This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft File: y748bZmBGBnO3dzSfkviW8DPUG8.mft (raw, json) Hash identifier: 9MM9Lcf6M0hecx23Lcsj0RSrxCogLe0h3dT7DMj3KDw= Subject key identifier: D3:CA:10:98:06:C0:97:79:03:F9:29:38:08:18:E3:67:75:7D:BF:1D Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F Certificate issuer: /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f Certificate serial: 019AF1D2261EF95850678064F7E1D3C03CBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft Manifest number: 128D Signing time: Sat 06 Dec 2025 04:01:12 +0000 Manifest this update: Sat 06 Dec 2025 04:01:12 +0000 Manifest next update: Sun 07 Dec 2025 04:01:12 +0000 Files and hashes: 1: ghqg6ujuEOV4Vw3b6x6YkQU8aSs.roa (hash: IATpDK+kaz0czhsEzmLbtPDJ492YJfivjvGQ/3AgHO8=) 2: rMy8dPPnYigzc4tv_MpgYXZWjBU.roa (hash: nHe7eBjoA3VTymKpGX1+aRKhTfLD28hgYmPFTLI6+4M=) 3: x5FwTTVorsGfIV2MDa8IC9dozSI.roa (hash: cVCSNkZBBh3ZJGnim77LdgANipO1Ai7iWjVLFMe9HIY=) 4: y748bZmBGBnO3dzSfkviW8DPUG8.crl (hash: BQN6YYY3T6CIUaam6IWgNfoX6xGC8LYb6qvKmrRi/Z8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:26:1e:f9:58:50:67:80:64:f7:e1:d3:c0:3c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f Validity Not Before: Dec 6 04:01:12 2025 GMT Not After : Dec 7 04:01:12 2025 GMT Subject: CN=d3ca109806c0977903f929380818e367757dbf1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b3:9d:ee:02:7c:d6:3d:98:77:ba:e0:a7:44: 04:a9:58:d9:d9:e6:b0:95:aa:72:57:64:37:f6:ee: cf:67:65:a9:ac:bb:39:b5:51:0c:c1:56:7a:1f:cc: b8:e2:c0:3e:b5:82:0b:a3:2a:de:f5:4c:b4:d6:f7: 15:b6:1c:f2:b3:f1:0e:13:bd:a4:9f:0a:02:40:8c: 98:23:c5:56:bd:b5:76:72:b9:4a:14:a8:fd:cc:80: eb:7d:89:ab:2b:55:f3:31:2e:a3:49:27:5a:f7:1e: 96:a3:40:6a:48:1b:8d:f3:0c:58:7b:fb:94:75:7a: f4:cf:79:54:20:58:8a:89:c7:d9:93:ca:f2:20:8c: d3:19:bb:98:90:03:58:8a:65:1d:70:9c:8f:96:4a: f2:27:76:5e:1f:fd:80:72:7c:81:31:ba:5a:5e:c2: e1:b7:87:b4:c1:7c:d3:2d:34:be:67:c9:ac:e4:95: e0:11:e7:76:88:e6:44:9c:1c:58:7f:f8:f6:07:ec: 25:da:65:6c:e5:b8:19:9e:ee:cf:dd:65:17:3a:fd: 95:2a:b6:eb:d6:03:41:9a:13:c1:57:1b:da:33:bc: 6f:77:90:e7:69:0e:c0:dc:61:d9:8b:66:f4:3c:05: e9:b2:14:81:9c:eb:02:f1:d0:f7:c1:21:65:de:20: cf:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CA:10:98:06:C0:97:79:03:F9:29:38:08:18:E3:67:75:7D:BF:1D X509v3 Authority Key Identifier: keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:5d:2f:2c:db:c2:88:a9:3c:c9:b9:8e:44:07:fc:12:31:8f: fe:42:6b:31:4c:03:85:54:64:7f:00:b7:fb:2a:35:79:49:a4: 0e:80:b8:76:bf:e7:fd:31:a8:49:25:b1:9f:48:de:a6:64:9f: 90:ff:ea:30:cd:23:8e:e7:51:57:7c:d9:d9:38:35:f3:ab:f3: 07:1b:f0:2c:f4:6c:65:91:66:92:10:4c:b9:bb:40:43:4a:66: db:7a:99:31:a9:a1:24:7d:40:72:5b:63:74:91:b9:f2:c0:d4: 38:af:20:68:a6:96:9e:66:89:37:61:dc:3f:ab:8b:9b:06:c4: bf:55:83:fc:b9:b3:e9:1f:8c:0e:ee:b1:97:42:a2:50:33:a8: 8a:66:42:d2:1c:c0:36:ce:cb:13:b9:db:30:d9:79:96:e2:b5: b0:d0:05:86:9a:47:aa:c0:f6:a1:2c:44:65:1e:ca:34:73:99: f7:56:9c:b4:cf:cc:a3:8d:86:54:6a:80:83:6f:e3:8d:a7:07: 6f:31:fd:7a:27:ec:78:60:ee:e7:87:ff:b1:12:1f:16:55:6b: 28:ea:70:91:16:d6:c0:fb:8e:97:29:f5:5e:ad:07:d0:db:1c: ea:71:81:09:7a:ef:96:56:2d:da:e6:9d:d1:3a:ce:e2:37:93: ac:2f:41:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0iYe+VhQZ4Bk9+HTwDy8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYmUzYzZkOTk4MTE4MTljZWRkZGNkMjdlNGJlMjViYzBj ZjUwNmYwHhcNMjUxMjA2MDQwMTEyWhcNMjUxMjA3MDQwMTEyWjAzMTEwLwYDVQQD EyhkM2NhMTA5ODA2YzA5Nzc5MDNmOTI5MzgwODE4ZTM2Nzc1N2RiZjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrOd7gJ81j2Yd7rgp0QEqVjZ2eaw lapyV2Q39u7PZ2WprLs5tVEMwVZ6H8y44sA+tYILoyre9Uy01vcVthzys/EOE72k nwoCQIyYI8VWvbV2crlKFKj9zIDrfYmrK1XzMS6jSSda9x6Wo0BqSBuN8wxYe/uU dXr0z3lUIFiKicfZk8ryIIzTGbuYkANYimUdcJyPlkryJ3ZeH/2AcnyBMbpaXsLh t4e0wXzTLTS+Z8ms5JXgEed2iOZEnBxYf/j2B+wl2mVs5bgZnu7P3WUXOv2VKrbr 1gNBmhPBVxvaM7xvd5DnaQ7A3GHZi2b0PAXpshSBnOsC8dD3wSFl3iDPCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPKEJgGwJd5A/kpOAgY42d1fb8dMB8GA1UdIwQY MBaAFMu+PG2ZgRgZzt3c0n5L4lvAz1BvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84NDhjOGItMGU5Yy00ZDZlLTg3M2Ut OGNmN2Q0NDkzMzU4LzEveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS84NDhjOGItMGU5Yy00ZDZlLTg3M2UtOGNmN2Q0NDkzMzU4 LzEveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGV0vLNvC iKk8ybmORAf8EjGP/kJrMUwDhVRkfwC3+yo1eUmkDoC4dr/n/TGoSSWxn0jepmSf kP/qMM0jjudRV3zZ2Tg186vzBxvwLPRsZZFmkhBMubtAQ0pm23qZMamhJH1Acltj dJG58sDUOK8gaKaWnmaJN2HcP6uLmwbEv1WD/Lmz6R+MDu6xl0KiUDOoimZC0hzA Ns7LE7nbMNl5luK1sNAFhppHqsD2oSxEZR7KNHOZ91actM/Mo42GVGqAg2/jjacH bzH9eifseGDu54f/sRIfFlVrKOpwkRbWwPuOlyn1Xq0H0Nsc6nGBCXrvllYt2uad 0TrO4jeTrC9BIA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:01:28 2025 by rpki-client