This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft File: y748bZmBGBnO3dzSfkviW8DPUG8.mft (raw, json) Hash identifier: E9B6TYLlCnmFQCgDtknZ6jh30dg5Z2nwyaVUgT/D+dw= Subject key identifier: 79:E9:1F:3C:4B:8B:41:BE:3C:F6:D4:5E:08:9F:CD:42:DB:EB:7F:74 Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F Certificate issuer: /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f Certificate serial: 019B1C4EB81697453AE394A3D734D5572967 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft Manifest number: 12A3 Signing time: Sun 14 Dec 2025 10:01:19 +0000 Manifest this update: Sun 14 Dec 2025 10:01:19 +0000 Manifest next update: Mon 15 Dec 2025 10:01:19 +0000 Files and hashes: 1: ghqg6ujuEOV4Vw3b6x6YkQU8aSs.roa (hash: IATpDK+kaz0czhsEzmLbtPDJ492YJfivjvGQ/3AgHO8=) 2: rMy8dPPnYigzc4tv_MpgYXZWjBU.roa (hash: nHe7eBjoA3VTymKpGX1+aRKhTfLD28hgYmPFTLI6+4M=) 3: x5FwTTVorsGfIV2MDa8IC9dozSI.roa (hash: cVCSNkZBBh3ZJGnim77LdgANipO1Ai7iWjVLFMe9HIY=) 4: y748bZmBGBnO3dzSfkviW8DPUG8.crl (hash: l4GQXNpvqvifV9I+5oNksjuZUhWLhANG0k8xVCYemWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:4e:b8:16:97:45:3a:e3:94:a3:d7:34:d5:57:29:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f Validity Not Before: Dec 14 10:01:19 2025 GMT Not After : Dec 15 10:01:19 2025 GMT Subject: CN=79e91f3c4b8b41be3cf6d45e089fcd42dbeb7f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:15:6a:df:4b:a6:6e:df:cc:8f:0d:82:68:3a: 37:27:dc:90:84:e0:79:b4:b5:18:d6:95:f1:f6:89: 63:f1:aa:25:a3:1c:d3:5e:ca:d3:a9:50:48:f3:c4: b3:cb:82:87:58:9c:0a:5c:b7:13:83:9e:22:1a:e4: c1:61:cf:4b:1a:02:21:0c:28:8b:95:fc:32:4c:bb: e5:39:db:72:ac:46:33:d6:3f:32:94:3e:b8:41:62: 01:cc:7c:f8:d1:c4:b5:73:f9:8a:05:4a:30:17:c6: 0e:26:02:62:1b:62:ac:0e:aa:c3:f6:34:8a:d8:45: b3:f8:54:f9:bf:fa:75:3c:ac:bf:3f:cd:da:d5:f0: b4:3b:50:0a:58:fe:75:54:20:f2:8f:b3:f7:01:29: 1c:aa:59:49:29:12:5c:48:04:20:c5:b7:43:b4:dd: 15:86:f1:58:17:3e:30:50:6f:ec:9e:73:a7:dc:43: 3d:5d:dc:60:1b:a8:80:79:dc:49:53:25:49:f3:80: ec:2d:3c:fb:4a:2b:ca:ff:a2:64:9a:23:b9:31:02: bc:c5:78:48:a0:47:77:5b:d3:11:e1:60:a8:cd:0c: ed:e0:db:b5:ab:91:74:ee:ac:bc:c9:09:43:27:9d: 77:2b:18:5f:59:d5:ca:b3:6c:f3:57:8f:b3:9f:52: f9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E9:1F:3C:4B:8B:41:BE:3C:F6:D4:5E:08:9F:CD:42:DB:EB:7F:74 X509v3 Authority Key Identifier: keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:2a:46:ea:39:75:f0:64:43:ae:66:e8:97:97:57:d6:87:f0: 2c:cf:0a:e2:9b:5d:03:6a:85:b0:c0:df:03:f6:e9:b3:d4:e9: 2a:90:80:64:cc:e0:d6:6f:40:4c:c8:fc:fe:ab:02:40:0d:9e: af:66:8f:78:ee:ba:78:50:47:e7:9d:83:95:1b:87:11:dd:f9: a1:eb:17:01:d9:11:1f:06:6f:e6:c1:2c:20:41:b1:c7:59:26: 26:c8:ee:79:49:09:53:d0:66:b4:96:f7:11:f2:47:98:1b:8a: 23:fb:09:a1:83:95:d7:b7:da:54:c5:d9:71:1f:33:5d:5e:30: 9a:d0:d7:02:5c:dd:1d:cf:be:62:c7:2e:77:02:80:88:b4:5c: f7:bd:ba:90:bf:72:14:3b:f0:de:32:67:bd:13:35:e0:99:f4: af:ff:24:68:a7:5b:75:ca:ee:30:78:57:d4:29:b5:e1:6a:0e: 82:79:eb:c9:16:bb:25:45:1a:cf:28:ec:18:69:f7:b3:57:05: b7:79:e5:ab:cd:11:c6:66:56:79:81:e2:45:cb:77:ce:9a:61: 04:00:14:48:4e:26:eb:e7:09:b2:1a:ff:38:f4:bf:0b:ca:63: be:35:d0:a7:e0:42:38:a7:62:0f:73:64:18:b4:cf:61:c4:54: 58:da:67:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscTrgWl0U645Sj1zTVVylnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYmUzYzZkOTk4MTE4MTljZWRkZGNkMjdlNGJlMjViYzBj ZjUwNmYwHhcNMjUxMjE0MTAwMTE5WhcNMjUxMjE1MTAwMTE5WjAzMTEwLwYDVQQD Eyg3OWU5MWYzYzRiOGI0MWJlM2NmNmQ0NWUwODlmY2Q0MmRiZWI3Zjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxVq30umbt/Mjw2CaDo3J9yQhOB5 tLUY1pXx9olj8aoloxzTXsrTqVBI88Szy4KHWJwKXLcTg54iGuTBYc9LGgIhDCiL lfwyTLvlOdtyrEYz1j8ylD64QWIBzHz40cS1c/mKBUowF8YOJgJiG2KsDqrD9jSK 2EWz+FT5v/p1PKy/P83a1fC0O1AKWP51VCDyj7P3ASkcqllJKRJcSAQgxbdDtN0V hvFYFz4wUG/snnOn3EM9XdxgG6iAedxJUyVJ84DsLTz7SivK/6JkmiO5MQK8xXhI oEd3W9MR4WCozQzt4Nu1q5F07qy8yQlDJ513KxhfWdXKs2zzV4+zn1L5cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnpHzxLi0G+PPbUXgifzULb6390MB8GA1UdIwQY MBaAFMu+PG2ZgRgZzt3c0n5L4lvAz1BvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84NDhjOGItMGU5Yy00ZDZlLTg3M2Ut OGNmN2Q0NDkzMzU4LzEveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS84NDhjOGItMGU5Yy00ZDZlLTg3M2UtOGNmN2Q0NDkzMzU4 LzEveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcipG6jl1 8GRDrmbol5dX1ofwLM8K4ptdA2qFsMDfA/bps9TpKpCAZMzg1m9ATMj8/qsCQA2e r2aPeO66eFBH552DlRuHEd35oesXAdkRHwZv5sEsIEGxx1kmJsjueUkJU9BmtJb3 EfJHmBuKI/sJoYOV17faVMXZcR8zXV4wmtDXAlzdHc++YscudwKAiLRc9726kL9y FDvw3jJnvRM14Jn0r/8kaKdbdcruMHhX1Cm14WoOgnnryRa7JUUazyjsGGn3s1cF t3nlq80RxmZWeYHiRct3zpphBAAUSE4m6+cJshr/OPS/C8pjvjXQp+BCOKdiD3Nk GLTPYcRUWNpnag== -----END CERTIFICATE-----Generated at Sun Dec 14 14:41:06 2025 by rpki-client