This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft File: yKS714rzY_pb7uYy6L3Ei2KXNDw.mft (raw, json) Hash identifier: vPsbrJXcwqnE0wdE3bFmMKUG4ynXFUsGZK4Valu/pk8= Subject key identifier: AF:C9:7D:C7:8D:E3:AE:0B:69:B0:E8:2B:96:43:36:84:BE:EB:0C:9C Authority key identifier: C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C Certificate issuer: /CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c Certificate serial: 019B4A3A287DEAB4EF55B525F828419260C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft Manifest number: 07E5 Signing time: Tue 23 Dec 2025 08:01:24 +0000 Manifest this update: Tue 23 Dec 2025 08:01:24 +0000 Manifest next update: Wed 24 Dec 2025 08:01:24 +0000 Files and hashes: 1: d6sgkQbNQYkqYXcedUvxxcDi_RY.roa (hash: qNUbQpwyqYmbMOUJJoCyiXY3LQNxqUvVSzT1Kq6z0rI=) 2: yKS714rzY_pb7uYy6L3Ei2KXNDw.crl (hash: MZuOb3U3VwvoJgBZ6nPSkjLtUPVVKm31UeGgCRCZnrc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 08:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:3a:28:7d:ea:b4:ef:55:b5:25:f8:28:41:92:60:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c Validity Not Before: Dec 23 08:01:24 2025 GMT Not After : Dec 24 08:01:24 2025 GMT Subject: CN=afc97dc78de3ae0b69b0e82b96433684beeb0c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:34:10:bc:5f:d0:54:c9:c6:c2:62:c5:ac:e6: d4:1f:ef:11:6f:7a:a2:f6:92:97:ab:e9:b4:f5:b3: 74:13:e5:44:f1:4b:ca:74:0f:a9:4e:aa:c3:1f:62: 5a:93:40:2e:ba:29:97:c2:b9:bf:35:41:b3:38:60: 83:61:78:a8:31:42:d9:bf:d8:c3:6e:9c:8a:ae:54: 84:8b:0a:b3:b7:f5:e3:d4:fd:d2:fd:92:cf:25:36: e8:5d:70:9f:73:81:8b:21:f0:83:0c:79:4f:11:db: cc:68:f5:a7:30:9b:65:7f:c9:b5:5a:13:3e:49:70: bd:66:ce:b9:61:70:a8:12:cd:75:ee:fa:2b:63:42: fa:39:67:ec:ba:1a:29:4e:c8:1e:f1:90:07:8c:aa: 66:82:b0:bb:16:86:13:78:89:67:64:3e:6e:21:a7: 96:55:c9:b6:6f:5f:66:ee:e6:a3:b1:69:82:3b:79: 5c:0b:6b:16:35:4a:f6:18:ba:de:4b:39:d9:f9:e8: 0f:49:d9:bf:34:78:30:4a:2e:ab:cb:31:08:62:8f: 1d:d3:fd:4f:af:9f:7e:b7:79:6b:fb:34:2a:30:fe: 3e:e2:a3:2a:b4:4c:e2:a6:7d:63:33:7a:1d:4f:e4: b5:9b:0b:d9:2b:ff:dc:fb:c6:fc:5e:a9:2e:2e:93: f6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C9:7D:C7:8D:E3:AE:0B:69:B0:E8:2B:96:43:36:84:BE:EB:0C:9C X509v3 Authority Key Identifier: keyid:C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:87:02:d2:17:91:e1:2a:1f:f5:36:23:49:fb:69:57:3a:29: d7:55:9e:f8:80:b5:eb:77:45:a4:32:1b:4d:97:89:24:60:17: 1d:2e:09:ec:01:96:e7:86:02:62:ac:3f:87:02:79:f0:13:8e: 6e:2e:2e:e6:64:48:fe:5b:71:d5:b0:d8:1c:62:0a:aa:7b:91: 75:f4:b9:4f:89:67:f5:c3:d3:e6:05:f3:be:8e:f3:19:78:1d: b3:12:25:b3:42:1d:b2:c0:1e:25:b4:72:fb:d2:0a:1d:81:83: 67:2b:2f:7c:04:23:0f:98:7b:a4:62:d4:e6:a1:95:c7:d3:55: 59:b1:a9:dc:16:71:a4:4c:09:e8:28:7b:45:87:f4:eb:ca:5b: 07:11:09:71:4d:90:7e:ff:a1:78:2b:75:2e:98:3d:e6:1a:a3: 8f:5d:0b:e5:13:ba:ef:83:c1:4b:c7:4b:47:fe:3e:5b:6f:68: a2:f6:4f:df:e7:68:08:1b:b2:ce:f6:4a:89:40:8d:d4:05:72: da:e8:b3:82:c4:94:81:79:c7:5d:84:e4:59:f1:ea:7a:3d:30: 9d:f7:7a:04:cd:66:22:65:9a:80:1b:53:a6:0c:50:49:22:79: 16:2f:87:10:34:fb:7f:9f:81:4f:86:93:12:17:2d:19:32:0d: c6:3c:5a:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKOih96rTvVbUl+ChBkmDBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4YTRiYmQ3OGFmMzYzZmE1YmVlZTYzMmU4YmRjNDhiNjI5 NzM0M2MwHhcNMjUxMjIzMDgwMTI0WhcNMjUxMjI0MDgwMTI0WjAzMTEwLwYDVQQD EyhhZmM5N2RjNzhkZTNhZTBiNjliMGU4MmI5NjQzMzY4NGJlZWIwYzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDQQvF/QVMnGwmLFrObUH+8Rb3qi 9pKXq+m09bN0E+VE8UvKdA+pTqrDH2Jak0AuuimXwrm/NUGzOGCDYXioMULZv9jD bpyKrlSEiwqzt/Xj1P3S/ZLPJTboXXCfc4GLIfCDDHlPEdvMaPWnMJtlf8m1WhM+ SXC9Zs65YXCoEs117vorY0L6OWfsuhopTsge8ZAHjKpmgrC7FoYTeIlnZD5uIaeW Vcm2b19m7uajsWmCO3lcC2sWNUr2GLreSznZ+egPSdm/NHgwSi6ryzEIYo8d0/1P r59+t3lr+zQqMP4+4qMqtEzipn1jM3odT+S1mwvZK//c+8b8XqkuLpP2EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/JfceN464LabDoK5ZDNoS+6wycMB8GA1UdIwQY MBaAFMiku9eK82P6W+7mMui9xItilzQ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUtTNzE0cnpZX3BiN3VZeTZMM0VpMktYTkR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8yNDZiNGQtNGQzZS00ZTAyLThjMDct YWM2OGE1MGQwYzk5LzEveUtTNzE0cnpZX3BiN3VZeTZMM0VpMktYTkR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8yNDZiNGQtNGQzZS00ZTAyLThjMDctYWM2OGE1MGQwYzk5 LzEveUtTNzE0cnpZX3BiN3VZeTZMM0VpMktYTkR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvYcC0heR 4Sof9TYjSftpVzop11We+IC163dFpDIbTZeJJGAXHS4J7AGW54YCYqw/hwJ58BOO bi4u5mRI/ltx1bDYHGIKqnuRdfS5T4ln9cPT5gXzvo7zGXgdsxIls0IdssAeJbRy +9IKHYGDZysvfAQjD5h7pGLU5qGVx9NVWbGp3BZxpEwJ6Ch7RYf068pbBxEJcU2Q fv+heCt1Lpg95hqjj10L5RO674PBS8dLR/4+W29oovZP3+doCBuyzvZKiUCN1AVy 2uizgsSUgXnHXYTkWfHqej0wnfd6BM1mImWagBtTpgxQSSJ5Fi+HEDT7f5+BT4aT EhctGTINxjxa/w== -----END CERTIFICATE-----Generated at Tue Dec 23 16:47:07 2025 by rpki-client