K 2eaYI3fmi8k18UHRyf24vSwdQuPwqmy9KbKV2SS+JsXxbX8GwcKsrBaY66YanFVK Mt0nOU1eO9c8GYUI9QGphrFr/qqdMrPaAPoPnxJy8Al1vH614pQHTxgZHJT1HDnq SPAtEQlu2lHf5F1fPTh0gLb+HW/VyhMD4Tc1GYaQUB9AiLqrc+e6TxIh0XJK0KeB DsLQykoCmOidP1YphDMu00NXZw5d0+AJ6flYiT/umkRa3zF0DzjhqNiHb5fVPPRP ZbydhVklrH8BBA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:16:34 2025 by rpki-client