This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft File: yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft (raw, json) Hash identifier: LvoMtE8dppl2aK8qo0HuXBp11U1AZjdvj8vWgIioOYE= Subject key identifier: A3:9C:6B:1B:C1:65:64:47:EF:08:34:B0:BC:38:11:94:AB:3C:31:2E Authority key identifier: CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78 Certificate issuer: /CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78 Certificate serial: 019AF2771C9B3A4797EAF832983682FE1BF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft Manifest number: 1121 Signing time: Sat 06 Dec 2025 07:01:23 +0000 Manifest this update: Sat 06 Dec 2025 07:01:23 +0000 Manifest next update: Sun 07 Dec 2025 07:01:23 +0000 Files and hashes: 1: vs_wrAmuGIug1GU_WsE0c2zCmpU.roa (hash: 9ijLmWfmtB/5rCC4VVeOb5sdlLKrU3qLnrDgERpleQY=) 2: yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl (hash: tTizm45nnBU17OWu1Ns8OUswxjy7/McxYenPcbl0iVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:1c:9b:3a:47:97:ea:f8:32:98:36:82:fe:1b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78 Validity Not Before: Dec 6 07:01:23 2025 GMT Not After : Dec 7 07:01:23 2025 GMT Subject: CN=a39c6b1bc1656447ef0834b0bc381194ab3c312e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3f:cf:dd:28:13:d0:35:b6:6e:17:20:d1:e5: 0e:08:98:18:0b:0d:96:9d:99:86:ef:8f:00:ab:41: f7:11:69:a8:84:8a:2f:c1:f9:98:6f:3f:44:e4:ff: 51:b5:ac:62:80:85:4d:d6:06:5d:e9:65:be:b6:ac: 64:a5:99:8b:06:39:3a:41:76:8f:eb:1f:23:5b:19: b0:1f:31:e8:ca:3a:ee:13:8a:87:bb:b2:10:8f:45: 3d:48:65:cb:7e:1f:ce:2a:8a:5b:2f:93:8a:9b:6c: c6:df:fe:d9:97:58:be:f2:dd:1a:fb:3e:4c:de:d6: b3:c8:28:18:06:40:a6:c4:6d:86:dd:70:47:65:7f: 90:e3:94:a9:ba:c9:6c:8e:d9:23:df:24:e0:1d:9f: d9:09:21:75:df:84:c6:aa:c5:c2:23:f9:d8:b3:97: b2:27:1b:65:2d:d1:6a:b3:08:54:22:57:2e:33:24: fa:20:96:b1:e8:50:92:15:6f:6e:e9:a5:17:63:fd: ec:d6:4e:b5:a3:bc:d5:96:37:6a:eb:5f:fd:80:a5: c4:7c:53:8e:46:69:38:0e:4b:b8:62:57:50:78:95: d8:c0:f9:46:88:95:0c:a3:54:18:d9:e5:92:97:55: da:18:21:90:c1:46:10:18:83:04:5f:46:e7:b4:ad: 22:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9C:6B:1B:C1:65:64:47:EF:08:34:B0:BC:38:11:94:AB:3C:31:2E X509v3 Authority Key Identifier: keyid:CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:8e:85:50:b0:b6:cb:c1:30:69:84:21:aa:d0:28:19:6b:3a: 2b:ff:35:3c:9e:4b:d9:95:6e:de:d6:01:d4:a0:ce:7b:b7:5c: c9:74:ed:a6:2f:fd:45:cd:99:df:67:0d:63:3f:22:99:b0:0c: d4:b2:ca:ef:fb:3e:80:6f:1b:ce:89:93:39:93:9e:3a:a6:87: 7e:8e:b8:2f:4d:62:b8:18:4b:c0:ab:ba:4c:2d:1e:3a:31:a1: b8:f7:d1:50:d3:67:0a:9b:00:cc:7b:0b:20:77:49:3d:00:31: be:43:89:db:63:ca:29:53:fd:ba:99:cb:f8:80:8a:b9:49:38: 3f:7f:f9:bd:92:81:01:5a:8a:9c:09:3b:a5:bd:4c:b9:5a:f2: 64:9f:7c:72:95:ee:a5:0e:7a:a4:cd:1c:ee:77:ba:b2:7c:bd: a4:36:32:a2:32:cb:2e:fd:db:5a:10:79:dc:23:41:7b:82:79: 62:0b:7f:42:b6:4d:fe:2c:9c:c4:d9:17:63:b3:9c:e6:91:03: cd:82:77:1d:2a:33:a0:13:19:20:50:98:6d:61:08:1f:83:f9: b2:9c:2a:3b:1f:c7:22:4c:3b:ff:4d:56:d6:da:d7:ad:53:4c: 19:34:23:e4:1c:ca:b2:04:ca:b8:16:74:fa:d0:1c:4b:21:27: 62:a1:16:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxybOkeX6vgymDaC/hv5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYmU2ZWE2ZWYzMzA4OWU1MjU5ZDI0OWM1YjBkZmFhMTNh OTRkNzgwHhcNMjUxMjA2MDcwMTIzWhcNMjUxMjA3MDcwMTIzWjAzMTEwLwYDVQQD EyhhMzljNmIxYmMxNjU2NDQ3ZWYwODM0YjBiYzM4MTE5NGFiM2MzMTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD/P3SgT0DW2bhcg0eUOCJgYCw2W nZmG748Aq0H3EWmohIovwfmYbz9E5P9RtaxigIVN1gZd6WW+tqxkpZmLBjk6QXaP 6x8jWxmwHzHoyjruE4qHu7IQj0U9SGXLfh/OKopbL5OKm2zG3/7Zl1i+8t0a+z5M 3tazyCgYBkCmxG2G3XBHZX+Q45Spuslsjtkj3yTgHZ/ZCSF134TGqsXCI/nYs5ey JxtlLdFqswhUIlcuMyT6IJax6FCSFW9u6aUXY/3s1k61o7zVljdq61/9gKXEfFOO Rmk4Dku4YldQeJXYwPlGiJUMo1QY2eWSl1XaGCGQwUYQGIMEX0bntK0iDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOcaxvBZWRH7wg0sLw4EZSrPDEuMB8GA1UdIwQY MBaAFMq+bqbvMwieUlnSScWw36oTqU14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXI1dXB1OHpDSjVTV2RKSnhiRGZxaE9wVFhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wOGQ2YmYtZWY4Ni00Yzc0LWFhMjMt ZDMzNWMyMDQyNDAzLzEveXI1dXB1OHpDSjVTV2RKSnhiRGZxaE9wVFhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8wOGQ2YmYtZWY4Ni00Yzc0LWFhMjMtZDMzNWMyMDQyNDAz LzEveXI1dXB1OHpDSjVTV2RKSnhiRGZxaE9wVFhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbo6FULC2 y8EwaYQhqtAoGWs6K/81PJ5L2ZVu3tYB1KDOe7dcyXTtpi/9Rc2Z32cNYz8imbAM 1LLK7/s+gG8bzomTOZOeOqaHfo64L01iuBhLwKu6TC0eOjGhuPfRUNNnCpsAzHsL IHdJPQAxvkOJ22PKKVP9upnL+ICKuUk4P3/5vZKBAVqKnAk7pb1MuVryZJ98cpXu pQ56pM0c7ne6sny9pDYyojLLLv3bWhB53CNBe4J5Ygt/QrZN/iycxNkXY7Oc5pED zYJ3HSozoBMZIFCYbWEIH4P5spwqOx/HIkw7/01W1trXrVNMGTQj5BzKsgTKuBZ0 +tAcSyEnYqEWbw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:45:27 2025 by rpki-client