This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft File: YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft (raw, json) Hash identifier: uzdMtyxPdM5VztrFs9zYng/4uI68grEoAVjcuxV3QP4= Subject key identifier: 37:82:95:DD:36:6A:2E:53:EE:D2:16:1F:B8:51:97:D3:DB:74:A1:17 Authority key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53 Certificate issuer: /CN=62117a1e6f699c322b6b983494f42c2209127553 Certificate serial: 019AF1D1F3BF53F755F5CA8CC0B243B06F13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 04:00:59 +0000 Manifest this update: Sat 06 Dec 2025 04:00:59 +0000 Manifest next update: Sun 07 Dec 2025 04:00:59 +0000 Files and hashes: 1: IwNnMumHuRi32I7ksfRxTLj5SGU.roa (hash: CRwLwpZrZ0WbgGxRhGmhgHh8+Fm0a0d8zmfWAizQF84=) 2: X1s8zvuHJ81hdIgP19R2zatnWy0.roa (hash: zIp2gzAGnioL2V7YTZ/nOIwk4pKLhlEEq3/Z8mzK0KQ=) 3: YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl (hash: +ygAaJY8746a3rA+0Z1Kr8bnlVbYaGnEkZ+G0sWL3p0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f3:bf:53:f7:55:f5:ca:8c:c0:b2:43:b0:6f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62117a1e6f699c322b6b983494f42c2209127553 Validity Not Before: Dec 6 04:00:59 2025 GMT Not After : Dec 7 04:00:59 2025 GMT Subject: CN=378295dd366a2e53eed2161fb85197d3db74a117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c4:e8:96:77:2f:5a:d7:8d:5c:a3:1c:d7:83: a1:72:b0:93:15:20:9c:75:3a:c4:ec:f4:78:56:c9: 71:3e:9b:f8:6a:87:d1:cd:c8:b0:c8:ef:e1:a1:1a: 60:2a:27:07:df:5b:cb:7b:b1:db:fa:e4:b1:17:58: cb:1f:5b:f2:b0:4f:d4:82:a2:ff:b1:7f:00:d9:75: a8:87:ae:46:1f:f8:a4:21:2f:15:75:6b:69:eb:71: 8f:ab:e9:09:9f:a8:b1:03:12:08:b3:43:1c:f1:d7: d8:6c:92:3d:f1:08:a6:00:16:53:ae:eb:be:70:16: 60:16:46:59:90:47:05:27:2a:3d:b6:d5:35:cf:04: 33:4c:ef:37:56:88:74:d5:8c:69:42:48:ff:ad:be: 0c:e1:51:0d:99:a6:50:a5:40:3e:e6:31:19:38:47: 2f:8c:d3:55:b8:cf:12:8b:35:0d:41:61:19:1f:cf: ad:ee:59:69:b5:dd:39:29:cb:89:1d:c5:61:66:a7: 2b:99:c4:a3:1b:0f:05:52:75:66:5d:3a:f4:d5:60: c6:89:8c:35:5a:d0:af:3f:1e:bb:c7:47:fa:e7:1e: 1c:63:63:48:bf:2b:a8:94:07:20:f2:18:2b:8c:74: 15:97:34:8a:c2:9a:08:61:fc:75:b3:e3:c6:53:0d: ec:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:82:95:DD:36:6A:2E:53:EE:D2:16:1F:B8:51:97:D3:DB:74:A1:17 X509v3 Authority Key Identifier: keyid:62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:19:98:d3:51:d2:69:0a:db:8a:f4:c5:ec:ce:b8:92:1b:15: b0:27:03:ae:e9:55:37:e6:39:3c:d8:fa:a9:8b:33:b8:d3:62: 66:1e:05:71:2e:b2:2e:66:9e:c6:d0:c7:a2:73:d9:1d:9f:f3: b1:1c:66:0a:21:db:0a:33:f6:bf:48:c2:bf:54:4d:0a:ed:02: 14:83:f9:4e:e1:c6:2b:e4:09:56:98:b9:7a:08:f4:74:5e:b6: 48:64:69:a4:d2:b5:f9:50:52:a3:42:b0:74:5a:37:24:bf:7f: 92:a4:09:b0:df:8d:9e:24:4b:61:0a:e0:ef:82:6d:28:ec:02: 4f:d1:62:4d:7a:12:87:a8:43:53:c6:73:98:0b:00:6c:8c:b6: 77:03:51:85:3d:dd:93:3b:52:ab:d9:5d:db:ca:36:e3:35:55: 39:2c:49:d9:6c:a9:f1:1f:5a:67:8f:49:cf:77:ea:f8:7b:56: 0f:39:27:25:96:c8:57:8b:25:38:a5:8a:8b:4b:27:0c:77:86: 9b:6f:70:3c:2e:34:6c:56:f0:8f:29:a0:3f:ae:6f:f7:dd:aa: 09:d0:c7:ae:a4:a9:64:7c:4d:c1:68:78:b6:88:09:c1:24:31: 46:25:47:1e:ef:cf:6c:2b:ff:ad:a7:fc:85:35:fd:98:29:c8: 98:82:28:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fO/U/dV9cqMwLJDsG8TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMTE3YTFlNmY2OTljMzIyYjZiOTgzNDk0ZjQyYzIyMDkx Mjc1NTMwHhcNMjUxMjA2MDQwMDU5WhcNMjUxMjA3MDQwMDU5WjAzMTEwLwYDVQQD EygzNzgyOTVkZDM2NmEyZTUzZWVkMjE2MWZiODUxOTdkM2RiNzRhMTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusTolncvWteNXKMc14OhcrCTFSCc dTrE7PR4VslxPpv4aofRzciwyO/hoRpgKicH31vLe7Hb+uSxF1jLH1vysE/UgqL/ sX8A2XWoh65GH/ikIS8VdWtp63GPq+kJn6ixAxIIs0Mc8dfYbJI98QimABZTruu+ cBZgFkZZkEcFJyo9ttU1zwQzTO83Voh01YxpQkj/rb4M4VENmaZQpUA+5jEZOEcv jNNVuM8SizUNQWEZH8+t7llptd05KcuJHcVhZqcrmcSjGw8FUnVmXTr01WDGiYw1 WtCvPx67x0f65x4cY2NIvyuolAcg8hgrjHQVlzSKwpoIYfx1s+PGUw3suQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDeCld02ai5T7tIWH7hRl9PbdKEXMB8GA1UdIwQY MBaAFGIReh5vaZwyK2uYNJT0LCIJEnVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWhGNkhtOXBuRElyYTVnMGxQUXNJZ2tTZFZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83MGVlMjEtZDkzZi00YTcxLTg0NzQt NWJjYzg0NThhYTJjLzEvWWhGNkhtOXBuRElyYTVnMGxQUXNJZ2tTZFZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS83MGVlMjEtZDkzZi00YTcxLTg0NzQtNWJjYzg0NThhYTJj LzEvWWhGNkhtOXBuRElyYTVnMGxQUXNJZ2tTZFZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsxmY01HS aQrbivTF7M64khsVsCcDrulVN+Y5PNj6qYszuNNiZh4FcS6yLmaextDHonPZHZ/z sRxmCiHbCjP2v0jCv1RNCu0CFIP5TuHGK+QJVpi5egj0dF62SGRppNK1+VBSo0Kw dFo3JL9/kqQJsN+NniRLYQrg74JtKOwCT9FiTXoSh6hDU8ZzmAsAbIy2dwNRhT3d kztSq9ld28o24zVVOSxJ2Wyp8R9aZ49Jz3fq+HtWDzknJZbIV4slOKWKi0snDHeG m29wPC40bFbwjymgP65v992qCdDHrqSpZHxNwWh4togJwSQxRiVHHu/PbCv/raf8 hTX9mCnImIIoUg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:51 2025 by rpki-client