This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft File: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft (raw, json) Hash identifier: FYVGGFAu2uzdLvzidag86VDqWSCDabVYPCAwuuZpk5M= Subject key identifier: 8C:2C:D2:C4:A3:0B:F8:1B:A7:3F:1A:C4:61:54:7D:BE:46:3E:94:E4 Authority key identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15 Certificate issuer: /CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715 Certificate serial: 019AF68A1281F27E5516C2A96F5E1DDD00F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft Manifest number: 05B3 Signing time: Sun 07 Dec 2025 02:00:35 +0000 Manifest this update: Sun 07 Dec 2025 02:00:35 +0000 Manifest next update: Mon 08 Dec 2025 02:00:35 +0000 Files and hashes: 1: qzWk5-tX1dtfAmhnDDRvZojGxVg.roa (hash: YU+z/z5QXW9h6ddAKutU3rUI45hV42wPHKYxAfH9OjY=) 2: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl (hash: ZAKRqmJz0HYWOeoepNk+0QRugM7cHcTRNT5jmeW9boU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:12:81:f2:7e:55:16:c2:a9:6f:5e:1d:dd:00:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715 Validity Not Before: Dec 7 02:00:35 2025 GMT Not After : Dec 8 02:00:35 2025 GMT Subject: CN=8c2cd2c4a30bf81ba73f1ac461547dbe463e94e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0d:31:28:96:1e:e2:61:15:17:9d:4c:e2:74: a7:16:62:93:01:36:0d:39:5e:bc:fe:79:87:eb:0c: 5b:54:09:f1:01:87:c8:0d:c8:f8:ca:ce:0a:19:cf: 93:49:36:d5:b6:1a:78:42:91:8b:ee:84:fb:8c:de: b6:59:57:64:5b:5a:be:4a:31:24:fc:85:1e:69:48: bf:65:6a:56:2d:a7:3b:3e:21:b2:82:8e:55:30:c7: 49:76:8a:fd:b6:72:4c:ea:68:da:7e:16:35:58:4c: 53:ee:da:f5:97:c0:f2:d9:cd:04:77:6a:93:4a:33: c7:16:6f:45:a6:40:93:a2:c7:cd:e4:52:7f:02:42: 53:a4:af:aa:59:a7:ce:89:03:2d:cc:65:58:7a:6f: 73:65:96:00:d9:3d:26:fb:4f:25:ee:30:5d:d4:1f: f6:92:97:fd:5d:f8:a4:aa:9b:f5:89:da:16:7b:12: dc:08:68:bd:4c:cf:c8:0e:87:e3:9b:34:2e:83:d6: ac:60:cb:03:5a:60:d1:8b:ed:84:26:94:0e:11:ff: f0:d8:4a:81:e4:75:47:3b:9a:48:a7:1e:38:fd:0f: 47:59:12:bb:92:a0:8d:50:d0:79:5f:c2:2f:3a:be: c0:bd:cc:84:72:3c:65:ab:88:00:f9:d9:88:cf:21: ab:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2C:D2:C4:A3:0B:F8:1B:A7:3F:1A:C4:61:54:7D:BE:46:3E:94:E4 X509v3 Authority Key Identifier: keyid:CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:e0:d5:e7:6c:53:0e:83:0c:4e:39:8b:3b:f6:8f:23:f7:aa: 64:29:41:69:1f:7d:57:20:9e:1d:c9:05:6d:59:89:18:f0:2f: c0:35:05:0d:39:0d:5b:04:0f:91:74:dc:d2:a1:b3:d9:02:e5: d7:34:99:64:26:1c:c6:0f:82:62:a6:7b:2a:b0:fe:ef:3f:6e: 6e:f1:01:d0:8f:c5:5a:37:15:54:e7:66:e0:b4:8c:32:e8:31: 95:1f:b6:79:9a:32:31:f7:49:0f:b4:43:42:a8:48:69:d7:9e: 22:25:27:8e:52:0e:77:96:a0:2e:a8:7f:db:05:82:c1:8f:2c: c1:ed:87:99:e4:87:a0:6d:bc:f5:f4:9f:c6:cc:ce:3f:11:84: 52:8e:65:ec:5e:dc:60:64:92:37:2e:2a:65:f0:53:0c:e2:ac: 4c:d1:2e:bf:64:03:c6:ab:da:c2:1b:b7:f9:20:c6:45:d7:5d: db:21:17:a8:25:2f:3f:61:94:15:00:eb:69:c9:e4:d5:d8:fc: 2e:92:d8:f4:c1:f2:b1:ac:b7:e7:30:19:af:ef:52:39:2b:ac: 01:e5:01:fc:f5:b1:28:3d:94:24:e1:6e:b0:51:08:8a:95:ca: 08:4d:a8:23:72:c0:5a:23:b2:17:5e:c3:13:5a:87:8d:5a:e3: 6f:c2:05:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2ihKB8n5VFsKpb14d3QD5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMzBlYjQzNTNlZDc1MGZhZjIzZjJmMWUxNDAxOGM2Y2Zj NjI3MTUwHhcNMjUxMjA3MDIwMDM1WhcNMjUxMjA4MDIwMDM1WjAzMTEwLwYDVQQD Eyg4YzJjZDJjNGEzMGJmODFiYTczZjFhYzQ2MTU0N2RiZTQ2M2U5NGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng0xKJYe4mEVF51M4nSnFmKTATYN OV68/nmH6wxbVAnxAYfIDcj4ys4KGc+TSTbVthp4QpGL7oT7jN62WVdkW1q+SjEk /IUeaUi/ZWpWLac7PiGygo5VMMdJdor9tnJM6mjafhY1WExT7tr1l8Dy2c0Ed2qT SjPHFm9FpkCTosfN5FJ/AkJTpK+qWafOiQMtzGVYem9zZZYA2T0m+08l7jBd1B/2 kpf9Xfikqpv1idoWexLcCGi9TM/IDofjmzQug9asYMsDWmDRi+2EJpQOEf/w2EqB 5HVHO5pIpx44/Q9HWRK7kqCNUNB5X8IvOr7AvcyEcjxlq4gA+dmIzyGr+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIws0sSjC/gbpz8axGFUfb5GPpTkMB8GA1UdIwQY MBaAFMsw60NT7XUPryPy8eFAGMbPxicVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXpEclExUHRkUS12SV9MeDRVQVl4c19HSnhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9mMDk3NDQtOGY1Yi00NWFkLTk1YTgt MWI5YTMyM2M1NzBiLzEveXpEclExUHRkUS12SV9MeDRVQVl4c19HSnhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9mMDk3NDQtOGY1Yi00NWFkLTk1YTgtMWI5YTMyM2M1NzBi LzEveXpEclExUHRkUS12SV9MeDRVQVl4c19HSnhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyuDV52xT DoMMTjmLO/aPI/eqZClBaR99VyCeHckFbVmJGPAvwDUFDTkNWwQPkXTc0qGz2QLl 1zSZZCYcxg+CYqZ7KrD+7z9ubvEB0I/FWjcVVOdm4LSMMugxlR+2eZoyMfdJD7RD QqhIadeeIiUnjlIOd5agLqh/2wWCwY8swe2HmeSHoG289fSfxszOPxGEUo5l7F7c YGSSNy4qZfBTDOKsTNEuv2QDxqvawhu3+SDGRddd2yEXqCUvP2GUFQDracnk1dj8 LpLY9MHysay35zAZr+9SOSusAeUB/PWxKD2UJOFusFEIipXKCE2oI3LAWiOyF17D E1qHjVrjb8IF5A== -----END CERTIFICATE-----Generated at Sun Dec 7 03:46:56 2025 by rpki-client