This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft File: yvYTMRp4acM1ymbLQjzG6LL6kCw.mft (raw, json) Hash identifier: RJpoeE/W4iiEQAGIIStny0rLS2JjTOTGFP7KRukKoB8= Subject key identifier: B7:3B:6E:EC:58:91:E3:7E:81:0B:5D:E9:1A:96:C9:86:97:EB:D6:81 Authority key identifier: CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C Certificate issuer: /CN=caf613311a7869c335ca66cb423cc6e8b2fa902c Certificate serial: 019B1F87DC5ED1210E12CDC04AA7DD1A5FB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 01:02:35 +0000 Manifest this update: Mon 15 Dec 2025 01:02:35 +0000 Manifest next update: Tue 16 Dec 2025 01:02:35 +0000 Files and hashes: 1: gWMrTu8Of2Dx3uAeFmzVA6qXGew.roa (hash: 8qHiVPNeypQh4D2Me20Hi3HMwJdiHI6/+GwoODvt2Bo=) 2: yvYTMRp4acM1ymbLQjzG6LL6kCw.crl (hash: a+6DLdbihWZhZPaOr9Dkw2KKYWt5ZWIsHsbwbFREKFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:87:dc:5e:d1:21:0e:12:cd:c0:4a:a7:dd:1a:5f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf613311a7869c335ca66cb423cc6e8b2fa902c Validity Not Before: Dec 15 01:02:35 2025 GMT Not After : Dec 16 01:02:35 2025 GMT Subject: CN=b73b6eec5891e37e810b5de91a96c98697ebd681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:71:b2:d6:41:ab:9d:07:de:fa:4b:e1:25:6c: 99:fb:e9:5c:38:b4:3e:2b:01:f0:7e:2c:03:41:c1: 9d:b1:6c:e3:b3:b1:12:6d:49:83:1a:c0:29:c9:36: 77:ea:90:be:a3:80:c8:35:22:03:f9:fc:3f:bf:98: e7:3c:60:71:bd:ec:85:d3:df:e6:44:42:8d:4f:79: ad:0b:94:0f:14:9a:c7:34:26:f5:07:96:47:1e:c8: 1f:9e:2d:9d:69:8c:48:02:62:e6:81:85:35:a8:bf: a4:fe:f4:4a:e0:3e:d3:3d:2e:e1:a3:93:ed:63:8e: c6:c6:2a:b0:85:7c:62:5a:74:0a:e0:44:08:66:5d: 32:4d:31:84:81:d2:76:0a:b2:5f:4c:95:62:9d:bf: 8f:4a:67:27:a4:e0:3b:86:f6:a8:24:57:26:85:de: 94:7b:23:13:4a:d2:98:22:48:83:d7:1e:6e:61:6a: 41:0f:dc:ea:cb:81:34:1f:c9:7d:15:9c:ec:bd:6b: c2:75:c4:a1:99:d4:17:c3:c9:84:bb:e0:43:be:e4: 71:8a:c9:68:23:c0:eb:ce:01:09:83:f1:01:d4:75: 89:66:a5:24:c7:84:cf:de:bb:3e:78:39:65:42:68: a4:ec:cc:23:11:f7:46:16:07:d9:47:29:7c:6a:52: f7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3B:6E:EC:58:91:E3:7E:81:0B:5D:E9:1A:96:C9:86:97:EB:D6:81 X509v3 Authority Key Identifier: keyid:CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:96:ea:9f:5e:b3:b5:a3:a2:e4:9a:cb:4d:55:5f:87:c1:7c: ec:15:20:5c:9a:66:2c:0b:9e:07:43:1c:06:f1:06:70:39:72: 4a:5f:92:d1:b4:b8:5b:c1:da:4a:df:39:df:9e:92:27:a1:c4: b3:da:16:a4:12:d7:7a:5e:1c:05:8e:31:c1:b2:9d:4a:59:66: 27:af:65:af:9c:cd:bd:19:ee:65:f9:ee:0f:9b:17:e7:45:c6: 32:0c:e2:ae:70:cf:50:37:b9:24:d1:7b:19:62:49:a6:8e:8c: 68:04:51:6f:a3:9d:15:32:af:d3:83:9d:58:cc:e2:f4:72:47: ef:e2:ed:6e:a9:3e:eb:53:2b:a5:ea:93:19:60:cc:d2:70:b3: 54:bc:2c:14:bf:61:69:b4:b1:12:ad:2a:7a:cd:12:6d:be:96: db:84:83:4d:57:ad:71:9f:94:3d:a1:f0:22:63:48:0e:61:de: a8:38:26:5f:6a:0f:c4:e5:46:48:68:43:20:46:b2:1d:22:9e: a7:df:c7:87:ed:b5:c5:31:30:ad:2a:55:f9:40:f4:46:aa:44: e4:83:4a:75:69:e6:a8:27:05:c3:b8:57:d5:23:e7:af:ba:3f: f2:fa:e9:9a:e0:4b:95:d8:c8:0a:54:3c:d6:70:d9:c0:91:1f: 83:9a:da:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfh9xe0SEOEs3ASqfdGl+2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZjYxMzMxMWE3ODY5YzMzNWNhNjZjYjQyM2NjNmU4YjJm YTkwMmMwHhcNMjUxMjE1MDEwMjM1WhcNMjUxMjE2MDEwMjM1WjAzMTEwLwYDVQQD EyhiNzNiNmVlYzU4OTFlMzdlODEwYjVkZTkxYTk2Yzk4Njk3ZWJkNjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HGy1kGrnQfe+kvhJWyZ++lcOLQ+ KwHwfiwDQcGdsWzjs7ESbUmDGsApyTZ36pC+o4DINSID+fw/v5jnPGBxveyF09/m REKNT3mtC5QPFJrHNCb1B5ZHHsgfni2daYxIAmLmgYU1qL+k/vRK4D7TPS7ho5Pt Y47GxiqwhXxiWnQK4EQIZl0yTTGEgdJ2CrJfTJVinb+PSmcnpOA7hvaoJFcmhd6U eyMTStKYIkiD1x5uYWpBD9zqy4E0H8l9FZzsvWvCdcShmdQXw8mEu+BDvuRxislo I8DrzgEJg/EB1HWJZqUkx4TP3rs+eDllQmik7MwjEfdGFgfZRyl8alL3TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLc7buxYkeN+gQtd6RqWyYaX69aBMB8GA1UdIwQY MBaAFMr2EzEaeGnDNcpmy0I8xuiy+pAsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXZZVE1ScDRhY00xeW1iTFFqekc2TEw2a0N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85NGVhNGItM2ZmMC00ZjdiLTlkODMt YzMxMGVjYTNjMDdiLzEveXZZVE1ScDRhY00xeW1iTFFqekc2TEw2a0N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85NGVhNGItM2ZmMC00ZjdiLTlkODMtYzMxMGVjYTNjMDdi LzEveXZZVE1ScDRhY00xeW1iTFFqekc2TEw2a0N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn5bqn16z taOi5JrLTVVfh8F87BUgXJpmLAueB0McBvEGcDlySl+S0bS4W8HaSt85356SJ6HE s9oWpBLXel4cBY4xwbKdSllmJ69lr5zNvRnuZfnuD5sX50XGMgzirnDPUDe5JNF7 GWJJpo6MaARRb6OdFTKv04OdWMzi9HJH7+Ltbqk+61MrpeqTGWDM0nCzVLwsFL9h abSxEq0qes0Sbb6W24SDTVetcZ+UPaHwImNIDmHeqDgmX2oPxOVGSGhDIEayHSKe p9/Hh+21xTEwrSpV+UD0RqpE5INKdWnmqCcFw7hX1SPnr7o/8vrpmuBLldjIClQ8 1nDZwJEfg5ranw== -----END CERTIFICATE-----Generated at Mon Dec 15 04:53:56 2025 by rpki-client