This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft File: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft (raw, json) Hash identifier: AlgXosDy6G8fiAXVdAoBk3rC7B6I4HSHUqC1qaXf7Rs= Subject key identifier: 19:C9:AB:58:10:66:5D:17:42:26:51:33:8E:95:7B:8A:95:F0:7E:3A Authority key identifier: C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94 Certificate issuer: /CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94 Certificate serial: 019AF12E44582CCBA6EA8EBCFA547905AB4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft Manifest number: 13D4 Signing time: Sat 06 Dec 2025 01:02:12 +0000 Manifest this update: Sat 06 Dec 2025 01:02:12 +0000 Manifest next update: Sun 07 Dec 2025 01:02:12 +0000 Files and hashes: 1: APe792PPzgn2UcG2RsKnM9NZvXY.roa (hash: P5YJH0mHT12JV4knVxcd215g8BRGbGqkMZPdkHPu8r8=) 2: VgTi5tlMVXsu097Zaw82JIsKmhI.roa (hash: yaSgz1DC1PHPNVrBtX09+Wm5+D0DsnRGuOyAfnA8DC0=) 3: olC5ZpSEtozZndm4qi7fm722epU.roa (hash: osI53NMsoiUBoOeQCVmzdMQWvODeVRAe3gG8Sio/M8A=) 4: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl (hash: MTqFhCW/vCxD81c7GT61Ppt+dGiqZvjgclarIcHfc10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:44:58:2c:cb:a6:ea:8e:bc:fa:54:79:05:ab:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94 Validity Not Before: Dec 6 01:02:12 2025 GMT Not After : Dec 7 01:02:12 2025 GMT Subject: CN=19c9ab5810665d17422651338e957b8a95f07e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ee:76:7b:7a:63:2f:9e:32:b3:e7:e8:04:c6: 1d:22:64:6c:a0:0e:9d:c2:1b:9a:12:2b:f6:70:79: eb:f2:38:40:8a:0b:49:09:26:13:4d:ec:9f:de:85: 41:29:0e:d5:28:44:ed:c5:e8:bc:6a:a2:c0:e7:46: de:9a:16:41:a6:49:b6:63:f1:ea:29:b6:c2:3a:f3: f8:5e:47:40:98:e8:94:d6:a6:2a:c4:dd:f1:46:47: 38:9f:f6:eb:a2:1d:9e:53:fc:df:d1:69:42:52:67: ec:a3:b7:43:3d:8e:0b:f6:2c:fc:90:e9:91:ea:45: 8f:0f:28:b4:d5:fa:dd:d8:5f:7d:93:bd:9b:a7:89: e3:78:09:22:88:68:10:48:94:99:d8:19:5f:29:72: 26:af:8a:27:84:b7:9b:8c:e6:25:b0:fe:2c:f5:53: d8:17:69:0a:b1:bd:6a:c7:c8:77:0d:4f:68:53:90: f3:04:19:d5:e4:d8:48:97:95:2f:be:cf:28:e8:cb: 10:36:2c:1f:27:f1:1b:f0:36:41:20:d6:8b:a9:48: a4:60:fd:32:dd:c0:56:e0:ca:e8:7a:5b:e6:1e:cd: 25:a8:c7:62:d6:43:d8:cb:90:25:73:81:ff:34:0b: b6:3c:c5:b5:7f:34:7f:02:93:0e:58:cc:33:23:91: 76:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C9:AB:58:10:66:5D:17:42:26:51:33:8E:95:7B:8A:95:F0:7E:3A X509v3 Authority Key Identifier: keyid:C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:18:6b:7e:c3:c8:d6:4d:7a:1f:8d:58:cd:d3:ea:3b:37:37: ee:cc:32:45:82:cf:bf:38:49:c3:bc:ef:dc:82:7f:fc:86:98: eb:8a:f4:50:8d:8e:e1:9d:85:3b:86:50:e1:2e:7a:43:0b:41: ab:ed:15:73:83:01:4c:95:7a:88:fa:6c:84:61:e6:34:1e:2d: 9d:49:c0:1e:88:bb:80:ae:91:d9:f9:29:ce:9a:d7:76:6b:32: b5:2f:76:a9:0f:13:0d:fe:73:d4:a7:92:e3:f9:73:78:00:00: a4:77:d9:1a:3d:5b:e4:84:bf:69:f7:ae:d6:b7:60:a4:55:36: a5:f6:15:ab:2c:91:83:7c:41:65:77:13:fa:a4:12:f2:a5:fa: 2a:86:68:50:7e:de:99:e5:3d:4a:42:0e:8e:0e:c5:2b:40:fe: fe:c7:1c:5a:67:44:91:4f:78:27:f2:96:7e:1b:90:91:0e:1a: 60:96:f2:e9:df:90:30:6a:48:06:85:4e:3b:e4:18:97:fa:f0: 30:51:60:93:0c:d7:8f:0b:0a:e9:49:64:ed:d0:c6:df:8a:1b: db:56:01:4d:92:18:e2:59:ba:fd:af:59:14:15:44:73:74:d7: 60:e6:47:63:4b:08:49:e3:73:7c:02:5a:3d:81:9a:e4:fb:21: 7e:53:0c:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLkRYLMum6o68+lR5BatLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5NTBkN2IxOTc1YTM3MDNhZTI3YjMxYWQyZjkzMmFlNDZh NGNjOTQwHhcNMjUxMjA2MDEwMjEyWhcNMjUxMjA3MDEwMjEyWjAzMTEwLwYDVQQD EygxOWM5YWI1ODEwNjY1ZDE3NDIyNjUxMzM4ZTk1N2I4YTk1ZjA3ZTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+52e3pjL54ys+foBMYdImRsoA6d whuaEiv2cHnr8jhAigtJCSYTTeyf3oVBKQ7VKETtxei8aqLA50bemhZBpkm2Y/Hq KbbCOvP4XkdAmOiU1qYqxN3xRkc4n/broh2eU/zf0WlCUmfso7dDPY4L9iz8kOmR 6kWPDyi01frd2F99k72bp4njeAkiiGgQSJSZ2BlfKXImr4onhLebjOYlsP4s9VPY F2kKsb1qx8h3DU9oU5DzBBnV5NhIl5Uvvs8o6MsQNiwfJ/Eb8DZBINaLqUikYP0y 3cBW4MroelvmHs0lqMdi1kPYy5Alc4H/NAu2PMW1fzR/ApMOWMwzI5F2FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBnJq1gQZl0XQiZRM46Ve4qV8H46MB8GA1UdIwQY MBaAFMlQ17GXWjcDriezGtL5Mq5GpMyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wYzczMTgtYjM0OC00YjI0LWI5ZTUt YzZhODgyMWFkZWE5LzEveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wYzczMTgtYjM0OC00YjI0LWI5ZTUtYzZhODgyMWFkZWE5 LzEveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACRhrfsPI 1k16H41YzdPqOzc37swyRYLPvzhJw7zv3IJ//IaY64r0UI2O4Z2FO4ZQ4S56QwtB q+0Vc4MBTJV6iPpshGHmNB4tnUnAHoi7gK6R2fkpzprXdmsytS92qQ8TDf5z1KeS 4/lzeAAApHfZGj1b5IS/afeu1rdgpFU2pfYVqyyRg3xBZXcT+qQS8qX6KoZoUH7e meU9SkIOjg7FK0D+/sccWmdEkU94J/KWfhuQkQ4aYJby6d+QMGpIBoVOO+QYl/rw MFFgkwzXjwsK6Ulk7dDG34ob21YBTZIY4lm6/a9ZFBVEc3TXYOZHY0sISeNzfAJa PYGa5PshflMMjg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:03 2025 by rpki-client