This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft File: ySi2NBei54heM4gakkqsnUCqymA.mft (raw, json) Hash identifier: IwNjuJGpBWwmCvrS5xVYXdPBtttZThi31VoUHcpDUPM= Subject key identifier: 0A:4D:E0:54:AB:7A:EB:DF:59:B6:A4:B3:24:09:49:93:2C:9A:C4:3C Authority key identifier: C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60 Certificate issuer: /CN=c928b63417a2e7885e33881a924aac9d40aaca60 Certificate serial: 019AF2771D3B46FCF0E5832AFB9D298BADBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft Manifest number: 05BF Signing time: Sat 06 Dec 2025 07:01:23 +0000 Manifest this update: Sat 06 Dec 2025 07:01:23 +0000 Manifest next update: Sun 07 Dec 2025 07:01:23 +0000 Files and hashes: 1: 6MMtZ0p0S3UErh0fFksqehnDVrk.roa (hash: aSANX+R++VciglglpvxzYCwuVSwi4gwoCdbTa6Ro3gg=) 2: ySi2NBei54heM4gakkqsnUCqymA.crl (hash: hUJGw0ReiFJk4dGlYhUSKtTSf43gSKNiKxlqmKvZsQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.crl rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:1d:3b:46:fc:f0:e5:83:2a:fb:9d:29:8b:ad:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c928b63417a2e7885e33881a924aac9d40aaca60 Validity Not Before: Dec 6 07:01:23 2025 GMT Not After : Dec 7 07:01:23 2025 GMT Subject: CN=0a4de054ab7aebdf59b6a4b3240949932c9ac43c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cf:de:91:4d:4b:cd:2b:ae:be:90:04:a8:06: a9:0e:ff:8c:cc:2f:29:54:61:39:82:80:98:f0:c4: 8b:20:e9:d4:39:00:c0:69:80:15:4e:58:2e:ef:aa: 3d:b5:73:b6:65:12:2e:95:8e:fd:23:f4:dc:df:a8: 0c:bd:34:68:3f:c1:12:ae:67:0b:71:8f:f2:c1:91: d1:a0:b7:9e:4a:68:5b:18:bd:d6:ef:3a:86:9f:62: 0a:a7:b1:21:68:42:bb:3e:f1:54:0e:ff:23:85:9e: 37:e0:cf:9e:93:ec:64:61:25:0e:27:e9:4f:98:ce: 38:91:62:39:ed:e2:99:fd:2e:79:ec:c5:2b:bc:b1: 6a:af:94:59:e1:3b:d9:4a:01:b1:76:b2:42:ed:78: aa:aa:2b:f3:51:32:4d:ce:a2:20:c0:29:99:6d:d8: 5b:b7:14:14:13:a3:10:e0:51:3d:c1:23:29:29:28: e2:38:a2:bb:8a:62:ae:76:93:4f:29:7b:3c:f1:b9: dc:b8:30:73:0c:95:d5:d0:70:9e:54:46:aa:f5:93: ae:ce:1b:b9:01:c7:d9:52:83:3f:b5:f1:05:af:1f: 14:a9:d2:a6:b4:f6:a0:26:33:c5:e4:81:7b:a2:3b: e5:d3:2b:ed:13:14:c3:60:53:a3:49:96:b9:0a:e9: 84:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4D:E0:54:AB:7A:EB:DF:59:B6:A4:B3:24:09:49:93:2C:9A:C4:3C X509v3 Authority Key Identifier: keyid:C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ac:a7:fb:43:da:67:cc:5e:43:66:18:fa:0c:30:03:d6:f7: 84:09:c4:08:fe:29:f8:42:7f:1f:f3:dd:45:db:29:ab:b0:5e: f1:3e:ed:c4:a2:29:ce:bd:d5:9b:4a:a9:fb:3c:c1:b2:e2:93: 76:8d:02:bb:98:96:13:e5:c6:aa:d3:b1:0a:d8:4c:af:b9:f2: 1b:86:82:29:90:27:0e:44:d3:de:95:d7:f6:b1:1e:51:6c:88: a1:5f:94:39:70:18:2d:10:70:a0:06:14:f2:d0:8e:d5:cf:c1: 0c:b2:02:34:77:be:8b:84:3f:b9:18:b3:3a:c9:bc:e7:cb:be: a9:e3:79:ec:34:f8:c2:c6:53:48:64:2e:6c:45:8b:c1:06:de: 58:13:ea:76:24:6a:95:4e:9b:95:2e:b2:48:b0:76:e5:7b:62: 36:3f:cd:e6:12:77:4a:2a:5a:41:2e:30:b6:3f:19:80:f1:29: e2:09:40:73:e2:87:e0:d0:0a:fe:f0:3c:12:8f:be:30:a0:22: 08:bc:72:e3:1e:55:c9:c8:7b:d8:ac:39:70:9d:79:d1:38:6c: cb:61:34:97:1f:0e:8c:6a:b7:15:a9:f1:82:37:68:67:54:12: 33:90:24:9c:dc:f2:77:5f:b7:e8:39:78:53:32:4d:e6:b2:67: a4:3b:66:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydx07Rvzw5YMq+50pi629MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MjhiNjM0MTdhMmU3ODg1ZTMzODgxYTkyNGFhYzlkNDBh YWNhNjAwHhcNMjUxMjA2MDcwMTIzWhcNMjUxMjA3MDcwMTIzWjAzMTEwLwYDVQQD EygwYTRkZTA1NGFiN2FlYmRmNTliNmE0YjMyNDA5NDk5MzJjOWFjNDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0c/ekU1LzSuuvpAEqAapDv+MzC8p VGE5goCY8MSLIOnUOQDAaYAVTlgu76o9tXO2ZRIulY79I/Tc36gMvTRoP8ESrmcL cY/ywZHRoLeeSmhbGL3W7zqGn2IKp7EhaEK7PvFUDv8jhZ434M+ek+xkYSUOJ+lP mM44kWI57eKZ/S557MUrvLFqr5RZ4TvZSgGxdrJC7XiqqivzUTJNzqIgwCmZbdhb txQUE6MQ4FE9wSMpKSjiOKK7imKudpNPKXs88bncuDBzDJXV0HCeVEaq9ZOuzhu5 AcfZUoM/tfEFrx8UqdKmtPagJjPF5IF7ojvl0yvtExTDYFOjSZa5CumECwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApN4FSreuvfWbaksyQJSZMsmsQ8MB8GA1UdIwQY MBaAFMkotjQXoueIXjOIGpJKrJ1AqspgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVNpMk5CZWk1NGhlTTRnYWtrcXNuVUNxeW1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi85ZDdlNmEtMGVhZS00MzRmLTlhMzUt OGM5NzE2MWUwNjJmLzEveVNpMk5CZWk1NGhlTTRnYWtrcXNuVUNxeW1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi85ZDdlNmEtMGVhZS00MzRmLTlhMzUtOGM5NzE2MWUwNjJm LzEveVNpMk5CZWk1NGhlTTRnYWtrcXNuVUNxeW1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6yn+0Pa Z8xeQ2YY+gwwA9b3hAnECP4p+EJ/H/PdRdspq7Be8T7txKIpzr3Vm0qp+zzBsuKT do0Cu5iWE+XGqtOxCthMr7nyG4aCKZAnDkTT3pXX9rEeUWyIoV+UOXAYLRBwoAYU 8tCO1c/BDLICNHe+i4Q/uRizOsm858u+qeN57DT4wsZTSGQubEWLwQbeWBPqdiRq lU6blS6ySLB25XtiNj/N5hJ3SipaQS4wtj8ZgPEp4glAc+KH4NAK/vA8Eo++MKAi CLxy4x5Vych72Kw5cJ150Thsy2E0lx8OjGq3FanxgjdoZ1QSM5AknNzyd1+36Dl4 UzJN5rJnpDtmkQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:52:53 2025 by rpki-client