This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft File: yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft (raw, json) Hash identifier: KoYlIU5OhaPW00hOgoChv6QSzoWeAQES4/i/EI7vwIs= Subject key identifier: 5A:80:D4:2C:6F:B4:7D:16:FA:47:72:10:20:56:AA:57:F5:78:F0:6C Authority key identifier: CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29 Certificate issuer: /CN=cb1d15194278a29aad57ca375f99588b976ef829 Certificate serial: 019B0E929CC9059D5106C71E43CAB2C81D41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft Manifest number: 1771 Signing time: Thu 11 Dec 2025 18:00:47 +0000 Manifest this update: Thu 11 Dec 2025 18:00:47 +0000 Manifest next update: Fri 12 Dec 2025 18:00:47 +0000 Files and hashes: 1: vKmVyZKo1mVbWaxUYsU2k0zxDdU.roa (hash: gYV9eOLfrWkPtH6rFSHehM6qyeO4Oplr2KmQKju1kVs=) 2: yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl (hash: lZELz0qcXdlcDvZ7H8HefpA5HSpSdfKvHpGVnOIi8+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:9c:c9:05:9d:51:06:c7:1e:43:ca:b2:c8:1d:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb1d15194278a29aad57ca375f99588b976ef829 Validity Not Before: Dec 11 18:00:47 2025 GMT Not After : Dec 12 18:00:47 2025 GMT Subject: CN=5a80d42c6fb47d16fa4772102056aa57f578f06c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7d:1c:91:1c:19:25:44:7c:d4:16:61:a7:56: ee:a6:78:62:3d:9c:60:25:d3:de:92:d5:04:35:04: 76:f0:b0:df:cd:19:ec:d2:01:98:b2:a4:ec:d0:77: e5:e1:ba:86:c0:21:33:d2:76:54:7a:21:cb:ea:29: c6:35:3e:cc:4f:89:e5:1a:c0:68:99:88:d1:06:41: 71:8a:31:69:93:cc:c5:14:eb:e2:fe:65:2d:79:9c: 06:ce:35:5b:e3:fa:71:72:f1:7f:b1:ed:79:4a:63: b3:5e:21:b5:63:b7:49:a1:84:9a:23:40:4e:10:b5: 4f:57:c1:56:41:62:9a:f4:08:6a:6c:22:72:8d:4b: 3a:6c:11:99:b7:d0:82:f9:39:19:1e:c0:02:b3:55: d0:09:44:66:fe:f2:c2:68:a6:2b:8b:29:c6:bf:ee: db:61:66:a3:c1:41:90:37:ab:aa:95:25:dc:87:d9: b1:8a:6d:f6:ff:21:ca:dd:30:08:f0:ed:d7:8c:5b: 52:34:2c:90:61:e7:06:a5:1a:d1:e6:05:4f:f3:ee: 2f:99:6e:ce:21:27:ae:3d:ff:d8:11:da:84:ae:0f: e1:90:f2:47:14:f2:ed:0f:e7:4c:3e:33:cd:ab:4c: 2f:a5:6a:b3:6a:6f:3d:d5:d7:28:fe:4e:94:ef:26: 7b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:80:D4:2C:6F:B4:7D:16:FA:47:72:10:20:56:AA:57:F5:78:F0:6C X509v3 Authority Key Identifier: keyid:CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:a5:6d:8d:02:c9:26:22:2b:b4:58:48:5a:03:8f:0f:be:97: b1:af:30:49:9e:a6:f0:6b:13:a1:b4:d9:0e:18:b2:83:27:a3: 9f:64:2f:4d:69:5a:83:8b:54:96:f0:02:58:ec:7d:ff:1a:0a: c4:52:f0:0f:df:a7:84:03:02:df:6e:3e:e5:ab:32:8a:b1:96: c8:f4:45:76:d1:a5:8c:d4:64:4a:f6:c8:d6:6b:11:c6:9f:87: 42:a2:69:76:f4:48:d6:d2:c4:74:89:22:c7:e0:f5:5b:db:e6: b5:cf:e0:7a:02:58:db:db:82:fd:88:4e:30:a2:e1:e2:53:dc: 82:66:1f:1f:57:ae:db:c5:f6:96:fb:13:33:79:90:c8:14:64: 5f:6f:e6:e1:27:ef:fb:7f:f2:9e:48:29:a1:ff:33:93:15:4f: 16:65:61:bf:0b:3a:88:47:df:ae:c1:ed:74:af:91:d1:c2:43: 45:e7:d3:f6:e9:ff:0f:f0:9e:20:c7:f4:54:65:77:5d:46:19: 27:e0:1d:0f:8d:bc:9b:a0:2f:11:30:05:30:5f:56:ad:55:46: e2:1b:72:56:fb:8f:03:0d:ac:3b:e5:eb:fd:e4:f2:be:3a:22: e8:3b:d2:0d:11:b5:92:43:36:68:69:d5:50:03:91:5d:88:8b: 69:43:b5:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkpzJBZ1RBsceQ8qyyB1BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMWQxNTE5NDI3OGEyOWFhZDU3Y2EzNzVmOTk1ODhiOTc2 ZWY4MjkwHhcNMjUxMjExMTgwMDQ3WhcNMjUxMjEyMTgwMDQ3WjAzMTEwLwYDVQQD Eyg1YTgwZDQyYzZmYjQ3ZDE2ZmE0NzcyMTAyMDU2YWE1N2Y1NzhmMDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH0ckRwZJUR81BZhp1bupnhiPZxg JdPektUENQR28LDfzRns0gGYsqTs0Hfl4bqGwCEz0nZUeiHL6inGNT7MT4nlGsBo mYjRBkFxijFpk8zFFOvi/mUteZwGzjVb4/pxcvF/se15SmOzXiG1Y7dJoYSaI0BO ELVPV8FWQWKa9AhqbCJyjUs6bBGZt9CC+TkZHsACs1XQCURm/vLCaKYriynGv+7b YWajwUGQN6uqlSXch9mxim32/yHK3TAI8O3XjFtSNCyQYecGpRrR5gVP8+4vmW7O ISeuPf/YEdqErg/hkPJHFPLtD+dMPjPNq0wvpWqzam891dco/k6U7yZ7IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqA1CxvtH0W+kdyECBWqlf1ePBsMB8GA1UdIwQY MBaAFMsdFRlCeKKarVfKN1+ZWIuXbvgpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXgwVkdVSjRvcHF0VjhvM1g1bFlpNWR1LUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lYjIzNjEtOGQzNC00ZmY0LWIzZDEt MWZiMzg0MzVhZjc3LzEveXgwVkdVSjRvcHF0VjhvM1g1bFlpNWR1LUNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9lYjIzNjEtOGQzNC00ZmY0LWIzZDEtMWZiMzg0MzVhZjc3 LzEveXgwVkdVSjRvcHF0VjhvM1g1bFlpNWR1LUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv6VtjQLJ JiIrtFhIWgOPD76Xsa8wSZ6m8GsTobTZDhiygyejn2QvTWlag4tUlvACWOx9/xoK xFLwD9+nhAMC324+5asyirGWyPRFdtGljNRkSvbI1msRxp+HQqJpdvRI1tLEdIki x+D1W9vmtc/gegJY29uC/YhOMKLh4lPcgmYfH1eu28X2lvsTM3mQyBRkX2/m4Sfv +3/ynkgpof8zkxVPFmVhvws6iEffrsHtdK+R0cJDRefT9un/D/CeIMf0VGV3XUYZ J+AdD428m6AvETAFMF9WrVVG4htyVvuPAw2sO+Xr/eTyvjoi6DvSDRG1kkM2aGnV UAORXYiLaUO1yw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:29:36 2025 by rpki-client