This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft File: yxvWK-7KsOkDspgRJB2yRLv1LDk.mft (raw, json) Hash identifier: qmJmy6OZXtqZbalMi7uRsgZQgHBA0kkLdM89ED/3pic= Subject key identifier: EE:2D:1C:EE:8F:9E:D8:F7:33:2C:BF:5A:29:37:F4:33:74:7F:6E:5D Authority key identifier: CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39 Certificate issuer: /CN=cb1bd62beecab0e903b29811241db244bbf52c39 Certificate serial: 019B0F37B407DB050BB12310F334725BD8D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft Manifest number: 1110 Signing time: Thu 11 Dec 2025 21:01:07 +0000 Manifest this update: Thu 11 Dec 2025 21:01:07 +0000 Manifest next update: Fri 12 Dec 2025 21:01:07 +0000 Files and hashes: 1: 5aYNWnqt5MGeMuyfI5maKIJbJY4.roa (hash: 8Iaoh9OG5OjpMjtvt8V5oYDLknZ3K/iUcc80PeVe4YY=) 2: LlheXbpgUpnd6LfIavs5m7046X8.roa (hash: m29XywNUw2LYO1n9FuR/vWvutq9J3qKuKN5li9RC9G4=) 3: yxvWK-7KsOkDspgRJB2yRLv1LDk.crl (hash: XzfzTeiO1c7sxf9/DzY3OTDiF0ZLEnrmUUiVCn6w5Cw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:b4:07:db:05:0b:b1:23:10:f3:34:72:5b:d8:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb1bd62beecab0e903b29811241db244bbf52c39 Validity Not Before: Dec 11 21:01:07 2025 GMT Not After : Dec 12 21:01:07 2025 GMT Subject: CN=ee2d1cee8f9ed8f7332cbf5a2937f433747f6e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:06:cf:ad:7e:5b:44:71:e4:10:a7:60:ff:6b: 23:d4:7a:c4:67:db:ff:a4:81:d3:4d:04:00:74:d7: ac:bb:49:4e:62:84:a1:8e:76:c8:2a:fb:7f:58:f5: 98:38:a1:76:56:e0:67:c1:21:ea:69:2c:b3:c7:63: 63:bf:8b:7b:4c:95:44:ff:36:60:78:44:23:13:ca: 3f:ec:b0:d8:66:8b:82:af:65:2f:5f:36:cd:53:f8: 4e:1c:f9:b0:9b:dc:b0:07:fa:4c:b1:ac:57:26:ef: 3d:d5:aa:aa:78:92:66:a8:93:f0:a5:c4:df:9f:32: 22:5f:ef:25:97:b6:73:af:59:b9:54:b8:ae:89:d5: 8a:1f:c6:3e:6a:48:e8:13:9e:97:2b:13:24:8e:4a: 9c:ea:e1:eb:54:4d:f9:d8:76:26:05:3c:6f:c9:be: 7c:50:43:35:21:4a:e4:ba:80:26:0a:70:87:96:a5: 48:bd:77:dc:67:6b:67:cd:bb:7c:3e:83:f7:db:dc: d8:bc:ec:9b:36:7f:2e:9a:f5:53:ed:4b:04:b5:f8: 41:06:d6:77:53:6d:a0:18:76:18:9b:5c:fb:e6:da: fe:27:f8:e6:2a:ff:43:d5:db:e5:b3:10:0d:7e:51: 8c:6e:29:22:19:2e:d3:9f:d3:a1:d9:11:f1:9d:a0: bc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2D:1C:EE:8F:9E:D8:F7:33:2C:BF:5A:29:37:F4:33:74:7F:6E:5D X509v3 Authority Key Identifier: keyid:CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:e3:cd:e2:7b:de:f5:f7:9f:85:54:1f:9f:26:46:62:4e:d9: b3:94:ca:cb:0f:40:4b:0f:f0:d2:c2:31:7c:c5:25:3f:4b:9a: 36:9a:32:df:19:87:c0:c4:45:e1:a3:c8:05:c2:e6:f6:f9:02: 86:39:08:d1:ac:52:19:91:85:67:0b:be:4b:33:09:79:e2:ae: 53:4b:b8:65:e0:f0:be:e6:7a:00:ce:e9:ce:bc:ef:0d:f3:24: 51:39:63:ed:d0:b3:3c:6c:e0:25:ff:a0:31:41:6c:7c:14:4f: 0f:42:d6:29:ee:80:43:77:b4:ab:24:76:98:e2:b1:fd:c9:82: b1:75:1f:dd:d8:8c:e5:8e:5e:ee:33:24:f3:86:af:41:f8:73: 46:f2:6b:f9:68:94:10:83:84:96:4d:80:68:63:ba:78:a2:0d: 90:f9:81:80:14:de:17:a4:63:42:c9:3a:ed:d9:36:e9:8d:58: 03:99:b1:a5:3d:49:1d:cb:6f:77:d6:6b:1a:a2:9b:18:38:04: 9a:c6:f0:de:7a:ba:70:cd:de:fa:de:07:da:77:8d:5b:28:f9: 43:20:70:c5:fc:0f:d0:04:d8:d3:07:cc:b7:55:f8:24:3c:32: c5:6f:6e:05:9e:d3:81:8f:f0:41:91:68:24:b2:13:7d:da:2a: da:69:d0:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN7QH2wULsSMQ8zRyW9jYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMWJkNjJiZWVjYWIwZTkwM2IyOTgxMTI0MWRiMjQ0YmJm NTJjMzkwHhcNMjUxMjExMjEwMTA3WhcNMjUxMjEyMjEwMTA3WjAzMTEwLwYDVQQD EyhlZTJkMWNlZThmOWVkOGY3MzMyY2JmNWEyOTM3ZjQzMzc0N2Y2ZTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQbPrX5bRHHkEKdg/2sj1HrEZ9v/ pIHTTQQAdNesu0lOYoShjnbIKvt/WPWYOKF2VuBnwSHqaSyzx2Njv4t7TJVE/zZg eEQjE8o/7LDYZouCr2UvXzbNU/hOHPmwm9ywB/pMsaxXJu891aqqeJJmqJPwpcTf nzIiX+8ll7Zzr1m5VLiuidWKH8Y+akjoE56XKxMkjkqc6uHrVE352HYmBTxvyb58 UEM1IUrkuoAmCnCHlqVIvXfcZ2tnzbt8PoP329zYvOybNn8umvVT7UsEtfhBBtZ3 U22gGHYYm1z75tr+J/jmKv9D1dvlsxANflGMbikiGS7Tn9Oh2RHxnaC8kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4tHO6Pntj3Myy/Wik39DN0f25dMB8GA1UdIwQY MBaAFMsb1ivuyrDpA7KYESQdskS79Sw5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXh2V0stN0tzT2tEc3BnUkpCMnlSTHYxTERrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lMDJiNDctZjJlMC00NDAyLTgxNGYt ZTQwMTZhZDUzY2M5LzEveXh2V0stN0tzT2tEc3BnUkpCMnlSTHYxTERrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9lMDJiNDctZjJlMC00NDAyLTgxNGYtZTQwMTZhZDUzY2M5 LzEveXh2V0stN0tzT2tEc3BnUkpCMnlSTHYxTERrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcePN4nve 9fefhVQfnyZGYk7Zs5TKyw9ASw/w0sIxfMUlP0uaNpoy3xmHwMRF4aPIBcLm9vkC hjkI0axSGZGFZwu+SzMJeeKuU0u4ZeDwvuZ6AM7pzrzvDfMkUTlj7dCzPGzgJf+g MUFsfBRPD0LWKe6AQ3e0qyR2mOKx/cmCsXUf3diM5Y5e7jMk84avQfhzRvJr+WiU EIOElk2AaGO6eKINkPmBgBTeF6RjQsk67dk26Y1YA5mxpT1JHctvd9ZrGqKbGDgE msbw3nq6cM3e+t4H2neNWyj5QyBwxfwP0ATY0wfMt1X4JDwyxW9uBZ7TgY/wQZFo JLITfdoq2mnQyA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:27:36 2025 by rpki-client