This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft File: yHR0zrha8xEi7eWG1NZbD1tNl_A.mft (raw, json) Hash identifier: 0aPNoAXnwZNqgL68CRFraenFSGPYZBl3sUowfZfWaF8= Subject key identifier: 7E:01:D9:9D:67:71:6A:F0:94:5B:98:18:B8:B0:86:B5:F4:46:E8:B9 Authority key identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0 Certificate issuer: /CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0 Certificate serial: 019B2D0B404C065FD6D5F6DB89E89F789315 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft Manifest number: 1783 Signing time: Wed 17 Dec 2025 16:01:10 +0000 Manifest this update: Wed 17 Dec 2025 16:01:10 +0000 Manifest next update: Thu 18 Dec 2025 16:01:10 +0000 Files and hashes: 1: 6thBO5jod-S22ld5I7cCUqU9PPU.roa (hash: whhraWURnepuYYNpLNQlvK7It8S7aCrmfs8zXpfqsOc=) 2: bNZ4Q9wcD7yZAP2RwlbB4JNFkjQ.roa (hash: JZzkHPxKw9rE1eeiiSJfGm5FFzPkvIECAGzsNfZT2+0=) 3: yHR0zrha8xEi7eWG1NZbD1tNl_A.crl (hash: KC9YT/4786UEzBzTczXIIZWlIj8LlqGUjDWmUJHX1LI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:40:4c:06:5f:d6:d5:f6:db:89:e8:9f:78:93:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0 Validity Not Before: Dec 17 16:01:10 2025 GMT Not After : Dec 18 16:01:10 2025 GMT Subject: CN=7e01d99d67716af0945b9818b8b086b5f446e8b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:53:01:2c:c1:be:6c:05:d9:7f:db:71:15:4e: 5f:b2:ed:59:53:36:05:84:f4:14:a0:93:7d:00:f4: fb:2b:44:b8:88:39:b5:1c:06:07:f1:64:dd:18:b0: a2:41:3e:27:92:e6:d9:1a:fb:22:72:4d:d1:6c:41: af:61:cb:89:b8:ce:d4:62:d5:06:ee:ee:e4:9c:4c: 5e:dc:46:29:0f:fb:3d:a2:20:97:4b:99:f4:c4:c5: f0:c7:55:14:18:f5:c6:9e:09:a9:a9:d2:b8:99:bf: 58:b5:9b:72:28:c2:0c:e5:64:3a:37:07:ff:17:88: e3:9a:c5:3f:76:1b:b4:c3:4c:30:35:87:16:bf:a4: 97:25:91:6b:52:69:39:99:b7:9e:52:41:a9:d5:e3: 65:39:91:b0:38:fa:f1:b8:50:ea:53:57:6c:60:88: 17:32:60:10:bb:2d:dc:14:66:f1:40:5d:d2:ff:70: 83:70:29:26:39:0e:dc:93:85:68:ed:d3:78:80:a4: ae:a3:97:51:ee:77:15:16:ce:2b:05:43:e7:a0:d1: b5:d7:45:f7:31:df:ff:f2:c8:b3:12:60:97:d4:c4: 76:ce:33:0b:e2:24:b5:48:b9:8c:23:b8:66:a4:ed: 64:39:1a:6c:d0:8e:1d:21:99:5e:af:e1:37:8d:54: 18:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:01:D9:9D:67:71:6A:F0:94:5B:98:18:B8:B0:86:B5:F4:46:E8:B9 X509v3 Authority Key Identifier: keyid:C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:66:a9:ba:f4:d4:ee:00:97:a5:8e:b1:1d:ca:76:c5:ed:a5: fd:9e:42:82:1c:f8:7c:53:c6:25:f0:6a:62:69:7f:13:b9:b4: 24:88:cf:5b:bf:bf:a4:0e:71:4f:dd:fa:80:4d:0f:da:7d:9f: c1:df:a7:55:4e:7f:1c:38:f9:26:0d:23:fe:fc:b3:0a:3e:4d: e2:8e:e0:59:ff:e4:9b:14:79:8d:b2:93:02:a9:15:01:ab:b7: d9:19:93:44:83:cf:26:a1:dd:8c:02:7b:4a:76:1b:45:60:68: 6a:60:9b:37:b4:56:7d:ad:40:1e:e5:7b:bc:bd:cb:d4:77:b7: ff:a3:61:e8:96:2a:ea:f1:68:ff:a7:cf:13:31:8e:d4:39:c7: ff:de:33:2b:9e:42:49:10:b5:2f:36:67:52:62:59:02:57:4c: 51:06:5f:31:9c:02:16:c3:96:6f:74:73:06:35:07:73:f9:1c: 11:49:6e:1e:4a:a4:24:3a:99:e1:44:be:b9:3f:fa:31:39:bb: 27:69:ff:92:47:18:0d:44:fa:ae:b1:98:6e:ed:41:54:2f:25: 15:e9:32:10:ad:79:5b:7f:34:26:ec:07:6f:25:cb:3e:3b:74: e9:4c:a9:9b:d1:f2:1d:80:da:49:56:df:23:0b:dc:41:c8:00: 9e:d3:3f:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC0BMBl/W1fbbieifeJMVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NzQ3NGNlYjg1YWYzMTEyMmVkZTU4NmQ0ZDY1YjBmNWI0 ZDk3ZjAwHhcNMjUxMjE3MTYwMTEwWhcNMjUxMjE4MTYwMTEwWjAzMTEwLwYDVQQD Eyg3ZTAxZDk5ZDY3NzE2YWYwOTQ1Yjk4MThiOGIwODZiNWY0NDZlOGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1MBLMG+bAXZf9txFU5fsu1ZUzYF hPQUoJN9APT7K0S4iDm1HAYH8WTdGLCiQT4nkubZGvsick3RbEGvYcuJuM7UYtUG 7u7knExe3EYpD/s9oiCXS5n0xMXwx1UUGPXGngmpqdK4mb9YtZtyKMIM5WQ6Nwf/ F4jjmsU/dhu0w0wwNYcWv6SXJZFrUmk5mbeeUkGp1eNlOZGwOPrxuFDqU1dsYIgX MmAQuy3cFGbxQF3S/3CDcCkmOQ7ck4Vo7dN4gKSuo5dR7ncVFs4rBUPnoNG110X3 Md//8sizEmCX1MR2zjML4iS1SLmMI7hmpO1kORps0I4dIZler+E3jVQYfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4B2Z1ncWrwlFuYGLiwhrX0Rui5MB8GA1UdIwQY MBaAFMh0dM64WvMRIu3lhtTWWw9bTZfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUhSMHpyaGE4eEVpN2VXRzFOWmJEMXRObF9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81MmQ3NWMtZThhMC00ZWM4LWIwMGYt MDM1ODY1MjNiMTMzLzEveUhSMHpyaGE4eEVpN2VXRzFOWmJEMXRObF9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi81MmQ3NWMtZThhMC00ZWM4LWIwMGYtMDM1ODY1MjNiMTMz LzEveUhSMHpyaGE4eEVpN2VXRzFOWmJEMXRObF9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkWapuvTU 7gCXpY6xHcp2xe2l/Z5Cghz4fFPGJfBqYml/E7m0JIjPW7+/pA5xT936gE0P2n2f wd+nVU5/HDj5Jg0j/vyzCj5N4o7gWf/kmxR5jbKTAqkVAau32RmTRIPPJqHdjAJ7 SnYbRWBoamCbN7RWfa1AHuV7vL3L1He3/6Nh6JYq6vFo/6fPEzGO1DnH/94zK55C SRC1LzZnUmJZAldMUQZfMZwCFsOWb3RzBjUHc/kcEUluHkqkJDqZ4US+uT/6MTm7 J2n/kkcYDUT6rrGYbu1BVC8lFekyEK15W380JuwHbyXLPjt06Uypm9HyHYDaSVbf IwvcQcgAntM/Vw== -----END CERTIFICATE-----Generated at Wed Dec 17 19:09:59 2025 by rpki-client