This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft File: YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft (raw, json) Hash identifier: 7PGTE9aIesY/gyldvfa+q/usDE8hdGlu7+sfIjrAN3s= Subject key identifier: 8A:57:FB:B8:2C:D6:94:44:3D:2A:31:DD:AE:23:43:19:2C:E4:6A:60 Authority key identifier: 62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58 Certificate issuer: /CN=626752d870c6696f012b2f465d549f4000fe1858 Certificate serial: 019B40C9514613073AEFAA3B2CF223045E24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft Manifest number: 0375 Signing time: Sun 21 Dec 2025 12:01:33 +0000 Manifest this update: Sun 21 Dec 2025 12:01:33 +0000 Manifest next update: Mon 22 Dec 2025 12:01:33 +0000 Files and hashes: 1: YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl (hash: plxMETAlDEhynvrxKEZU0LsB263ZPkr3UZtSoHkDVvE=) 2: qn60XTUhVIHXIbT-HvehrrpwogU.roa (hash: qJSoQQbXyMZY80sZe+6a8U7g7EqUHMfReU7Wd4AfetU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:51:46:13:07:3a:ef:aa:3b:2c:f2:23:04:5e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=626752d870c6696f012b2f465d549f4000fe1858 Validity Not Before: Dec 21 12:01:33 2025 GMT Not After : Dec 22 12:01:33 2025 GMT Subject: CN=8a57fbb82cd694443d2a31ddae2343192ce46a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a9:0f:15:49:66:e5:6e:8a:14:eb:d1:e7:9d: 16:76:35:61:bc:9b:b8:50:d0:45:89:70:65:17:87: 79:05:4c:44:60:67:4f:b3:a9:78:0f:2c:10:d0:9c: 0f:1a:3a:48:5f:70:e2:68:b7:4a:8b:d1:dc:d1:5b: db:7d:3b:85:c4:e9:a0:d7:71:a6:b4:25:26:10:f0: 29:ee:e7:f5:65:32:c0:06:0a:14:a5:e7:89:3e:3f: 56:b3:a3:11:ff:79:17:16:d5:e7:91:3f:af:f5:7c: 0d:21:b4:e6:b9:ec:95:78:d6:6f:f4:e2:10:f8:d2: 10:f6:0f:e0:4e:88:3d:97:75:43:6a:14:1d:18:0b: a8:7c:94:cb:2f:b5:b4:d5:4f:4c:c3:1e:88:23:1c: e6:ce:e9:5f:90:b6:4a:7f:23:20:47:85:2c:1a:35: d8:a6:30:b4:4f:3b:37:0f:52:af:16:88:44:4d:c5: e7:72:d1:21:42:b2:75:6c:1f:88:b1:ce:5b:d4:b4: 08:1f:c9:fd:0c:ff:fb:88:5e:72:f0:4b:c2:8d:48: ee:ff:2e:50:b7:8f:99:34:39:0e:ba:7b:e2:ad:b7: 1c:01:0f:3f:62:2c:ea:73:50:9a:7e:46:8c:ee:bb: 9f:21:c9:87:39:25:98:a6:61:fa:01:c8:6a:2e:88: 81:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:57:FB:B8:2C:D6:94:44:3D:2A:31:DD:AE:23:43:19:2C:E4:6A:60 X509v3 Authority Key Identifier: keyid:62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:9c:a1:9c:b0:e9:82:88:ba:4c:78:12:6d:d8:b4:d6:3e:b5: c9:15:a5:38:97:e2:61:7a:5c:d1:07:09:34:ff:32:8a:0a:12: 65:f7:82:6d:13:89:af:c1:fa:7e:a4:79:5e:de:b2:0f:37:90: b4:36:72:30:58:a8:1c:a6:93:7f:69:6a:26:65:4c:aa:ed:2b: fd:16:ea:8d:3a:76:87:af:9d:94:07:3a:24:9b:aa:85:86:f2: 65:c1:ec:95:c7:14:5c:98:92:9e:94:87:22:31:cf:5b:59:02: 64:54:1e:0a:21:13:bf:4d:8f:b9:db:be:db:c3:36:6c:40:c9: 2a:6f:11:6a:b9:0c:62:bc:37:de:35:f8:19:7e:3e:d0:b9:f3: 6e:4c:3f:98:86:99:ea:78:13:b8:d5:ae:5e:2f:60:b7:f6:0a: d8:02:e9:df:1a:ca:f2:a2:2e:54:92:71:26:44:f3:a1:0f:83: 08:4c:45:00:08:96:ec:30:bf:1a:98:6b:4c:ba:99:7c:b1:1e: c4:2c:00:27:0b:c5:8d:55:c4:84:3b:4e:cd:93:81:23:63:aa: 01:e3:63:48:aa:79:5e:09:4a:2e:f2:da:b3:af:69:66:64:65: c6:55:e6:41:a3:af:d5:14:99:06:00:b7:93:33:7a:a3:3e:60: 17:75:c1:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyVFGEwc676o7LPIjBF4kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNjc1MmQ4NzBjNjY5NmYwMTJiMmY0NjVkNTQ5ZjQwMDBm ZTE4NTgwHhcNMjUxMjIxMTIwMTMzWhcNMjUxMjIyMTIwMTMzWjAzMTEwLwYDVQQD Eyg4YTU3ZmJiODJjZDY5NDQ0M2QyYTMxZGRhZTIzNDMxOTJjZTQ2YTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6kPFUlm5W6KFOvR550WdjVhvJu4 UNBFiXBlF4d5BUxEYGdPs6l4DywQ0JwPGjpIX3DiaLdKi9Hc0VvbfTuFxOmg13Gm tCUmEPAp7uf1ZTLABgoUpeeJPj9Ws6MR/3kXFtXnkT+v9XwNIbTmueyVeNZv9OIQ +NIQ9g/gTog9l3VDahQdGAuofJTLL7W01U9Mwx6IIxzmzulfkLZKfyMgR4UsGjXY pjC0Tzs3D1KvFohETcXnctEhQrJ1bB+Isc5b1LQIH8n9DP/7iF5y8EvCjUju/y5Q t4+ZNDkOunvirbccAQ8/Yizqc1CafkaM7rufIcmHOSWYpmH6AchqLoiBxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpX+7gs1pREPSox3a4jQxks5GpgMB8GA1UdIwQY MBaAFGJnUthwxmlvASsvRl1Un0AA/hhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1kUzJIREdhVzhCS3k5R1hWU2ZRQUQtR0ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9iZmJiMmYtYjY3MS00ODE0LTg2Mjct YmEyNjQ4ZjE1MWQzLzEvWW1kUzJIREdhVzhCS3k5R1hWU2ZRQUQtR0ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9iZmJiMmYtYjY3MS00ODE0LTg2MjctYmEyNjQ4ZjE1MWQz LzEvWW1kUzJIREdhVzhCS3k5R1hWU2ZRQUQtR0ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtZyhnLDp goi6THgSbdi01j61yRWlOJfiYXpc0QcJNP8yigoSZfeCbROJr8H6fqR5Xt6yDzeQ tDZyMFioHKaTf2lqJmVMqu0r/RbqjTp2h6+dlAc6JJuqhYbyZcHslccUXJiSnpSH IjHPW1kCZFQeCiETv02Pudu+28M2bEDJKm8RarkMYrw33jX4GX4+0Lnzbkw/mIaZ 6ngTuNWuXi9gt/YK2ALp3xrK8qIuVJJxJkTzoQ+DCExFAAiW7DC/GphrTLqZfLEe xCwAJwvFjVXEhDtOzZOBI2OqAeNjSKp5XglKLvLas69pZmRlxlXmQaOv1RSZBgC3 kzN6oz5gF3XBjg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:33:58 2025 by rpki-client