This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft File: i_ynyW6ARQWki5lgPZshJPHdNwI.mft (raw, json) Hash identifier: qHpElTTVFwD/vSauGItycDN0UNjw06OMYq0tHa/5yH0= Subject key identifier: 7F:7C:04:7C:99:21:A7:80:0B:3E:B6:67:43:F6:15:B0:4B:3F:3B:20 Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02 Certificate issuer: /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702 Certificate serial: 019AF208C252EA870F980F22EBE78A0423A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 05:00:51 +0000 Manifest this update: Sat 06 Dec 2025 05:00:51 +0000 Manifest next update: Sun 07 Dec 2025 05:00:51 +0000 Files and hashes: 1: 4sWj8i7vRryJSCNDCbfEp1hlcTg.roa (hash: vNPNBYN1nUhed4j+PRjHE75t7GtK+pbCWaOwWZ1P5Dk=) 2: GMZbdZf7DVTMVtG07UzJ8oYQZc8.roa (hash: uUSVFyEZfsZP1WTLjagwoDZc2IMdNsTiDoZDnsmStBw=) 3: OXFWEO59LWqNp3-W3eA61p6mEl4.roa (hash: jxmmKXt9r49nsxlJrTEnzRizABJyfl5jsZhQ3LTeKIk=) 4: gtsG_e5t3YAxHhnI_DHS901RwK8.roa (hash: 1lFl+Q6Ir4bOnT+mLXLb7DAr/V+reNwDxhD0ncFcb1M=) 5: i_ynyW6ARQWki5lgPZshJPHdNwI.crl (hash: q9oxWKVjyhDir8MXMrXRorru6gvK/Sql/VLRGgqQuqA=) 6: kgtXMGVq_yiG6jbCmetTa_cdZEI.roa (hash: 6jOU2wUAoyQfpjSCtb3mycfBqwA3lOt9bOnarXx4iMo=) 7: vZSI2LaRad19lSy1p-p3fBBNwQk.roa (hash: axONSdCDQQuuZ1UzeZtig6WOLz6ES7sF69OmLUuGd5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c2:52:ea:87:0f:98:0f:22:eb:e7:8a:04:23:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702 Validity Not Before: Dec 6 05:00:51 2025 GMT Not After : Dec 7 05:00:51 2025 GMT Subject: CN=7f7c047c9921a7800b3eb66743f615b04b3f3b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:37:36:2e:d2:7f:24:76:a9:fa:da:66:dc:07: cd:d9:d9:0c:76:29:a6:1e:6d:92:12:0a:7a:f1:85: 87:69:07:a3:cc:45:52:d0:88:38:93:60:2c:f2:86: d0:1b:0b:d8:86:94:bc:99:48:98:bd:58:2f:d5:21: d1:af:05:a9:eb:0a:2a:9e:a4:f3:42:cd:a2:1f:d8: 9a:d0:d4:ec:19:7f:1c:03:54:77:7b:ca:7e:fe:92: 3d:be:91:0a:50:9a:9e:84:7a:ae:4b:35:02:f3:b5: 45:35:61:5e:d8:b3:7d:c2:49:fd:f0:16:13:90:b3: f9:02:8b:80:f5:e1:c1:b1:8a:c8:9e:2c:9c:34:e0: 93:b3:86:16:74:b3:7e:d3:01:3a:f3:b3:dc:af:2f: a4:f7:71:de:e5:a6:6d:bf:6e:d7:2d:8b:a1:cb:1a: 69:1f:bf:0a:fa:03:d7:3f:89:dc:c3:e2:3b:21:5a: a1:7a:ca:39:72:d9:a4:cc:18:ac:ae:d5:7b:8b:5c: a1:11:81:4d:51:51:98:f0:f4:93:0a:76:87:12:71: dd:07:71:1f:a3:37:17:5d:e8:f7:59:23:29:fc:51: be:45:20:3f:c0:6c:4c:c9:28:ca:53:80:bf:30:26: 8b:9c:c9:48:5d:77:e8:01:3b:8f:19:12:51:62:73: 9b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:7C:04:7C:99:21:A7:80:0B:3E:B6:67:43:F6:15:B0:4B:3F:3B:20 X509v3 Authority Key Identifier: keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:73:6a:77:e6:45:af:9e:4d:28:92:8e:23:26:10:6c:f5:bd: f2:32:c2:49:b6:f5:52:41:c4:fc:c0:bf:3e:47:19:16:aa:2c: a9:bd:98:0c:f1:a3:4b:b3:4b:8f:f8:17:a7:bb:8b:66:51:60: b3:52:71:7c:ab:b5:9e:77:e0:5e:f2:d1:37:19:5e:fe:e5:78: 0b:9a:6e:91:cd:ef:19:3f:c4:fb:89:29:66:57:c8:cf:3e:63: 91:bb:35:6d:84:d4:04:87:7f:b4:3a:c1:f6:d5:74:d4:3f:ea: 95:2b:55:bf:74:c0:f0:7b:ac:41:2a:8c:6e:46:7c:2a:1c:69: e7:79:f7:e7:0b:3b:4e:02:11:ba:29:3c:6f:b7:5a:f3:ce:5a: f9:42:45:f2:1c:62:9c:9c:4d:7c:d3:50:49:d6:7d:e6:cc:6f: 32:f0:05:5f:0c:05:d0:4b:16:24:93:c5:06:8d:39:a1:f1:eb: f5:02:68:1e:e0:fc:38:01:61:da:76:9a:25:be:e6:9d:aa:05: 97:e9:7f:00:41:76:be:ba:28:22:3a:48:51:79:59:de:11:e0: 23:a3:03:30:da:dc:b5:01:6c:4c:2c:e7:1f:b5:cc:b6:cb:5d: 3d:79:0e:ce:c9:85:c1:fe:eb:42:3a:88:30:92:b0:5c:1e:a1: 93:07:e3:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMJS6ocPmA8i6+eKBCOmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZmNhN2M5NmU4MDQ1MDVhNDhiOTk2MDNkOWIyMTI0ZjFk ZDM3MDIwHhcNMjUxMjA2MDUwMDUxWhcNMjUxMjA3MDUwMDUxWjAzMTEwLwYDVQQD Eyg3ZjdjMDQ3Yzk5MjFhNzgwMGIzZWI2Njc0M2Y2MTViMDRiM2YzYjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDc2LtJ/JHap+tpm3AfN2dkMdimm Hm2SEgp68YWHaQejzEVS0Ig4k2As8obQGwvYhpS8mUiYvVgv1SHRrwWp6woqnqTz Qs2iH9ia0NTsGX8cA1R3e8p+/pI9vpEKUJqehHquSzUC87VFNWFe2LN9wkn98BYT kLP5AouA9eHBsYrIniycNOCTs4YWdLN+0wE687Pcry+k93He5aZtv27XLYuhyxpp H78K+gPXP4ncw+I7IVqheso5ctmkzBisrtV7i1yhEYFNUVGY8PSTCnaHEnHdB3Ef ozcXXej3WSMp/FG+RSA/wGxMySjKU4C/MCaLnMlIXXfoATuPGRJRYnObywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH98BHyZIaeACz62Z0P2FbBLPzsgMB8GA1UdIwQY MBaAFIv8p8lugEUFpIuZYD2bISTx3TcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAt MThiMWE5MzdhNTY3LzEvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAtMThiMWE5MzdhNTY3 LzEvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ3Nqd+ZF r55NKJKOIyYQbPW98jLCSbb1UkHE/MC/PkcZFqosqb2YDPGjS7NLj/gXp7uLZlFg s1JxfKu1nnfgXvLRNxle/uV4C5pukc3vGT/E+4kpZlfIzz5jkbs1bYTUBId/tDrB 9tV01D/qlStVv3TA8HusQSqMbkZ8Khxp53n35ws7TgIRuik8b7da885a+UJF8hxi nJxNfNNQSdZ95sxvMvAFXwwF0EsWJJPFBo05ofHr9QJoHuD8OAFh2naaJb7mnaoF l+l/AEF2vrooIjpIUXlZ3hHgI6MDMNrctQFsTCznH7XMtstdPXkOzsmFwf7rQjqI MJKwXB6hkwfjgA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:32 2025 by rpki-client