This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft File: Yj80T9SpG_rRODCNUnFVu85Sr24.mft (raw, json) Hash identifier: /wbNwje4qGJGfdAsbWyYIbtJj3XKpx7uVadtiSyMpxQ= Subject key identifier: 8F:F2:FF:A5:71:9A:00:86:4E:52:42:3F:A9:07:67:02:89:DA:B1:0F Authority key identifier: 62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E Certificate issuer: /CN=623f344fd4a91bfad138308d527155bbce52af6e Certificate serial: 019AF19B4A7EB76407D48300AC4D318024EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:01:17 +0000 Manifest this update: Sat 06 Dec 2025 03:01:17 +0000 Manifest next update: Sun 07 Dec 2025 03:01:17 +0000 Files and hashes: 1: PaAAUO_ixJ6swm7tE4jKyNdYpk0.roa (hash: TfUDJUozwqa+GvnOHe7awC0XZSqVbUNsIbWR0csLcfM=) 2: Yj80T9SpG_rRODCNUnFVu85Sr24.crl (hash: WNag70OhVOqnmrD9Yy8u2JEcPMGgxf87fdBuwHSR8wU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:4a:7e:b7:64:07:d4:83:00:ac:4d:31:80:24:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=623f344fd4a91bfad138308d527155bbce52af6e Validity Not Before: Dec 6 03:01:17 2025 GMT Not After : Dec 7 03:01:17 2025 GMT Subject: CN=8ff2ffa5719a00864e52423fa907670289dab10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2e:3b:68:bf:f7:14:8c:17:9e:84:0f:1a:64: fa:7e:40:80:13:99:d6:21:44:46:16:0d:49:29:51: 72:81:9b:a2:9e:cd:dd:c7:cc:e0:3d:e7:02:ae:2e: f9:38:e0:ac:59:d6:b7:de:cb:97:27:be:d8:e4:7b: 94:9d:18:28:31:d4:cc:38:4c:7c:5a:dd:9a:44:10: 00:82:8f:f0:02:cf:14:7e:69:46:2a:58:32:d3:9f: e2:93:f1:de:49:9d:a0:9e:68:a5:a8:68:bf:b8:c0: cc:44:db:44:1d:b9:66:39:7f:a2:fa:00:40:d2:4e: 5d:3b:f1:51:3a:06:0e:a6:ed:3b:a1:b2:be:23:fc: 83:5c:1a:ed:05:12:0a:81:9e:5a:bf:4a:54:9d:9f: 80:a0:d8:40:c7:ea:c7:b7:60:26:ec:c3:3f:f5:19: 92:e8:16:a6:ea:0f:ab:b4:ca:37:4b:5c:a8:9f:49: 1e:d4:56:cc:f8:a0:66:91:38:bc:1b:7e:39:8e:b3: b9:7a:cd:5b:95:31:81:96:d0:d8:33:20:b0:52:87: 0f:15:6a:44:8b:cf:95:e0:e0:46:f4:04:36:60:d5: fb:2a:a4:97:34:f4:99:c7:c3:4d:84:6e:d7:bd:51: 11:e9:9a:40:86:09:d7:ae:c8:1c:d6:20:b3:b2:7b: 91:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F2:FF:A5:71:9A:00:86:4E:52:42:3F:A9:07:67:02:89:DA:B1:0F X509v3 Authority Key Identifier: keyid:62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:34:23:83:4a:74:ad:02:57:e0:e0:ee:f0:7e:53:b1:40:ed: e3:6d:f0:4c:45:f8:4a:c4:2f:99:b9:ea:45:37:95:f1:89:3a: 70:96:75:9a:70:ac:e5:76:5c:77:69:46:cf:a7:a3:ad:2c:c5: 67:6b:fb:b7:a4:7c:ee:ff:82:ba:bf:71:d3:61:78:d9:03:12: c8:b8:0f:ee:ea:bc:46:90:8c:12:99:98:9e:dd:03:64:b0:60: 42:9f:f2:01:3d:8f:b7:bc:82:06:b8:1d:ad:ab:4d:b8:cf:08: 55:c5:a9:5e:f4:85:65:76:cc:13:ef:c4:36:9b:70:a3:1c:2d: 95:12:75:ac:a6:bf:55:f8:ab:46:b2:86:0f:03:91:2e:43:31: d0:cd:47:76:a9:03:27:05:3e:2d:22:73:85:12:39:aa:ac:de: 7c:ac:97:d9:d5:5f:de:73:0c:67:53:63:94:59:45:7e:2b:a5: fd:7c:12:f5:92:21:27:75:1c:11:b9:fb:42:3d:f5:69:8f:94: 0d:ec:4f:61:5f:29:1b:77:12:3d:18:60:07:bd:5c:4d:ed:a9: 54:ef:d4:85:e4:a2:d5:d0:fe:11:dd:7d:46:90:cb:99:0b:0b: b6:d9:0f:ed:52:14:9b:89:0a:df:a5:d7:fb:52:f0:f2:34:86: c6:f2:9a:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0p+t2QH1IMArE0xgCTsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyM2YzNDRmZDRhOTFiZmFkMTM4MzA4ZDUyNzE1NWJiY2U1 MmFmNmUwHhcNMjUxMjA2MDMwMTE3WhcNMjUxMjA3MDMwMTE3WjAzMTEwLwYDVQQD Eyg4ZmYyZmZhNTcxOWEwMDg2NGU1MjQyM2ZhOTA3NjcwMjg5ZGFiMTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC47aL/3FIwXnoQPGmT6fkCAE5nW IURGFg1JKVFygZuins3dx8zgPecCri75OOCsWda33suXJ77Y5HuUnRgoMdTMOEx8 Wt2aRBAAgo/wAs8UfmlGKlgy05/ik/HeSZ2gnmilqGi/uMDMRNtEHblmOX+i+gBA 0k5dO/FROgYOpu07obK+I/yDXBrtBRIKgZ5av0pUnZ+AoNhAx+rHt2Am7MM/9RmS 6Bam6g+rtMo3S1yon0ke1FbM+KBmkTi8G345jrO5es1blTGBltDYMyCwUocPFWpE i8+V4OBG9AQ2YNX7KqSXNPSZx8NNhG7XvVER6ZpAhgnXrsgc1iCzsnuRlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/y/6VxmgCGTlJCP6kHZwKJ2rEPMB8GA1UdIwQY MBaAFGI/NE/UqRv60TgwjVJxVbvOUq9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWo4MFQ5U3BHX3JST0RDTlVuRlZ1ODVTcjI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xMDVkYTAtMGM3ZC00MTVkLThkMDAt YTM0ZTg2NzlmMzc0LzEvWWo4MFQ5U3BHX3JST0RDTlVuRlZ1ODVTcjI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8xMDVkYTAtMGM3ZC00MTVkLThkMDAtYTM0ZTg2NzlmMzc0 LzEvWWo4MFQ5U3BHX3JST0RDTlVuRlZ1ODVTcjI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjQjg0p0 rQJX4ODu8H5TsUDt423wTEX4SsQvmbnqRTeV8Yk6cJZ1mnCs5XZcd2lGz6ejrSzF Z2v7t6R87v+Cur9x02F42QMSyLgP7uq8RpCMEpmYnt0DZLBgQp/yAT2Pt7yCBrgd ratNuM8IVcWpXvSFZXbME+/ENptwoxwtlRJ1rKa/VfirRrKGDwORLkMx0M1HdqkD JwU+LSJzhRI5qqzefKyX2dVf3nMMZ1NjlFlFfiul/XwS9ZIhJ3UcEbn7Qj31aY+U DexPYV8pG3cSPRhgB71cTe2pVO/UheSi1dD+Ed19RpDLmQsLttkP7VIUm4kK36XX +1Lw8jSGxvKalw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:39 2025 by rpki-client