This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft File: YmFlv7I92h-YcLJBf0lkhebAinQ.mft (raw, json) Hash identifier: L9PaQrsy5U6VTa7tqglpvugQ/kb1Q/+Y8caQSpzslAI= Subject key identifier: 4F:9E:05:00:E9:4D:94:29:39:00:AE:B0:46:EA:51:65:C0:5C:0E:0E Authority key identifier: 62:61:65:BF:B2:3D:DA:1F:98:70:B2:41:7F:49:64:85:E6:C0:8A:74 Certificate issuer: /CN=626165bfb23dda1f9870b2417f496485e6c08a74 Certificate serial: 019B108104F5DEFD48D8B58ED9E4C2690C07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft Manifest number: 04FF Signing time: Fri 12 Dec 2025 03:00:49 +0000 Manifest this update: Fri 12 Dec 2025 03:00:49 +0000 Manifest next update: Sat 13 Dec 2025 03:00:49 +0000 Files and hashes: 1: YmFlv7I92h-YcLJBf0lkhebAinQ.crl (hash: OaCW3cKFz44NIKAvH82kCJjMRqSTo1WV20Oq5QxXMA4=) 2: sqHnWw_DTKSgc5zNQG4iPku5PBw.roa (hash: w6R1JeMOp3KdC2WjMvic0T8urUWBQwEZKMQrdXTts0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:04:f5:de:fd:48:d8:b5:8e:d9:e4:c2:69:0c:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=626165bfb23dda1f9870b2417f496485e6c08a74 Validity Not Before: Dec 12 03:00:49 2025 GMT Not After : Dec 13 03:00:49 2025 GMT Subject: CN=4f9e0500e94d94293900aeb046ea5165c05c0e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c5:6e:57:58:db:54:5c:6a:5e:40:58:cf:5c: f9:c9:14:09:85:33:eb:4c:72:02:e3:53:fa:2e:74: 06:14:6d:a9:c4:98:0d:2b:dd:9a:e7:75:bb:d9:aa: a8:47:5d:53:2e:65:18:53:86:eb:60:3e:ce:4c:d4: 4e:b5:2f:3a:2f:e8:37:47:ae:e8:e0:27:f3:4e:5a: 78:97:c1:cd:32:93:4e:2e:d3:6f:6e:51:68:d8:c7: 1a:fe:64:28:a4:77:4b:68:dc:0e:44:66:9f:a5:2b: 97:71:23:a6:64:0c:69:10:fc:e4:16:70:81:ac:8e: 89:f2:3f:b1:85:e7:22:7a:55:ee:49:94:39:af:6d: 3e:5b:71:c6:f8:1e:76:3e:eb:51:52:e4:f4:bb:92: 10:98:67:5e:7b:97:6c:3e:d1:01:0a:25:cf:6c:13: 65:4e:32:b5:0f:2f:6b:f1:2a:de:c5:b4:d2:32:3c: 93:c4:00:6e:f7:a9:ff:46:17:ef:7e:cf:14:f9:a5: b7:a2:c5:97:35:34:fb:73:b2:ff:36:38:49:bf:81: 56:dc:39:91:d2:73:80:43:f6:b0:4a:81:74:04:56: 4d:e2:33:b7:c3:fe:eb:c3:a2:7f:0c:36:09:9c:c7: 5b:5d:37:f1:ea:9f:0f:ec:03:d5:89:6e:9f:9f:91: 77:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:9E:05:00:E9:4D:94:29:39:00:AE:B0:46:EA:51:65:C0:5C:0E:0E X509v3 Authority Key Identifier: keyid:62:61:65:BF:B2:3D:DA:1F:98:70:B2:41:7F:49:64:85:E6:C0:8A:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:91:39:5e:10:d4:c0:a1:59:ed:05:0d:83:4a:b0:87:a9:9d: 21:63:74:1d:ca:b1:7d:94:a8:0a:f5:42:1e:b7:92:6f:93:ba: 68:3c:51:3f:89:af:ea:0b:58:3b:7a:2c:76:18:98:61:15:f7: 82:d5:53:27:b8:fd:fc:3e:17:af:9d:97:4f:32:63:96:d8:ff: 2c:e4:4d:c5:0d:b2:23:17:a1:81:9a:aa:10:81:07:bc:11:8a: 57:91:13:b8:10:50:19:dd:f8:63:94:85:03:c5:7a:6f:c0:00: 64:30:52:a8:2d:68:fa:cb:0d:3a:f7:3b:3d:85:23:18:ca:6d: c1:e6:7c:46:b1:4c:05:9e:81:91:51:dd:f0:5a:7e:20:01:56: a0:e4:9b:5c:c7:68:ac:34:f0:32:05:78:7f:d4:12:b3:8b:e3: 78:21:27:b5:92:a1:e8:4d:3e:d7:ff:ae:f3:4c:4d:a8:11:e2: 1e:31:3b:2a:53:f6:40:13:ff:08:51:b7:cc:c9:fa:f5:f6:56: 9e:8b:9f:79:35:7e:ba:8c:0b:1d:96:f1:ff:06:8f:30:8d:fb: 6f:b6:b0:73:8d:30:56:cd:e2:2d:8f:ce:3a:26:cb:67:dd:3a: d9:7b:c8:85:65:21:e5:56:d0:03:92:62:a4:be:5a:66:03:6a: b6:1e:ac:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgQT13v1I2LWO2eTCaQwHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNjE2NWJmYjIzZGRhMWY5ODcwYjI0MTdmNDk2NDg1ZTZj MDhhNzQwHhcNMjUxMjEyMDMwMDQ5WhcNMjUxMjEzMDMwMDQ5WjAzMTEwLwYDVQQD Eyg0ZjllMDUwMGU5NGQ5NDI5MzkwMGFlYjA0NmVhNTE2NWMwNWMwZTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysVuV1jbVFxqXkBYz1z5yRQJhTPr THIC41P6LnQGFG2pxJgNK92a53W72aqoR11TLmUYU4brYD7OTNROtS86L+g3R67o 4CfzTlp4l8HNMpNOLtNvblFo2Mca/mQopHdLaNwORGafpSuXcSOmZAxpEPzkFnCB rI6J8j+xhecielXuSZQ5r20+W3HG+B52PutRUuT0u5IQmGdee5dsPtEBCiXPbBNl TjK1Dy9r8SrexbTSMjyTxABu96n/Rhfvfs8U+aW3osWXNTT7c7L/NjhJv4FW3DmR 0nOAQ/awSoF0BFZN4jO3w/7rw6J/DDYJnMdbXTfx6p8P7APViW6fn5F3sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+eBQDpTZQpOQCusEbqUWXAXA4OMB8GA1UdIwQY MBaAFGJhZb+yPdofmHCyQX9JZIXmwIp0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1GbHY3STkyaC1ZY0xKQmYwbGtoZWJBaW5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi83MjEzNWQtZTQ5Ny00NGE2LWI0ZDAt NDYwZmI0YmFjMmRiLzEvWW1GbHY3STkyaC1ZY0xKQmYwbGtoZWJBaW5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi83MjEzNWQtZTQ5Ny00NGE2LWI0ZDAtNDYwZmI0YmFjMmRi LzEvWW1GbHY3STkyaC1ZY0xKQmYwbGtoZWJBaW5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZE5XhDU wKFZ7QUNg0qwh6mdIWN0HcqxfZSoCvVCHreSb5O6aDxRP4mv6gtYO3osdhiYYRX3 gtVTJ7j9/D4Xr52XTzJjltj/LORNxQ2yIxehgZqqEIEHvBGKV5ETuBBQGd34Y5SF A8V6b8AAZDBSqC1o+ssNOvc7PYUjGMptweZ8RrFMBZ6BkVHd8Fp+IAFWoOSbXMdo rDTwMgV4f9QSs4vjeCEntZKh6E0+1/+u80xNqBHiHjE7KlP2QBP/CFG3zMn69fZW noufeTV+uowLHZbx/waPMI37b7awc40wVs3iLY/OOibLZ9062XvIhWUh5VbQA5Ji pL5aZgNqth6szw== -----END CERTIFICATE-----Generated at Fri Dec 12 09:09:39 2025 by rpki-client