This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft File: yri42pzNTSYbcq2gNKCHVmWmRIc.mft (raw, json) Hash identifier: qrElsTDwa4RNZsoeTfwASi60uftyuk176f6cBb76dk4= Subject key identifier: E9:06:88:CF:BA:C7:89:86:6C:8E:3E:28:52:8D:5A:4F:D3:77:57:57 Authority key identifier: CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87 Certificate issuer: /CN=cab8b8da9ccd4d261b72ada034a0875665a64487 Certificate serial: 019AF1D1F5EA26A16717FD0E6673032582FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft Manifest number: 16A6 Signing time: Sat 06 Dec 2025 04:01:00 +0000 Manifest this update: Sat 06 Dec 2025 04:01:00 +0000 Manifest next update: Sun 07 Dec 2025 04:01:00 +0000 Files and hashes: 1: iv4w_q_Q0lB1UAUD7TgMR_xxyYA.roa (hash: fMZ0QGK6B5sX/J++IQoulADhQ3kbWhx95qL8TpCZZ84=) 2: yri42pzNTSYbcq2gNKCHVmWmRIc.crl (hash: 1iCk3PJA/I1+Nhv0uJkTFQ4KuD5DX/o797DTI1JBI9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f5:ea:26:a1:67:17:fd:0e:66:73:03:25:82:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cab8b8da9ccd4d261b72ada034a0875665a64487 Validity Not Before: Dec 6 04:01:00 2025 GMT Not After : Dec 7 04:01:00 2025 GMT Subject: CN=e90688cfbac789866c8e3e28528d5a4fd3775757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d1:12:17:0f:a9:71:f6:24:85:d6:76:7a:0b: c6:fa:60:34:19:f1:90:34:bc:48:1f:02:2d:06:47: c6:7f:8c:3d:27:b2:2f:2d:6f:98:3d:dc:bb:93:2e: e3:cd:23:cc:5f:90:6d:b3:09:f8:2d:1c:f6:a8:5c: b0:d5:68:01:b5:71:98:61:84:a5:ea:3b:ac:58:59: f0:55:8f:cd:57:b8:40:bc:68:b0:c1:d7:f8:da:9a: a1:0a:34:9a:7d:46:c6:55:da:45:c4:0b:af:14:92: ee:65:8c:7e:5c:11:29:57:69:b6:a2:cb:d0:39:e4: 6b:2a:3b:22:04:2a:73:ff:9e:b7:16:07:17:c6:8c: e5:21:f2:12:bc:0b:e7:17:44:c0:e6:17:ed:8a:a8: fc:72:c3:0c:1a:83:77:87:e0:80:d9:82:75:85:a7: 56:2b:b3:85:70:06:36:01:9c:41:3e:e5:27:e4:3f: cd:c1:ad:5d:5a:aa:f9:f0:4e:bf:24:29:b1:ad:b1: d7:7d:8a:dd:58:c6:7a:f0:4f:60:8c:c1:0d:13:db: 53:e5:c4:fc:30:83:9f:fb:a9:a5:7f:a1:fd:75:c6: 35:a9:85:a7:f7:ea:e4:dd:9a:ba:63:58:3b:3c:16: a6:b8:61:27:86:5a:a4:8d:e1:97:c7:7e:90:26:8f: b4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:06:88:CF:BA:C7:89:86:6C:8E:3E:28:52:8D:5A:4F:D3:77:57:57 X509v3 Authority Key Identifier: keyid:CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:4b:12:83:4a:be:fa:ee:64:01:ad:06:3c:1e:ea:b7:a6:60: af:57:9e:8b:72:0b:a6:e3:c8:87:9a:a8:96:9b:a3:86:b6:5a: 74:73:da:b2:e1:3d:d3:8a:92:eb:0e:71:dc:83:98:b6:38:24: 96:63:11:43:21:ef:30:0c:b8:8f:6b:ee:b4:35:fe:2f:8b:43: f2:2e:b9:19:c8:c8:ea:17:ea:6b:06:a9:11:d7:6f:22:c7:d8: c7:e0:3a:ba:ed:d8:c0:b3:34:18:c2:60:8b:66:d3:52:ad:d4: ae:46:71:fd:c4:fa:34:b6:fe:e8:af:fc:af:c6:3d:16:28:e0: 08:d4:c7:39:0f:62:a8:84:15:26:f3:52:2c:b9:c2:8e:4c:0a: 04:d1:fc:09:15:fc:4d:e6:3a:c6:d5:fd:a9:22:8a:32:9e:7f: bc:e8:2a:1a:0b:34:53:96:c8:4c:87:d5:4e:e0:d5:79:ed:83: 87:39:fc:67:aa:a9:08:a4:f7:c2:f6:16:45:01:ed:27:30:d5: 5f:0d:82:80:de:6d:bf:7e:0d:e7:57:91:64:a6:9a:8a:4b:73: dc:58:97:56:79:8c:dd:82:3e:75:98:d5:9e:2c:18:cf:07:d5: ad:bb:26:f7:6a:a4:d2:5b:50:75:22:28:ee:d1:63:6d:ea:99: 6b:6e:c1:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fXqJqFnF/0OZnMDJYL+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYjhiOGRhOWNjZDRkMjYxYjcyYWRhMDM0YTA4NzU2NjVh NjQ0ODcwHhcNMjUxMjA2MDQwMTAwWhcNMjUxMjA3MDQwMTAwWjAzMTEwLwYDVQQD EyhlOTA2ODhjZmJhYzc4OTg2NmM4ZTNlMjg1MjhkNWE0ZmQzNzc1NzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdESFw+pcfYkhdZ2egvG+mA0GfGQ NLxIHwItBkfGf4w9J7IvLW+YPdy7ky7jzSPMX5Btswn4LRz2qFyw1WgBtXGYYYSl 6jusWFnwVY/NV7hAvGiwwdf42pqhCjSafUbGVdpFxAuvFJLuZYx+XBEpV2m2osvQ OeRrKjsiBCpz/563FgcXxozlIfISvAvnF0TA5hftiqj8csMMGoN3h+CA2YJ1hadW K7OFcAY2AZxBPuUn5D/Nwa1dWqr58E6/JCmxrbHXfYrdWMZ68E9gjMENE9tT5cT8 MIOf+6mlf6H9dcY1qYWn9+rk3Zq6Y1g7PBamuGEnhlqkjeGXx36QJo+05wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOkGiM+6x4mGbI4+KFKNWk/Td1dXMB8GA1UdIwQY MBaAFMq4uNqczU0mG3KtoDSgh1ZlpkSHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXJpNDJwek5UU1liY3EyZ05LQ0hWbVdtUkljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9kYjQxYzktZThhMC00ZjkwLWEwZDUt ODg3NTA5YzQ2MDJhLzEveXJpNDJwek5UU1liY3EyZ05LQ0hWbVdtUkljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9kYjQxYzktZThhMC00ZjkwLWEwZDUtODg3NTA5YzQ2MDJh LzEveXJpNDJwek5UU1liY3EyZ05LQ0hWbVdtUkljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGksSg0q+ +u5kAa0GPB7qt6Zgr1eei3ILpuPIh5qolpujhrZadHPasuE904qS6w5x3IOYtjgk lmMRQyHvMAy4j2vutDX+L4tD8i65GcjI6hfqawapEddvIsfYx+A6uu3YwLM0GMJg i2bTUq3UrkZx/cT6NLb+6K/8r8Y9FijgCNTHOQ9iqIQVJvNSLLnCjkwKBNH8CRX8 TeY6xtX9qSKKMp5/vOgqGgs0U5bITIfVTuDVee2Dhzn8Z6qpCKT3wvYWRQHtJzDV Xw2CgN5tv34N51eRZKaaiktz3FiXVnmM3YI+dZjVniwYzwfVrbsm92qk0ltQdSIo 7tFjbeqZa27Bvg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:06 2025 by rpki-client