This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft File: yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft (raw, json) Hash identifier: 2D/rD5poOVzo3uwrmsgZtto3ri6AscthONpaZc+8oGM= Subject key identifier: 90:A5:11:97:DD:EE:21:F0:4E:B0:B8:3A:B4:B4:39:D1:56:DC:2A:00 Authority key identifier: C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5 Certificate issuer: /CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5 Certificate serial: 019B0E25763F5CED350094C2268961E7DDB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft Manifest number: 0B93 Signing time: Thu 11 Dec 2025 16:01:34 +0000 Manifest this update: Thu 11 Dec 2025 16:01:34 +0000 Manifest next update: Fri 12 Dec 2025 16:01:34 +0000 Files and hashes: 1: YIzXk3w2A_mHXnQwfHIRuGRDzO0.roa (hash: w+KFjfkzM8iWvfdH1LsSPeTDcAp7/XS8C3VsFxe8b1Q=) 2: yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl (hash: U4l9S1aTdhrBo6yLl46llzhk/qyJvpxxfLyzxgMlpzw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:76:3f:5c:ed:35:00:94:c2:26:89:61:e7:dd:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5 Validity Not Before: Dec 11 16:01:34 2025 GMT Not After : Dec 12 16:01:34 2025 GMT Subject: CN=90a51197ddee21f04eb0b83ab4b439d156dc2a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:54:a6:18:9c:12:f0:b7:d0:11:fa:7d:cb:11: 2d:d6:ae:58:ef:e7:09:b7:f3:c1:16:91:0e:38:a0: f2:26:01:88:9b:40:b3:c6:dc:0a:bc:0d:0c:3d:81: c5:9f:08:ba:04:be:e3:94:28:23:15:ba:3c:7a:be: d6:78:8f:c1:84:63:db:99:30:ce:b4:5d:b7:e4:38: 59:39:35:91:92:f1:26:30:03:06:36:56:bc:e2:48: 7a:f0:47:86:6c:7b:f0:69:2c:f1:ca:84:09:02:c3: dc:b3:ff:da:69:c6:ce:41:40:e2:2d:06:3b:09:2e: 0e:a3:47:d1:18:8d:4e:1f:6f:3f:51:1d:11:2f:e0: 9c:d0:11:2c:5e:a0:f1:22:e3:79:08:a2:a9:22:74: dc:65:5c:09:b7:de:d4:1f:d5:34:92:dd:0b:71:29: aa:b9:03:7a:72:8e:93:aa:b9:fe:0e:b2:3f:36:ef: 27:f9:67:ad:c2:8b:b1:02:c9:fd:93:3e:c4:10:61: da:67:99:63:d0:10:09:ef:87:9d:ad:23:f0:21:0f: ac:fb:80:93:86:a7:e8:ea:54:c6:7a:ea:f9:51:07: d1:df:6a:fa:d3:fd:93:c5:d2:ac:de:21:aa:02:d3: 67:64:18:80:d2:9b:de:8a:0c:d9:a7:d9:40:8f:05: f4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A5:11:97:DD:EE:21:F0:4E:B0:B8:3A:B4:B4:39:D1:56:DC:2A:00 X509v3 Authority Key Identifier: keyid:C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:9a:77:0a:9e:b8:52:1e:74:af:24:6d:be:f0:c6:69:86:f5: cd:d7:0a:85:32:d3:4c:00:3f:73:d1:e8:1b:0c:dd:97:57:65: fb:9a:a9:ef:dd:2b:59:9f:02:f5:b0:5b:73:0e:b4:94:e1:c5: ff:07:8e:a3:29:83:83:a8:56:b3:f0:c1:da:8c:2a:d6:1a:c0: 5e:77:10:19:d4:bb:1b:d2:19:c1:91:76:b7:21:42:86:c5:60: cc:03:a5:eb:e8:d7:08:65:2f:ea:87:31:ee:69:5e:63:e4:c2: a3:f9:32:2c:f7:2c:a2:f3:80:bc:46:0c:d5:a2:50:42:4c:32: 96:40:cb:fd:86:91:0d:aa:11:95:dc:62:db:68:09:e9:75:6b: 13:64:77:59:8e:eb:42:10:0a:b1:63:b8:4a:74:e9:55:58:7e: 88:5d:81:43:fd:c9:fb:c5:1d:61:f0:26:ff:3d:2b:97:0a:07: fb:a1:4c:28:af:a6:c9:35:f3:f6:5b:70:4b:16:78:be:e8:0c: 8b:c3:72:bb:3b:0e:eb:a9:a3:49:8e:f5:eb:21:09:36:d0:6f: 2a:1f:ab:c8:cf:19:3d:45:4e:ea:90:1b:7a:4b:90:e0:aa:39: 48:25:94:cf:81:8d:00:5c:80:3e:ad:da:f8:24:29:42:7d:28: 6e:46:2c:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJXY/XO01AJTCJolh5923MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZjliYWFiMWExM2RmMzBlZmYwZmNkNzgwYzRiYmM1NGJj M2U2ZDUwHhcNMjUxMjExMTYwMTM0WhcNMjUxMjEyMTYwMTM0WjAzMTEwLwYDVQQD Eyg5MGE1MTE5N2RkZWUyMWYwNGViMGI4M2FiNGI0MzlkMTU2ZGMyYTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/lSmGJwS8LfQEfp9yxEt1q5Y7+cJ t/PBFpEOOKDyJgGIm0CzxtwKvA0MPYHFnwi6BL7jlCgjFbo8er7WeI/BhGPbmTDO tF235DhZOTWRkvEmMAMGNla84kh68EeGbHvwaSzxyoQJAsPcs//aacbOQUDiLQY7 CS4Oo0fRGI1OH28/UR0RL+Cc0BEsXqDxIuN5CKKpInTcZVwJt97UH9U0kt0LcSmq uQN6co6Tqrn+DrI/Nu8n+WetwouxAsn9kz7EEGHaZ5lj0BAJ74edrSPwIQ+s+4CT hqfo6lTGeur5UQfR32r60/2TxdKs3iGqAtNnZBiA0pveigzZp9lAjwX0KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJClEZfd7iHwTrC4OrS0OdFW3CoAMB8GA1UdIwQY MBaAFMj5uqsaE98w7/D814DEu8VLw+bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVBtNnF4b1QzekR2OFB6WGdNUzd4VXZENXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZTY3NjItMDk4OS00OGVmLWE4ZDIt ZGI0ODRjY2U3MjkzLzEveVBtNnF4b1QzekR2OFB6WGdNUzd4VXZENXRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8zZTY3NjItMDk4OS00OGVmLWE4ZDItZGI0ODRjY2U3Mjkz LzEveVBtNnF4b1QzekR2OFB6WGdNUzd4VXZENXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJp3Cp64 Uh50ryRtvvDGaYb1zdcKhTLTTAA/c9HoGwzdl1dl+5qp790rWZ8C9bBbcw60lOHF /weOoymDg6hWs/DB2owq1hrAXncQGdS7G9IZwZF2tyFChsVgzAOl6+jXCGUv6ocx 7mleY+TCo/kyLPcsovOAvEYM1aJQQkwylkDL/YaRDaoRldxi22gJ6XVrE2R3WY7r QhAKsWO4SnTpVVh+iF2BQ/3J+8UdYfAm/z0rlwoH+6FMKK+myTXz9ltwSxZ4vugM i8NyuzsO66mjSY716yEJNtBvKh+ryM8ZPUVO6pAbekuQ4Ko5SCWUz4GNAFyAPq3a +CQpQn0obkYs9g== -----END CERTIFICATE-----Generated at Fri Dec 12 00:14:14 2025 by rpki-client