This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft File: yvYTMRp4acM1ymbLQjzG6LL6kCw.mft (raw, json) Hash identifier: aDVM0fx0n5tj2g4iOywTnSL5lZzcYPMT0a0Ce0thKgw= Subject key identifier: 4C:A1:71:BF:3C:81:0C:F0:7E:F0:B1:1B:78:19:76:DE:5C:0F:52:34 Authority key identifier: CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C Certificate issuer: /CN=caf613311a7869c335ca66cb423cc6e8b2fa902c Certificate serial: 019B1BAB2313AB136FD390F98BD014F90759 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 07:02:39 +0000 Manifest this update: Sun 14 Dec 2025 07:02:39 +0000 Manifest next update: Mon 15 Dec 2025 07:02:39 +0000 Files and hashes: 1: gWMrTu8Of2Dx3uAeFmzVA6qXGew.roa (hash: 8qHiVPNeypQh4D2Me20Hi3HMwJdiHI6/+GwoODvt2Bo=) 2: yvYTMRp4acM1ymbLQjzG6LL6kCw.crl (hash: qFO3ISrB76D9HfAKAum7DIUSpMjhh5Ax2AEN7nOkf5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:ab:23:13:ab:13:6f:d3:90:f9:8b:d0:14:f9:07:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf613311a7869c335ca66cb423cc6e8b2fa902c Validity Not Before: Dec 14 07:02:39 2025 GMT Not After : Dec 15 07:02:39 2025 GMT Subject: CN=4ca171bf3c810cf07ef0b11b781976de5c0f5234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:63:70:c2:0b:7e:65:d7:d4:af:19:bb:4b:25: 37:ac:5a:40:9f:0b:ec:8d:0b:9d:c8:cb:4b:be:8b: bc:23:3c:77:f5:70:b7:95:c0:2f:00:33:e7:c0:c1: 06:94:23:57:83:1f:a7:8f:89:b0:56:85:e0:c5:82: 42:e4:95:0c:7d:77:11:5d:be:22:de:43:06:24:c9: 07:26:d1:04:50:5e:fa:0b:69:58:04:23:de:0d:13: 9b:0b:96:a8:25:b3:01:9b:aa:1a:cf:64:50:53:cb: 9a:e2:51:1f:81:52:d2:14:7e:61:0a:2e:c5:8e:5e: 05:c7:73:69:b7:0b:60:10:a7:05:19:b5:7d:91:5f: c7:9a:e0:1b:7d:16:9c:a7:d3:76:b4:8a:ee:b9:1b: de:59:40:09:b4:92:86:20:56:26:28:ae:f9:56:ce: be:cc:bc:60:7b:ed:ce:20:b3:d6:a2:2d:9a:61:0b: fc:30:61:2a:78:31:b8:d1:88:1e:e8:22:7d:f8:bc: 39:17:73:0e:a9:fb:b3:e3:d9:78:e0:24:66:c6:93: ee:7c:d6:a8:9e:bb:1e:67:06:6e:9f:91:35:18:04: 43:32:b0:cb:8e:b0:13:af:18:6b:0f:63:5b:eb:c9: 3c:62:50:67:98:4b:8b:d1:d1:7e:b5:95:3e:91:fc: 52:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A1:71:BF:3C:81:0C:F0:7E:F0:B1:1B:78:19:76:DE:5C:0F:52:34 X509v3 Authority Key Identifier: keyid:CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:9b:b2:c3:d6:55:03:b5:da:35:ea:ed:fd:1a:3e:06:19:c5: e0:3e:db:be:31:26:be:15:78:fa:4e:44:45:ee:f9:ce:71:87: 18:87:14:ed:81:45:0d:82:90:d3:ad:61:55:b3:90:ff:5b:0c: 72:3b:1c:df:52:84:05:40:db:df:ce:22:65:dd:c2:17:f6:13: 25:08:d2:59:7f:83:b0:5b:10:1a:31:4d:c8:82:18:32:cb:e8: af:a6:1c:90:1d:2d:7e:cc:3e:e7:95:0b:b3:41:4f:1d:97:bb: 9a:1f:45:fa:f5:7c:b6:c5:62:a3:df:9f:31:34:67:33:58:08: 87:36:2e:09:33:7b:31:56:e9:9b:99:79:93:ae:b8:34:4d:12: 22:91:51:ff:9a:c0:7b:d2:f1:d5:55:61:d4:0d:da:6a:65:5f: cf:b1:67:81:33:52:d0:8d:a9:e9:37:bc:57:ce:10:1c:48:21: 03:14:6b:e2:28:cd:52:f1:23:dd:61:e6:34:fc:d2:87:69:ca: 34:c8:35:b1:f6:72:6f:73:6e:e1:61:34:28:94:68:ea:48:75: 35:7f:36:f5:e7:43:cd:06:83:84:87:9d:09:7e:f1:75:ef:36: a4:6f:41:95:45:68:8a:d4:8d:b6:88:77:a4:05:5d:10:18:21: 25:81:60:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqyMTqxNv05D5i9AU+QdZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZjYxMzMxMWE3ODY5YzMzNWNhNjZjYjQyM2NjNmU4YjJm YTkwMmMwHhcNMjUxMjE0MDcwMjM5WhcNMjUxMjE1MDcwMjM5WjAzMTEwLwYDVQQD Eyg0Y2ExNzFiZjNjODEwY2YwN2VmMGIxMWI3ODE5NzZkZTVjMGY1MjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GNwwgt+ZdfUrxm7SyU3rFpAnwvs jQudyMtLvou8Izx39XC3lcAvADPnwMEGlCNXgx+nj4mwVoXgxYJC5JUMfXcRXb4i 3kMGJMkHJtEEUF76C2lYBCPeDRObC5aoJbMBm6oaz2RQU8ua4lEfgVLSFH5hCi7F jl4Fx3NptwtgEKcFGbV9kV/HmuAbfRacp9N2tIruuRveWUAJtJKGIFYmKK75Vs6+ zLxge+3OILPWoi2aYQv8MGEqeDG40Yge6CJ9+Lw5F3MOqfuz49l44CRmxpPufNao nrseZwZun5E1GARDMrDLjrATrxhrD2Nb68k8YlBnmEuL0dF+tZU+kfxSpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyhcb88gQzwfvCxG3gZdt5cD1I0MB8GA1UdIwQY MBaAFMr2EzEaeGnDNcpmy0I8xuiy+pAsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXZZVE1ScDRhY00xeW1iTFFqekc2TEw2a0N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85NGVhNGItM2ZmMC00ZjdiLTlkODMt YzMxMGVjYTNjMDdiLzEveXZZVE1ScDRhY00xeW1iTFFqekc2TEw2a0N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85NGVhNGItM2ZmMC00ZjdiLTlkODMtYzMxMGVjYTNjMDdi LzEveXZZVE1ScDRhY00xeW1iTFFqekc2TEw2a0N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZuyw9ZV A7XaNert/Ro+BhnF4D7bvjEmvhV4+k5ERe75znGHGIcU7YFFDYKQ061hVbOQ/1sM cjsc31KEBUDb384iZd3CF/YTJQjSWX+DsFsQGjFNyIIYMsvor6YckB0tfsw+55UL s0FPHZe7mh9F+vV8tsVio9+fMTRnM1gIhzYuCTN7MVbpm5l5k664NE0SIpFR/5rA e9Lx1VVh1A3aamVfz7FngTNS0I2p6Te8V84QHEghAxRr4ijNUvEj3WHmNPzSh2nK NMg1sfZyb3Nu4WE0KJRo6kh1NX829edDzQaDhIedCX7xde82pG9BlUVoitSNtoh3 pAVdEBghJYFg/g== -----END CERTIFICATE-----Generated at Sun Dec 14 09:34:12 2025 by rpki-client