This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft File: yABBYZAh42MorViY6Jl4cEa48Pk.mft (raw, json) Hash identifier: gJ8wZOBf6r/MuDCdBRJLbbFfHQ9vQ7xmdc+/XirBPI0= Subject key identifier: 78:A7:EE:34:EF:01:6D:F2:6F:E8:16:90:5C:5D:AB:DF:E9:9D:20:C5 Authority key identifier: C8:00:41:61:90:21:E3:63:28:AD:58:98:E8:99:78:70:46:B8:F0:F9 Certificate issuer: /CN=c80041619021e36328ad5898e899787046b8f0f9 Certificate serial: 019B32D6307724BF2577594A0BA8709186D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft Manifest number: 0812 Signing time: Thu 18 Dec 2025 19:00:56 +0000 Manifest this update: Thu 18 Dec 2025 19:00:56 +0000 Manifest next update: Fri 19 Dec 2025 19:00:56 +0000 Files and hashes: 1: Mok6_FqiiR5wYGEWZBTs8xeaVoQ.roa (hash: FbjTDRIPu8bBy/5KLYHNgVHrWy/v2L+xeWuUUm4Xmek=) 2: yABBYZAh42MorViY6Jl4cEa48Pk.crl (hash: 2PrkX9U8EynN3m+RINLyNs2zxXhsOFFHQiWcSrY1T44=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:30:77:24:bf:25:77:59:4a:0b:a8:70:91:86:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c80041619021e36328ad5898e899787046b8f0f9 Validity Not Before: Dec 18 19:00:56 2025 GMT Not After : Dec 19 19:00:56 2025 GMT Subject: CN=78a7ee34ef016df26fe816905c5dabdfe99d20c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ea:b8:a0:7f:5c:2e:05:11:a6:61:6b:6c:95: 18:74:f3:13:ec:d6:02:2a:31:e1:ff:53:e8:ab:81: fe:33:30:ee:28:14:f5:42:14:db:f1:7f:93:3d:78: 11:12:76:6a:98:15:f3:8d:63:4b:16:a3:b9:4a:9f: ab:e6:f5:71:03:e3:30:74:f7:f2:33:55:e1:0c:12: 06:03:52:4e:28:fc:2d:a8:25:f8:7d:99:ac:be:e9: fb:5e:bd:c7:a1:21:f1:36:d1:f4:4f:77:40:d8:bf: 64:5c:df:50:01:2e:4d:13:4a:18:54:c1:4a:07:4c: dd:72:0e:6c:ec:07:2b:14:91:e1:0a:5d:99:f4:f9: b9:ec:1c:0c:b2:f7:3a:f0:23:71:7f:ee:ed:f1:b8: fe:d2:6e:3e:1d:30:75:15:0d:e0:20:b0:50:06:3b: a3:82:20:ee:05:85:9d:dd:b7:98:08:78:d2:d3:01: 62:c1:98:3d:43:3b:42:9b:e9:9a:4d:35:4d:83:73: 6f:e8:64:f8:0d:dc:f6:82:ea:af:3d:26:38:33:96: 30:8b:b3:71:24:17:7a:e1:d5:c2:98:61:0a:2e:54: 76:bf:cb:82:a6:8d:ab:16:fd:1f:81:6f:91:85:4c: 16:5b:6d:57:25:46:5d:c1:63:3c:c1:88:d6:e2:4e: f5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A7:EE:34:EF:01:6D:F2:6F:E8:16:90:5C:5D:AB:DF:E9:9D:20:C5 X509v3 Authority Key Identifier: keyid:C8:00:41:61:90:21:E3:63:28:AD:58:98:E8:99:78:70:46:B8:F0:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:31:30:27:77:b2:fa:37:5a:c9:cf:6a:33:f1:8a:de:f5:99: 57:b7:f2:ea:f9:9c:e2:e9:6e:d6:94:f3:e3:48:ad:ef:85:88: 95:25:7d:eb:70:0e:2c:05:1a:ab:e0:6c:7b:26:01:ac:80:cb: 4a:a7:2e:ee:d0:66:a6:ba:5b:9f:7e:e9:f3:dc:30:af:93:5d: c6:87:af:39:3e:9d:a3:6f:65:12:e1:cc:bf:29:42:51:00:91: b8:5b:f7:ce:5d:88:12:b1:1e:90:a4:20:79:f3:be:01:a6:53: f1:d6:ad:a2:c1:6e:d7:23:f4:b0:fc:a6:7f:e1:fb:94:aa:05: b2:e3:ba:b0:af:b3:ce:24:71:46:36:1b:15:b2:78:d0:8f:0d: d8:18:3d:fd:6b:9c:73:ff:62:30:e6:fa:3f:2d:4d:5a:6d:b0: 90:91:15:d4:a3:fb:d8:04:75:ed:1d:3a:1a:ff:49:f6:18:2b: c0:b0:44:93:35:61:64:15:00:5d:b7:a8:8a:c4:81:3c:07:df: 4a:e0:7a:13:54:d4:34:a5:5c:a9:72:8d:e8:88:41:e3:87:4b: 10:5e:19:c8:48:4c:24:0f:8e:90:74:95:a1:b2:c6:93:f0:73: 0d:17:4f:d8:67:3f:90:b3:6e:e5:41:38:3c:26:8a:be:c5:ff: bd:a1:8b:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1jB3JL8ld1lKC6hwkYbUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MDA0MTYxOTAyMWUzNjMyOGFkNTg5OGU4OTk3ODcwNDZi OGYwZjkwHhcNMjUxMjE4MTkwMDU2WhcNMjUxMjE5MTkwMDU2WjAzMTEwLwYDVQQD Eyg3OGE3ZWUzNGVmMDE2ZGYyNmZlODE2OTA1YzVkYWJkZmU5OWQyMGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Oq4oH9cLgURpmFrbJUYdPMT7NYC KjHh/1Poq4H+MzDuKBT1QhTb8X+TPXgREnZqmBXzjWNLFqO5Sp+r5vVxA+MwdPfy M1XhDBIGA1JOKPwtqCX4fZmsvun7Xr3HoSHxNtH0T3dA2L9kXN9QAS5NE0oYVMFK B0zdcg5s7AcrFJHhCl2Z9Pm57BwMsvc68CNxf+7t8bj+0m4+HTB1FQ3gILBQBjuj giDuBYWd3beYCHjS0wFiwZg9QztCm+maTTVNg3Nv6GT4Ddz2guqvPSY4M5Ywi7Nx JBd64dXCmGEKLlR2v8uCpo2rFv0fgW+RhUwWW21XJUZdwWM8wYjW4k71JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHin7jTvAW3yb+gWkFxdq9/pnSDFMB8GA1UdIwQY MBaAFMgAQWGQIeNjKK1YmOiZeHBGuPD5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUFCQllaQWg0Mk1vclZpWTZKbDRjRWE0OFBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82ODVjOTktY2ZkZi00MmEwLTg0MzYt ZDI5N2RiMjMwYTE0LzEveUFCQllaQWg0Mk1vclZpWTZKbDRjRWE0OFBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82ODVjOTktY2ZkZi00MmEwLTg0MzYtZDI5N2RiMjMwYTE0 LzEveUFCQllaQWg0Mk1vclZpWTZKbDRjRWE0OFBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKTEwJ3ey +jdayc9qM/GK3vWZV7fy6vmc4ulu1pTz40it74WIlSV963AOLAUaq+BseyYBrIDL Sqcu7tBmprpbn37p89wwr5NdxoevOT6do29lEuHMvylCUQCRuFv3zl2IErEekKQg efO+AaZT8datosFu1yP0sPymf+H7lKoFsuO6sK+zziRxRjYbFbJ40I8N2Bg9/Wuc c/9iMOb6Py1NWm2wkJEV1KP72AR17R06Gv9J9hgrwLBEkzVhZBUAXbeoisSBPAff SuB6E1TUNKVcqXKN6IhB44dLEF4ZyEhMJA+OkHSVobLGk/BzDRdP2Gc/kLNu5UE4 PCaKvsX/vaGLkw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:47:57 2025 by rpki-client