This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft File: yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft (raw, json) Hash identifier: zNAi2kmMuJEPQD+32wQ1n3lQxYMwStFBuMEUCExrLH8= Subject key identifier: DC:BC:67:4D:49:75:AB:C7:0D:4A:F6:00:5E:31:3F:1B:63:C0:E0:9E Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22 Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622 Certificate serial: 019AF3F7E73B6046BF77E9C0DC9CBF5E1270 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft Manifest number: 14B0 Signing time: Sat 06 Dec 2025 14:01:41 +0000 Manifest this update: Sat 06 Dec 2025 14:01:41 +0000 Manifest next update: Sun 07 Dec 2025 14:01:41 +0000 Files and hashes: 1: 1-0Y1K8-7iyhXdhoTYDD_MThh3vE.roa (hash: UqK1yASRyJvFv5c4mwnLEN1kbb6bTTjQR+7JRYc/30A=) 2: 8ugftUXGOYARk8hNtz_dZIPLHoY.roa (hash: fXuh9GYhE6qY7sn2WSDIqQCBrlOo2zt5TZUsfH3qCOk=) 3: CDJht7IkCxl1Fd3V0Jw0C5lDhbA.roa (hash: hC6TckJd7vZ/EVDDKvs8SlMNOJG6j0LoJJkkefT5TcY=) 4: MjdKbFiEyBYefwEqDa5k32efH84.roa (hash: yMrvEUe4dfvDGnvXjb6T/gK+z8B3+E50n+nxlmXb8j8=) 5: bAetBQfQtIL8HDlRLQtzqRXsmJw.roa (hash: KlLcSQqNQG0Ri5k3fpJMz79RuQ+R0fvjpj0v09+VZkU=) 6: yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl (hash: yVxPf6tfrqQWOy8Z6HbALhR/NeoN+zjxQNgo3ZumhSQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:e7:3b:60:46:bf:77:e9:c0:dc:9c:bf:5e:12:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622 Validity Not Before: Dec 6 14:01:41 2025 GMT Not After : Dec 7 14:01:41 2025 GMT Subject: CN=dcbc674d4975abc70d4af6005e313f1b63c0e09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:83:74:a9:43:41:b9:ec:4d:03:65:da:24:f4: 3a:11:33:3c:e2:75:a0:53:18:67:69:e4:01:06:89: 24:2f:2d:19:da:0e:f3:80:19:7a:8a:17:da:1f:9d: e5:8f:f5:2c:ef:df:ff:17:81:0f:b7:34:53:62:b6: 98:04:85:0c:4c:0e:3a:e8:2c:ec:99:b1:d4:c9:bd: aa:b9:46:d5:80:d9:43:a5:77:e4:1e:c9:29:ed:ea: 0c:d4:e9:4a:ae:6b:ff:e3:1d:46:69:c7:31:04:dd: c5:2b:27:2d:5e:a1:2e:7a:71:a9:16:a2:88:d8:71: f9:3a:ad:21:32:47:52:03:08:78:b7:17:b9:cc:91: 38:d1:38:fa:eb:ce:ec:eb:69:81:86:6d:0b:a2:a5: c0:4c:83:ae:98:cc:a3:ee:18:22:b7:da:36:f5:6a: 8b:51:50:28:5b:de:01:90:07:f5:5a:6e:d2:2b:97: 74:3e:a6:0c:e6:61:87:d0:96:d4:ab:7e:5e:85:32: d0:60:32:23:36:80:12:69:8b:7e:63:96:8c:65:4c: c9:15:43:67:21:17:01:f6:7e:67:68:f5:ac:c5:5f: 1a:9e:f9:61:e6:0c:95:70:ff:42:91:d5:9b:5b:76: 13:79:2f:fd:93:23:8e:60:01:ea:12:e4:61:77:41: 0a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:BC:67:4D:49:75:AB:C7:0D:4A:F6:00:5E:31:3F:1B:63:C0:E0:9E X509v3 Authority Key Identifier: keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:4b:df:c9:e5:cb:67:f0:63:27:31:40:89:9f:7b:84:12:6a: 6b:1a:23:ee:01:5b:78:67:67:3b:93:f6:12:b4:00:09:72:d0: 16:ed:d3:14:0e:17:a3:28:fa:e9:a0:e4:9c:83:ed:ae:8a:81: 66:b9:bd:e0:e2:74:42:a7:bf:d0:19:7e:a8:14:14:57:2d:4e: 41:48:17:c6:6c:cf:f5:6e:f3:e2:72:c1:fc:c5:0b:da:f5:a9: c1:8a:a7:89:02:ce:c9:d1:e2:24:e4:67:3f:e9:44:bc:b2:f8: 63:af:76:7f:0d:e8:0f:99:92:e3:f1:c6:e2:6a:fa:bf:46:0b: e7:7c:e0:e8:4f:ac:50:98:19:bc:02:5a:df:fe:30:e5:d9:48: af:40:54:68:37:ff:75:de:5a:b1:31:1c:1e:ce:d0:61:9d:7c: 00:0c:f9:43:d5:43:40:c4:b4:14:d5:a2:fd:9e:84:8d:03:b2: 3a:a3:96:5c:f3:6a:d0:53:7e:d3:a2:a8:fc:a4:66:b2:c5:df: 13:86:2e:6e:5c:d0:19:fb:1f:85:3c:1d:90:78:1c:69:4a:97: 54:22:dc:bb:bf:b0:f1:34:45:f4:06:1d:6d:a6:27:83:a3:2e: b7:58:67:ea:76:6a:00:f0:e6:40:dd:70:d9:17:27:63:49:9c: 6a:fc:d6:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9+c7YEa/d+nA3Jy/XhJwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZDVlMzcxNzhkODUyNGM3MjY2MGExZDc5NjE2NTk5OWU1 ODY2MjIwHhcNMjUxMjA2MTQwMTQxWhcNMjUxMjA3MTQwMTQxWjAzMTEwLwYDVQQD EyhkY2JjNjc0ZDQ5NzVhYmM3MGQ0YWY2MDA1ZTMxM2YxYjYzYzBlMDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oN0qUNBuexNA2XaJPQ6ETM84nWg UxhnaeQBBokkLy0Z2g7zgBl6ihfaH53lj/Us79//F4EPtzRTYraYBIUMTA466Czs mbHUyb2quUbVgNlDpXfkHskp7eoM1OlKrmv/4x1GaccxBN3FKyctXqEuenGpFqKI 2HH5Oq0hMkdSAwh4txe5zJE40Tj6687s62mBhm0LoqXATIOumMyj7hgit9o29WqL UVAoW94BkAf1Wm7SK5d0PqYM5mGH0JbUq35ehTLQYDIjNoASaYt+Y5aMZUzJFUNn IRcB9n5naPWsxV8anvlh5gyVcP9CkdWbW3YTeS/9kyOOYAHqEuRhd0EKmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNy8Z01JdavHDUr2AF4xPxtjwOCeMB8GA1UdIwQY MBaAFMjV43F42FJMcmYKHXlhZZmeWGYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODIt OWUwYWVkMmZiOGVjLzEveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODItOWUwYWVkMmZiOGVj LzEveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0vfyeXL Z/BjJzFAiZ97hBJqaxoj7gFbeGdnO5P2ErQACXLQFu3TFA4Xoyj66aDknIPtroqB Zrm94OJ0Qqe/0Bl+qBQUVy1OQUgXxmzP9W7z4nLB/MUL2vWpwYqniQLOydHiJORn P+lEvLL4Y692fw3oD5mS4/HG4mr6v0YL53zg6E+sUJgZvAJa3/4w5dlIr0BUaDf/ dd5asTEcHs7QYZ18AAz5Q9VDQMS0FNWi/Z6EjQOyOqOWXPNq0FN+06Ko/KRmssXf E4YublzQGfsfhTwdkHgcaUqXVCLcu7+w8TRF9AYdbaYng6Mut1hn6nZqAPDmQN1w 2RcnY0mcavzWOA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:21:43 2025 by rpki-client