This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft File: Yz51LKDcQjx09QhAW6UiiowuUVc.mft (raw, json) Hash identifier: qvTN78nwhHG34MMypbLvWtyquCTjsF8QHC2ZBfxDcaM= Subject key identifier: 01:DD:07:94:D9:15:F3:BE:71:1E:20:FF:32:9A:13:41:3E:56:DA:95 Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57 Certificate issuer: /CN=633e752ca0dc423c74f508405ba5228a8c2e5157 Certificate serial: 019AF4659C614932E4F848915C4343C63266 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft Manifest number: 0B1F Signing time: Sat 06 Dec 2025 16:01:31 +0000 Manifest this update: Sat 06 Dec 2025 16:01:31 +0000 Manifest next update: Sun 07 Dec 2025 16:01:31 +0000 Files and hashes: 1: GqEinr-m2CvDdye1xapcq5VjPrE.roa (hash: hcu+QYeC9yw9ZhpK8tmA+UALlykKOSidMF07viNJkGo=) 2: Yz51LKDcQjx09QhAW6UiiowuUVc.crl (hash: LoG5VZNl7SdM9rQ4zcfSpkRvq9P8T8MN51IZl0Z0oX0=) 3: hfOIiDf5LSUuZcT1PUl10jObmSE.roa (hash: 4rpFhpKYXZ4q/RScibgPwKMUZ18cthvaLWxbyNlA6YU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:9c:61:49:32:e4:f8:48:91:5c:43:43:c6:32:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157 Validity Not Before: Dec 6 16:01:31 2025 GMT Not After : Dec 7 16:01:31 2025 GMT Subject: CN=01dd0794d915f3be711e20ff329a13413e56da95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:06:ad:72:06:17:19:af:4d:f8:b9:e0:80:9c: a0:7e:a6:6a:0d:58:70:45:9c:8f:d6:0d:ea:37:87: 43:9e:8a:d0:3c:d6:56:72:05:16:6d:84:ef:b7:a2: b9:db:73:ce:1b:ff:ab:c8:24:65:e8:e5:1d:5c:05: dc:e2:d7:73:17:5f:93:27:41:64:e8:4c:63:2d:59: ca:7a:e6:a6:7b:14:28:8f:cb:93:15:d4:23:86:8d: d3:a2:c2:53:dd:23:2b:18:7b:53:87:1e:11:84:e8: af:0d:f9:69:27:f2:5e:e3:ce:b5:51:f4:34:47:6a: 42:ee:48:ac:46:ad:78:a8:bc:db:47:c9:eb:7e:92: 43:78:16:da:6e:8c:42:31:f9:c1:e8:e7:b9:39:56: 4f:48:98:72:ff:4d:91:1c:bc:9c:1a:c4:23:68:c4: 81:75:fa:f8:95:29:86:2e:19:1f:2e:27:8f:ee:d3: 2a:ae:64:e9:fa:11:8d:ca:06:1e:10:18:ac:21:94: ab:3d:40:55:f4:00:bc:ac:68:d9:c3:e7:57:9d:6b: 6e:0e:b5:0d:4a:13:45:aa:80:18:58:2a:da:e0:91: 5c:95:15:83:88:cf:b5:b3:d8:4a:f4:48:d6:68:83: 9d:ea:82:89:15:96:dd:97:70:8b:eb:c9:44:b7:96: 2d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:DD:07:94:D9:15:F3:BE:71:1E:20:FF:32:9A:13:41:3E:56:DA:95 X509v3 Authority Key Identifier: keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:82:bf:b5:33:14:c5:e4:45:de:1b:82:31:4f:f9:39:98:b8: b2:ed:a2:82:a4:b8:81:ca:43:da:fd:74:3c:eb:b7:17:f6:90: 73:f7:bb:b0:93:69:fa:d9:18:9b:a2:48:58:cc:f4:7e:2e:c7: ff:a1:2d:59:ff:58:98:31:f7:e0:93:bd:f1:c7:af:d6:be:17: a1:01:6d:95:09:8d:59:36:de:95:20:0d:e0:c1:aa:ac:e9:da: f3:85:b7:ef:fe:3d:95:88:b5:6c:95:d2:22:fc:15:39:c4:08: c0:d8:f3:89:c7:d6:80:08:67:8c:d7:ce:e6:f2:e3:67:b7:ee: 96:6b:be:1e:f8:4c:59:ff:a6:e7:07:e7:04:17:c2:c5:c6:a5: c9:38:30:4a:6d:d9:1f:82:ab:44:44:8e:2c:45:29:b6:c2:5e: d0:2e:ff:b1:9f:bb:be:61:e3:b6:6a:7d:dc:30:3a:b2:d8:cb: fd:98:16:34:a5:12:fe:be:47:33:2f:b9:44:1c:eb:61:f4:0c: d2:9a:cc:0f:c6:ae:01:f1:13:df:f6:18:f3:81:5b:99:e4:26: af:25:44:81:4d:17:b4:4d:ef:22:9c:e8:c3:85:06:bb:39:d6: 1a:df:ee:47:32:b9:76:aa:16:53:4d:b6:bd:fb:91:f0:71:4e: b7:8f:bc:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZZxhSTLk+EiRXENDxjJmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzM2U3NTJjYTBkYzQyM2M3NGY1MDg0MDViYTUyMjhhOGMy ZTUxNTcwHhcNMjUxMjA2MTYwMTMxWhcNMjUxMjA3MTYwMTMxWjAzMTEwLwYDVQQD EygwMWRkMDc5NGQ5MTVmM2JlNzExZTIwZmYzMjlhMTM0MTNlNTZkYTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAatcgYXGa9N+LnggJygfqZqDVhw RZyP1g3qN4dDnorQPNZWcgUWbYTvt6K523POG/+ryCRl6OUdXAXc4tdzF1+TJ0Fk 6ExjLVnKeuamexQoj8uTFdQjho3TosJT3SMrGHtThx4RhOivDflpJ/Je4861UfQ0 R2pC7kisRq14qLzbR8nrfpJDeBbaboxCMfnB6Oe5OVZPSJhy/02RHLycGsQjaMSB dfr4lSmGLhkfLieP7tMqrmTp+hGNygYeEBisIZSrPUBV9AC8rGjZw+dXnWtuDrUN ShNFqoAYWCra4JFclRWDiM+1s9hK9EjWaIOd6oKJFZbdl3CL68lEt5YtDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAHdB5TZFfO+cR4g/zKaE0E+VtqVMB8GA1UdIwQY MBaAFGM+dSyg3EI8dPUIQFulIoqMLlFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXo1MUxLRGNRangwOVFoQVc2VWlpb3d1VVZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jOGUyMTQtOGU0NS00Yzk2LThhNzkt ZGU2MTg3YjcyOThhLzEvWXo1MUxLRGNRangwOVFoQVc2VWlpb3d1VVZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9jOGUyMTQtOGU0NS00Yzk2LThhNzktZGU2MTg3YjcyOThh LzEvWXo1MUxLRGNRangwOVFoQVc2VWlpb3d1VVZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIK/tTMU xeRF3huCMU/5OZi4su2igqS4gcpD2v10POu3F/aQc/e7sJNp+tkYm6JIWMz0fi7H /6EtWf9YmDH34JO98cev1r4XoQFtlQmNWTbelSAN4MGqrOna84W37/49lYi1bJXS IvwVOcQIwNjzicfWgAhnjNfO5vLjZ7fulmu+HvhMWf+m5wfnBBfCxcalyTgwSm3Z H4KrRESOLEUptsJe0C7/sZ+7vmHjtmp93DA6stjL/ZgWNKUS/r5HMy+5RBzrYfQM 0prMD8auAfET3/YY84FbmeQmryVEgU0XtE3vIpzow4UGuznWGt/uRzK5dqoWU022 vfuR8HFOt4+8RA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:28:30 2025 by rpki-client