This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft File: yUcK5Bju3dazna6eehd6Gcd5nEE.mft (raw, json) Hash identifier: Ofk9Rrnqtd3hHl/67f9sOdRaVpr4SbwmmrFUccCROrw= Subject key identifier: F8:93:D4:91:B3:E3:52:1F:91:59:D8:7F:5A:7D:9B:26:68:E8:B2:BA Authority key identifier: C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41 Certificate issuer: /CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41 Certificate serial: 019AF3F795F154C8D36C447055B986B4DE55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 14:01:20 +0000 Manifest this update: Sat 06 Dec 2025 14:01:20 +0000 Manifest next update: Sun 07 Dec 2025 14:01:20 +0000 Files and hashes: 1: NjUsN_LdeGQK3Mrw9jk5yZ9XQc4.roa (hash: lewK8USqDYZNa7izSnIPvxOYg8crLlWZPbCwGgwM490=) 2: czIqi1JTFBnqU1-Xoy9WpWfsNLA.roa (hash: IEW0KjjrxdIVeOiEzEJ5xNLzQLH13MYJ7dw5cMoL57c=) 3: tr3Mau39VcKJ_XgMpDq905F47G0.roa (hash: MVZ9b8y+XoeBXJPJhRIiCaVtjlCBIl4VmA21jHMQa5o=) 4: yUcK5Bju3dazna6eehd6Gcd5nEE.crl (hash: x/t+9EuBD2o1XM+pCPUwoTl8CWSVjW/YzYgwnmGrfuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:95:f1:54:c8:d3:6c:44:70:55:b9:86:b4:de:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41 Validity Not Before: Dec 6 14:01:20 2025 GMT Not After : Dec 7 14:01:20 2025 GMT Subject: CN=f893d491b3e3521f9159d87f5a7d9b2668e8b2ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a6:72:dd:94:60:1b:ff:3c:10:67:ef:e0:b5: be:13:47:5b:62:cf:4c:90:0f:a9:df:76:3d:0f:01: e1:74:df:47:7a:e3:f8:ab:9a:9d:9d:4a:98:f5:54: f0:3c:b4:57:bb:06:d9:fd:8c:00:f8:45:2a:8e:89: 2a:00:e5:17:57:89:95:1c:e5:40:4f:f1:22:c4:7f: 82:cc:2f:9c:44:0e:0d:aa:ad:f4:cd:7f:cd:09:63: 55:ee:41:a7:a4:b3:65:65:58:88:b1:de:c1:67:5b: f7:ac:df:dc:15:2c:7a:80:34:43:c1:29:38:26:61: 72:ff:42:c5:d2:31:d6:87:51:57:3a:b7:0f:89:41: e9:f8:cc:94:f9:ff:d3:41:0b:22:8c:78:bf:61:9f: 2a:df:50:0a:0a:0a:a5:0c:01:86:56:f4:66:b1:48: 1f:b2:14:25:b8:b3:29:05:3f:6f:26:f4:60:5f:06: 19:41:da:c2:64:57:19:f9:b4:39:07:4e:ba:b2:55: 78:37:4e:fb:90:96:b4:97:a6:93:3f:1a:cc:bb:d7: 42:85:8d:ff:99:d8:75:34:9f:a9:96:f3:31:aa:96: d6:47:fb:27:14:b1:c2:a0:c3:09:7e:16:f4:c6:eb: 1d:65:0c:ab:d7:52:50:09:15:4d:f1:95:38:7d:6f: 75:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:93:D4:91:B3:E3:52:1F:91:59:D8:7F:5A:7D:9B:26:68:E8:B2:BA X509v3 Authority Key Identifier: keyid:C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:b7:54:6c:c6:e6:5b:b9:25:37:e6:23:fa:a1:03:4e:dc:3d: b1:c4:9a:97:e8:75:85:40:3f:f8:b5:cd:4f:79:7f:26:90:a6: a3:d1:83:78:ac:e4:92:24:18:27:bb:47:1a:07:e0:be:df:bf: 65:fe:bb:5d:77:81:31:36:33:24:2d:ad:35:ad:58:9a:75:9a: 32:6d:09:fe:c5:97:eb:8f:0f:f6:9b:9c:17:75:8a:b3:31:eb: 06:19:a0:61:85:71:17:9a:f0:64:58:81:d0:a7:1e:28:ea:bb: c8:3c:8a:8f:4a:21:bb:bd:f3:55:29:d4:c6:11:cd:a2:4e:8c: ba:2a:af:66:0b:e1:9b:b7:74:14:a9:dd:2f:4b:37:b4:f2:6b: 80:54:df:4c:eb:80:11:2e:41:ea:9a:dc:29:d0:d3:68:7d:85: fe:f5:a4:b8:46:fb:47:a2:bd:42:9b:8a:cd:39:3d:de:d9:61: d8:ba:f4:82:64:d7:36:09:08:11:8c:4b:02:db:8a:2b:7f:23: 43:25:a7:59:47:18:34:36:62:35:76:b7:71:a5:cc:e4:b4:fa: e3:e0:06:43:d2:db:be:85:31:87:19:4c:e2:76:70:21:91:e4: 8c:a2:c7:99:56:d7:03:52:84:be:53:87:8c:d0:8f:63:dd:22: eb:51:bf:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz95XxVMjTbERwVbmGtN5VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5NDcwYWU0MThlZWRkZDZiMzlkYWU5ZTdhMTc3YTE5Yzc3 OTljNDEwHhcNMjUxMjA2MTQwMTIwWhcNMjUxMjA3MTQwMTIwWjAzMTEwLwYDVQQD EyhmODkzZDQ5MWIzZTM1MjFmOTE1OWQ4N2Y1YTdkOWIyNjY4ZThiMmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqZy3ZRgG/88EGfv4LW+E0dbYs9M kA+p33Y9DwHhdN9HeuP4q5qdnUqY9VTwPLRXuwbZ/YwA+EUqjokqAOUXV4mVHOVA T/EixH+CzC+cRA4Nqq30zX/NCWNV7kGnpLNlZViIsd7BZ1v3rN/cFSx6gDRDwSk4 JmFy/0LF0jHWh1FXOrcPiUHp+MyU+f/TQQsijHi/YZ8q31AKCgqlDAGGVvRmsUgf shQluLMpBT9vJvRgXwYZQdrCZFcZ+bQ5B066slV4N077kJa0l6aTPxrMu9dChY3/ mdh1NJ+plvMxqpbWR/snFLHCoMMJfhb0xusdZQyr11JQCRVN8ZU4fW91YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPiT1JGz41IfkVnYf1p9myZo6LK6MB8GA1UdIwQY MBaAFMlHCuQY7t3Ws52unnoXehnHeZxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVVjSzVCanUzZGF6bmE2ZWVoZDZHY2Q1bkVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jZTAyMmQtZDhkYi00NDU5LWJlMWMt YjA5MTIxNWQ1ZTRkLzEveVVjSzVCanUzZGF6bmE2ZWVoZDZHY2Q1bkVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9jZTAyMmQtZDhkYi00NDU5LWJlMWMtYjA5MTIxNWQ1ZTRk LzEveVVjSzVCanUzZGF6bmE2ZWVoZDZHY2Q1bkVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLdUbMbm W7klN+Yj+qEDTtw9scSal+h1hUA/+LXNT3l/JpCmo9GDeKzkkiQYJ7tHGgfgvt+/ Zf67XXeBMTYzJC2tNa1YmnWaMm0J/sWX648P9pucF3WKszHrBhmgYYVxF5rwZFiB 0KceKOq7yDyKj0ohu73zVSnUxhHNok6MuiqvZgvhm7d0FKndL0s3tPJrgFTfTOuA ES5B6prcKdDTaH2F/vWkuEb7R6K9QpuKzTk93tlh2Lr0gmTXNgkIEYxLAtuKK38j QyWnWUcYNDZiNXa3caXM5LT64+AGQ9LbvoUxhxlM4nZwIZHkjKLHmVbXA1KEvlOH jNCPY90i61G/+A== -----END CERTIFICATE-----Generated at Sat Dec 6 19:19:52 2025 by rpki-client