This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/29dc37-be82-4207-a5e2-ce9c96211858/1/yu27rnCdPKZGiCV7u6NvlqCZnfI.mft File: yu27rnCdPKZGiCV7u6NvlqCZnfI.mft (raw, json) Hash identifier: JA7W+goGd1Q3s09znfG56tLbEIO4bI3tvtWkbwHPxQE= Subject key identifier: 0A:0E:15:41:18:2E:13:7B:17:64:59:C8:E7:4E:E2:51:22:04:63:C4 Authority key identifier: CA:ED:BB:AE:70:9D:3C:A6:46:88:25:7B:BB:A3:6F:96:A0:99:9D:F2 Certificate issuer: /CN=caedbbae709d3ca64688257bbba36f96a0999df2 Certificate serial: 019B593EEB20BCD02B749B3205BA4061A509 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu27rnCdPKZGiCV7u6NvlqCZnfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/29dc37-be82-4207-a5e2-ce9c96211858/1/yu27rnCdPKZGiCV7u6NvlqCZnfI.mft Manifest number: 0B Signing time: Fri 26 Dec 2025 06:00:54 +0000 Manifest this update: Fri 26 Dec 2025 06:00:54 +0000 Manifest next update: Sat 27 Dec 2025 06:00:54 +0000 Files and hashes: 1: _5IP-K7NLdg4zlAiXVE7qEc9tpQ.roa (hash: 9z+05PvqBxhzEng4DVEfnu6DnqaPn7djZVzZaL7x0i4=) 2: yu27rnCdPKZGiCV7u6NvlqCZnfI.crl (hash: FK9wWb1SNSWiuT5r2TCpTKXOLYTuHzo0+cfGh+fd9fc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/29dc37-be82-4207-a5e2-ce9c96211858/1/yu27rnCdPKZGiCV7u6NvlqCZnfI.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/29dc37-be82-4207-a5e2-ce9c96211858/1/yu27rnCdPKZGiCV7u6NvlqCZnfI.mft rsync://rpki.ripe.net/repository/DEFAULT/yu27rnCdPKZGiCV7u6NvlqCZnfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:eb:20:bc:d0:2b:74:9b:32:05:ba:40:61:a5:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caedbbae709d3ca64688257bbba36f96a0999df2 Validity Not Before: Dec 26 06:00:54 2025 GMT Not After : Dec 27 06:00:54 2025 GMT Subject: CN=0a0e1541182e137b176459c8e74ee251220463c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a0:b5:c7:d3:90:66:40:67:9d:98:f6:12:e8: 37:a4:45:24:07:0f:e5:7f:e3:67:28:8a:d4:09:c6: 25:2b:b2:b6:95:4b:84:d3:2f:bd:f1:33:ec:23:95: 89:aa:96:33:ef:d8:7b:94:b9:7b:76:23:c4:07:42: 9a:25:ff:d0:00:b3:c5:07:21:2f:6a:1d:e2:40:0c: c1:84:0c:dc:52:5e:ca:c4:9c:56:1e:6c:9b:17:da: f1:71:d3:5a:22:e6:df:20:4a:d1:14:70:8d:7b:e9: 48:2a:e4:09:59:67:76:dc:03:5d:6a:4e:63:e8:86: 01:d3:a5:c2:75:b1:3a:09:98:78:be:6d:9d:ae:fd: f3:93:74:11:15:2c:f2:67:5e:04:6a:4d:b4:14:ca: 26:7b:e0:da:a4:99:0a:a6:11:5f:48:06:f2:3f:00: cc:e4:74:59:75:a3:ce:c9:11:99:8f:37:83:37:06: 3f:e5:e9:46:55:fe:bf:0a:28:52:fd:10:4a:c7:72: fc:3b:b2:c1:53:8e:11:02:0c:26:92:8c:4a:d3:90: e5:7a:c5:f0:e9:40:53:bf:10:8c:13:30:a6:0b:91: f5:03:86:bc:96:54:b3:1f:c8:e0:1f:0a:6e:b0:20: 80:68:1a:18:cc:97:48:f3:94:f6:13:05:66:f5:33: 7d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0E:15:41:18:2E:13:7B:17:64:59:C8:E7:4E:E2:51:22:04:63:C4 X509v3 Authority Key Identifier: keyid:CA:ED:BB:AE:70:9D:3C:A6:46:88:25:7B:BB:A3:6F:96:A0:99:9D:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu27rnCdPKZGiCV7u6NvlqCZnfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/29dc37-be82-4207-a5e2-ce9c96211858/1/yu27rnCdPKZGiCV7u6NvlqCZnfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/29dc37-be82-4207-a5e2-ce9c96211858/1/yu27rnCdPKZGiCV7u6NvlqCZnfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:db:4f:32:b0:5f:cf:75:5b:55:e9:93:f6:5e:55:99:11:49: 41:ac:09:23:4a:06:60:7d:6b:76:1f:1e:e3:87:b4:6b:92:0c: b0:57:42:aa:6c:1a:55:de:b3:ed:54:f0:f9:ba:ba:0e:a3:95: 3b:1e:06:ff:27:b2:af:9a:93:ee:d1:f1:13:15:76:25:39:57: 0b:3b:5b:63:9e:b3:ce:8d:e8:64:e1:77:f4:90:71:1c:59:06: 06:51:f5:9a:a0:6e:e5:af:47:1b:13:9d:7a:66:d5:b3:44:b5: 8a:43:60:f6:38:6f:16:52:7d:1e:8e:5d:5c:28:48:2b:7a:55: d6:44:2c:60:6b:02:c3:70:bd:19:d1:71:b2:8c:c1:d3:46:9b: f1:fa:0b:03:56:d6:63:a2:e5:48:3b:53:0a:63:96:5b:3c:db: fa:34:b5:ef:22:6b:02:08:97:05:2c:43:92:6b:04:15:00:d4: f2:5d:4b:ba:55:6b:83:25:e6:04:5b:8a:ee:f9:7d:d5:9f:f4: d0:9b:df:6e:34:5f:af:de:16:90:a5:f6:c9:d2:c0:fa:ca:e8: e0:6c:b4:56:e2:ec:44:fb:d1:b4:1c:e8:9b:84:28:30:da:15: af:54:51:b7:b2:01:5a:73:2e:be:8a:a3:a8:f0:8a:36:21:8b: 1a:00:28:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPusgvNArdJsyBbpAYaUJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZWRiYmFlNzA5ZDNjYTY0Njg4MjU3YmJiYTM2Zjk2YTA5 OTlkZjIwHhcNMjUxMjI2MDYwMDU0WhcNMjUxMjI3MDYwMDU0WjAzMTEwLwYDVQQD EygwYTBlMTU0MTE4MmUxMzdiMTc2NDU5YzhlNzRlZTI1MTIyMDQ2M2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6C1x9OQZkBnnZj2Eug3pEUkBw/l f+NnKIrUCcYlK7K2lUuE0y+98TPsI5WJqpYz79h7lLl7diPEB0KaJf/QALPFByEv ah3iQAzBhAzcUl7KxJxWHmybF9rxcdNaIubfIErRFHCNe+lIKuQJWWd23ANdak5j 6IYB06XCdbE6CZh4vm2drv3zk3QRFSzyZ14Eak20FMome+DapJkKphFfSAbyPwDM 5HRZdaPOyRGZjzeDNwY/5elGVf6/CihS/RBKx3L8O7LBU44RAgwmkoxK05DlesXw 6UBTvxCMEzCmC5H1A4a8llSzH8jgHwpusCCAaBoYzJdI85T2EwVm9TN9FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoOFUEYLhN7F2RZyOdO4lEiBGPEMB8GA1UdIwQY MBaAFMrtu65wnTymRogle7ujb5agmZ3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXUyN3JuQ2RQS1pHaUNWN3U2TnZscUNabmZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yOWRjMzctYmU4Mi00MjA3LWE1ZTIt Y2U5Yzk2MjExODU4LzEveXUyN3JuQ2RQS1pHaUNWN3U2TnZscUNabmZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8yOWRjMzctYmU4Mi00MjA3LWE1ZTItY2U5Yzk2MjExODU4 LzEveXUyN3JuQ2RQS1pHaUNWN3U2TnZscUNabmZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkNtPMrBf z3VbVemT9l5VmRFJQawJI0oGYH1rdh8e44e0a5IMsFdCqmwaVd6z7VTw+bq6DqOV Ox4G/yeyr5qT7tHxExV2JTlXCztbY56zzo3oZOF39JBxHFkGBlH1mqBu5a9HGxOd embVs0S1ikNg9jhvFlJ9Ho5dXChIK3pV1kQsYGsCw3C9GdFxsozB00ab8foLA1bW Y6LlSDtTCmOWWzzb+jS17yJrAgiXBSxDkmsEFQDU8l1LulVrgyXmBFuK7vl91Z/0 0JvfbjRfr94WkKX2ydLA+sro4Gy0VuLsRPvRtBzom4QoMNoVr1RRt7IBWnMuvoqj qPCKNiGLGgAoMg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:38 2025 by rpki-client