This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft File: yF0BtEKUbhkkMT1WTzG35C4kVec.mft (raw, json) Hash identifier: X8Kn4/WB0eDo5YIO3FFTwdDLVB927xJJRZxqP96u9vU= Subject key identifier: C4:B9:5E:84:9A:E5:74:7C:7A:99:AC:8B:2D:DF:22:10:FB:AF:1B:D9 Authority key identifier: C8:5D:01:B4:42:94:6E:19:24:31:3D:56:4F:31:B7:E4:2E:24:55:E7 Certificate issuer: /CN=c85d01b442946e1924313d564f31b7e42e2455e7 Certificate serial: 019B49949EE7EDDA05FBE8CD478DECAAB93B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft Manifest number: 0C10 Signing time: Tue 23 Dec 2025 05:00:35 +0000 Manifest this update: Tue 23 Dec 2025 05:00:35 +0000 Manifest next update: Wed 24 Dec 2025 05:00:35 +0000 Files and hashes: 1: DpCybAm9bBRoUpHGAuIQ86Lq5pw.roa (hash: 2p6cZB/6xzzCJ7jeUbBrD5Bf0hcHEh4tn/vPl+35cnU=) 2: yF0BtEKUbhkkMT1WTzG35C4kVec.crl (hash: acjPee2iaAAAC8mnrj6Y62orkw4Sx7aSicMVqST2bfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.crl rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 05:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:94:9e:e7:ed:da:05:fb:e8:cd:47:8d:ec:aa:b9:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85d01b442946e1924313d564f31b7e42e2455e7 Validity Not Before: Dec 23 05:00:35 2025 GMT Not After : Dec 24 05:00:35 2025 GMT Subject: CN=c4b95e849ae5747c7a99ac8b2ddf2210fbaf1bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:66:be:1a:a7:11:4e:e5:4e:3b:88:b2:55:72: bf:a5:18:ed:b8:d8:e5:b6:55:36:4e:c7:60:08:3f: b8:4d:e2:1a:73:07:ca:ca:ac:67:17:97:64:63:51: 7c:11:5e:92:fb:63:22:29:3f:26:a7:71:f1:2a:a6: 76:ed:c4:35:85:10:da:82:90:9c:57:81:fe:5c:9f: 46:66:8e:c1:24:97:e1:6d:b1:f4:23:0e:21:37:5c: 45:09:59:ce:9d:70:62:46:c3:0b:db:4c:15:23:3a: cd:e3:84:68:9f:ee:12:48:02:93:c4:a8:05:5a:24: b8:2a:e9:e7:0f:01:5f:a5:ee:e2:f0:d7:e5:7f:a6: 90:4d:48:d9:1e:e6:75:0e:8c:d5:3b:62:34:98:a0: dc:40:f4:14:29:74:ce:f7:b4:b9:13:58:aa:99:29: 66:d7:ca:b0:26:2f:6c:a1:ee:20:bb:0d:ab:20:d7: de:45:9a:24:86:d7:71:70:72:4f:7a:09:7d:7b:d4: ab:7e:50:0a:e1:cf:56:0b:69:2d:0b:43:b5:d8:6f: 1f:b5:b4:aa:ba:2e:df:14:06:d9:e3:e2:9e:3a:63: f2:95:6b:0b:cd:2b:6d:72:08:b5:00:14:2d:71:20: 91:4b:8a:2e:4d:6f:5b:09:56:6d:8e:d8:9b:57:78: e0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B9:5E:84:9A:E5:74:7C:7A:99:AC:8B:2D:DF:22:10:FB:AF:1B:D9 X509v3 Authority Key Identifier: keyid:C8:5D:01:B4:42:94:6E:19:24:31:3D:56:4F:31:B7:E4:2E:24:55:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:6f:c8:a7:2a:fc:31:a9:84:fc:88:3c:76:af:35:bc:15:da: 98:c7:76:a7:8e:69:f5:cf:0c:70:b7:9f:24:d1:93:79:fb:1f: df:98:4d:ac:58:33:7b:08:c5:4e:1a:02:91:7b:2d:64:57:6c: c2:32:7c:ae:8f:fd:2f:fb:2d:15:ff:cd:72:c1:a1:01:8c:62: d7:c5:73:d5:5c:7a:d5:e4:f6:e6:c6:d2:77:d7:24:fe:ca:06: fd:b1:6d:3e:bc:9d:8a:43:47:4a:8f:fc:b9:ab:14:01:90:4a: 92:25:a3:01:bd:bc:27:e2:3b:86:39:aa:df:0f:ba:f1:94:ee: 97:5e:a4:60:da:d9:6b:7a:c3:d2:75:3c:8d:68:02:20:28:72: 7f:25:57:28:21:9d:b2:0a:c8:6e:2f:db:9b:42:8a:94:8a:21: c2:d0:cf:25:ea:45:01:82:06:8a:67:d5:34:d1:88:18:c4:0d: c3:49:eb:e3:11:3c:cf:c5:73:f9:dd:58:79:82:fb:5b:ed:22: 08:10:42:7e:ef:0e:82:3b:e0:8c:2e:04:da:0c:4c:c0:8a:de: 2e:fa:76:5e:9e:74:40:e4:13:0b:3a:c8:aa:55:86:f2:d8:24: 5b:f2:6f:09:9e:a5:a0:07:e4:a6:a2:e4:52:8b:23:c2:84:a3: 09:84:bd:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlJ7n7doF++jNR43sqrk7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NWQwMWI0NDI5NDZlMTkyNDMxM2Q1NjRmMzFiN2U0MmUy NDU1ZTcwHhcNMjUxMjIzMDUwMDM1WhcNMjUxMjI0MDUwMDM1WjAzMTEwLwYDVQQD EyhjNGI5NWU4NDlhZTU3NDdjN2E5OWFjOGIyZGRmMjIxMGZiYWYxYmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGa+GqcRTuVOO4iyVXK/pRjtuNjl tlU2TsdgCD+4TeIacwfKyqxnF5dkY1F8EV6S+2MiKT8mp3HxKqZ27cQ1hRDagpCc V4H+XJ9GZo7BJJfhbbH0Iw4hN1xFCVnOnXBiRsML20wVIzrN44Ron+4SSAKTxKgF WiS4KunnDwFfpe7i8Nflf6aQTUjZHuZ1DozVO2I0mKDcQPQUKXTO97S5E1iqmSlm 18qwJi9soe4guw2rINfeRZokhtdxcHJPegl9e9SrflAK4c9WC2ktC0O12G8ftbSq ui7fFAbZ4+KeOmPylWsLzSttcgi1ABQtcSCRS4ouTW9bCVZtjtibV3jgVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMS5XoSa5XR8epmsiy3fIhD7rxvZMB8GA1UdIwQY MBaAFMhdAbRClG4ZJDE9Vk8xt+QuJFXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUYwQnRFS1ViaGtrTVQxV1R6RzM1QzRrVmVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC81NTA4NzMtZDA2My00MjBkLWEwNTEt MTZiOTdiOWE4ODVlLzEveUYwQnRFS1ViaGtrTVQxV1R6RzM1QzRrVmVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC81NTA4NzMtZDA2My00MjBkLWEwNTEtMTZiOTdiOWE4ODVl LzEveUYwQnRFS1ViaGtrTVQxV1R6RzM1QzRrVmVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWW/Ipyr8 MamE/Ig8dq81vBXamMd2p45p9c8McLefJNGTefsf35hNrFgzewjFThoCkXstZFds wjJ8ro/9L/stFf/NcsGhAYxi18Vz1Vx61eT25sbSd9ck/soG/bFtPrydikNHSo/8 uasUAZBKkiWjAb28J+I7hjmq3w+68ZTul16kYNrZa3rD0nU8jWgCIChyfyVXKCGd sgrIbi/bm0KKlIohwtDPJepFAYIGimfVNNGIGMQNw0nr4xE8z8Vz+d1YeYL7W+0i CBBCfu8OgjvgjC4E2gxMwIreLvp2Xp50QOQTCzrIqlWG8tgkW/JvCZ6loAfkpqLk UosjwoSjCYS9Mg== -----END CERTIFICATE-----Generated at Tue Dec 23 14:53:23 2025 by rpki-client