This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft File: yBhKRQWwV2BY_TMwWb_xU65urVs.mft (raw, json) Hash identifier: ahN3We6hf+ngaVvgGDpbFkLhYcqlUSsfRnZ0lesETJk= Subject key identifier: E4:4C:60:1D:F5:30:98:1B:71:6A:70:CF:2B:C2:C7:42:7A:6D:58:8F Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B Certificate issuer: /CN=c8184a4505b0576058fd333059bff153ae6ead5b Certificate serial: 019AF1D239773089094A7A9C2DB58B520A77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft Manifest number: 0E96 Signing time: Sat 06 Dec 2025 04:01:17 +0000 Manifest this update: Sat 06 Dec 2025 04:01:17 +0000 Manifest next update: Sun 07 Dec 2025 04:01:17 +0000 Files and hashes: 1: nc-Ut0N4YEzlSxLCriwNW3L5bJY.roa (hash: CpEDv7qT3u78wfAAABUYzMXZLOCk+u5BsQilcshLjO0=) 2: yBhKRQWwV2BY_TMwWb_xU65urVs.crl (hash: KWVK87CuOycG9ZGcPnlxfp6ItG68IgZdPazEP/yBR3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:39:77:30:89:09:4a:7a:9c:2d:b5:8b:52:0a:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b Validity Not Before: Dec 6 04:01:17 2025 GMT Not After : Dec 7 04:01:17 2025 GMT Subject: CN=e44c601df530981b716a70cf2bc2c7427a6d588f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7b:d9:18:c1:b1:71:55:bf:74:b4:f7:e2:98: d9:c6:4b:85:d7:cb:a3:67:9c:54:82:65:21:0e:79: c0:4d:be:10:81:55:9a:9d:1b:88:4d:98:0f:fa:bb: 44:f5:5f:ea:4f:95:9f:a3:9a:84:ff:2d:9d:da:7b: 3b:83:3d:9b:3b:76:36:68:91:6c:17:d2:c4:9b:c2: f4:05:68:62:61:33:46:cd:05:c5:47:22:1f:6d:73: 98:2e:c1:56:d6:23:a8:b6:2c:8b:b5:29:f9:9f:b2: aa:e7:fd:74:05:a2:f6:05:a0:8c:27:7a:14:04:6d: ec:65:b1:92:25:b0:e4:f7:44:7f:78:ea:1f:46:e3: 37:81:5d:67:23:e8:60:14:3f:39:c6:0d:91:38:13: 7b:e4:43:da:6c:c5:73:2a:4f:fb:de:d1:1e:94:01: 81:7c:2d:1d:38:9f:4a:28:eb:9f:3c:30:c9:7b:5d: f0:7f:e5:b6:27:ad:6f:55:3b:80:51:3c:52:f6:32: 74:c2:de:b4:2f:ef:0d:15:33:bb:31:c8:02:5f:5a: 9b:d0:0a:4a:42:a2:5c:e1:84:c0:e2:c0:76:45:c1: ba:ac:d0:80:c8:cc:ba:52:0a:2d:35:9d:2e:9c:54: 5f:38:58:dd:5c:9b:51:4b:55:de:02:1c:61:08:2f: 7a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:4C:60:1D:F5:30:98:1B:71:6A:70:CF:2B:C2:C7:42:7A:6D:58:8F X509v3 Authority Key Identifier: keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:8f:d6:bf:9f:ac:3a:b3:d1:41:a8:f1:7f:7a:bb:de:7a:d2: 1e:23:97:dc:a1:c9:b3:6c:37:2c:55:69:1f:9c:41:54:79:7c: 64:ea:45:0c:db:aa:c4:40:cf:93:64:38:af:94:93:8e:45:b3: 9c:87:d3:f4:1e:33:a1:e7:17:ff:ae:51:24:87:1b:65:dc:89: fb:24:ed:4e:6d:23:81:f8:11:95:c7:03:7f:10:fc:04:75:6f: fa:e5:fe:89:ee:3c:a7:73:74:b4:00:11:5d:d1:ce:a7:11:6f: 24:21:1a:03:db:88:b0:43:22:6f:ab:09:c2:5d:4a:4f:36:12: 1e:82:a6:8c:85:86:5c:7d:32:15:29:72:e2:67:1a:42:8d:92: 2d:7f:91:f6:1b:e7:5d:ca:4f:5e:71:33:a3:93:d7:f8:30:62: db:8b:e1:3d:3f:86:e6:ba:27:59:3b:42:98:cc:3f:fa:3f:f4: 6c:b1:3c:eb:f5:bc:aa:de:31:6b:20:4d:07:55:4c:04:3b:f3: 46:5c:68:7f:f0:25:04:04:da:ca:7b:55:d4:be:85:e8:65:25: 78:60:e0:96:d4:63:0e:11:d0:17:d5:81:de:5b:78:9d:07:62: af:2f:fc:ba:95:36:bc:8c:46:e7:f7:dc:2b:30:cb:ad:8b:fc: fd:99:68:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jl3MIkJSnqcLbWLUgp3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MTg0YTQ1MDViMDU3NjA1OGZkMzMzMDU5YmZmMTUzYWU2 ZWFkNWIwHhcNMjUxMjA2MDQwMTE3WhcNMjUxMjA3MDQwMTE3WjAzMTEwLwYDVQQD EyhlNDRjNjAxZGY1MzA5ODFiNzE2YTcwY2YyYmMyYzc0MjdhNmQ1ODhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3vZGMGxcVW/dLT34pjZxkuF18uj Z5xUgmUhDnnATb4QgVWanRuITZgP+rtE9V/qT5Wfo5qE/y2d2ns7gz2bO3Y2aJFs F9LEm8L0BWhiYTNGzQXFRyIfbXOYLsFW1iOotiyLtSn5n7Kq5/10BaL2BaCMJ3oU BG3sZbGSJbDk90R/eOofRuM3gV1nI+hgFD85xg2ROBN75EPabMVzKk/73tEelAGB fC0dOJ9KKOufPDDJe13wf+W2J61vVTuAUTxS9jJ0wt60L+8NFTO7McgCX1qb0ApK QqJc4YTA4sB2RcG6rNCAyMy6UgotNZ0unFRfOFjdXJtRS1XeAhxhCC96EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORMYB31MJgbcWpwzyvCx0J6bViPMB8GA1UdIwQY MBaAFMgYSkUFsFdgWP0zMFm/8VOubq1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lYWRhZDMtY2VkOS00MWZhLThlNWYt NWZiZjMzYWNkODNlLzEveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9lYWRhZDMtY2VkOS00MWZhLThlNWYtNWZiZjMzYWNkODNl LzEveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARo/Wv5+s OrPRQajxf3q73nrSHiOX3KHJs2w3LFVpH5xBVHl8ZOpFDNuqxEDPk2Q4r5STjkWz nIfT9B4zoecX/65RJIcbZdyJ+yTtTm0jgfgRlccDfxD8BHVv+uX+ie48p3N0tAAR XdHOpxFvJCEaA9uIsEMib6sJwl1KTzYSHoKmjIWGXH0yFSly4mcaQo2SLX+R9hvn XcpPXnEzo5PX+DBi24vhPT+G5ronWTtCmMw/+j/0bLE86/W8qt4xayBNB1VMBDvz Rlxof/AlBATayntV1L6F6GUleGDgltRjDhHQF9WB3lt4nQdiry/8upU2vIxG5/fc KzDLrYv8/ZloaA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:24 2025 by rpki-client