This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft File: 0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft (raw, json) Hash identifier: f/6clmaKrrATf96dxMfb5o3HJy8zGklwCMhBpr609J4= Subject key identifier: B0:70:C3:55:24:4B:7C:53:2C:AC:53:C7:1F:3B:71:97:C3:70:DC:D6 Authority key identifier: D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54 Certificate issuer: /CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054 Certificate serial: 019AF2AD939F186EDE734074E2473E2D22E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft Manifest number: 0848 Signing time: Sat 06 Dec 2025 08:00:53 +0000 Manifest this update: Sat 06 Dec 2025 08:00:53 +0000 Manifest next update: Sun 07 Dec 2025 08:00:53 +0000 Files and hashes: 1: 0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl (hash: 0iCngx6sUM9be0xAVNUH9bjEjP9zEfOxHcJGIwr/Y1o=) 2: 13rjk7Vk1R6bM8NZzwpn_wkWd18.roa (hash: eMrnrbTjuA+DpnVyQk46VnyH6+JrKX3BnnGUUHzyW6I=) 3: 9Hxo6fI9QehJzkwT4jlRnU3srEg.roa (hash: D8qzDz1wFMEwEqdNljLUBKQQ6VmjewGRNrI/OibTYlU=) 4: HANmGqWDLzD8xzgH1N2qbf2RpVU.roa (hash: w2O64hJj+mcPhVqUkjApVC5JtsigQzHQewLezmoT9do=) 5: ap5KNPIgh8eRLDgd9o9o98m3A_g.roa (hash: wFA6DMYFq5ZeJnSJaOkvybASHTJl6BSASaBH5ShXruc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:93:9f:18:6e:de:73:40:74:e2:47:3e:2d:22:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054 Validity Not Before: Dec 6 08:00:53 2025 GMT Not After : Dec 7 08:00:53 2025 GMT Subject: CN=b070c355244b7c532cac53c71f3b7197c370dcd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1a:3a:c6:07:18:46:d9:1a:00:29:92:8d:4f: d0:b7:5d:c5:08:fb:d1:d8:ad:21:fe:88:d1:13:37: 30:96:5e:c5:12:27:6e:de:a9:f2:5d:39:05:c8:d2: 21:e2:4c:70:14:21:57:70:4a:33:4f:44:ec:8f:a6: ee:53:c0:1a:74:42:c1:6e:7c:12:3b:6c:a6:0d:ac: c9:48:fc:ed:e2:01:1e:c3:8b:9e:be:aa:ab:ba:47: f7:04:b9:aa:32:e9:35:c7:6b:61:a3:e3:ac:27:6f: f3:d1:00:ed:03:f3:41:be:5e:00:c8:ea:f5:c5:36: 91:94:ee:a5:07:52:9b:9d:d1:82:89:da:72:da:46: 96:f3:e1:8e:03:f2:4a:1a:1c:ce:f6:e2:c9:61:6b: 66:38:3d:10:d1:ea:23:23:7e:2c:13:77:30:dd:9e: af:e9:a1:2f:0c:94:26:38:a7:f5:45:86:f9:d0:89: 54:68:70:9f:1f:56:9c:8f:ff:7e:d1:f2:08:9a:35: 0e:16:90:a9:58:c8:c4:28:a6:28:ac:42:54:d5:24: a9:de:2a:93:e2:08:0c:95:b9:be:b3:8b:08:cb:b4: 14:c0:b8:36:c5:a0:33:0f:a4:7c:d9:42:1f:1b:24: 6e:99:12:58:ba:59:7a:7b:98:45:a7:d3:56:2e:0d: 95:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:70:C3:55:24:4B:7C:53:2C:AC:53:C7:1F:3B:71:97:C3:70:DC:D6 X509v3 Authority Key Identifier: keyid:D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:1a:cb:8f:c3:14:b8:68:6c:ae:aa:bd:0b:c8:8d:a0:a8:dc: 93:d5:b8:f6:99:b5:a5:9c:35:5b:33:6c:98:45:ef:28:93:6e: 83:5c:7b:26:d4:ae:f2:01:ce:c7:2d:dc:23:19:91:7d:54:fb: 1e:a8:df:24:86:96:d8:06:0c:e5:b4:9f:62:0f:a8:f2:53:e0: eb:c6:e4:f2:70:6a:3b:a2:4a:68:ba:02:55:f6:1c:50:a6:99: 80:25:b8:6d:b2:64:5c:3d:9c:4f:7d:c8:ee:9f:94:c3:cb:27: 0f:a1:dc:83:d7:ae:2a:f6:f8:6d:ed:13:37:be:f1:1e:15:c2: 3a:30:6c:01:64:03:ab:d9:9f:54:8b:39:e3:07:0b:e6:9a:c0: 61:54:4b:4e:53:c3:c3:be:5e:65:28:e7:26:fd:47:43:aa:83: 68:5d:7f:6c:bc:98:09:24:e7:61:78:45:8e:1d:c1:55:b3:12: 3b:c5:77:fd:11:8c:9d:4e:3f:07:d7:62:aa:b5:d4:0e:ea:59: 2b:6a:68:da:ba:6e:e0:ca:e8:c7:6d:e8:19:6a:64:c8:4d:6c: 50:ae:46:cd:9e:86:00:27:7f:78:f2:87:9b:36:14:ab:3f:65: 4d:92:2f:d2:05:49:29:52:6d:a5:43:82:15:df:47:fe:3b:5b: be:b1:ae:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZOfGG7ec0B04kc+LSLpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZjYwYjE3NmQ5NWZkOGQzZDBiZDY1YzVkMTJjODM5NDFm N2YwNTQwHhcNMjUxMjA2MDgwMDUzWhcNMjUxMjA3MDgwMDUzWjAzMTEwLwYDVQQD EyhiMDcwYzM1NTI0NGI3YzUzMmNhYzUzYzcxZjNiNzE5N2MzNzBkY2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRo6xgcYRtkaACmSjU/Qt13FCPvR 2K0h/ojREzcwll7FEidu3qnyXTkFyNIh4kxwFCFXcEozT0Tsj6buU8AadELBbnwS O2ymDazJSPzt4gEew4uevqqrukf3BLmqMuk1x2tho+OsJ2/z0QDtA/NBvl4AyOr1 xTaRlO6lB1KbndGCidpy2kaW8+GOA/JKGhzO9uLJYWtmOD0Q0eojI34sE3cw3Z6v 6aEvDJQmOKf1RYb50IlUaHCfH1acj/9+0fIImjUOFpCpWMjEKKYorEJU1SSp3iqT 4ggMlbm+s4sIy7QUwLg2xaAzD6R82UIfGyRumRJYull6e5hFp9NWLg2VkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBww1UkS3xTLKxTxx87cZfDcNzWMB8GA1UdIwQY MBaAFNP2Cxdtlf2NPQvWXF0SyDlB9/BUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMF9ZTEYyMlZfWTA5QzlaY1hSTElPVUgzOEZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iYzVmZDctM2U2My00OTQ1LWFmYjct MTE3NWU1YTA3YTU1LzEvMF9ZTEYyMlZfWTA5QzlaY1hSTElPVUgzOEZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9iYzVmZDctM2U2My00OTQ1LWFmYjctMTE3NWU1YTA3YTU1 LzEvMF9ZTEYyMlZfWTA5QzlaY1hSTElPVUgzOEZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOBrLj8MU uGhsrqq9C8iNoKjck9W49pm1pZw1WzNsmEXvKJNug1x7JtSu8gHOxy3cIxmRfVT7 HqjfJIaW2AYM5bSfYg+o8lPg68bk8nBqO6JKaLoCVfYcUKaZgCW4bbJkXD2cT33I 7p+Uw8snD6Hcg9euKvb4be0TN77xHhXCOjBsAWQDq9mfVIs54wcL5prAYVRLTlPD w75eZSjnJv1HQ6qDaF1/bLyYCSTnYXhFjh3BVbMSO8V3/RGMnU4/B9diqrXUDupZ K2po2rpu4Mrox23oGWpkyE1sUK5GzZ6GACd/ePKHmzYUqz9lTZIv0gVJKVJtpUOC Fd9H/jtbvrGuoA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:18 2025 by rpki-client