This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft File: yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft (raw, json) Hash identifier: p/GdZYsPgiFajbFnvchdCak9UzRM+dup2OKNosKKNKo= Subject key identifier: B5:88:71:2E:9F:04:93:35:7B:E5:B2:E2:07:89:BC:5A:4F:BE:17:6C Authority key identifier: C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68 Certificate issuer: /CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68 Certificate serial: 019AF50ABE589DFB2E961AFDB4850AF72A12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft Manifest number: 0BBC Signing time: Sat 06 Dec 2025 19:01:53 +0000 Manifest this update: Sat 06 Dec 2025 19:01:53 +0000 Manifest next update: Sun 07 Dec 2025 19:01:53 +0000 Files and hashes: 1: CRyQSBdD5-g9qi5MkhOWhTSWGYw.roa (hash: OdCH0xAebcoZtMG/wZGi9eDKxyAg95m1InonEHGGddU=) 2: ZevzjSVvulMbqdJtY8B4bnQMQ18.roa (hash: W1po1ozIsux5yOEXy/FIuleWTHBIh+Vuq+plxlxVu8s=) 3: _xVJ1hQmic9FLrcgVmh-KAZfgtA.roa (hash: psme/h2vzp67q25AbH+m68R73Xe8GmTvYaqc5PS4Y/k=) 4: yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl (hash: Kb8W9dNIFrMgfBvF/vWj1fIRzDnfpCRP+eXjHfCV0xU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:be:58:9d:fb:2e:96:1a:fd:b4:85:0a:f7:2a:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68 Validity Not Before: Dec 6 19:01:53 2025 GMT Not After : Dec 7 19:01:53 2025 GMT Subject: CN=b588712e9f0493357be5b2e20789bc5a4fbe176c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:93:ec:ff:ab:30:58:d0:a6:d0:dc:9b:67:3d: 7e:e0:a9:25:d3:f6:da:1d:5e:19:78:1d:b9:99:2a: 84:2a:ee:92:25:60:eb:bc:2f:bc:64:a3:e2:5c:af: b0:17:ff:fd:73:33:05:c6:56:56:43:cc:c1:54:05: 0f:a0:26:f8:b6:fe:7b:02:bd:7b:eb:e3:90:87:9b: 6e:50:10:fb:b1:9e:6e:83:a1:19:37:96:e6:79:a6: 8a:16:30:44:22:a8:de:7c:57:20:e8:d3:91:00:5e: cd:b1:a9:74:42:ee:39:03:0e:77:98:f0:8f:46:cb: 3e:b2:99:16:af:f5:49:25:8e:78:ea:f2:4f:a1:55: 5b:97:db:c4:fa:00:0c:69:42:61:0c:63:ca:bd:0e: a4:3e:ad:07:5c:39:73:31:e1:05:ce:8e:9c:9e:7d: bf:85:e3:6f:18:2d:91:13:94:72:7f:14:af:c1:c1: 40:8b:81:41:7b:cf:b9:bd:25:2b:b7:13:09:d9:c7: 54:b1:55:87:5a:ee:2b:e6:40:95:16:49:ce:b4:d3: 23:4c:96:73:56:76:84:b6:93:7e:4d:fe:95:77:15: 4e:1e:f4:6a:93:6e:70:a8:3f:24:9f:7d:4c:c9:13: cd:61:a0:75:83:52:3c:96:d0:0e:33:ef:a3:9b:e3: ee:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:88:71:2E:9F:04:93:35:7B:E5:B2:E2:07:89:BC:5A:4F:BE:17:6C X509v3 Authority Key Identifier: keyid:C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:eb:01:66:dd:c4:b8:82:be:c9:cf:30:e3:6b:71:ab:9a:9e: f3:62:7e:e3:a3:f3:c2:19:3c:f1:6f:59:3b:f6:57:20:81:61: 56:14:86:5c:e6:62:ed:65:1d:4e:34:b9:66:c6:78:90:a6:83: 2c:63:63:9c:20:84:7d:53:73:b8:cf:77:00:09:87:e8:90:31: a8:4b:fb:b1:7b:f5:44:98:ea:ae:ea:d9:e1:10:c4:25:30:08: 34:9e:7b:e7:f4:74:65:59:4c:44:e6:16:d8:bd:9c:bb:9e:a4: d7:45:54:b3:ff:ba:4e:8c:94:48:6a:79:60:ae:bc:82:cf:8a: 55:4e:20:24:d6:c7:01:77:80:61:84:f8:88:a2:7f:84:0a:4e: 0e:39:a1:59:f3:08:a1:e2:b6:89:66:c8:7b:4a:27:31:e6:18: 82:29:f8:ab:e1:db:7f:c8:66:98:44:05:61:c7:0e:75:ac:e7: 4f:67:97:34:90:97:9a:22:ae:07:49:ef:89:c8:4d:bb:ef:ae: 12:40:1b:25:31:40:98:c3:1a:96:8b:35:b5:2c:d5:c2:10:5f: 1a:34:c0:1f:a1:aa:28:59:4c:b7:f9:8e:bf:d4:25:d7:f3:6b: 23:bb:d1:7d:dc:9d:92:6f:f0:1e:48:92:2d:4e:e6:61:9a:c8: 74:00:49:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cr5Ynfsulhr9tIUK9yoSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5NDZjNGJlZmUwZmJiZTM2MjRiZDc0ODI5NmI1ZmUyZTdl YzJkNjgwHhcNMjUxMjA2MTkwMTUzWhcNMjUxMjA3MTkwMTUzWjAzMTEwLwYDVQQD EyhiNTg4NzEyZTlmMDQ5MzM1N2JlNWIyZTIwNzg5YmM1YTRmYmUxNzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05Ps/6swWNCm0NybZz1+4Kkl0/ba HV4ZeB25mSqEKu6SJWDrvC+8ZKPiXK+wF//9czMFxlZWQ8zBVAUPoCb4tv57Ar17 6+OQh5tuUBD7sZ5ug6EZN5bmeaaKFjBEIqjefFcg6NORAF7Nsal0Qu45Aw53mPCP Rss+spkWr/VJJY546vJPoVVbl9vE+gAMaUJhDGPKvQ6kPq0HXDlzMeEFzo6cnn2/ heNvGC2RE5RyfxSvwcFAi4FBe8+5vSUrtxMJ2cdUsVWHWu4r5kCVFknOtNMjTJZz VnaEtpN+Tf6VdxVOHvRqk25wqD8kn31MyRPNYaB1g1I8ltAOM++jm+PuJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWIcS6fBJM1e+Wy4geJvFpPvhdsMB8GA1UdIwQY MBaAFMlGxL7+D7vjYkvXSClrX+Ln7C1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVViRXZ2NFB1LU5pUzlkSUtXdGY0dWZzTFdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9mMmQ5ZTktZWVmZi00NjMzLWExODkt NmJiYjI3MDgxZGUyLzEveVViRXZ2NFB1LU5pUzlkSUtXdGY0dWZzTFdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9mMmQ5ZTktZWVmZi00NjMzLWExODktNmJiYjI3MDgxZGUy LzEveVViRXZ2NFB1LU5pUzlkSUtXdGY0dWZzTFdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAusBZt3E uIK+yc8w42txq5qe82J+46Pzwhk88W9ZO/ZXIIFhVhSGXOZi7WUdTjS5ZsZ4kKaD LGNjnCCEfVNzuM93AAmH6JAxqEv7sXv1RJjqrurZ4RDEJTAINJ575/R0ZVlMROYW 2L2cu56k10VUs/+6ToyUSGp5YK68gs+KVU4gJNbHAXeAYYT4iKJ/hApODjmhWfMI oeK2iWbIe0onMeYYgin4q+Hbf8hmmEQFYccOdaznT2eXNJCXmiKuB0nvichNu++u EkAbJTFAmMMalos1tSzVwhBfGjTAH6GqKFlMt/mOv9Ql1/NrI7vRfdydkm/wHkiS LU7mYZrIdABJWQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:50:16 2025 by rpki-client