This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft File: yAkUktLOioDAh7h2-R1qPCm-eiU.mft (raw, json) Hash identifier: 0/nRYsJQh8bbjXJFexsotoa+AgYzpBVEFYrjlhav/Es= Subject key identifier: E6:E1:A9:C6:47:51:A9:61:B8:4A:8D:E2:EA:FF:B2:DB:CE:92:C7:66 Authority key identifier: C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25 Certificate issuer: /CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25 Certificate serial: 019B25BFFBB0A323BFF82BECF81DE63496F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft Manifest number: 0D75 Signing time: Tue 16 Dec 2025 06:01:37 +0000 Manifest this update: Tue 16 Dec 2025 06:01:37 +0000 Manifest next update: Wed 17 Dec 2025 06:01:37 +0000 Files and hashes: 1: IUu38IEhp9FcGXHXO7VwuMNYV6E.roa (hash: 0chzG77l4zUiIxP7svJWJ4YTzi1qnItTODpt8dd9BKQ=) 2: yAkUktLOioDAh7h2-R1qPCm-eiU.crl (hash: eo/jwFquO9HMWcMAo5VOfBn3WWd422xlj7lDfgvVDp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:fb:b0:a3:23:bf:f8:2b:ec:f8:1d:e6:34:96:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25 Validity Not Before: Dec 16 06:01:37 2025 GMT Not After : Dec 17 06:01:37 2025 GMT Subject: CN=e6e1a9c64751a961b84a8de2eaffb2dbce92c766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3c:e6:33:29:4b:1d:cc:15:82:27:d6:19:3c: 36:e5:da:e9:f1:43:cf:de:2d:96:0f:80:35:56:7d: 2e:a5:77:02:bf:fc:b1:bb:ba:a8:d6:fd:61:71:a7: b5:db:e0:bd:2c:4b:d0:0f:55:48:ff:d5:ff:80:75: bb:e0:cb:25:3d:27:45:ec:af:50:b0:80:ee:01:da: 95:79:79:dc:21:fa:9b:5b:40:ec:00:3c:46:8d:26: dc:af:ba:a2:87:98:f1:0c:86:f1:ac:47:ac:71:42: 6b:19:93:95:36:ce:49:c8:d3:e8:62:ce:48:94:8c: fe:96:0d:9d:21:4a:0c:20:0e:6d:a0:06:00:62:28: 8c:8c:41:b3:0d:7d:05:f6:47:4f:b2:cb:50:1c:ae: 8c:78:3a:88:e9:b6:f2:65:11:1c:50:4d:3a:dd:eb: 91:9e:09:17:1a:76:1d:39:f5:5f:2d:34:7b:ec:6d: 04:5f:60:6f:66:aa:cf:6b:9e:0f:c9:f0:c8:00:12: 56:6f:33:b6:ad:d9:60:6c:0c:64:24:2b:e7:e8:6d: 20:c8:16:50:5c:df:64:26:76:15:59:0f:f7:35:7d: 33:6b:69:c8:5e:9e:8f:26:da:f7:7c:6e:c1:48:50: 35:98:41:b9:88:be:9e:a3:13:64:1d:91:a8:51:50: 89:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E1:A9:C6:47:51:A9:61:B8:4A:8D:E2:EA:FF:B2:DB:CE:92:C7:66 X509v3 Authority Key Identifier: keyid:C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:c7:19:52:64:33:46:d4:b4:33:5e:8c:30:90:85:11:d8:8a: c1:3e:fa:a5:3f:e4:17:68:96:69:e9:b3:3a:bd:67:7a:f9:1c: 4b:7d:55:29:5c:63:e9:9c:67:84:55:de:60:1f:4d:37:32:a1: 81:e1:c1:91:7c:ee:52:cc:ef:23:0c:5b:80:2b:40:ee:ca:e8: cd:d7:8a:c0:98:c2:68:f2:9f:12:5c:0d:6a:5d:e0:93:02:d5: ac:54:81:5d:36:61:13:a7:44:ae:3a:bf:7d:c1:0b:e1:02:28: 0d:57:13:ca:39:3e:bd:39:7b:af:0e:15:e3:10:73:f7:42:f7: b4:28:e3:b2:1b:ae:d2:09:fc:ae:8d:96:7b:02:ef:ab:10:3d: 99:bf:52:f7:e8:2b:76:ad:ae:e5:8c:49:56:5e:4b:f4:46:fc: c8:05:3e:95:c7:f0:3e:ef:c4:93:3a:d7:d2:8d:72:8c:c9:2e: 9b:61:35:97:34:e7:52:b3:27:f4:11:e6:bf:77:88:49:2f:3a: 14:53:3d:7e:5a:4d:12:07:84:1f:ae:d2:50:b8:3c:1e:24:eb: bf:14:d0:0d:1f:da:6e:7b:bb:70:d7:d4:94:88:8c:ba:80:e0: c5:47:e8:0a:48:77:c7:88:33:39:c5:0d:7b:3c:16:dd:54:91: ee:62:f4:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslv/uwoyO/+Cvs+B3mNJb2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MDkxNDkyZDJjZThhODBjMDg3Yjg3NmY5MWQ2YTNjMjli ZTdhMjUwHhcNMjUxMjE2MDYwMTM3WhcNMjUxMjE3MDYwMTM3WjAzMTEwLwYDVQQD EyhlNmUxYTljNjQ3NTFhOTYxYjg0YThkZTJlYWZmYjJkYmNlOTJjNzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjzmMylLHcwVgifWGTw25drp8UPP 3i2WD4A1Vn0upXcCv/yxu7qo1v1hcae12+C9LEvQD1VI/9X/gHW74MslPSdF7K9Q sIDuAdqVeXncIfqbW0DsADxGjSbcr7qih5jxDIbxrEescUJrGZOVNs5JyNPoYs5I lIz+lg2dIUoMIA5toAYAYiiMjEGzDX0F9kdPsstQHK6MeDqI6bbyZREcUE063euR ngkXGnYdOfVfLTR77G0EX2BvZqrPa54PyfDIABJWbzO2rdlgbAxkJCvn6G0gyBZQ XN9kJnYVWQ/3NX0za2nIXp6PJtr3fG7BSFA1mEG5iL6eoxNkHZGoUVCJQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObhqcZHUalhuEqN4ur/stvOksdmMB8GA1UdIwQY MBaAFMgJFJLSzoqAwIe4dvkdajwpvnolMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUFrVWt0TE9pb0RBaDdoMi1SMXFQQ20tZWlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jMzVhOTktZjg3YS00MjExLWFmN2Et ODFlMjEwNmE1ODU3LzEveUFrVWt0TE9pb0RBaDdoMi1SMXFQQ20tZWlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9jMzVhOTktZjg3YS00MjExLWFmN2EtODFlMjEwNmE1ODU3 LzEveUFrVWt0TE9pb0RBaDdoMi1SMXFQQ20tZWlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMcZUmQz RtS0M16MMJCFEdiKwT76pT/kF2iWaemzOr1nevkcS31VKVxj6ZxnhFXeYB9NNzKh geHBkXzuUszvIwxbgCtA7srozdeKwJjCaPKfElwNal3gkwLVrFSBXTZhE6dErjq/ fcEL4QIoDVcTyjk+vTl7rw4V4xBz90L3tCjjshuu0gn8ro2WewLvqxA9mb9S9+gr dq2u5YxJVl5L9Eb8yAU+lcfwPu/EkzrX0o1yjMkum2E1lzTnUrMn9BHmv3eISS86 FFM9flpNEgeEH67SULg8HiTrvxTQDR/abnu7cNfUlIiMuoDgxUfoCkh3x4gzOcUN ezwW3VSR7mL0jA== -----END CERTIFICATE-----Generated at Tue Dec 16 10:38:13 2025 by rpki-client