This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft File: yJwsxInr5I9JBYSshm_jYsQRfnU.mft (raw, json) Hash identifier: 08sr+SL0UaXhvLQMvI5j+5bK0BayQDSz8GiQb7ShH3Y= Subject key identifier: BC:B0:7A:D9:40:C0:04:36:C1:C9:5A:F7:FE:F4:D6:32:BB:D6:EE:B5 Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75 Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75 Certificate serial: 019B066C507960BE8443BDA48147165B0043 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft Manifest number: 1488 Signing time: Wed 10 Dec 2025 04:02:00 +0000 Manifest this update: Wed 10 Dec 2025 04:02:00 +0000 Manifest next update: Thu 11 Dec 2025 04:02:00 +0000 Files and hashes: 1: Dc6BAEltaDP2vpyBv3HQuOpTBRc.roa (hash: zHQ4G3ozImFZmCROGDcBHxKHHzDIQqVZcTlnWGds6nA=) 2: R9mkDG939Vi0V6WPYxWOdOia5yY.roa (hash: 4NF69kzNZytc4pvaMVN/lUR5TCOBAdYZbJ6/RSZBFvw=) 3: VcjKNddvZkM3oUg77hjobEZD-v4.roa (hash: j2f1vP0hAJR3dBAkt/cdLLMXOKpHx4r5QIkrRuPhSCk=) 4: ikC3r3gDMRV7rzOGGg-rqokymXI.roa (hash: zgCMDOXPzxWDouvwv/WvFaJhABZR8ZFNubvE8NCbA04=) 5: l3ZDT2gNOtZjLuBLuwpE6ZnBm-s.roa (hash: 1+yCgtq5Im5Fg/SSqsuub6MIDinjmkRADHcXtUuHpR8=) 6: p6BywI9GGwmeb7zmkwPwYCeFaw0.roa (hash: FmT1evBUP1t9QXDygh7a4PaImArT/MjNy+wH/psOeog=) 7: yJwsxInr5I9JBYSshm_jYsQRfnU.crl (hash: qfXqm9KX1JGRmEdI/MEkZqE0PSqvZUrmbeyWDK3cljM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 04:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:6c:50:79:60:be:84:43:bd:a4:81:47:16:5b:00:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75 Validity Not Before: Dec 10 04:02:00 2025 GMT Not After : Dec 11 04:02:00 2025 GMT Subject: CN=bcb07ad940c00436c1c95af7fef4d632bbd6eeb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:32:e1:a4:92:af:87:16:2a:ea:16:21:5d:a3: 92:9b:3c:b0:fb:bd:9f:4f:d3:54:a5:48:3b:5d:83: d5:93:90:28:ec:c6:34:65:22:74:95:94:91:0e:8f: 78:ed:fd:1e:65:5f:59:3d:e8:70:9b:73:59:23:46: 72:8e:e1:12:3c:36:4f:46:07:cc:5c:87:3f:ba:3e: d0:15:9c:01:8b:28:1d:84:35:5f:d4:27:6b:ce:39: ae:3e:d8:79:b1:4d:d0:ee:07:7b:cd:64:75:16:db: 15:89:4b:77:8b:5d:9b:ef:45:22:bf:d7:97:5d:37: 50:63:a1:41:ae:e3:20:c3:f0:13:02:f7:63:30:17: 51:c6:23:a5:7c:d7:bf:af:e2:51:a5:a8:22:78:86: 82:e7:28:b7:76:40:81:57:a0:20:f8:92:48:9e:6d: a1:23:79:a5:0e:4c:9d:bb:70:01:60:1f:96:b3:ed: 51:70:18:0e:56:d7:99:ab:a1:21:da:99:0d:af:14: d1:c6:4c:70:a2:c9:d1:78:77:2f:ee:72:39:00:2b: a5:19:5c:15:c5:ef:76:2d:0a:59:a8:4e:71:ca:e5: c4:72:08:a3:0c:66:99:4c:9b:13:f9:84:28:12:e1: f5:12:c4:50:8d:ca:67:4a:4a:ed:a6:4e:d2:7e:e5: a3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B0:7A:D9:40:C0:04:36:C1:C9:5A:F7:FE:F4:D6:32:BB:D6:EE:B5 X509v3 Authority Key Identifier: keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:14:1f:7f:64:cc:08:c3:03:a9:af:5f:89:65:43:78:f4:20: 3a:68:db:41:7f:81:d9:4e:6d:27:06:48:93:c3:94:18:ca:33: d4:fe:ec:0a:83:3a:97:2a:1d:18:84:0f:13:7f:b5:bb:9c:69: 13:82:09:c9:98:c3:16:cf:a3:e9:64:f2:12:cc:23:3f:83:7d: 31:9f:57:81:ee:84:da:8b:10:80:b6:fe:19:3d:92:e3:13:19: 34:97:a5:f3:81:e0:ae:3f:a9:ec:2f:9e:18:ea:89:68:9b:97: 49:9e:90:fc:08:8b:9b:d1:7e:19:b5:5f:06:65:b1:4e:c7:45: 46:0b:d5:29:4d:12:fc:bf:b9:b6:86:46:82:aa:f3:29:91:54: 94:2b:84:3b:06:c1:7c:6b:65:24:7c:e8:db:3f:41:e7:1e:23: 1e:e4:47:69:9b:6f:b3:54:38:de:0e:c0:36:cf:2d:4f:42:73: fa:5f:5f:9e:c3:12:a8:b4:7f:94:f4:a3:94:69:78:80:7f:4c: 21:1b:9a:6e:5f:07:93:a1:58:33:ef:62:10:35:19:e3:c8:b7: d0:f7:d5:dd:e1:af:ff:80:48:5c:a3:e5:6a:cf:a9:ed:a5:86: f1:15:c1:96:cd:53:8b:88:98:83:a3:13:94:6f:9c:4a:7d:e6: 17:a3:4d:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGbFB5YL6EQ72kgUcWWwBDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4OWMyY2M0ODllYmU0OGY0OTA1ODRhYzg2NmZlMzYyYzQx MTdlNzUwHhcNMjUxMjEwMDQwMjAwWhcNMjUxMjExMDQwMjAwWjAzMTEwLwYDVQQD EyhiY2IwN2FkOTQwYzAwNDM2YzFjOTVhZjdmZWY0ZDYzMmJiZDZlZWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jLhpJKvhxYq6hYhXaOSmzyw+72f T9NUpUg7XYPVk5Ao7MY0ZSJ0lZSRDo947f0eZV9ZPehwm3NZI0ZyjuESPDZPRgfM XIc/uj7QFZwBiygdhDVf1CdrzjmuPth5sU3Q7gd7zWR1FtsViUt3i12b70Uiv9eX XTdQY6FBruMgw/ATAvdjMBdRxiOlfNe/r+JRpagieIaC5yi3dkCBV6Ag+JJInm2h I3mlDkydu3ABYB+Ws+1RcBgOVteZq6Eh2pkNrxTRxkxwosnReHcv7nI5ACulGVwV xe92LQpZqE5xyuXEcgijDGaZTJsT+YQoEuH1EsRQjcpnSkrtpk7SfuWjcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLywetlAwAQ2wcla9/701jK71u61MB8GA1UdIwQY MBaAFMicLMSJ6+SPSQWErIZv42LEEX51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEt YWYyY2ZhNjIyZDE4LzEveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEtYWYyY2ZhNjIyZDE4 LzEveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXxQff2TM CMMDqa9fiWVDePQgOmjbQX+B2U5tJwZIk8OUGMoz1P7sCoM6lyodGIQPE3+1u5xp E4IJyZjDFs+j6WTyEswjP4N9MZ9Xge6E2osQgLb+GT2S4xMZNJel84Hgrj+p7C+e GOqJaJuXSZ6Q/AiLm9F+GbVfBmWxTsdFRgvVKU0S/L+5toZGgqrzKZFUlCuEOwbB fGtlJHzo2z9B5x4jHuRHaZtvs1Q43g7ANs8tT0Jz+l9fnsMSqLR/lPSjlGl4gH9M IRuabl8Hk6FYM+9iEDUZ48i30PfV3eGv/4BIXKPlas+p7aWG8RXBls1Ti4iYg6MT lG+cSn3mF6NNhA== -----END CERTIFICATE-----Generated at Wed Dec 10 13:05:36 2025 by rpki-client