This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft File: yex331ntcqVFfezmpT0F7QrmAKo.mft (raw, json) Hash identifier: NESva4teLQIbUitGGLPOjdnSgsqpB/WdrMvyE8pUlqE= Subject key identifier: 20:92:DB:97:82:D4:B9:E1:96:27:60:AB:B2:4C:71:6E:46:40:6C:3A Authority key identifier: C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA Certificate issuer: /CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa Certificate serial: 019AF23F87BFC1FD6144F09858076DCC261D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:00:41 +0000 Manifest this update: Sat 06 Dec 2025 06:00:41 +0000 Manifest next update: Sun 07 Dec 2025 06:00:41 +0000 Files and hashes: 1: usN8GZVfJ54q0l8hKewfBSWmGHw.roa (hash: IakOdZo+PiFdg1ApCygqDDOunMse1hhehFbuFFIfZ5o=) 2: yex331ntcqVFfezmpT0F7QrmAKo.crl (hash: NdLjzNS1n09ggrB9SLP3dDGiICtayGT7cJhydndvWp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.crl rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:87:bf:c1:fd:61:44:f0:98:58:07:6d:cc:26:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa Validity Not Before: Dec 6 06:00:41 2025 GMT Not After : Dec 7 06:00:41 2025 GMT Subject: CN=2092db9782d4b9e1962760abb24c716e46406c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7d:2e:9c:07:ac:b3:42:bc:bc:66:73:24:22: 42:e3:2b:de:64:72:c5:0a:67:f2:ed:ea:ad:47:93: a0:58:95:7c:a7:48:2a:5f:8e:ef:d6:29:60:9a:d1: 2d:f9:e8:22:8f:1f:a8:2e:50:87:ce:97:e6:eb:d1: 18:22:70:94:00:f6:6e:e6:80:39:e1:a6:cf:77:e9: 4d:8d:c8:51:06:55:51:1d:f5:7b:91:53:eb:e7:f1: d6:9d:c1:83:16:48:4c:a8:88:5a:98:31:7f:26:f2: 0b:3a:c5:63:b4:ac:fe:16:44:93:ea:52:4e:72:1f: db:e2:47:04:06:00:22:fc:06:d1:aa:cb:74:8c:c3: 15:cc:01:f3:a0:35:97:aa:2a:be:a8:ef:44:00:82: ea:59:18:df:90:14:01:79:c8:87:74:b0:c4:e2:02: c4:1f:c9:51:b2:3a:3b:32:9d:9e:e8:a7:56:b3:f6: 75:42:70:36:2b:2f:8f:34:d3:aa:59:42:79:94:5e: dc:de:52:9b:dd:7e:f0:84:35:07:99:56:8d:dc:9d: 11:cc:7e:0c:b5:24:b9:d5:05:e4:9c:fe:e7:33:44: d7:8b:fa:23:3b:4d:a7:d8:b3:f0:54:b0:1a:a7:8b: 97:45:61:25:f8:8b:7a:37:4b:c9:05:44:e4:55:1f: 1d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:92:DB:97:82:D4:B9:E1:96:27:60:AB:B2:4C:71:6E:46:40:6C:3A X509v3 Authority Key Identifier: keyid:C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:9e:30:ee:ef:55:66:a2:19:d8:7c:66:9a:f6:b6:89:81:e7: bd:87:14:21:00:01:b1:74:00:a0:6f:61:2e:db:ca:54:32:be: 27:8b:34:b1:ca:8f:9a:b4:9d:4b:bf:c4:8e:12:77:57:1c:ef: d3:d9:7b:36:bd:b6:ca:1e:07:65:18:91:e3:98:db:1c:9d:bc: b0:0d:71:0c:51:fe:3d:9c:5a:0b:18:09:4e:63:99:96:89:da: fe:99:16:26:18:9e:7f:e0:8f:16:2b:60:8c:88:b9:5f:0a:2f: 1c:93:e2:75:12:79:68:2c:ad:c0:95:75:ce:0d:93:04:67:76: 82:b8:72:70:03:c1:ae:51:1f:d9:59:49:a9:2f:ea:97:6d:fb: 1d:1a:9a:fc:31:5f:53:eb:49:f1:52:1b:8a:3c:47:9d:38:b0: dc:2a:2e:54:e4:36:7f:59:a4:ba:6f:57:c5:f0:5a:66:40:1a: 90:93:fc:8d:9e:74:55:7e:39:21:05:79:c5:15:dc:0d:27:c8: 32:83:16:fa:ba:25:b1:4f:1a:fb:ff:5a:4d:72:8c:54:b8:92: 36:a1:e6:59:77:cb:41:06:54:82:03:1e:25:60:92:cd:8a:34: 3d:21:31:3b:86:4d:89:05:7d:05:31:b3:cc:5d:b7:4d:a1:d6: c1:b8:62:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4e/wf1hRPCYWAdtzCYdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZWM3N2RmNTllZDcyYTU0NTdkZWNlNmE1M2QwNWVkMGFl NjAwYWEwHhcNMjUxMjA2MDYwMDQxWhcNMjUxMjA3MDYwMDQxWjAzMTEwLwYDVQQD EygyMDkyZGI5NzgyZDRiOWUxOTYyNzYwYWJiMjRjNzE2ZTQ2NDA2YzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3H0unAess0K8vGZzJCJC4yveZHLF Cmfy7eqtR5OgWJV8p0gqX47v1ilgmtEt+egijx+oLlCHzpfm69EYInCUAPZu5oA5 4abPd+lNjchRBlVRHfV7kVPr5/HWncGDFkhMqIhamDF/JvILOsVjtKz+FkST6lJO ch/b4kcEBgAi/AbRqst0jMMVzAHzoDWXqiq+qO9EAILqWRjfkBQBeciHdLDE4gLE H8lRsjo7Mp2e6KdWs/Z1QnA2Ky+PNNOqWUJ5lF7c3lKb3X7whDUHmVaN3J0RzH4M tSS51QXknP7nM0TXi/ojO02n2LPwVLAap4uXRWEl+It6N0vJBUTkVR8drwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCS25eC1Lnhlidgq7JMcW5GQGw6MB8GA1UdIwQY MBaAFMnsd99Z7XKlRX3s5qU9Be0K5gCqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWV4MzMxbnRjcVZGZmV6bXBUMEY3UXJtQUtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9mOGVhODQtYzBkYi00YzVhLWEzYzYt M2ViMDllZGUzZWQ1LzEveWV4MzMxbnRjcVZGZmV6bXBUMEY3UXJtQUtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9mOGVhODQtYzBkYi00YzVhLWEzYzYtM2ViMDllZGUzZWQ1 LzEveWV4MzMxbnRjcVZGZmV6bXBUMEY3UXJtQUtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvZ4w7u9V ZqIZ2Hxmmva2iYHnvYcUIQABsXQAoG9hLtvKVDK+J4s0scqPmrSdS7/EjhJ3Vxzv 09l7Nr22yh4HZRiR45jbHJ28sA1xDFH+PZxaCxgJTmOZlona/pkWJhief+CPFitg jIi5XwovHJPidRJ5aCytwJV1zg2TBGd2grhycAPBrlEf2VlJqS/ql237HRqa/DFf U+tJ8VIbijxHnTiw3CouVOQ2f1mkum9XxfBaZkAakJP8jZ50VX45IQV5xRXcDSfI MoMW+rolsU8a+/9aTXKMVLiSNqHmWXfLQQZUggMeJWCSzYo0PSExO4ZNiQV9BTGz zF23TaHWwbhikA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:18:41 2025 by rpki-client