This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft File: YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft (raw, json) Hash identifier: aT8EUdWjXuI3CY1PSvtKqPDP6UfBbsqYYtlv9Tnwcr8= Subject key identifier: F3:6D:AA:F0:1B:E7:90:C7:62:E7:D3:92:87:77:D3:96:28:81:20:D8 Authority key identifier: 61:65:8D:5E:FA:2A:0A:3C:36:C9:23:93:74:25:8A:98:F7:FD:A3:88 Certificate issuer: /CN=61658d5efa2a0a3c36c9239374258a98f7fda388 Certificate serial: 019AF1641C424156DC820CA05973894EBBE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft Manifest number: 0EEA Signing time: Sat 06 Dec 2025 02:01:01 +0000 Manifest this update: Sat 06 Dec 2025 02:01:01 +0000 Manifest next update: Sun 07 Dec 2025 02:01:01 +0000 Files and hashes: 1: YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl (hash: LN/cN3ndaCp1AvVJfeD2FG1wg4VCtyMg4wXOGYaY3dI=) 2: dC8gOmayB-chyoQvohvN-0T41MI.roa (hash: CEU2++abo0F1b85LSOtJ8mERuDAvIcX+n86rAzfnRdQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:1c:42:41:56:dc:82:0c:a0:59:73:89:4e:bb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61658d5efa2a0a3c36c9239374258a98f7fda388 Validity Not Before: Dec 6 02:01:01 2025 GMT Not After : Dec 7 02:01:01 2025 GMT Subject: CN=f36daaf01be790c762e7d3928777d396288120d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ba:e0:2d:a7:54:46:6b:13:e7:33:ba:0c:79: f0:cc:aa:00:93:31:55:cb:cb:e8:31:e7:5c:cc:b9: f5:b9:81:ae:30:5c:13:29:cf:89:78:e4:8b:c0:1d: 59:c6:e3:d6:3e:9c:16:3a:a9:59:ed:c3:b3:eb:cb: a7:81:cf:94:66:bc:e1:d8:24:13:98:91:d1:da:31: 43:8c:24:50:df:71:8e:c7:fc:5d:a3:d0:6a:db:ee: 29:a1:fe:59:63:a6:9f:3b:7f:54:ef:07:46:f9:9c: 81:cc:c0:5d:30:2e:aa:fc:45:e4:a2:2e:29:89:b3: 00:fb:9e:86:37:f7:cb:33:ab:4c:31:fb:79:52:1e: 2c:ae:5f:3a:e6:02:16:b7:df:21:9f:e2:1b:ba:5e: b1:6b:ce:50:79:cb:7a:fc:70:00:dc:74:18:94:c4: 1f:a8:75:16:ba:56:e3:97:38:5e:67:99:ad:77:8e: b7:3d:ab:68:29:84:90:37:44:88:a5:34:b7:0c:d9: 24:d8:3e:2f:db:59:98:ac:dc:32:38:98:7a:f4:53: c3:f3:7b:f2:e3:da:dd:e9:6c:0e:84:ff:e5:d6:3b: 06:ee:b7:89:68:34:a8:c0:d4:81:22:a7:89:93:3d: 0a:78:0d:01:c3:97:58:b5:16:72:02:9a:29:9c:5f: 25:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:6D:AA:F0:1B:E7:90:C7:62:E7:D3:92:87:77:D3:96:28:81:20:D8 X509v3 Authority Key Identifier: keyid:61:65:8D:5E:FA:2A:0A:3C:36:C9:23:93:74:25:8A:98:F7:FD:A3:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:c7:68:4d:f1:27:d4:dd:3f:d5:97:b9:63:7d:9b:70:be:da: 04:0d:e9:71:28:2c:21:03:6b:13:aa:4a:15:15:72:53:99:6f: c9:2e:f9:80:5e:97:0c:f3:05:51:87:1e:80:6d:23:45:c4:d1: 45:2b:18:e3:e0:4a:57:5d:ae:48:8b:e9:6c:ca:f9:54:47:aa: 90:f8:10:b5:6b:a1:af:62:24:59:ce:3c:e9:e4:77:e6:e3:7c: 2e:ad:03:dd:f0:07:62:b2:78:fe:14:50:3c:73:dd:22:00:7b: 40:47:3e:e4:8e:29:c7:e0:50:7e:83:e5:63:51:df:bb:8f:ac: f7:2f:c4:05:14:54:68:9f:97:4a:f5:7e:b7:24:61:16:63:a3: a6:0b:f2:88:ac:93:e2:53:f0:cc:4e:9e:28:20:d2:f6:cf:16: ab:90:1f:ee:9f:42:84:f9:c3:73:74:bf:fa:f3:f6:1d:c0:7d: 61:9d:c7:95:9e:7d:85:90:81:86:10:fe:24:ae:da:68:0c:0a: 5d:cd:2e:d7:ae:ad:52:b3:55:11:93:76:04:0c:e1:91:e2:67: 06:25:6f:0a:d2:40:05:25:37:83:21:3e:8e:b1:8c:41:02:fb: e7:c2:23:1d:af:84:1e:1c:3f:86:4f:56:16:1f:c3:9f:57:28: f2:2e:5a:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBxCQVbcggygWXOJTrvgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNjU4ZDVlZmEyYTBhM2MzNmM5MjM5Mzc0MjU4YTk4Zjdm ZGEzODgwHhcNMjUxMjA2MDIwMTAxWhcNMjUxMjA3MDIwMTAxWjAzMTEwLwYDVQQD EyhmMzZkYWFmMDFiZTc5MGM3NjJlN2QzOTI4Nzc3ZDM5NjI4ODEyMGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrrgLadURmsT5zO6DHnwzKoAkzFV y8voMedczLn1uYGuMFwTKc+JeOSLwB1ZxuPWPpwWOqlZ7cOz68ungc+UZrzh2CQT mJHR2jFDjCRQ33GOx/xdo9Bq2+4pof5ZY6afO39U7wdG+ZyBzMBdMC6q/EXkoi4p ibMA+56GN/fLM6tMMft5Uh4srl865gIWt98hn+Ibul6xa85Qect6/HAA3HQYlMQf qHUWulbjlzheZ5mtd463PatoKYSQN0SIpTS3DNkk2D4v21mYrNwyOJh69FPD83vy 49rd6WwOhP/l1jsG7reJaDSowNSBIqeJkz0KeA0Bw5dYtRZyApopnF8lhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNtqvAb55DHYufTkod305YogSDYMB8GA1UdIwQY MBaAFGFljV76Kgo8Nskjk3Qlipj3/aOIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVdXTlh2b3FDancyeVNPVGRDV0ttUGY5bzRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80YjEyOGQtZWQ0Ny00MWMxLWFhZjAt ZGZlNmM1ZWIxZjdjLzEvWVdXTlh2b3FDancyeVNPVGRDV0ttUGY5bzRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS80YjEyOGQtZWQ0Ny00MWMxLWFhZjAtZGZlNmM1ZWIxZjdj LzEvWVdXTlh2b3FDancyeVNPVGRDV0ttUGY5bzRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACcdoTfEn 1N0/1Ze5Y32bcL7aBA3pcSgsIQNrE6pKFRVyU5lvyS75gF6XDPMFUYcegG0jRcTR RSsY4+BKV12uSIvpbMr5VEeqkPgQtWuhr2IkWc486eR35uN8Lq0D3fAHYrJ4/hRQ PHPdIgB7QEc+5I4px+BQfoPlY1Hfu4+s9y/EBRRUaJ+XSvV+tyRhFmOjpgvyiKyT 4lPwzE6eKCDS9s8Wq5Af7p9ChPnDc3S/+vP2HcB9YZ3HlZ59hZCBhhD+JK7aaAwK Xc0u166tUrNVEZN2BAzhkeJnBiVvCtJABSU3gyE+jrGMQQL758IjHa+EHhw/hk9W Fh/Dn1co8i5aAw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:10 2025 by rpki-client