This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft File: yFP7eYikLzmDixx_nwQAaS6Sldc.mft (raw, json) Hash identifier: 42UG3ApyLInidjXvbIcbuCj0p44J9NWhnvlsaNeL3/g= Subject key identifier: F1:A4:D4:46:C5:E0:5F:A1:C0:94:6A:36:E9:21:21:33:19:24:30:38 Authority key identifier: C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7 Certificate issuer: /CN=c853fb7988a42f39838b1c7f9f0400692e9295d7 Certificate serial: 019B2B1D8ABC3236458038F5E6D00DA9ED28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft Manifest number: 02F1 Signing time: Wed 17 Dec 2025 07:01:54 +0000 Manifest this update: Wed 17 Dec 2025 07:01:54 +0000 Manifest next update: Thu 18 Dec 2025 07:01:54 +0000 Files and hashes: 1: Ef8_zrRgEL0CLqM-IuSA3dX-ctc.roa (hash: xDWi6ors7AjB8a/zdFVsFoCBfh3PoH6v4N9RTJZoFCo=) 2: wvSIKLseDCti9NDqb3hBoHBh3tM.roa (hash: JuhvfPP6PYd4BnfxxERmMrnoz56rmfAtM3i5xnGfuRs=) 3: yFP7eYikLzmDixx_nwQAaS6Sldc.crl (hash: IyoItEy9s5JOnTzhzZbc3elijMUymo4AAD94DoQXrak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:8a:bc:32:36:45:80:38:f5:e6:d0:0d:a9:ed:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c853fb7988a42f39838b1c7f9f0400692e9295d7 Validity Not Before: Dec 17 07:01:54 2025 GMT Not After : Dec 18 07:01:54 2025 GMT Subject: CN=f1a4d446c5e05fa1c0946a36e921213319243038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:70:7d:a4:a3:4a:af:da:f5:cb:79:35:12:7b: d4:38:c6:ae:f7:3f:1d:43:09:f5:09:0d:4f:c8:e5: f2:0b:8a:81:02:68:cd:d8:c4:9c:04:be:42:40:9b: 74:17:3f:e7:40:31:dc:5d:83:81:56:b2:32:dd:2f: 73:91:0a:7d:38:8e:07:6c:28:d8:29:80:9c:c1:1f: 31:a8:7d:aa:28:0f:9b:58:b5:da:97:6e:d2:c0:9e: 51:28:d4:de:3f:a8:68:93:31:76:7e:9b:53:03:17: 15:7a:2d:40:e4:73:93:70:0f:9d:19:76:c6:17:75: 59:0e:0c:56:60:5a:74:20:ea:92:9c:71:47:19:9c: 7b:6f:6d:f7:30:e6:a1:e2:13:52:5a:39:1b:4d:cc: d7:bc:f3:c8:5b:57:32:00:c4:d8:1c:c9:58:57:e8: 0e:16:68:3f:18:6d:12:e5:99:92:89:9d:23:10:ce: 0d:84:18:9f:16:e2:59:72:8f:84:5e:13:d3:7c:f4: cc:c1:12:ca:3c:3c:ff:0a:e3:cf:16:c9:ed:0f:27: 70:79:fb:33:f8:5b:36:a5:75:35:79:77:7d:d1:b8: 58:be:65:40:7b:c4:8a:a1:ef:6a:ce:73:46:ad:40: da:b6:f7:67:01:60:ac:0e:6e:53:e9:33:ce:07:b5: 96:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A4:D4:46:C5:E0:5F:A1:C0:94:6A:36:E9:21:21:33:19:24:30:38 X509v3 Authority Key Identifier: keyid:C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:55:e8:15:c9:cf:99:71:77:d1:93:f9:79:89:26:ee:b3:98: 20:45:c3:b4:01:12:b6:9a:e4:be:fb:a4:5c:b0:f9:4a:8c:a3: b6:c6:9b:24:13:26:4c:0a:44:3d:10:bc:6f:05:ed:b2:6b:36: 05:01:22:f5:27:d5:54:f7:72:5e:4d:20:a0:7a:01:3b:89:6c: c9:45:f8:24:aa:0a:ff:6e:88:b6:8e:34:de:aa:5f:5b:be:0c: 7c:c4:22:d5:aa:85:c6:93:e2:93:30:7a:97:0d:8e:39:51:0f: db:9c:b8:8e:bb:5a:73:7f:49:5d:97:db:6b:7c:9f:24:71:ce: 35:ba:aa:8e:3a:49:bb:37:82:27:e0:03:39:69:fd:49:d0:2f: d7:c5:ae:ec:89:ef:fb:8a:26:65:81:30:43:c8:46:7b:06:ec: 8c:7d:d5:f8:0a:32:3f:c8:cb:c6:46:d4:c0:47:20:4e:38:a6: 7f:69:ee:ed:ff:26:e1:a8:46:ac:03:f7:59:f8:ed:05:ba:e8: 98:83:fb:fe:7c:9c:e1:0b:d7:12:22:f2:da:11:6f:05:65:c0: e7:17:35:4c:de:dc:09:6a:1c:54:f2:4a:b4:de:b1:b3:b7:0e: 95:21:2f:e9:7b:80:ca:3c:ac:c5:ba:f1:1d:32:13:4e:de:84: ed:52:93:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHYq8MjZFgDj15tANqe0oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NTNmYjc5ODhhNDJmMzk4MzhiMWM3ZjlmMDQwMDY5MmU5 Mjk1ZDcwHhcNMjUxMjE3MDcwMTU0WhcNMjUxMjE4MDcwMTU0WjAzMTEwLwYDVQQD EyhmMWE0ZDQ0NmM1ZTA1ZmExYzA5NDZhMzZlOTIxMjEzMzE5MjQzMDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3B9pKNKr9r1y3k1EnvUOMau9z8d Qwn1CQ1PyOXyC4qBAmjN2MScBL5CQJt0Fz/nQDHcXYOBVrIy3S9zkQp9OI4HbCjY KYCcwR8xqH2qKA+bWLXal27SwJ5RKNTeP6hokzF2fptTAxcVei1A5HOTcA+dGXbG F3VZDgxWYFp0IOqSnHFHGZx7b233MOah4hNSWjkbTczXvPPIW1cyAMTYHMlYV+gO Fmg/GG0S5ZmSiZ0jEM4NhBifFuJZco+EXhPTfPTMwRLKPDz/CuPPFsntDydwefsz +Fs2pXU1eXd90bhYvmVAe8SKoe9qznNGrUDatvdnAWCsDm5T6TPOB7WWBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGk1EbF4F+hwJRqNukhITMZJDA4MB8GA1UdIwQY MBaAFMhT+3mIpC85g4scf58EAGkukpXXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUZQN2VZaWtMem1EaXh4X253UUFhUzZTbGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wYzYxYTYtZTBmYS00MDE3LTk1ODIt MWU3YmRiN2YzMGY2LzEveUZQN2VZaWtMem1EaXh4X253UUFhUzZTbGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wYzYxYTYtZTBmYS00MDE3LTk1ODItMWU3YmRiN2YzMGY2 LzEveUZQN2VZaWtMem1EaXh4X253UUFhUzZTbGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADlXoFcnP mXF30ZP5eYkm7rOYIEXDtAEStprkvvukXLD5SoyjtsabJBMmTApEPRC8bwXtsms2 BQEi9SfVVPdyXk0goHoBO4lsyUX4JKoK/26Ito403qpfW74MfMQi1aqFxpPikzB6 lw2OOVEP25y4jrtac39JXZfba3yfJHHONbqqjjpJuzeCJ+ADOWn9SdAv18Wu7Inv +4omZYEwQ8hGewbsjH3V+AoyP8jLxkbUwEcgTjimf2nu7f8m4ahGrAP3WfjtBbro mIP7/nyc4QvXEiLy2hFvBWXA5xc1TN7cCWocVPJKtN6xs7cOlSEv6XuAyjysxbrx HTITTt6E7VKTcQ== -----END CERTIFICATE-----Generated at Wed Dec 17 13:43:35 2025 by rpki-client