This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft File: yFP7eYikLzmDixx_nwQAaS6Sldc.mft (raw, json) Hash identifier: /FIPcCE4R4oF8cswYg+FA8+uDmN0JJbyeFfilLyDhJg= Subject key identifier: 0F:8E:8E:DF:0C:EE:F3:32:F3:FD:9C:1F:3F:25:13:84:AB:D1:59:6C Authority key identifier: C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7 Certificate issuer: /CN=c853fb7988a42f39838b1c7f9f0400692e9295d7 Certificate serial: 019B19BB121B2C71B473928741F42E1C2C04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft Manifest number: 02E8 Signing time: Sat 13 Dec 2025 22:00:48 +0000 Manifest this update: Sat 13 Dec 2025 22:00:48 +0000 Manifest next update: Sun 14 Dec 2025 22:00:48 +0000 Files and hashes: 1: Ef8_zrRgEL0CLqM-IuSA3dX-ctc.roa (hash: xDWi6ors7AjB8a/zdFVsFoCBfh3PoH6v4N9RTJZoFCo=) 2: wvSIKLseDCti9NDqb3hBoHBh3tM.roa (hash: JuhvfPP6PYd4BnfxxERmMrnoz56rmfAtM3i5xnGfuRs=) 3: yFP7eYikLzmDixx_nwQAaS6Sldc.crl (hash: Q1hYHQIdVDY5GFNBUF/Go80c1HQib/iBcc/0S6lsJw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:12:1b:2c:71:b4:73:92:87:41:f4:2e:1c:2c:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c853fb7988a42f39838b1c7f9f0400692e9295d7 Validity Not Before: Dec 13 22:00:48 2025 GMT Not After : Dec 14 22:00:48 2025 GMT Subject: CN=0f8e8edf0ceef332f3fd9c1f3f251384abd1596c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7a:6a:f4:7c:9f:c2:d9:39:86:56:3c:fb:8e: 39:41:cc:dd:01:7d:af:72:ba:3b:cd:e7:43:f3:ba: 6a:11:07:a7:34:04:93:27:87:82:21:45:bc:ba:6a: e7:93:cc:e2:46:ad:2c:48:18:33:ae:b9:6a:59:3a: 26:3c:55:af:a1:a4:0e:4c:47:a1:34:e1:96:f3:71: 58:ab:c8:13:3a:76:ed:59:01:24:de:3f:cd:f1:f2: 9f:f2:2b:c4:e6:fa:2f:32:ad:a5:57:0d:71:21:c0: a1:ac:16:c0:63:dc:b9:3e:a5:47:b5:5b:75:aa:3a: 87:4c:a1:ec:80:a7:ea:49:1f:42:d8:3d:c3:3e:3e: ba:41:37:1c:ed:a5:43:77:00:be:fd:7e:5c:f1:e9: a9:ff:d7:87:b7:3d:6e:bb:99:8f:2f:ac:37:e0:df: 54:4c:f0:e5:17:86:23:30:48:71:55:df:47:9c:96: 73:e9:c2:72:40:cd:cf:7c:7a:c7:de:fe:1c:3d:0f: ef:61:8f:22:c3:1d:fc:bb:7d:c4:ee:76:6a:49:ce: fa:09:11:0d:fc:ed:ff:c4:c9:f8:06:80:1e:ca:93: 23:31:6c:04:36:c3:1a:34:30:f5:02:0a:87:1a:68: 5a:80:9e:5b:d7:1c:b5:ef:d7:75:90:c0:1a:98:c3: ae:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:8E:8E:DF:0C:EE:F3:32:F3:FD:9C:1F:3F:25:13:84:AB:D1:59:6C X509v3 Authority Key Identifier: keyid:C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:bd:81:87:73:60:50:bb:b4:b5:d8:df:da:48:1c:43:76:08: 16:39:a5:31:1b:d2:97:e4:7b:63:1b:73:9d:8d:e4:a0:c6:99: 97:52:64:8b:9d:52:2c:85:12:20:b4:29:a9:2b:7a:0e:47:bd: b0:66:a7:bd:58:97:90:a8:de:22:fa:7f:c0:ca:4d:79:66:63: 19:2b:5a:e6:2e:01:78:8c:b6:03:2d:c9:63:f2:ae:2c:a5:52: df:72:17:3a:17:42:54:86:55:c7:6e:3c:ae:4b:36:33:07:58: 26:01:47:b5:4c:1b:54:2e:8b:5c:c7:ae:96:00:49:6e:91:22: c8:a4:b0:fe:13:97:2e:c9:e9:a6:00:4a:15:3e:76:e4:8a:7d: fd:f7:6f:bb:f7:96:8d:9a:88:78:1f:5b:2f:6d:57:0a:87:82: ba:4e:22:22:c8:3c:3d:fe:28:73:6f:fc:15:7d:8d:13:4b:f9: 9b:9b:d1:1e:ed:dd:64:1b:65:ff:80:04:6c:cd:33:d8:64:9f: 1b:ca:32:05:ba:d1:42:93:d7:37:10:88:02:6c:1e:b3:1f:35: 45:43:39:8d:4e:b5:fe:a2:ea:fa:f3:65:e6:7a:8d:b2:3a:bb: bd:fc:40:98:9f:46:52:2f:bf:a8:5d:be:b3:9f:ad:83:82:57: f2:8c:29:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZuxIbLHG0c5KHQfQuHCwEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NTNmYjc5ODhhNDJmMzk4MzhiMWM3ZjlmMDQwMDY5MmU5 Mjk1ZDcwHhcNMjUxMjEzMjIwMDQ4WhcNMjUxMjE0MjIwMDQ4WjAzMTEwLwYDVQQD EygwZjhlOGVkZjBjZWVmMzMyZjNmZDljMWYzZjI1MTM4NGFiZDE1OTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXpq9Hyfwtk5hlY8+445QczdAX2v cro7zedD87pqEQenNASTJ4eCIUW8umrnk8ziRq0sSBgzrrlqWTomPFWvoaQOTEeh NOGW83FYq8gTOnbtWQEk3j/N8fKf8ivE5vovMq2lVw1xIcChrBbAY9y5PqVHtVt1 qjqHTKHsgKfqSR9C2D3DPj66QTcc7aVDdwC+/X5c8emp/9eHtz1uu5mPL6w34N9U TPDlF4YjMEhxVd9HnJZz6cJyQM3PfHrH3v4cPQ/vYY8iwx38u33E7nZqSc76CREN /O3/xMn4BoAeypMjMWwENsMaNDD1AgqHGmhagJ5b1xy179d1kMAamMOu8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+Ojt8M7vMy8/2cHz8lE4Sr0VlsMB8GA1UdIwQY MBaAFMhT+3mIpC85g4scf58EAGkukpXXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUZQN2VZaWtMem1EaXh4X253UUFhUzZTbGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wYzYxYTYtZTBmYS00MDE3LTk1ODIt MWU3YmRiN2YzMGY2LzEveUZQN2VZaWtMem1EaXh4X253UUFhUzZTbGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wYzYxYTYtZTBmYS00MDE3LTk1ODItMWU3YmRiN2YzMGY2 LzEveUZQN2VZaWtMem1EaXh4X253UUFhUzZTbGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT72Bh3Ng ULu0tdjf2kgcQ3YIFjmlMRvSl+R7YxtznY3koMaZl1Jki51SLIUSILQpqSt6Dke9 sGanvViXkKjeIvp/wMpNeWZjGSta5i4BeIy2Ay3JY/KuLKVS33IXOhdCVIZVx248 rks2MwdYJgFHtUwbVC6LXMeulgBJbpEiyKSw/hOXLsnppgBKFT525Ip9/fdvu/eW jZqIeB9bL21XCoeCuk4iIsg8Pf4oc2/8FX2NE0v5m5vRHu3dZBtl/4AEbM0z2GSf G8oyBbrRQpPXNxCIAmwesx81RUM5jU61/qLq+vNl5nqNsjq7vfxAmJ9GUi+/qF2+ s5+tg4JX8owp2g== -----END CERTIFICATE-----Generated at Sun Dec 14 01:58:34 2025 by rpki-client