This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft File: _Yk4EweuXjsbqGWM2n7iraQUFEc.mft (raw, json) Hash identifier: fgLPRniOq+aO4sdWjQWwKyPW9w8954u7yLGTlU3DHhM= Subject key identifier: 78:0B:58:FA:EB:1B:32:AE:67:69:1C:6B:7B:11:A8:04:4A:FE:A7:3D Authority key identifier: FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47 Certificate issuer: /CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447 Certificate serial: 019B25530FF1599FD4C2CD09037C29BE385C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft Manifest number: 129B Signing time: Tue 16 Dec 2025 04:02:39 +0000 Manifest this update: Tue 16 Dec 2025 04:02:39 +0000 Manifest next update: Wed 17 Dec 2025 04:02:39 +0000 Files and hashes: 1: Vc2DYnTkl8e6VG_7qyXjn1yvUqg.roa (hash: S5Mw4KsEyV+yIM/8XssJwS1ndxLAY/uwrPjkANgxyb0=) 2: _Yk4EweuXjsbqGWM2n7iraQUFEc.crl (hash: EbfEBTblJGkXxg9H70IYR/SXGePlbOFZnFD/IVTrJtE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:53:0f:f1:59:9f:d4:c2:cd:09:03:7c:29:be:38:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447 Validity Not Before: Dec 16 04:02:39 2025 GMT Not After : Dec 17 04:02:39 2025 GMT Subject: CN=780b58faeb1b32ae67691c6b7b11a8044afea73d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:44:19:65:c2:95:fa:2e:32:c8:b6:53:ab:ac: f4:9a:74:bc:56:48:bf:3c:39:39:ad:c3:b6:64:1b: a1:15:42:a6:58:47:2e:17:86:cc:93:78:72:ec:8b: 0f:ec:70:c3:3d:3a:18:12:92:93:a5:ee:1c:44:3e: 56:3e:8f:dc:6f:04:5e:56:2c:6d:27:45:96:f4:13: 38:d7:6d:c6:60:94:b8:d9:e6:45:40:54:4c:54:4c: 1e:66:9c:8c:4b:8b:11:93:90:5f:39:f6:60:92:32: 50:9b:62:2d:1f:ce:ab:c8:9b:94:d8:05:98:68:17: 55:4d:3d:66:50:ce:89:ca:4c:41:f8:fd:8d:bd:77: 61:33:80:93:72:c2:39:de:3c:1a:82:ca:87:36:9e: 20:7b:05:6b:6a:95:d2:6d:5d:f2:a7:5a:3e:18:39: c3:67:1b:c1:3d:89:5f:42:d6:97:dc:f7:66:79:cd: b2:c7:0e:65:3a:73:bd:09:35:9d:85:9d:65:cc:03: c1:0a:c5:c3:76:15:b6:97:04:b9:fa:f5:ef:78:50: 9b:4b:6f:e0:83:0c:84:c5:f1:91:57:cf:6a:1e:40: 3b:d4:b0:5c:68:8a:54:e1:5e:34:8e:5d:d0:c3:da: 4e:01:d1:97:6a:d0:77:fd:cc:d0:2f:92:24:86:f6: 41:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0B:58:FA:EB:1B:32:AE:67:69:1C:6B:7B:11:A8:04:4A:FE:A7:3D X509v3 Authority Key Identifier: keyid:FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:11:92:0f:3c:c6:b7:8e:3e:78:06:0e:77:ee:88:26:a3:62: 3c:dd:d4:7a:64:10:ff:b9:6f:00:08:79:36:49:06:d9:a1:f3: f5:aa:37:75:2c:c1:26:06:96:a3:1e:9f:5b:aa:57:0f:92:e6: 9d:0b:57:15:23:2d:69:8c:30:b2:e1:4b:59:33:6d:d0:23:47: 46:3c:38:4e:76:5c:97:fa:54:40:6d:0d:96:13:f0:3c:16:92: 76:80:50:86:d4:b6:a5:5b:f6:9c:6a:77:10:36:00:39:c2:ef: f9:d7:2f:8e:ee:b7:c6:58:0b:2c:9f:d6:5f:54:42:27:49:cc: 12:81:c4:6d:1f:ff:54:a7:5b:85:48:25:4c:8b:7d:05:3f:3c: 9e:c7:5c:f1:ac:eb:af:fd:26:4d:3a:e4:d1:22:17:f6:45:9c: 67:7c:81:81:f1:df:07:66:31:94:67:ef:73:30:59:28:20:a2: 63:45:5e:ff:53:d5:ca:0f:b5:d1:de:06:0b:eb:e8:44:20:6d: f8:66:0c:25:4e:45:a4:7b:68:97:22:30:0d:e2:18:05:48:07: bf:d3:25:5e:20:f3:53:70:22:a8:7d:76:b3:ed:9d:e7:04:9a: fc:1b:a8:93:e5:32:a4:0a:96:e3:2e:3d:48:d7:e5:2c:22:0c: 78:f9:62:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUw/xWZ/Uws0JA3wpvjhcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkODkzODEzMDdhZTVlM2IxYmE4NjU4Y2RhN2VlMmFkYTQx NDE0NDcwHhcNMjUxMjE2MDQwMjM5WhcNMjUxMjE3MDQwMjM5WjAzMTEwLwYDVQQD Eyg3ODBiNThmYWViMWIzMmFlNjc2OTFjNmI3YjExYTgwNDRhZmVhNzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kQZZcKV+i4yyLZTq6z0mnS8Vki/ PDk5rcO2ZBuhFUKmWEcuF4bMk3hy7IsP7HDDPToYEpKTpe4cRD5WPo/cbwReVixt J0WW9BM4123GYJS42eZFQFRMVEweZpyMS4sRk5BfOfZgkjJQm2ItH86ryJuU2AWY aBdVTT1mUM6JykxB+P2NvXdhM4CTcsI53jwagsqHNp4gewVrapXSbV3yp1o+GDnD ZxvBPYlfQtaX3Pdmec2yxw5lOnO9CTWdhZ1lzAPBCsXDdhW2lwS5+vXveFCbS2/g gwyExfGRV89qHkA71LBcaIpU4V40jl3Qw9pOAdGXatB3/czQL5IkhvZB1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgLWPrrGzKuZ2kca3sRqARK/qc9MB8GA1UdIwQY MBaAFP2JOBMHrl47G6hljNp+4q2kFBRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1lrNEV3ZXVYanNicUdXTTJuN2lyYVFVRkVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kY2Y5YjctNmQ3Mi00NzVhLWJhYTct NjQ2ZWU2ZGZhNmI2LzEvX1lrNEV3ZXVYanNicUdXTTJuN2lyYVFVRkVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9kY2Y5YjctNmQ3Mi00NzVhLWJhYTctNjQ2ZWU2ZGZhNmI2 LzEvX1lrNEV3ZXVYanNicUdXTTJuN2lyYVFVRkVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATBGSDzzG t44+eAYOd+6IJqNiPN3UemQQ/7lvAAh5NkkG2aHz9ao3dSzBJgaWox6fW6pXD5Lm nQtXFSMtaYwwsuFLWTNt0CNHRjw4TnZcl/pUQG0NlhPwPBaSdoBQhtS2pVv2nGp3 EDYAOcLv+dcvju63xlgLLJ/WX1RCJ0nMEoHEbR//VKdbhUglTIt9BT88nsdc8azr r/0mTTrk0SIX9kWcZ3yBgfHfB2YxlGfvczBZKCCiY0Ve/1PVyg+10d4GC+voRCBt +GYMJU5FpHtolyIwDeIYBUgHv9MlXiDzU3AiqH12s+2d5wSa/Buok+UypAqW4y49 SNflLCIMePliQw== -----END CERTIFICATE-----Generated at Tue Dec 16 12:14:38 2025 by rpki-client