This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft File: yAYJ8hhRvff3TtGPDwnfku23U1U.mft (raw, json) Hash identifier: QyNOh4cfXTorP/eEJ7u7EPb0ivaO7V4gJRpV7q6wPLE= Subject key identifier: 0A:C0:34:AE:62:19:AE:78:59:4E:F4:9C:51:4D:A5:B7:7E:B9:F6:A6 Authority key identifier: C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55 Certificate issuer: /CN=c80609f21851bdf7f74ed18f0f09df92edb75355 Certificate serial: 019AF57867F0114873B589C5EA6BB1B3B627 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft Manifest number: 0F28 Signing time: Sat 06 Dec 2025 21:01:40 +0000 Manifest this update: Sat 06 Dec 2025 21:01:40 +0000 Manifest next update: Sun 07 Dec 2025 21:01:40 +0000 Files and hashes: 1: Wg-bSrUatmukyH3xDDiSbozsSDE.roa (hash: +C5Ooc81ApTJACiPZcILtsd+XtVBtietyO7rZMjbj2I=) 2: yAYJ8hhRvff3TtGPDwnfku23U1U.crl (hash: d6JbiTIAzaS/CsdUv8k1RE9bXlfUhfXxn9guyQEwlKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:67:f0:11:48:73:b5:89:c5:ea:6b:b1:b3:b6:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c80609f21851bdf7f74ed18f0f09df92edb75355 Validity Not Before: Dec 6 21:01:40 2025 GMT Not After : Dec 7 21:01:40 2025 GMT Subject: CN=0ac034ae6219ae78594ef49c514da5b77eb9f6a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a8:1a:24:bc:a9:7e:3f:c2:fe:31:17:5e:c2: 2b:dd:67:3f:5e:9e:98:09:8f:fe:59:48:43:ff:eb: 16:34:77:4b:0c:d6:21:46:a5:16:82:fd:28:58:ee: 93:50:ce:e1:07:04:d3:e4:5f:50:4e:3c:aa:da:0a: 84:bd:ac:b7:46:6e:a4:65:58:61:4e:8f:eb:df:1f: b4:f7:2b:d8:c7:ac:a3:9e:eb:52:82:ee:cc:6b:c7: f5:65:51:e0:e9:31:e1:4e:2d:d7:aa:37:5c:d2:8b: 43:de:3d:72:47:92:e8:eb:ee:cd:76:8c:a9:fa:a8: 87:31:3b:a9:93:c2:f6:c8:09:00:3b:06:24:7e:ae: 38:a8:51:1d:9c:c9:17:b4:69:f6:48:ba:7e:4d:a2: 0e:1a:e4:79:7d:43:c1:7a:bc:3a:7e:0d:90:a1:5d: ab:f5:c9:fe:51:49:20:4d:08:4d:ea:dc:ae:4a:18: 1e:86:c4:6a:7f:7f:76:17:30:6e:fc:d8:ec:1a:cd: 43:7d:24:be:a4:8a:fd:31:2e:c3:a1:dc:53:50:0f: 34:ce:e7:d0:e1:7d:15:fc:51:06:34:c3:e9:90:a0: a0:c4:c7:10:c7:71:03:7b:a8:4f:05:14:ef:03:73: f5:e0:db:69:cf:2b:76:bc:f6:65:72:57:75:7a:77: 14:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C0:34:AE:62:19:AE:78:59:4E:F4:9C:51:4D:A5:B7:7E:B9:F6:A6 X509v3 Authority Key Identifier: keyid:C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:c4:e1:d1:eb:c2:ac:1f:bf:28:ce:66:00:2e:6a:39:c6:4f: 12:03:3e:16:8c:9c:8d:5c:f6:88:ea:2a:ab:ca:17:27:d3:23: 01:05:ef:63:f8:d7:e6:88:7d:2b:8e:9e:99:4e:b9:0f:5f:b0: 05:82:d7:5e:5b:d2:fa:ef:da:67:62:12:34:92:5f:de:00:16: 28:f5:91:5b:1f:11:7e:ff:5c:87:cd:0a:ff:26:89:6f:18:29: cd:59:04:e1:82:ab:49:5c:46:92:23:c5:f1:05:c0:5c:ec:27: b7:5f:1f:bd:83:f8:a0:0f:74:d1:cc:06:c3:ad:78:84:8e:1f: 9f:3c:7f:ff:f3:5e:4d:d8:a1:41:ae:79:e1:25:f4:d6:67:8b: d5:80:65:f3:8e:f2:dd:34:96:5d:ce:75:84:88:97:58:59:78: c5:67:7a:77:cc:69:0f:5e:b6:b7:c0:70:2c:21:58:dc:25:8a: 88:2a:09:a3:a1:97:06:aa:14:9b:dc:9d:cd:29:c1:82:e1:14: 84:34:e1:92:5e:36:b6:e8:42:50:8d:61:56:e0:ee:7f:6b:d2: 32:74:de:9f:d1:71:a0:ba:d8:0d:a1:6a:98:d1:08:d7:96:4a: c7:a4:54:d5:75:ca:c7:e3:1c:97:61:ef:a4:b5:d9:bd:0a:58: 41:63:7a:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eGfwEUhztYnF6muxs7YnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MDYwOWYyMTg1MWJkZjdmNzRlZDE4ZjBmMDlkZjkyZWRi NzUzNTUwHhcNMjUxMjA2MjEwMTQwWhcNMjUxMjA3MjEwMTQwWjAzMTEwLwYDVQQD EygwYWMwMzRhZTYyMTlhZTc4NTk0ZWY0OWM1MTRkYTViNzdlYjlmNmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6gaJLypfj/C/jEXXsIr3Wc/Xp6Y CY/+WUhD/+sWNHdLDNYhRqUWgv0oWO6TUM7hBwTT5F9QTjyq2gqEvay3Rm6kZVhh To/r3x+09yvYx6yjnutSgu7Ma8f1ZVHg6THhTi3Xqjdc0otD3j1yR5Lo6+7Ndoyp +qiHMTupk8L2yAkAOwYkfq44qFEdnMkXtGn2SLp+TaIOGuR5fUPBerw6fg2QoV2r 9cn+UUkgTQhN6tyuShgehsRqf392FzBu/NjsGs1DfSS+pIr9MS7DodxTUA80zufQ 4X0V/FEGNMPpkKCgxMcQx3EDe6hPBRTvA3P14Ntpzyt2vPZlcld1encUSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArANK5iGa54WU70nFFNpbd+ufamMB8GA1UdIwQY MBaAFMgGCfIYUb33907Rjw8J35Ltt1NVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUFZSjhoaFJ2ZmYzVHRHUER3bmZrdTIzVTFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lYzkxNTktZGFiNC00MjgwLWI0NGMt NGNiY2U1YmFiYWE3LzEveUFZSjhoaFJ2ZmYzVHRHUER3bmZrdTIzVTFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lYzkxNTktZGFiNC00MjgwLWI0NGMtNGNiY2U1YmFiYWE3 LzEveUFZSjhoaFJ2ZmYzVHRHUER3bmZrdTIzVTFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcTh0evC rB+/KM5mAC5qOcZPEgM+FoycjVz2iOoqq8oXJ9MjAQXvY/jX5oh9K46emU65D1+w BYLXXlvS+u/aZ2ISNJJf3gAWKPWRWx8Rfv9ch80K/yaJbxgpzVkE4YKrSVxGkiPF 8QXAXOwnt18fvYP4oA900cwGw614hI4fnzx///NeTdihQa554SX01meL1YBl847y 3TSWXc51hIiXWFl4xWd6d8xpD162t8BwLCFY3CWKiCoJo6GXBqoUm9ydzSnBguEU hDThkl42tuhCUI1hVuDuf2vSMnTen9FxoLrYDaFqmNEI15ZKx6RU1XXKx+Mcl2Hv pLXZvQpYQWN6Zg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:52:48 2025 by rpki-client