This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft File: yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft (raw, json) Hash identifier: hjdyJUu49awKzjm6ier2jykFsXLPhj4Mn1YdbBpem84= Subject key identifier: 28:24:6F:BA:E4:AB:AD:C7:A7:E3:5D:76:29:7A:12:18:53:45:4F:08 Authority key identifier: CA:AF:C0:93:C3:C4:25:6D:11:4A:8E:DC:0D:06:C7:3C:B6:3E:18:6D Certificate issuer: /CN=caafc093c3c4256d114a8edc0d06c73cb63e186d Certificate serial: 019B5975DEA16491FFFC7621B897304991F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 07:00:55 +0000 Manifest this update: Fri 26 Dec 2025 07:00:55 +0000 Manifest next update: Sat 27 Dec 2025 07:00:55 +0000 Files and hashes: 1: NUVu2dR1iocqmPEQ_D2e-q6eSn8.roa (hash: 1hCazZpKjVTtjQVFUWpkmXqPQOre2tDQ3dmWvgeOvfo=) 2: yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl (hash: ofwhrhz2t3qmRSf5QbQpsxctxRNVJrCnM6PX7BvdyLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:de:a1:64:91:ff:fc:76:21:b8:97:30:49:91:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caafc093c3c4256d114a8edc0d06c73cb63e186d Validity Not Before: Dec 26 07:00:55 2025 GMT Not After : Dec 27 07:00:55 2025 GMT Subject: CN=28246fbae4abadc7a7e35d76297a121853454f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:05:cb:2d:f3:67:ac:6d:35:35:8a:5e:95:2e: d8:63:74:52:c8:35:dd:aa:d4:b5:46:97:ea:34:bf: 7d:b7:95:ea:78:35:05:eb:e5:87:16:fa:46:42:ab: 81:16:42:9a:cb:84:d5:c8:ac:bc:53:5b:b5:3d:cd: cb:9b:0b:62:89:35:4f:20:8f:16:a5:64:4b:f8:56: 36:ee:80:ca:16:5a:05:4e:4d:62:6a:62:5c:69:6a: da:17:0a:5f:16:08:e4:5c:34:f2:05:f9:50:d2:6d: 2a:8a:0f:29:69:ef:b3:c3:80:8d:a3:9d:74:f5:16: 2d:37:1e:88:78:9f:a2:ea:47:83:83:cc:b5:45:99: fc:22:b2:17:52:d9:47:c8:fb:1c:dc:d1:09:b6:e3: da:06:a0:65:9f:7b:5a:e2:da:e2:e8:63:bc:b2:0f: 23:ff:af:41:c4:09:a8:17:cf:bf:f7:11:2d:53:00: a8:99:1f:7a:89:90:9b:df:f2:3b:39:8f:87:57:b4: bc:d8:f8:b9:91:17:4d:ed:09:d6:89:4e:70:8e:4b: 60:76:a7:c5:db:51:b8:25:7e:0d:94:27:50:12:f9: c0:92:77:96:01:58:65:73:23:5b:40:ba:71:01:1d: a5:ae:aa:95:ac:df:35:07:65:da:d8:8e:91:16:2e: 17:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:24:6F:BA:E4:AB:AD:C7:A7:E3:5D:76:29:7A:12:18:53:45:4F:08 X509v3 Authority Key Identifier: keyid:CA:AF:C0:93:C3:C4:25:6D:11:4A:8E:DC:0D:06:C7:3C:B6:3E:18:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:aa:ef:f7:2c:d2:ff:a2:65:08:08:97:f0:1b:af:f7:21:bb: 80:2f:73:b0:ce:12:85:58:54:e0:e7:40:5b:ce:e4:61:65:8c: 4e:a7:80:ce:64:82:a8:b6:59:98:4f:04:18:71:e8:32:74:63: f4:02:03:cc:94:a4:d0:f7:66:20:ae:b6:b4:6a:44:3e:f4:77: 74:8b:8f:03:4f:d7:fc:1f:43:6d:17:42:b6:55:07:f1:3c:f4: 3e:4c:4c:83:37:fa:1e:1e:31:ce:f3:5f:d5:83:ff:04:ed:3e: 8f:f5:84:a5:c4:d9:1d:9d:ba:40:03:fc:b5:74:c2:43:d4:91: 51:22:6c:08:c6:0d:c7:f9:7a:8b:ec:36:16:48:ff:2a:47:88: 2f:6e:02:41:7a:1a:67:54:f0:df:ab:b9:63:ca:fe:23:c6:42: 8d:d7:bf:8e:5f:f7:43:11:12:89:e9:6a:5d:ae:5f:41:98:cc: ad:e5:8a:cb:2a:f8:72:40:03:05:fb:1c:c4:49:5d:53:60:a9: b6:b0:60:a2:b7:c7:1a:02:f7:00:f5:18:5d:a5:27:f1:3c:4a: 89:4d:68:4c:86:da:d8:2e:75:64:87:b4:85:87:d7:91:f1:4c: 16:f9:9a:a4:d8:b1:15:10:8a:7a:dc:e2:26:a4:70:bb:24:a7: f9:48:e1:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdd6hZJH//HYhuJcwSZH5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYWZjMDkzYzNjNDI1NmQxMTRhOGVkYzBkMDZjNzNjYjYz ZTE4NmQwHhcNMjUxMjI2MDcwMDU1WhcNMjUxMjI3MDcwMDU1WjAzMTEwLwYDVQQD EygyODI0NmZiYWU0YWJhZGM3YTdlMzVkNzYyOTdhMTIxODUzNDU0ZjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAXLLfNnrG01NYpelS7YY3RSyDXd qtS1RpfqNL99t5XqeDUF6+WHFvpGQquBFkKay4TVyKy8U1u1Pc3LmwtiiTVPII8W pWRL+FY27oDKFloFTk1iamJcaWraFwpfFgjkXDTyBflQ0m0qig8pae+zw4CNo510 9RYtNx6IeJ+i6keDg8y1RZn8IrIXUtlHyPsc3NEJtuPaBqBln3ta4tri6GO8sg8j /69BxAmoF8+/9xEtUwComR96iZCb3/I7OY+HV7S82Pi5kRdN7QnWiU5wjktgdqfF 21G4JX4NlCdQEvnAkneWAVhlcyNbQLpxAR2lrqqVrN81B2Xa2I6RFi4XRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgkb7rkq63Hp+Nddil6EhhTRU8IMB8GA1UdIwQY MBaAFMqvwJPDxCVtEUqO3A0Gxzy2PhhtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXFfQWs4UEVKVzBSU283Y0RRYkhQTFktR0cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC84ODI1YjQtZmYwOC00OTE2LWFlMDUt ODkzZmJlNTkxMWIwLzEveXFfQWs4UEVKVzBSU283Y0RRYkhQTFktR0cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC84ODI1YjQtZmYwOC00OTE2LWFlMDUtODkzZmJlNTkxMWIw LzEveXFfQWs4UEVKVzBSU283Y0RRYkhQTFktR0cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1Krv9yzS /6JlCAiX8Buv9yG7gC9zsM4ShVhU4OdAW87kYWWMTqeAzmSCqLZZmE8EGHHoMnRj 9AIDzJSk0PdmIK62tGpEPvR3dIuPA0/X/B9DbRdCtlUH8Tz0PkxMgzf6Hh4xzvNf 1YP/BO0+j/WEpcTZHZ26QAP8tXTCQ9SRUSJsCMYNx/l6i+w2Fkj/KkeIL24CQXoa Z1Tw36u5Y8r+I8ZCjde/jl/3QxESielqXa5fQZjMreWKyyr4ckADBfscxEldU2Cp trBgorfHGgL3APUYXaUn8TxKiU1oTIba2C51ZIe0hYfXkfFMFvmapNixFRCKetzi JqRwuySn+UjhNQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:21 2025 by rpki-client