This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft File: yBhKRQWwV2BY_TMwWb_xU65urVs.mft (raw, json) Hash identifier: /5lljRBlp9OBPzZh+cSVvo4yBlwPoQ7TwkcodimCaqc= Subject key identifier: 68:9A:4F:D9:2B:73:16:0E:C3:8B:4A:B5:58:42:1B:38:08:B5:C5:2A Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B Certificate issuer: /CN=c8184a4505b0576058fd333059bff153ae6ead5b Certificate serial: 019B18720156129B9A10001D0BE8F4C8FAF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft Manifest number: 0EAA Signing time: Sat 13 Dec 2025 16:01:23 +0000 Manifest this update: Sat 13 Dec 2025 16:01:23 +0000 Manifest next update: Sun 14 Dec 2025 16:01:23 +0000 Files and hashes: 1: nc-Ut0N4YEzlSxLCriwNW3L5bJY.roa (hash: CpEDv7qT3u78wfAAABUYzMXZLOCk+u5BsQilcshLjO0=) 2: yBhKRQWwV2BY_TMwWb_xU65urVs.crl (hash: SNd5rPUECPM7rN+GxD8tO4ygvloy6BpOL7W4EBiPZEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 16:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:72:01:56:12:9b:9a:10:00:1d:0b:e8:f4:c8:fa:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b Validity Not Before: Dec 13 16:01:23 2025 GMT Not After : Dec 14 16:01:23 2025 GMT Subject: CN=689a4fd92b73160ec38b4ab558421b3808b5c52a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7d:52:59:29:49:a9:53:79:4a:a3:76:48:a3: d0:3f:c0:55:13:a5:51:6c:69:f0:e4:90:da:88:0e: e3:8e:e8:1c:ff:12:13:69:a3:f0:89:57:2a:d9:d9: 79:9d:02:b1:3b:be:eb:72:c1:b8:83:d0:cf:8a:81: 78:16:d0:e8:cb:e8:ce:e8:05:12:39:33:76:84:53: 78:c6:5e:92:97:b5:b9:1a:77:8b:99:19:c1:e4:e4: e4:26:1b:07:f9:55:31:56:62:a3:40:54:64:89:e9: 13:69:57:6e:8d:dd:f0:e2:bc:1a:fc:5d:f9:95:08: 37:40:3b:76:60:e6:ef:8d:ff:45:24:9e:de:c7:63: 9d:d3:b8:8a:84:3c:d3:54:de:b0:62:98:10:ea:0d: 97:87:a8:4c:18:26:e2:af:18:ea:7d:97:84:dc:da: 72:39:7a:52:20:7e:64:0b:b0:be:44:cc:82:b3:05: 2f:8a:60:a0:bc:b6:42:08:bd:95:6c:2e:25:0d:2f: 33:8f:a2:88:16:8c:4d:96:a8:c4:97:a9:90:ab:22: f4:93:27:28:59:f7:93:c2:76:f7:f6:91:26:a1:99: dc:36:3c:11:75:31:50:b7:40:29:91:3d:9b:9a:e9: 0f:d7:6c:07:8e:bc:a9:13:bd:31:c7:01:6e:78:94: 21:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9A:4F:D9:2B:73:16:0E:C3:8B:4A:B5:58:42:1B:38:08:B5:C5:2A X509v3 Authority Key Identifier: keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:08:70:8e:66:be:57:41:a2:a6:ee:24:bf:25:0e:d0:92:25: 01:2e:39:54:6a:98:4c:75:5b:01:46:a1:ed:3f:e6:54:a3:b7: 82:e4:3a:df:d5:8e:f8:d8:83:cc:ec:28:4a:69:a0:17:da:1f: 7a:4e:cb:88:29:cb:45:9c:e8:80:2a:3b:5c:9e:8b:cc:0a:63: 43:e3:95:63:95:e6:af:73:e7:ce:0e:b6:c2:93:9c:c4:f7:14: c3:74:4d:ed:76:76:9b:09:b0:f8:83:74:f5:01:10:2f:7e:80: 6e:73:c3:3a:eb:cd:09:05:d1:81:e5:ff:7d:6a:a6:c7:61:05: 1e:1e:38:24:4c:d3:d3:e9:65:44:89:e6:28:6a:7d:f7:41:36: 4a:31:80:b7:13:7d:d6:9a:ae:88:ed:da:2f:59:d6:d9:c4:48: 18:42:d4:43:d7:7f:7a:26:63:40:ad:dc:7b:13:68:65:eb:a4: 5f:c9:6c:60:9e:07:20:a5:46:f8:65:19:15:82:4e:a0:b9:ee: 15:38:7a:0f:a4:27:36:2e:bf:7e:bf:ba:61:1b:6a:e6:b2:56: 82:44:18:4e:15:06:62:4c:a2:f3:94:be:1e:a0:15:15:e7:62: 4f:85:38:d9:cd:8f:75:1e:9b:a2:8d:d4:56:0e:f5:df:42:b2: 3d:2f:b8:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYcgFWEpuaEAAdC+j0yPr1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MTg0YTQ1MDViMDU3NjA1OGZkMzMzMDU5YmZmMTUzYWU2 ZWFkNWIwHhcNMjUxMjEzMTYwMTIzWhcNMjUxMjE0MTYwMTIzWjAzMTEwLwYDVQQD Eyg2ODlhNGZkOTJiNzMxNjBlYzM4YjRhYjU1ODQyMWIzODA4YjVjNTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2H1SWSlJqVN5SqN2SKPQP8BVE6VR bGnw5JDaiA7jjugc/xITaaPwiVcq2dl5nQKxO77rcsG4g9DPioF4FtDoy+jO6AUS OTN2hFN4xl6Sl7W5GneLmRnB5OTkJhsH+VUxVmKjQFRkiekTaVdujd3w4rwa/F35 lQg3QDt2YObvjf9FJJ7ex2Od07iKhDzTVN6wYpgQ6g2Xh6hMGCbirxjqfZeE3Npy OXpSIH5kC7C+RMyCswUvimCgvLZCCL2VbC4lDS8zj6KIFoxNlqjEl6mQqyL0kyco WfeTwnb39pEmoZncNjwRdTFQt0ApkT2bmukP12wHjrypE70xxwFueJQh+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGiaT9krcxYOw4tKtVhCGzgItcUqMB8GA1UdIwQY MBaAFMgYSkUFsFdgWP0zMFm/8VOubq1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lYWRhZDMtY2VkOS00MWZhLThlNWYt NWZiZjMzYWNkODNlLzEveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9lYWRhZDMtY2VkOS00MWZhLThlNWYtNWZiZjMzYWNkODNl LzEveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQhwjma+ V0Gipu4kvyUO0JIlAS45VGqYTHVbAUah7T/mVKO3guQ639WO+NiDzOwoSmmgF9of ek7LiCnLRZzogCo7XJ6LzApjQ+OVY5Xmr3Pnzg62wpOcxPcUw3RN7XZ2mwmw+IN0 9QEQL36AbnPDOuvNCQXRgeX/fWqmx2EFHh44JEzT0+llRInmKGp990E2SjGAtxN9 1pquiO3aL1nW2cRIGELUQ9d/eiZjQK3cexNoZeukX8lsYJ4HIKVG+GUZFYJOoLnu FTh6D6QnNi6/fr+6YRtq5rJWgkQYThUGYkyi85S+HqAVFediT4U42c2PdR6boo3U Vg7130KyPS+4cw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:02:34 2025 by rpki-client