This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft File: yikNsvcpBfDbYmsAW6zwiHjRe6w.mft (raw, json) Hash identifier: mps6digOfth315e5sqYRilJHWngwp7eG8mthQaLtmsU= Subject key identifier: 9F:F4:66:35:92:83:43:D6:8A:C4:4D:82:9B:F0:9A:8D:EA:B1:AC:EB Authority key identifier: CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC Certificate issuer: /CN=ca290db2f72905f0db626b005bacf08878d17bac Certificate serial: 019AF12E7E3DC1ABDABED2901A0188FDE4FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft Manifest number: 0B8B Signing time: Sat 06 Dec 2025 01:02:27 +0000 Manifest this update: Sat 06 Dec 2025 01:02:27 +0000 Manifest next update: Sun 07 Dec 2025 01:02:27 +0000 Files and hashes: 1: 4hjeIW8185ZaECNggenf_uHhDOA.roa (hash: UoLjdkox8BXch3olGfF5NhOzyEQg7VA83kohLHFMIMk=) 2: Fw_kxU9y2ZFFUFhTyjj3cOM8HE0.roa (hash: RbilBDizHS14qZ4Da7c1uCTbplJrxj3lujK+7Ie1xww=) 3: IFrDv6Ls6n5V8fwzlZ-9RjYsC1A.roa (hash: /KA/Ir1BpmGewtvhuM2WTh9hgPTfLUu7FlDEzEKhle8=) 4: _6UZkqieR9kIkKZwwfKfkm35fd4.roa (hash: TAVIhSh9eMt1b6339NxSWJ46JPMbHN7C8v9n3qx3ibk=) 5: gqWeYouP3tCgtjbkj-l_gQg8hIo.roa (hash: /JDKYsMSdFrnBptTFdWQqSfzinHaa7LMqQq1Q4agYW8=) 6: iqYLpAFtuo6gr-j-Ly-Vnr8R2MU.roa (hash: qX/Ce2Cu2rGWIQEWtxm8FeM0QBiPxiljZdApDi//miE=) 7: yikNsvcpBfDbYmsAW6zwiHjRe6w.crl (hash: ztz7TpiHrEC8tAHk6yzgu9gj+Z1kuXpG+oU9XEvBDqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:7e:3d:c1:ab:da:be:d2:90:1a:01:88:fd:e4:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca290db2f72905f0db626b005bacf08878d17bac Validity Not Before: Dec 6 01:02:27 2025 GMT Not After : Dec 7 01:02:27 2025 GMT Subject: CN=9ff46635928343d68ac44d829bf09a8deab1aceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fc:81:88:f0:50:d2:d3:8d:75:a6:f5:69:5c: c9:15:0d:45:a7:ba:94:7d:7d:72:96:66:00:fa:1c: ef:9d:c3:a2:b8:40:d6:13:a6:66:97:64:76:15:7d: 86:ff:33:67:a2:ec:56:96:a8:ef:a3:6f:57:63:ee: 5a:d2:15:73:5c:06:12:82:a1:f6:af:2a:76:11:2e: c7:fa:dc:78:f9:68:9c:5e:23:d3:0b:53:de:fc:6e: d1:ea:fc:a0:7b:6f:22:16:17:47:d7:ef:18:6b:bc: e8:3e:43:7d:96:b7:5f:6e:50:fe:91:79:af:4c:ba: f0:67:9e:81:ba:55:b6:c8:1b:f8:ac:11:31:c9:7c: 4d:f5:1e:28:cd:2a:14:c6:c1:e0:71:1a:31:fb:9e: 1d:5a:40:d8:3a:1d:e4:aa:f6:2f:97:d5:7b:66:90: eb:97:26:26:05:59:f2:e9:68:76:fb:fa:f5:eb:d9: 1d:83:e2:63:6b:b8:92:72:11:24:5c:85:7c:b7:de: 20:eb:4d:65:d5:68:3a:6c:72:b8:f3:b4:ea:e0:7f: 24:41:cf:12:8d:6d:60:6f:5b:85:80:d4:c3:46:a4: e0:0d:a6:39:c0:12:98:49:34:0a:b7:90:da:8a:6d: 88:a3:03:1e:07:e6:70:78:7e:3a:f3:34:d5:15:67: 1d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F4:66:35:92:83:43:D6:8A:C4:4D:82:9B:F0:9A:8D:EA:B1:AC:EB X509v3 Authority Key Identifier: keyid:CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:aa:56:52:53:54:3a:f1:33:03:ec:7b:82:81:cb:71:53:3e: b0:16:af:ec:09:51:bd:d5:cf:98:a7:27:0e:80:c8:80:ef:f1: 18:4d:71:1c:e8:15:c9:02:f1:97:c6:73:4d:60:53:9d:44:b3: 87:50:94:13:bb:0b:55:18:2a:a0:5c:5e:14:52:b3:d1:65:f5: 7c:28:50:b6:00:e7:5e:41:94:e6:1e:c3:cf:d3:dc:08:3b:e6: bf:8a:09:4d:91:7e:96:ee:e3:5a:92:94:a2:fc:e3:21:4d:a4: 89:d4:41:d7:89:46:42:7e:49:30:ec:b3:9e:29:39:f4:00:1a: 28:50:1c:9d:b1:4a:82:70:1c:61:c0:b0:98:65:ba:55:52:81: b7:f6:df:be:3c:ee:1e:6b:03:19:1d:50:2b:f9:af:a2:9b:18: 39:90:4d:7d:7d:2f:bd:94:94:85:aa:57:0c:7b:10:a8:03:d4: 39:e9:d6:ed:67:83:6a:9e:a0:59:f4:30:be:1a:fe:4f:5e:9a: 08:17:75:44:a9:67:14:64:ad:a0:4b:32:76:c0:ea:34:37:be: f4:24:d8:a5:a3:5b:ae:63:21:16:d7:1c:50:fe:a8:18:6b:a1: 11:e4:8a:b0:28:f3:47:ae:13:d3:de:d4:e1:0f:e5:34:24:d0: 48:f1:83:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLn49wavavtKQGgGI/eT6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMjkwZGIyZjcyOTA1ZjBkYjYyNmIwMDViYWNmMDg4Nzhk MTdiYWMwHhcNMjUxMjA2MDEwMjI3WhcNMjUxMjA3MDEwMjI3WjAzMTEwLwYDVQQD Eyg5ZmY0NjYzNTkyODM0M2Q2OGFjNDRkODI5YmYwOWE4ZGVhYjFhY2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfyBiPBQ0tONdab1aVzJFQ1Fp7qU fX1ylmYA+hzvncOiuEDWE6Zml2R2FX2G/zNnouxWlqjvo29XY+5a0hVzXAYSgqH2 ryp2ES7H+tx4+WicXiPTC1Pe/G7R6vyge28iFhdH1+8Ya7zoPkN9lrdfblD+kXmv TLrwZ56BulW2yBv4rBExyXxN9R4ozSoUxsHgcRox+54dWkDYOh3kqvYvl9V7ZpDr lyYmBVny6Wh2+/r169kdg+Jja7iSchEkXIV8t94g601l1Wg6bHK487Tq4H8kQc8S jW1gb1uFgNTDRqTgDaY5wBKYSTQKt5Daim2IowMeB+ZweH468zTVFWcdMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/0ZjWSg0PWisRNgpvwmo3qsazrMB8GA1UdIwQY MBaAFMopDbL3KQXw22JrAFus8Ih40XusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWlrTnN2Y3BCZkRiWW1zQVc2endpSGpSZTZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMTY5NzMtNTE2Zi00NTAxLTkxNjQt N2Y0MzViZjU1MDFjLzEveWlrTnN2Y3BCZkRiWW1zQVc2endpSGpSZTZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8yMTY5NzMtNTE2Zi00NTAxLTkxNjQtN2Y0MzViZjU1MDFj LzEveWlrTnN2Y3BCZkRiWW1zQVc2endpSGpSZTZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb6pWUlNU OvEzA+x7goHLcVM+sBav7AlRvdXPmKcnDoDIgO/xGE1xHOgVyQLxl8ZzTWBTnUSz h1CUE7sLVRgqoFxeFFKz0WX1fChQtgDnXkGU5h7Dz9PcCDvmv4oJTZF+lu7jWpKU ovzjIU2kidRB14lGQn5JMOyznik59AAaKFAcnbFKgnAcYcCwmGW6VVKBt/bfvjzu HmsDGR1QK/mvopsYOZBNfX0vvZSUhapXDHsQqAPUOenW7WeDap6gWfQwvhr+T16a CBd1RKlnFGStoEsydsDqNDe+9CTYpaNbrmMhFtccUP6oGGuhEeSKsCjzR64T097U 4Q/lNCTQSPGDwg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:41 2025 by rpki-client