This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft File: yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft (raw, json) Hash identifier: R2njIfE7M36BtfRLUkW+8pLvDHcM0Sv0IBjtNbjid60= Subject key identifier: 8A:B7:6D:A3:D8:01:C2:49:B1:91:5B:7E:5E:FC:3F:7E:74:CE:30:41 Authority key identifier: C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5 Certificate issuer: /CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5 Certificate serial: 019AF31BC5870970D4D9471ED9CE6D7F2019 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft Manifest number: 0B85 Signing time: Sat 06 Dec 2025 10:01:14 +0000 Manifest this update: Sat 06 Dec 2025 10:01:14 +0000 Manifest next update: Sun 07 Dec 2025 10:01:14 +0000 Files and hashes: 1: YIzXk3w2A_mHXnQwfHIRuGRDzO0.roa (hash: w+KFjfkzM8iWvfdH1LsSPeTDcAp7/XS8C3VsFxe8b1Q=) 2: yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl (hash: C7gZLsQvQ+5u8+FoViUlCKYFsxUS7MwFYU94mwVi1yM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:c5:87:09:70:d4:d9:47:1e:d9:ce:6d:7f:20:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5 Validity Not Before: Dec 6 10:01:14 2025 GMT Not After : Dec 7 10:01:14 2025 GMT Subject: CN=8ab76da3d801c249b1915b7e5efc3f7e74ce3041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:06:3e:a6:ce:fc:93:e7:ed:71:0a:14:9e:e4: dc:4e:68:9c:60:58:ff:c5:d7:a9:75:c7:9f:27:58: 23:e5:da:aa:5b:85:99:27:d5:0e:50:d7:19:e2:b4: 5f:8d:99:d8:fc:fa:9d:7d:e6:9e:bb:12:cb:cb:00: fe:52:28:9a:cb:0d:cd:64:38:85:08:ec:f1:ae:f2: 28:d2:4f:42:96:19:75:52:51:37:8c:9b:5f:4d:55: b7:06:54:4f:64:fd:bb:c7:52:e9:0e:58:e4:04:eb: a8:1a:95:d8:36:0f:01:96:b1:92:ec:63:6c:0e:5e: 52:0f:3b:71:5f:62:3a:b2:53:3d:a9:8c:a3:9b:0c: c6:15:70:82:49:21:5f:7d:e3:a3:a3:e3:dd:9e:c3: b7:8b:70:37:c1:d2:c0:ae:af:d6:a7:ba:6e:ef:51: 31:2d:a9:9a:f6:23:d4:48:f5:60:9b:bf:d8:74:d7: dc:93:90:cd:24:72:1b:dd:b9:c1:7a:4b:e2:95:9f: 92:67:2d:db:07:2c:75:3f:ea:c2:69:bd:65:84:2b: e2:9c:5f:d0:d0:33:c7:5a:24:57:77:94:7f:73:cc: b1:51:dc:cd:d3:01:dd:e5:cd:e1:cf:2a:a2:27:56: 35:05:19:c6:58:f2:da:76:d0:e3:1f:cf:70:0a:f5: 0e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B7:6D:A3:D8:01:C2:49:B1:91:5B:7E:5E:FC:3F:7E:74:CE:30:41 X509v3 Authority Key Identifier: keyid:C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:ca:0a:9a:c5:0a:cc:cc:2a:95:4a:b4:74:ce:41:f3:7c:92: 97:7b:78:8e:df:34:03:10:a8:ec:b0:d0:8a:94:9f:a7:0b:c2: fb:bd:72:5d:73:bb:86:e2:b2:12:06:ee:54:99:c1:4b:0c:3c: c1:51:60:56:df:ca:e3:9a:1f:c3:55:de:38:a3:bd:9c:27:a4: 4c:c0:12:e5:02:fa:77:1b:5c:7a:79:1d:69:b3:ac:cb:3a:97: 71:14:69:fe:44:0e:a2:00:95:0e:f4:ff:68:c2:1d:0b:ef:b6: f0:8e:ad:9a:5e:92:82:57:f3:2b:c5:a9:09:70:06:ce:b7:c4: 07:0f:1f:fe:7a:06:89:96:9f:9a:de:ff:88:62:0e:80:09:38: df:ef:ab:2e:a0:4a:a0:c1:dc:04:8f:60:41:3e:bf:ac:25:c2: 68:02:8c:b7:3b:5e:43:43:bf:ca:04:6f:ce:d3:6c:8d:71:97: 9f:10:b9:4b:05:dd:73:ba:04:05:41:cf:06:68:f9:9f:b8:24: c6:2c:78:91:ef:36:3d:26:92:c8:63:b9:2e:53:50:d7:01:79: 98:03:62:ac:38:20:52:a4:3a:30:f4:10:00:d2:e3:c3:4f:6c: 93:31:f5:73:18:e5:5b:fd:7d:6c:ce:b3:94:8d:4e:db:62:c5: 45:0e:97:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG8WHCXDU2Uce2c5tfyAZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZjliYWFiMWExM2RmMzBlZmYwZmNkNzgwYzRiYmM1NGJj M2U2ZDUwHhcNMjUxMjA2MTAwMTE0WhcNMjUxMjA3MTAwMTE0WjAzMTEwLwYDVQQD Eyg4YWI3NmRhM2Q4MDFjMjQ5YjE5MTViN2U1ZWZjM2Y3ZTc0Y2UzMDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AY+ps78k+ftcQoUnuTcTmicYFj/ xdepdcefJ1gj5dqqW4WZJ9UOUNcZ4rRfjZnY/PqdfeaeuxLLywD+Uiiayw3NZDiF COzxrvIo0k9Clhl1UlE3jJtfTVW3BlRPZP27x1LpDljkBOuoGpXYNg8BlrGS7GNs Dl5SDztxX2I6slM9qYyjmwzGFXCCSSFffeOjo+PdnsO3i3A3wdLArq/Wp7pu71Ex Lama9iPUSPVgm7/YdNfck5DNJHIb3bnBekvilZ+SZy3bByx1P+rCab1lhCvinF/Q 0DPHWiRXd5R/c8yxUdzN0wHd5c3hzyqiJ1Y1BRnGWPLadtDjH89wCvUOGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIq3baPYAcJJsZFbfl78P350zjBBMB8GA1UdIwQY MBaAFMj5uqsaE98w7/D814DEu8VLw+bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVBtNnF4b1QzekR2OFB6WGdNUzd4VXZENXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZTY3NjItMDk4OS00OGVmLWE4ZDIt ZGI0ODRjY2U3MjkzLzEveVBtNnF4b1QzekR2OFB6WGdNUzd4VXZENXRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8zZTY3NjItMDk4OS00OGVmLWE4ZDItZGI0ODRjY2U3Mjkz LzEveVBtNnF4b1QzekR2OFB6WGdNUzd4VXZENXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtsoKmsUK zMwqlUq0dM5B83ySl3t4jt80AxCo7LDQipSfpwvC+71yXXO7huKyEgbuVJnBSww8 wVFgVt/K45ofw1XeOKO9nCekTMAS5QL6dxtcenkdabOsyzqXcRRp/kQOogCVDvT/ aMIdC++28I6tml6SglfzK8WpCXAGzrfEBw8f/noGiZafmt7/iGIOgAk43++rLqBK oMHcBI9gQT6/rCXCaAKMtzteQ0O/ygRvztNsjXGXnxC5SwXdc7oEBUHPBmj5n7gk xix4ke82PSaSyGO5LlNQ1wF5mANirDggUqQ6MPQQANLjw09skzH1cxjlW/19bM6z lI1O22LFRQ6XyA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:21:21 2025 by rpki-client