This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft File: yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft (raw, json) Hash identifier: f8ITP9k6tJrcVT57/RGLqovS7EcZLZy1RGg8MoFjhbg= Subject key identifier: BD:49:B8:92:1C:47:8C:22:4D:EA:E7:29:E5:D2:29:04:C7:7E:23:AB Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94 Certificate issuer: /CN=c8acf59abd4abbfbf830a060225a96a2179a2694 Certificate serial: 019B3C46D72BCDF7D258D7E81D4D0B6F0F86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft Manifest number: 06F8 Signing time: Sat 20 Dec 2025 15:00:34 +0000 Manifest this update: Sat 20 Dec 2025 15:00:34 +0000 Manifest next update: Sun 21 Dec 2025 15:00:34 +0000 Files and hashes: 1: NkRmhAwiBvZ-mI3ws7AoUtnvJlw.roa (hash: Qmu587A5vz0QqePux9/8aXshlrfRjr3JIejbf/nnhGw=) 2: RL3xJ4ezhmNdZ1rcVqISik-0MMo.roa (hash: xlGD8LTXAgZF6ai7L4BH7qy3aFEkBhgRkokviaW4/Ws=) 3: T58xMDbLANQb9Kgw893xpFau1Fs.roa (hash: 6zsxCyqe8IvUF3KmmNmoDeEUsdW8rKFl85HR/TG08js=) 4: Xa0B9m97ByYphB5XrMGxVdHZyes.roa (hash: mXqV2/vQX57Ww79AIe2GrEvrqiY5gtML1rzRmVpsOdY=) 5: x1uDU9Zoy9uOw-P8QajIkhafsls.roa (hash: DvZ2AA1RQvmoSZSW5gPnUUBwYA0pEWM/KDqbtkIXCWA=) 6: x9gEvmLiqp6QXnPTPsa-6i-pFyo.roa (hash: keFMGhxuV8MLlgHVwMp/d+A+4wpJiYJvnC3NEijngr0=) 7: xCnT23Rn0GW_J69HKTBn0CbUrEg.roa (hash: lihRtt/ALF9fF8QJo8U8WnJBS3k3roL75dQ2MUYDSMI=) 8: yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl (hash: Fve8G5ccL8Ajt4nIdx4xXFwuw0H4s8CboL1bJfdgl/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:d7:2b:cd:f7:d2:58:d7:e8:1d:4d:0b:6f:0f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694 Validity Not Before: Dec 20 15:00:34 2025 GMT Not After : Dec 21 15:00:34 2025 GMT Subject: CN=bd49b8921c478c224deae729e5d22904c77e23ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b1:67:5b:2b:29:76:69:3e:8e:ab:2b:10:a2: b4:a2:25:70:b2:43:a7:bf:65:1f:f6:d6:33:4e:3e: 29:3f:f8:fa:ed:5f:0d:2f:91:30:04:2f:99:00:87: 8f:20:02:53:d7:2f:0d:68:00:81:c3:5c:3b:b1:0f: e6:34:2b:66:de:63:c3:62:b6:b5:26:7e:91:37:9d: e4:60:32:d2:e7:46:0e:f8:1c:81:cf:bb:db:d7:5e: 18:e5:f0:3d:e2:0f:62:ad:18:b1:37:61:27:bf:fa: 44:21:5b:82:58:31:29:54:e3:49:14:94:fe:04:15: a6:70:ef:67:7c:20:a8:87:46:e8:be:9a:d3:30:80: 73:a6:ca:b9:de:c1:e8:dc:ae:ac:3f:31:3a:f4:57: 09:4f:5b:79:e3:d5:32:d7:af:e4:ac:7e:36:9e:ec: 8a:82:44:aa:2e:90:f5:ec:1f:48:da:d5:3f:41:7d: db:69:0a:4b:e5:9c:ed:da:82:d9:e4:46:b5:80:ab: 60:c8:fa:59:00:f8:6c:7f:fe:09:44:df:e6:2d:2e: eb:5b:6d:5b:b3:e2:a5:f4:9a:7a:cb:42:58:6f:9b: 1e:9d:a4:11:5a:c6:ff:e8:e8:9c:ef:cc:af:f1:24: 5f:4d:99:eb:3a:39:0c:54:ac:91:bd:da:13:5d:16: eb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:49:B8:92:1C:47:8C:22:4D:EA:E7:29:E5:D2:29:04:C7:7E:23:AB X509v3 Authority Key Identifier: keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:ed:bf:2c:76:53:15:b5:d9:af:fa:7a:70:5e:f8:8f:da:a8: bd:92:99:e0:78:3c:a9:43:48:b3:a5:f3:b7:04:24:a6:e7:52: df:e9:16:9e:e1:71:85:2a:e8:16:02:be:84:f8:a7:08:38:77: b8:88:c5:28:e9:9f:75:73:e0:10:e9:49:ac:d8:a7:79:88:06: 30:77:d0:c4:d5:0f:e2:f7:0a:c4:0f:40:f6:a4:b3:6b:37:51: 8a:54:6f:f2:8b:17:45:a8:5b:84:74:f7:49:a1:1f:48:8b:53: 12:f7:d3:53:4f:cd:81:b4:da:1f:2b:22:6f:78:25:73:44:e0: 68:e9:47:b2:5b:71:a2:73:81:e2:53:e2:d1:04:4f:8e:65:3f: 4c:f3:37:e1:03:e7:53:b7:7d:b5:b2:75:88:6f:6f:23:59:af: 2a:d8:30:c7:5e:60:42:9e:4a:f6:6f:0b:36:20:80:06:29:74: 85:93:b1:c6:75:ca:bb:d6:ce:df:40:e0:19:01:64:28:15:c1: 21:51:2c:4e:9d:b8:0b:e7:ec:e0:65:f3:6f:96:fd:91:07:a9: d2:95:ea:dc:9c:6b:70:75:5a:70:fa:09:db:b6:5e:51:68:7a: 4d:e7:44:8d:db:e5:6a:aa:c7:7f:ff:76:ac:97:a2:8e:34:45: 64:2f:5b:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8RtcrzffSWNfoHU0Lbw+GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4YWNmNTlhYmQ0YWJiZmJmODMwYTA2MDIyNWE5NmEyMTc5 YTI2OTQwHhcNMjUxMjIwMTUwMDM0WhcNMjUxMjIxMTUwMDM0WjAzMTEwLwYDVQQD EyhiZDQ5Yjg5MjFjNDc4YzIyNGRlYWU3MjllNWQyMjkwNGM3N2UyM2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bFnWyspdmk+jqsrEKK0oiVwskOn v2Uf9tYzTj4pP/j67V8NL5EwBC+ZAIePIAJT1y8NaACBw1w7sQ/mNCtm3mPDYra1 Jn6RN53kYDLS50YO+ByBz7vb114Y5fA94g9irRixN2Env/pEIVuCWDEpVONJFJT+ BBWmcO9nfCCoh0bovprTMIBzpsq53sHo3K6sPzE69FcJT1t549Uy16/krH42nuyK gkSqLpD17B9I2tU/QX3baQpL5Zzt2oLZ5Ea1gKtgyPpZAPhsf/4JRN/mLS7rW21b s+Kl9Jp6y0JYb5senaQRWsb/6Oic78yv8SRfTZnrOjkMVKyRvdoTXRbrZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1JuJIcR4wiTernKeXSKQTHfiOrMB8GA1UdIwQY MBaAFMis9Zq9Srv7+DCgYCJalqIXmiaUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUt6MW1yMUt1X3Y0TUtCZ0lscVdvaGVhSnBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jZjdmNmQtYjIyNS00YmRmLTk1MDQt ODM4ZWJmNDEyYTYxLzEveUt6MW1yMUt1X3Y0TUtCZ0lscVdvaGVhSnBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9jZjdmNmQtYjIyNS00YmRmLTk1MDQtODM4ZWJmNDEyYTYx LzEveUt6MW1yMUt1X3Y0TUtCZ0lscVdvaGVhSnBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACe2/LHZT FbXZr/p6cF74j9qovZKZ4Hg8qUNIs6XztwQkpudS3+kWnuFxhSroFgK+hPinCDh3 uIjFKOmfdXPgEOlJrNineYgGMHfQxNUP4vcKxA9A9qSzazdRilRv8osXRahbhHT3 SaEfSItTEvfTU0/NgbTaHysib3glc0TgaOlHsltxonOB4lPi0QRPjmU/TPM34QPn U7d9tbJ1iG9vI1mvKtgwx15gQp5K9m8LNiCABil0hZOxxnXKu9bO30DgGQFkKBXB IVEsTp24C+fs4GXzb5b9kQep0pXq3JxrcHVacPoJ27ZeUWh6TedEjdvlaqrHf/92 rJeijjRFZC9bVA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:56:06 2025 by rpki-client