This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft File: yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft (raw, json) Hash identifier: ibz4fL0/OejaXf/MGdy+pUVkV5aOY2enz6ymTHNepUU= Subject key identifier: F6:BA:42:92:36:C0:D0:5A:DA:50:28:90:54:5A:E8:C4:A1:0B:18:12 Authority key identifier: C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1 Certificate issuer: /CN=c8531ae2ce57c95f5a398930ea45503542801ba1 Certificate serial: 019B32D67F54F931A9A3E7BBF3246CC80F4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft Manifest number: 1788 Signing time: Thu 18 Dec 2025 19:01:16 +0000 Manifest this update: Thu 18 Dec 2025 19:01:16 +0000 Manifest next update: Fri 19 Dec 2025 19:01:16 +0000 Files and hashes: 1: Fdf0vtB1gT4L0JunIsm8qNZYmQ4.roa (hash: Hfh7wbvCwd9LX8YiFV9RA+et4MH+5Md9SfCGKXu907E=) 2: OUX94moMQdLE-KIzVRx3XsJZmbI.roa (hash: eBHJvbJg/1l2nBKpp6brqkKJgQz9auD2iIyBk5EmRho=) 3: WzbbS-CvpAp-X59KDM_38Kb2Q90.roa (hash: nHcAVErDor/w6cF6rsBmTNyYVia/mJgseR3zdZens+w=) 4: iUi7thjoE_NSerMmdG4mBc-A3aQ.roa (hash: XBvqQypf6zmJJtMlo2u++NDcjCA5xpacY+hSBCY97kY=) 5: yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl (hash: vWADlCE7w2jTbYKshYy2qRpQdpfRmv6CtU9zRWIYM60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:7f:54:f9:31:a9:a3:e7:bb:f3:24:6c:c8:0f:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8531ae2ce57c95f5a398930ea45503542801ba1 Validity Not Before: Dec 18 19:01:16 2025 GMT Not After : Dec 19 19:01:16 2025 GMT Subject: CN=f6ba429236c0d05ada502890545ae8c4a10b1812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ee:84:8e:58:de:ad:20:7f:d2:3e:11:1d:81: c7:b1:18:b3:34:69:96:68:d3:5d:e8:ee:15:c8:f2: 1c:dc:fc:3c:34:28:d7:2f:3c:8e:d4:a6:a6:66:6c: f7:c7:6b:b4:ed:7f:09:ac:cd:51:36:9b:2f:aa:f6: 50:f8:6d:ba:aa:a4:40:20:3d:b2:7f:e1:65:dc:5b: 8f:96:01:b9:d7:f3:75:10:e8:10:7e:8d:5b:0c:f6: e2:d6:cf:7e:e4:53:cf:26:f2:f6:0d:af:80:4b:9c: d9:64:bc:3c:5e:fd:09:59:2b:18:20:8a:ce:4c:f1: 4a:92:94:be:f5:c0:6d:ff:05:c5:7d:c8:c2:e2:66: 9e:0e:4a:a6:0a:37:67:cf:fc:eb:53:cb:68:65:22: a8:0a:61:c5:46:db:97:ec:aa:40:a6:2c:71:d0:d0: e2:00:b0:cf:7d:4c:f3:73:a6:8f:f7:c6:e4:ef:a5: 9c:84:7e:52:15:de:a8:0a:5e:5f:de:f6:9b:e1:7c: 4b:82:5f:cd:3d:1b:4c:9d:96:e8:fd:34:bd:d9:2f: 47:8a:12:67:49:14:e2:bd:63:ba:90:a7:6a:2d:6f: 32:26:27:86:70:96:f5:86:d0:15:20:5c:53:b5:79: 18:1a:62:15:22:91:70:b4:12:32:9f:39:91:45:86: 65:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BA:42:92:36:C0:D0:5A:DA:50:28:90:54:5A:E8:C4:A1:0B:18:12 X509v3 Authority Key Identifier: keyid:C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ae:79:0e:c8:42:83:86:c3:98:76:19:d7:39:fd:1c:fc:60: 32:80:1a:7d:b5:7d:c4:f0:b3:68:c4:92:5c:2f:4e:ea:ae:ee: bd:55:ae:56:c3:ce:8d:eb:76:2b:96:ee:f2:5c:4e:ad:07:30: 96:79:70:7c:87:b6:bd:ae:d0:ad:e0:52:1b:f7:17:aa:e8:3b: b4:72:5d:e7:80:dd:bc:00:11:d5:29:25:39:9d:0b:df:b1:f8: c9:c3:8b:9b:c7:c0:52:13:e3:0d:6a:3f:ab:88:1b:db:f7:00: 07:eb:48:a9:01:25:dc:7e:1f:3a:8c:5f:ea:45:c0:5f:7f:99: 22:17:dc:f8:62:3e:5c:e3:6d:d6:fb:c9:97:27:51:a5:78:80: 82:11:f9:59:4a:5b:8a:9e:b2:e2:28:e8:35:b5:4e:cf:a9:31: 3f:2f:d2:de:f1:dd:3e:41:c6:46:8c:46:f5:88:18:f5:ea:0f: 8d:19:4f:89:49:3f:be:c8:64:fd:cd:40:07:cc:9e:88:59:36: 29:e3:66:7e:5a:bb:89:ce:1d:9d:20:00:d7:c6:4d:06:18:c5: 4d:5c:92:3c:09:14:f4:5c:bf:c0:47:01:87:cc:aa:0c:91:08: 28:29:85:3d:1b:84:91:e5:2c:9b:ac:aa:57:21:cb:ac:db:79: fc:35:d7:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1n9U+TGpo+e78yRsyA9NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NTMxYWUyY2U1N2M5NWY1YTM5ODkzMGVhNDU1MDM1NDI4 MDFiYTEwHhcNMjUxMjE4MTkwMTE2WhcNMjUxMjE5MTkwMTE2WjAzMTEwLwYDVQQD EyhmNmJhNDI5MjM2YzBkMDVhZGE1MDI4OTA1NDVhZThjNGExMGIxODEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+6EjljerSB/0j4RHYHHsRizNGmW aNNd6O4VyPIc3Pw8NCjXLzyO1KamZmz3x2u07X8JrM1RNpsvqvZQ+G26qqRAID2y f+Fl3FuPlgG51/N1EOgQfo1bDPbi1s9+5FPPJvL2Da+AS5zZZLw8Xv0JWSsYIIrO TPFKkpS+9cBt/wXFfcjC4maeDkqmCjdnz/zrU8toZSKoCmHFRtuX7KpApixx0NDi ALDPfUzzc6aP98bk76WchH5SFd6oCl5f3vab4XxLgl/NPRtMnZbo/TS92S9HihJn SRTivWO6kKdqLW8yJieGcJb1htAVIFxTtXkYGmIVIpFwtBIynzmRRYZlSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPa6QpI2wNBa2lAokFRa6MShCxgSMB8GA1UdIwQY MBaAFMhTGuLOV8lfWjmJMOpFUDVCgBuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUZNYTRzNVh5VjlhT1lrdzZrVlFOVUtBRzZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9jNGMzMmMtMzIyZS00ZWQ3LThhMjkt NDVkNTQyZDVmNTVmLzEveUZNYTRzNVh5VjlhT1lrdzZrVlFOVUtBRzZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9jNGMzMmMtMzIyZS00ZWQ3LThhMjktNDVkNTQyZDVmNTVm LzEveUZNYTRzNVh5VjlhT1lrdzZrVlFOVUtBRzZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW655DshC g4bDmHYZ1zn9HPxgMoAafbV9xPCzaMSSXC9O6q7uvVWuVsPOjet2K5bu8lxOrQcw lnlwfIe2va7QreBSG/cXqug7tHJd54DdvAAR1SklOZ0L37H4ycOLm8fAUhPjDWo/ q4gb2/cAB+tIqQEl3H4fOoxf6kXAX3+ZIhfc+GI+XONt1vvJlydRpXiAghH5WUpb ip6y4ijoNbVOz6kxPy/S3vHdPkHGRoxG9YgY9eoPjRlPiUk/vshk/c1AB8yeiFk2 KeNmflq7ic4dnSAA18ZNBhjFTVySPAkU9Fy/wEcBh8yqDJEIKCmFPRuEkeUsm6yq VyHLrNt5/DXX+Q== -----END CERTIFICATE-----Generated at Thu Dec 18 23:40:36 2025 by rpki-client