This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft File: yMHp4LxfXaGOMkoYEltCeAGoB_E.mft (raw, json) Hash identifier: ylTkg89jsYWvM2XnGRlJP1SGTVfH7qw7SmkyjlYvBjc= Subject key identifier: 0C:82:FA:0A:4E:11:B3:AB:6B:31:0F:7B:40:51:A6:79:1C:58:20:89 Authority key identifier: C8:C1:E9:E0:BC:5F:5D:A1:8E:32:4A:18:12:5B:42:78:01:A8:07:F1 Certificate issuer: /CN=c8c1e9e0bc5f5da18e324a18125b427801a807f1 Certificate serial: 019AF19BA44A163BE19620D9244F8B2DC487 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft Manifest number: 08B9 Signing time: Sat 06 Dec 2025 03:01:40 +0000 Manifest this update: Sat 06 Dec 2025 03:01:40 +0000 Manifest next update: Sun 07 Dec 2025 03:01:40 +0000 Files and hashes: 1: KzFfCDjHV6hqDoqqVxbHisFAzqw.roa (hash: EJN3VDm9IKnbYFgaxZt9SIfMAHKvU3wGx8Z5+gCSQRo=) 2: yMHp4LxfXaGOMkoYEltCeAGoB_E.crl (hash: 8xsXq44nX7p4uoGhkD+NRwf4bHgbZANGA+GGhITs2iA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:a4:4a:16:3b:e1:96:20:d9:24:4f:8b:2d:c4:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8c1e9e0bc5f5da18e324a18125b427801a807f1 Validity Not Before: Dec 6 03:01:40 2025 GMT Not After : Dec 7 03:01:40 2025 GMT Subject: CN=0c82fa0a4e11b3ab6b310f7b4051a6791c582089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e1:59:9a:ef:56:49:f1:03:e0:c3:d3:5f:26: 12:ae:11:83:39:29:cf:60:f7:fe:ac:ca:38:78:55: 0f:d9:56:8b:b7:5f:81:94:ad:0b:79:2d:08:3e:53: dc:d5:64:15:29:16:1f:7b:11:73:5c:86:db:52:2a: 72:2b:5c:3f:f2:82:82:aa:d9:51:8a:7c:56:a0:22: 8a:93:3b:65:c2:7a:e9:df:f9:cc:1a:a0:0b:e0:d9: 33:c3:39:ed:d9:b9:aa:98:a7:05:0d:a6:d5:94:00: 23:b2:67:6d:fd:32:19:58:15:f6:5a:bf:fa:1d:1d: 59:7d:92:6a:f1:ab:0b:99:f7:c0:7a:71:44:00:52: 83:ae:e3:cf:9b:b7:eb:86:aa:82:a1:99:94:8e:98: 9e:f7:1a:d7:30:e0:ae:5e:2e:8f:e6:4a:75:5d:4d: a4:db:88:a7:63:45:28:68:05:1c:c9:99:df:ca:94: 5b:07:02:41:6a:67:c4:ac:ef:1f:b0:c8:6d:68:34: b9:f7:22:8a:0e:e7:3d:e6:c8:38:58:6f:81:69:0c: 6d:84:00:ea:fa:00:91:83:4f:31:a6:ee:bb:29:a4: 29:8d:71:7e:22:87:52:28:5a:d4:d8:69:c7:1f:c4: 57:3d:86:58:72:73:d0:1b:5b:58:ea:91:46:0c:f7: bf:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:82:FA:0A:4E:11:B3:AB:6B:31:0F:7B:40:51:A6:79:1C:58:20:89 X509v3 Authority Key Identifier: keyid:C8:C1:E9:E0:BC:5F:5D:A1:8E:32:4A:18:12:5B:42:78:01:A8:07:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:9b:7e:06:b4:aa:e2:9a:5a:a6:9e:0a:4b:ec:61:44:44:ac: ca:6b:80:9d:d8:cc:4c:74:a1:0d:92:33:c8:ef:47:8a:54:bf: 1c:ac:b0:2f:5b:d3:ef:51:85:7b:01:6b:b9:f4:70:e8:68:7d: ed:60:17:92:63:f2:fe:11:11:94:44:31:00:36:d9:a1:5a:f6: f1:c2:9c:46:be:34:d7:89:1e:b5:5c:6c:d0:2e:d2:0d:0a:b0: c8:e3:d7:50:de:87:71:8d:86:1a:16:ed:85:4b:0c:19:0f:a3: ee:dd:56:40:bf:bc:bd:98:41:4d:3e:5f:03:70:ee:78:af:f9: 83:18:e4:17:a1:43:6d:db:9a:ba:77:a9:6b:1e:9a:a2:fe:a7: b7:ea:91:17:a3:e6:8f:ed:52:ce:5a:15:4b:3f:7b:16:95:18: 54:88:cf:64:b7:76:90:73:c0:fe:ea:43:46:3c:54:f5:c4:6d: 97:dc:5a:b3:fe:6e:46:c9:2f:f0:8f:f4:9d:0c:bc:11:2c:1b: b7:47:ff:95:f2:26:7c:a9:0a:73:76:c5:c8:5c:59:43:60:8b: fe:d9:11:e3:e5:06:04:35:fd:aa:42:af:3c:95:85:5b:c0:ac: ce:69:46:46:dd:87:f5:09:8b:88:86:1b:44:28:6e:af:d5:2c: 5e:d4:54:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6RKFjvhliDZJE+LLcSHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4YzFlOWUwYmM1ZjVkYTE4ZTMyNGExODEyNWI0Mjc4MDFh ODA3ZjEwHhcNMjUxMjA2MDMwMTQwWhcNMjUxMjA3MDMwMTQwWjAzMTEwLwYDVQQD EygwYzgyZmEwYTRlMTFiM2FiNmIzMTBmN2I0MDUxYTY3OTFjNTgyMDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquFZmu9WSfED4MPTXyYSrhGDOSnP YPf+rMo4eFUP2VaLt1+BlK0LeS0IPlPc1WQVKRYfexFzXIbbUipyK1w/8oKCqtlR inxWoCKKkztlwnrp3/nMGqAL4Nkzwznt2bmqmKcFDabVlAAjsmdt/TIZWBX2Wr/6 HR1ZfZJq8asLmffAenFEAFKDruPPm7frhqqCoZmUjpie9xrXMOCuXi6P5kp1XU2k 24inY0UoaAUcyZnfypRbBwJBamfErO8fsMhtaDS59yKKDuc95sg4WG+BaQxthADq +gCRg08xpu67KaQpjXF+IodSKFrU2GnHH8RXPYZYcnPQG1tY6pFGDPe/hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAyC+gpOEbOrazEPe0BRpnkcWCCJMB8GA1UdIwQY MBaAFMjB6eC8X12hjjJKGBJbQngBqAfxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU1IcDRMeGZYYUdPTWtvWUVsdENlQUdvQl9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS80ZjZmNDMtODVmNC00MDFhLWEzMmYt ZTFlMzlmOTU2MDgxLzEveU1IcDRMeGZYYUdPTWtvWUVsdENlQUdvQl9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS80ZjZmNDMtODVmNC00MDFhLWEzMmYtZTFlMzlmOTU2MDgx LzEveU1IcDRMeGZYYUdPTWtvWUVsdENlQUdvQl9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5t+BrSq 4ppapp4KS+xhRESsymuAndjMTHShDZIzyO9HilS/HKywL1vT71GFewFrufRw6Gh9 7WAXkmPy/hERlEQxADbZoVr28cKcRr4014ketVxs0C7SDQqwyOPXUN6HcY2GGhbt hUsMGQ+j7t1WQL+8vZhBTT5fA3DueK/5gxjkF6FDbduaunepax6aov6nt+qRF6Pm j+1SzloVSz97FpUYVIjPZLd2kHPA/upDRjxU9cRtl9xas/5uRskv8I/0nQy8ESwb t0f/lfImfKkKc3bFyFxZQ2CL/tkR4+UGBDX9qkKvPJWFW8CszmlGRt2H9QmLiIYb RChur9UsXtRUYw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:01 2025 by rpki-client