This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft File: yErFLitXLMKpmnQSV-VpqjceNWg.mft (raw, json) Hash identifier: tlgqCUuGsP3R3rGOAewct9REzRUikHjt09d+Ev3pvWk= Subject key identifier: 78:48:A3:38:AB:7D:46:52:88:7E:BA:DB:0F:B7:26:E3:4C:B7:35:A8 Authority key identifier: C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68 Certificate issuer: /CN=c84ac52e2b572cc2a99a741257e569aa371e3568 Certificate serial: 019B2B8A739F69833A86F3988DE7B8DA489A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft Manifest number: 1008 Signing time: Wed 17 Dec 2025 09:00:52 +0000 Manifest this update: Wed 17 Dec 2025 09:00:52 +0000 Manifest next update: Thu 18 Dec 2025 09:00:52 +0000 Files and hashes: 1: Ki24jPZgJrCPTdr-EzJOC_g3W_g.roa (hash: n4ZbZmzZFlutTnq+BcgW8yw5bghHlIwLiglxRYnEDAw=) 2: yErFLitXLMKpmnQSV-VpqjceNWg.crl (hash: 9fkRL5TyCSiYH+k9oLKJIk25T2++N6pMIjBZ7EzP/N4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:73:9f:69:83:3a:86:f3:98:8d:e7:b8:da:48:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84ac52e2b572cc2a99a741257e569aa371e3568 Validity Not Before: Dec 17 09:00:52 2025 GMT Not After : Dec 18 09:00:52 2025 GMT Subject: CN=7848a338ab7d4652887ebadb0fb726e34cb735a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:98:29:f4:36:94:6b:9e:23:d5:63:42:80:52: 0c:f6:88:14:44:dc:32:65:b8:2b:d8:86:ff:e4:ca: 07:6e:10:79:32:26:4d:bf:98:e4:80:39:37:d1:b0: 94:3e:2b:05:e4:62:15:33:d0:1e:8c:cd:b9:a7:b3: 98:fb:82:b8:1b:fe:91:ac:3a:f8:b0:60:d0:f1:5d: 15:5e:9c:30:c3:c4:1b:8d:be:c8:1c:60:2e:a2:93: 8d:49:67:6a:72:f5:ca:f0:aa:c9:b0:87:9c:cc:88: 1f:6c:31:e9:ad:19:63:de:05:9c:ec:fc:50:82:e0: 44:67:5b:f2:82:e6:e6:3e:a6:8a:bd:24:42:60:22: 64:5d:2b:f3:7a:5d:ec:f5:3d:24:ef:89:1f:2b:60: a6:b6:36:82:86:da:97:f5:51:d8:72:e2:7e:b1:05: a1:61:1f:14:90:d9:58:0e:ed:28:ac:b5:59:6e:f6: 7d:c2:ad:41:f0:16:b7:26:8d:77:b2:a9:37:36:6b: 09:f1:06:4c:a6:c3:95:3f:70:1a:cc:e2:a9:92:0c: 6f:7d:23:2d:13:08:ce:d9:4a:6e:11:ba:6f:a2:cb: 5d:c7:bc:d9:cb:12:85:62:6a:1a:75:20:1a:0a:20: 76:a8:33:d2:03:cb:55:d1:72:f2:46:b2:01:b4:01: 75:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:48:A3:38:AB:7D:46:52:88:7E:BA:DB:0F:B7:26:E3:4C:B7:35:A8 X509v3 Authority Key Identifier: keyid:C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:62:90:f9:80:b0:2a:31:72:ac:8d:03:c2:dc:b1:93:27:38: 39:8e:a0:42:64:d3:f2:1c:46:e5:a5:ca:ff:34:ca:3d:cc:cc: 28:6d:1d:1d:c4:d4:62:2c:b5:40:a8:a6:23:ea:d5:1d:23:88: 01:88:24:cf:6f:1b:96:2d:e2:8e:bd:02:ce:07:f5:98:93:38: 39:ab:7c:99:19:83:05:3e:35:b6:58:36:8c:0b:cf:d3:87:32: d6:dd:60:0c:b8:5d:ff:24:79:ee:a9:a0:89:b9:60:f5:81:9c: a3:88:05:16:cf:f5:98:03:ca:b0:b2:80:ce:2e:3f:0d:eb:c3: 4f:d0:4e:22:16:bd:a9:48:f2:24:60:6f:98:50:06:91:02:7e: 57:bb:7d:c6:eb:3e:d5:58:ae:e6:de:27:dd:b1:55:e3:d4:b2: d4:78:ba:a0:32:51:85:0e:e8:54:a0:f6:1c:b4:da:aa:d0:81: f1:a6:c5:fa:fc:4d:eb:b7:de:4c:5a:f5:f4:c1:a6:33:a5:2c: d7:b8:ec:29:34:b6:1f:8a:95:8a:33:2e:90:4b:c9:e2:e0:c6: ff:d6:ae:48:b8:97:9a:6f:7d:88:3d:57:10:8e:ef:dc:d7:30: ca:85:f0:54:57:f8:f3:33:4d:c5:8d:56:2b:03:a3:4f:e8:7f: ab:dd:19:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrinOfaYM6hvOYjee42kiaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NGFjNTJlMmI1NzJjYzJhOTlhNzQxMjU3ZTU2OWFhMzcx ZTM1NjgwHhcNMjUxMjE3MDkwMDUyWhcNMjUxMjE4MDkwMDUyWjAzMTEwLwYDVQQD Eyg3ODQ4YTMzOGFiN2Q0NjUyODg3ZWJhZGIwZmI3MjZlMzRjYjczNWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJgp9DaUa54j1WNCgFIM9ogURNwy Zbgr2Ib/5MoHbhB5MiZNv5jkgDk30bCUPisF5GIVM9AejM25p7OY+4K4G/6RrDr4 sGDQ8V0VXpwww8Qbjb7IHGAuopONSWdqcvXK8KrJsIeczIgfbDHprRlj3gWc7PxQ guBEZ1vygubmPqaKvSRCYCJkXSvzel3s9T0k74kfK2CmtjaChtqX9VHYcuJ+sQWh YR8UkNlYDu0orLVZbvZ9wq1B8Ba3Jo13sqk3NmsJ8QZMpsOVP3AazOKpkgxvfSMt EwjO2UpuEbpvostdx7zZyxKFYmoadSAaCiB2qDPSA8tV0XLyRrIBtAF1lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhIozirfUZSiH662w+3JuNMtzWoMB8GA1UdIwQY MBaAFMhKxS4rVyzCqZp0Elflaao3HjVoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUVyRkxpdFhMTUtwbW5RU1YtVnBxamNlTldnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hYmRhZmMtYjM4OS00NTE4LWIxMmQt MmNjMzQyYjAwNTE5LzEveUVyRkxpdFhMTUtwbW5RU1YtVnBxamNlTldnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9hYmRhZmMtYjM4OS00NTE4LWIxMmQtMmNjMzQyYjAwNTE5 LzEveUVyRkxpdFhMTUtwbW5RU1YtVnBxamNlTldnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2KQ+YCw KjFyrI0Dwtyxkyc4OY6gQmTT8hxG5aXK/zTKPczMKG0dHcTUYiy1QKimI+rVHSOI AYgkz28bli3ijr0Czgf1mJM4Oat8mRmDBT41tlg2jAvP04cy1t1gDLhd/yR57qmg iblg9YGco4gFFs/1mAPKsLKAzi4/DevDT9BOIha9qUjyJGBvmFAGkQJ+V7t9xus+ 1Viu5t4n3bFV49Sy1Hi6oDJRhQ7oVKD2HLTaqtCB8abF+vxN67feTFr19MGmM6Us 17jsKTS2H4qVijMukEvJ4uDG/9auSLiXmm99iD1XEI7v3NcwyoXwVFf48zNNxY1W KwOjT+h/q90ZtQ== -----END CERTIFICATE-----Generated at Wed Dec 17 19:08:31 2025 by rpki-client