This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft File: yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft (raw, json) Hash identifier: Rzi/ficFOgXsd7sGyVLmLjRXsKIWzzxtdDtU7/gvBQ0= Subject key identifier: 76:12:D6:11:69:ED:2D:D3:41:BE:88:B4:AF:D3:D9:F5:59:AA:14:A9 Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18 Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118 Certificate serial: 019AF465B84A20BA7C246CCC3E6C9541A3E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft Manifest number: 0FD0 Signing time: Sat 06 Dec 2025 16:01:38 +0000 Manifest this update: Sat 06 Dec 2025 16:01:38 +0000 Manifest next update: Sun 07 Dec 2025 16:01:38 +0000 Files and hashes: 1: 4vlmdPXJEIj9BD5XrGcncgmk5j4.roa (hash: riPKiYt/L7BDSbhqPzWMVJUAIze+SOZFasERkJ2mKqY=) 2: 6JnpDB-avLJy-XNKDDSSHNV24As.roa (hash: Y/YVn+7OJ+S4qmnI1JW4HV1PsJFLQFMKAejvFBc5SZo=) 3: yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl (hash: BZZWkIN+M75PmEF/mpd2hvLb4yMgB4XSQTgvsuv8LA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:b8:4a:20:ba:7c:24:6c:cc:3e:6c:95:41:a3:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118 Validity Not Before: Dec 6 16:01:38 2025 GMT Not After : Dec 7 16:01:38 2025 GMT Subject: CN=7612d61169ed2dd341be88b4afd3d9f559aa14a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:14:36:32:8a:52:fc:5f:32:d2:70:b9:90:7a: 89:7e:73:2a:3e:48:ba:8e:2d:3a:bd:81:ec:c4:97: 9a:10:b8:56:40:bc:3d:4a:02:49:34:81:ca:ff:ec: 24:c7:1d:f7:7c:f6:97:27:18:89:e3:97:9a:ca:45: 90:6e:c2:1c:6f:98:0b:e4:b6:0c:db:6a:50:21:76: ab:d1:e0:f3:bf:3e:d8:17:fe:91:5f:d0:f7:b3:02: 0e:a9:4c:ba:b2:65:45:d8:7d:df:d2:6a:3a:ea:76: b9:3b:ae:b0:68:ef:f1:62:71:0a:e0:82:6c:f4:75: 04:07:b4:04:5d:7a:dc:a5:57:17:f4:c4:52:2b:ca: f2:8c:18:7c:f9:c8:03:54:b8:60:a7:49:e6:ff:2e: 7d:de:68:87:dc:36:d5:ee:45:8a:30:8a:78:7a:91: a2:c8:cd:1c:67:c2:2d:9e:b5:13:53:e7:39:97:e2: 1d:d9:27:1b:df:e6:46:61:41:2b:fb:7b:9b:0c:2b: e3:13:93:d2:52:54:9f:6c:8e:64:cc:0e:b2:72:c1: 8b:1c:50:37:1b:34:b5:9b:83:c6:21:89:ac:2c:61: 98:9a:49:3a:79:47:e7:82:57:3d:51:09:a6:1b:c9: fa:dd:00:20:24:3b:a0:7c:63:92:1e:b6:e5:45:20: 5d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:12:D6:11:69:ED:2D:D3:41:BE:88:B4:AF:D3:D9:F5:59:AA:14:A9 X509v3 Authority Key Identifier: keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:6f:07:b5:ef:3a:9b:03:48:ad:61:72:cb:c2:69:97:21:db: f6:63:59:68:e2:31:20:78:7b:b8:70:ee:c4:d8:0f:1b:79:64: 7a:86:54:89:eb:c2:6c:0a:f1:1f:3f:10:8e:0e:af:ce:fd:83: a6:2a:17:27:a5:54:ac:df:19:97:fd:6f:26:7d:65:c8:ab:50: b7:a1:c7:10:43:11:44:74:40:72:1a:d3:da:9b:91:52:ad:a9: 8f:04:0b:7c:28:dc:a2:cc:a4:7e:f1:db:9f:18:15:b3:fb:94: 19:ce:97:99:b8:1a:82:ed:73:f5:9e:dd:6c:45:c5:6a:70:65: ef:97:42:d3:08:24:f3:fa:cb:60:2a:ec:b9:01:a1:34:7f:c9: b7:9b:c6:4e:fb:14:06:27:c9:ab:dc:86:46:59:ab:15:7c:61: 09:29:fd:36:b9:27:30:89:74:c5:50:f1:c2:aa:4b:ae:65:50: ad:20:50:dc:0e:c3:b8:aa:0c:fa:9b:f5:ff:21:26:c1:bb:44: 51:6a:c9:20:cc:2c:39:cd:6a:8f:07:7f:a1:1a:83:42:57:25: 43:c5:be:41:36:ea:c3:72:f2:6b:0e:15:08:2c:f8:d2:be:eb: fc:5c:2b:f9:98:66:b1:83:4c:10:21:19:f9:a7:78:6d:26:95: 48:86:24:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZbhKILp8JGzMPmyVQaPnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZDMzNTA0MTcxOGIxODgzMGIxZjU4YzE1ZDM1MTg1MTBm ZTYxMTgwHhcNMjUxMjA2MTYwMTM4WhcNMjUxMjA3MTYwMTM4WjAzMTEwLwYDVQQD Eyg3NjEyZDYxMTY5ZWQyZGQzNDFiZTg4YjRhZmQzZDlmNTU5YWExNGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xQ2MopS/F8y0nC5kHqJfnMqPki6 ji06vYHsxJeaELhWQLw9SgJJNIHK/+wkxx33fPaXJxiJ45eaykWQbsIcb5gL5LYM 22pQIXar0eDzvz7YF/6RX9D3swIOqUy6smVF2H3f0mo66na5O66waO/xYnEK4IJs 9HUEB7QEXXrcpVcX9MRSK8ryjBh8+cgDVLhgp0nm/y593miH3DbV7kWKMIp4epGi yM0cZ8ItnrUTU+c5l+Id2Scb3+ZGYUEr+3ubDCvjE5PSUlSfbI5kzA6ycsGLHFA3 GzS1m4PGIYmsLGGYmkk6eUfnglc9UQmmG8n63QAgJDugfGOSHrblRSBd/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYS1hFp7S3TQb6ItK/T2fVZqhSpMB8GA1UdIwQY MBaAFMjTNQQXGLGIMLH1jBXTUYUQ/mEYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU5NMUJCY1lzWWd3c2ZXTUZkTlJoUkQtWVJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84YTM0NGUtMGVkOC00MmIyLWE3NDQt YTllODQ2ODcxMGEzLzEveU5NMUJCY1lzWWd3c2ZXTUZkTlJoUkQtWVJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84YTM0NGUtMGVkOC00MmIyLWE3NDQtYTllODQ2ODcxMGEz LzEveU5NMUJCY1lzWWd3c2ZXTUZkTlJoUkQtWVJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf28Hte86 mwNIrWFyy8JplyHb9mNZaOIxIHh7uHDuxNgPG3lkeoZUievCbArxHz8Qjg6vzv2D pioXJ6VUrN8Zl/1vJn1lyKtQt6HHEEMRRHRAchrT2puRUq2pjwQLfCjcosykfvHb nxgVs/uUGc6Xmbgagu1z9Z7dbEXFanBl75dC0wgk8/rLYCrsuQGhNH/Jt5vGTvsU BifJq9yGRlmrFXxhCSn9NrknMIl0xVDxwqpLrmVQrSBQ3A7DuKoM+pv1/yEmwbtE UWrJIMwsOc1qjwd/oRqDQlclQ8W+QTbqw3Lyaw4VCCz40r7r/Fwr+ZhmsYNMECEZ +ad4bSaVSIYkbA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:24:23 2025 by rpki-client