This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft File: yzJFVZQK5Rr10fQr1axxWGT6GCk.mft (raw, json) Hash identifier: SOxtMPB7BvkYvOfQBU0HCS0kMGJWlFEXXMfk4O9TtLY= Subject key identifier: 37:01:D3:4F:38:C0:3E:BD:72:11:FC:40:42:B4:FC:11:6D:64:14:6D Authority key identifier: CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29 Certificate issuer: /CN=cb324555940ae51af5d1f42bd5ac715864fa1829 Certificate serial: 019B2BF8C95B6D13AB7C14BA568AFDE17C2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft Manifest number: 07D0 Signing time: Wed 17 Dec 2025 11:01:23 +0000 Manifest this update: Wed 17 Dec 2025 11:01:23 +0000 Manifest next update: Thu 18 Dec 2025 11:01:23 +0000 Files and hashes: 1: ZOtgfqLDYdNWH5fYDhWkm9PND4Y.roa (hash: JwgLkVzCQiB/ULcLxd8PPGsr5tfW+toDKbyYKCvjGSc=) 2: by9kfZ4EbEKUVkVK0jeGqBsmfmk.roa (hash: LEv0S+P2XEMPTW4EvLdn5P/pRRYNUEDyCa7a7Tp2BTY=) 3: yzJFVZQK5Rr10fQr1axxWGT6GCk.crl (hash: x2q1L/7pYaY0fN+KyuDiJ74unPIyPmY2TanrQ7McsmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:c9:5b:6d:13:ab:7c:14:ba:56:8a:fd:e1:7c:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb324555940ae51af5d1f42bd5ac715864fa1829 Validity Not Before: Dec 17 11:01:23 2025 GMT Not After : Dec 18 11:01:23 2025 GMT Subject: CN=3701d34f38c03ebd7211fc4042b4fc116d64146d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:84:17:3e:fd:49:0c:42:7c:ef:fa:1b:22:87: 8b:ac:32:a4:44:44:a0:bd:ac:b8:0c:4b:62:ac:b9: ae:fc:74:f9:06:06:16:e4:62:af:56:1d:35:4d:f9: de:0b:e1:08:75:c3:d8:d5:22:c7:bc:90:3e:de:ef: 70:47:3f:44:b4:55:73:0f:a7:6e:0f:e3:e9:be:d5: 2f:15:cd:ab:70:68:05:df:99:96:4a:ef:65:ab:17: f0:a6:86:02:35:cc:2b:3b:23:89:12:02:e1:29:26: 75:58:cd:1a:27:65:e6:5f:12:97:d8:84:f8:de:36: 87:fd:77:f8:4a:2f:04:53:7c:5e:4a:5f:25:d8:f1: 29:76:24:54:fa:e3:1a:0a:32:bf:a7:14:23:b8:8e: 47:5f:73:d0:08:ba:9a:85:c2:11:4f:54:ae:89:64: e3:93:dc:c7:b9:62:fe:68:7f:3b:15:40:e0:b5:87: a0:57:e8:49:73:b2:bf:47:aa:7a:c6:5d:84:69:55: 2a:83:40:b9:31:d9:1b:90:d8:d7:51:3b:c6:b0:81: 7d:10:60:02:04:18:ba:7a:bf:3a:31:24:b9:f5:f8: c7:7b:db:8a:a0:1c:5e:14:82:c7:ae:ea:c9:39:97: a0:03:fd:1f:90:40:8b:77:0b:c4:7b:83:09:7e:97: e1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:01:D3:4F:38:C0:3E:BD:72:11:FC:40:42:B4:FC:11:6D:64:14:6D X509v3 Authority Key Identifier: keyid:CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f4:21:64:37:e5:ae:ec:e0:69:e8:6b:e9:17:69:b8:39:9d: 35:c1:83:f8:46:48:51:ee:be:ef:9d:df:54:02:5d:be:e4:c0: ae:32:3c:67:06:94:0b:da:18:c5:6f:9e:2f:fe:5b:4e:ad:75: 45:ea:d4:d7:db:22:31:89:43:cd:b1:55:81:c8:6f:36:1d:40: 1c:66:b5:ef:5f:06:26:53:4b:20:31:98:f8:f6:15:7d:fa:00: 10:22:3b:1f:50:a4:a4:cc:40:94:67:b9:27:ef:a8:d8:a7:4b: 60:f2:09:54:58:78:44:cc:61:d2:c9:2e:33:64:5a:7a:ae:d6: 4b:a8:93:14:8f:77:5a:bc:7b:80:37:ed:37:87:8b:db:34:75: 57:d2:fb:ce:0b:b1:bc:33:cf:c2:2e:52:c6:73:e9:84:17:f0: ca:32:c2:00:49:81:ec:a9:9c:b0:0c:23:7d:23:88:2d:4c:3b: 4d:31:0b:a9:f2:99:01:59:55:7f:66:2f:7d:1d:28:c5:30:ae: 8a:a1:7f:57:82:ad:97:79:b8:82:67:42:36:bc:ff:4b:5a:8f: 1a:af:d4:80:9f:81:d9:85:50:a2:3b:6b:db:68:89:ff:0c:f3: 5c:88:0b:70:e6:18:85:e5:71:db:79:7c:e8:3c:5a:f4:5b:e7: 0e:ae:ca:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+MlbbROrfBS6Vor94XwrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMzI0NTU1OTQwYWU1MWFmNWQxZjQyYmQ1YWM3MTU4NjRm YTE4MjkwHhcNMjUxMjE3MTEwMTIzWhcNMjUxMjE4MTEwMTIzWjAzMTEwLwYDVQQD EygzNzAxZDM0ZjM4YzAzZWJkNzIxMWZjNDA0MmI0ZmMxMTZkNjQxNDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4QXPv1JDEJ87/obIoeLrDKkRESg vay4DEtirLmu/HT5BgYW5GKvVh01TfneC+EIdcPY1SLHvJA+3u9wRz9EtFVzD6du D+PpvtUvFc2rcGgF35mWSu9lqxfwpoYCNcwrOyOJEgLhKSZ1WM0aJ2XmXxKX2IT4 3jaH/Xf4Si8EU3xeSl8l2PEpdiRU+uMaCjK/pxQjuI5HX3PQCLqahcIRT1SuiWTj k9zHuWL+aH87FUDgtYegV+hJc7K/R6p6xl2EaVUqg0C5MdkbkNjXUTvGsIF9EGAC BBi6er86MSS59fjHe9uKoBxeFILHrurJOZegA/0fkECLdwvEe4MJfpfhFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcB0084wD69chH8QEK0/BFtZBRtMB8GA1UdIwQY MBaAFMsyRVWUCuUa9dH0K9WscVhk+hgpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXpKRlZaUUs1UnIxMGZRcjFheHhXR1Q2R0NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zMDA5ODMtNGRmZC00MTljLWJjMjAt MjAyYzI2ODlkZmEwLzEveXpKRlZaUUs1UnIxMGZRcjFheHhXR1Q2R0NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8zMDA5ODMtNGRmZC00MTljLWJjMjAtMjAyYzI2ODlkZmEw LzEveXpKRlZaUUs1UnIxMGZRcjFheHhXR1Q2R0NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/QhZDfl ruzgaehr6RdpuDmdNcGD+EZIUe6+753fVAJdvuTArjI8ZwaUC9oYxW+eL/5bTq11 RerU19siMYlDzbFVgchvNh1AHGa1718GJlNLIDGY+PYVffoAECI7H1CkpMxAlGe5 J++o2KdLYPIJVFh4RMxh0skuM2Raeq7WS6iTFI93Wrx7gDftN4eL2zR1V9L7zgux vDPPwi5SxnPphBfwyjLCAEmB7KmcsAwjfSOILUw7TTELqfKZAVlVf2YvfR0oxTCu iqF/V4Ktl3m4gmdCNrz/S1qPGq/UgJ+B2YVQojtr22iJ/wzzXIgLcOYYheVx23l8 6Dxa9FvnDq7Kvg== -----END CERTIFICATE-----Generated at Wed Dec 17 13:47:20 2025 by rpki-client