This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft File: _ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft (raw, json) Hash identifier: VTlcyUukn2qUXXl+lZfCWb3hN0ckhMN1mynRZdU71A8= Subject key identifier: 4E:FF:0E:92:F8:93:DC:81:27:7A:30:E5:96:F3:0F:0A:B1:2F:8D:37 Authority key identifier: FF:2A:50:EE:DF:E7:80:40:20:9D:6C:0A:B9:5F:83:B5:46:03:98:DD Certificate issuer: /CN=ff2a50eedfe78040209d6c0ab95f83b5460398dd Certificate serial: 019AF1D1EA5C302FD246A3D6D2A2A0467668 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 04:00:57 +0000 Manifest this update: Sat 06 Dec 2025 04:00:57 +0000 Manifest next update: Sun 07 Dec 2025 04:00:57 +0000 Files and hashes: 1: O8Js1mgAF0iv_PSwJLDMH2LqzNs.roa (hash: uCecidRlrlebYe8zpAxIMGUV7GE/OrG+H65AT04t1PQ=) 2: _ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl (hash: uUjiibA1D+Cw0xiAhPA16LyGr+9G2FnjwFdrKSO+Fh8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ea:5c:30:2f:d2:46:a3:d6:d2:a2:a0:46:76:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff2a50eedfe78040209d6c0ab95f83b5460398dd Validity Not Before: Dec 6 04:00:57 2025 GMT Not After : Dec 7 04:00:57 2025 GMT Subject: CN=4eff0e92f893dc81277a30e596f30f0ab12f8d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ee:32:b4:60:fb:22:2d:0f:dd:d5:bb:61:a8: 75:e0:02:72:0f:d5:17:75:3b:30:11:da:f8:20:fc: 3d:5a:e2:7b:aa:18:5c:e6:4d:bb:af:8a:38:72:aa: 17:98:1d:8b:5c:fd:38:49:6c:76:83:f9:c6:c6:f2: 63:3f:d0:92:5f:33:53:20:d4:42:7d:fc:a8:e3:67: de:52:59:a2:97:98:9b:98:2f:3e:22:13:8c:60:bd: fb:2d:c2:91:50:d7:13:17:c0:2a:8e:e7:39:18:d0: 79:29:a3:20:e3:05:ec:db:be:9e:db:b2:8e:fb:e4: 97:88:98:b2:72:35:bd:80:26:9b:24:51:c6:14:29: a1:a7:d8:54:aa:39:ab:fa:d2:34:65:e3:04:96:b2: e9:28:23:f2:5d:2b:e7:f9:10:4c:68:a4:94:20:10: 8d:ee:f2:57:e2:7c:06:51:27:61:a6:26:8a:f1:5f: cb:1b:6a:d0:7d:f6:d5:d2:0f:7a:50:2e:87:d2:17: 3f:4f:c8:42:b8:ef:89:ee:79:90:24:41:10:5b:aa: 96:b1:6b:6a:d0:f8:05:e3:51:ce:76:10:7c:59:c3: c2:3d:ed:88:a6:b8:eb:65:28:67:35:4f:52:a1:1b: 28:55:6f:8e:ce:a7:82:ea:fc:3a:fd:da:38:0f:7d: 65:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FF:0E:92:F8:93:DC:81:27:7A:30:E5:96:F3:0F:0A:B1:2F:8D:37 X509v3 Authority Key Identifier: keyid:FF:2A:50:EE:DF:E7:80:40:20:9D:6C:0A:B9:5F:83:B5:46:03:98:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:9f:99:ca:f0:19:3a:12:04:66:ac:83:58:51:5d:de:9f:30: f3:4c:6a:70:69:79:4d:1d:9f:6e:36:b2:e9:2a:9b:15:f9:02: 99:35:23:b4:93:3c:c1:8c:d4:14:40:c8:a5:88:1e:1f:6e:91: 8d:1d:83:22:2f:84:58:2d:f1:3d:e2:c5:bb:cf:14:16:35:aa: 38:4e:a6:65:e5:57:4d:bb:32:18:86:51:e5:b2:3f:ad:18:45: 25:8d:96:c3:03:96:9b:9d:b5:2d:ad:2a:4c:d0:04:96:ee:ac: 2d:14:01:d3:a1:b6:28:b0:eb:55:30:73:6f:db:3c:4b:1e:2f: 37:6d:84:5a:20:5a:96:bd:cd:11:0a:99:21:41:d2:9d:9b:b4: 94:3c:3f:95:93:c8:94:48:e7:64:55:b8:a8:30:81:3b:c3:b5: 51:95:bf:ee:49:be:2b:68:2f:64:49:bd:e1:b3:55:63:42:08: 79:24:b3:75:71:53:8a:c6:5d:3e:d3:08:5b:92:ee:76:30:24: 6e:6b:eb:07:b5:ff:41:48:28:63:2b:3b:87:f3:fd:a4:d8:c4: df:3c:fd:5c:10:fa:c1:d8:77:f0:98:3e:32:96:ed:79:a8:57: 18:c8:f8:8d:71:90:a5:22:be:bc:be:3a:04:7a:b0:f0:17:e0: 1b:9b:46:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0epcMC/SRqPW0qKgRnZoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMmE1MGVlZGZlNzgwNDAyMDlkNmMwYWI5NWY4M2I1NDYw Mzk4ZGQwHhcNMjUxMjA2MDQwMDU3WhcNMjUxMjA3MDQwMDU3WjAzMTEwLwYDVQQD Eyg0ZWZmMGU5MmY4OTNkYzgxMjc3YTMwZTU5NmYzMGYwYWIxMmY4ZDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO4ytGD7Ii0P3dW7Yah14AJyD9UX dTswEdr4IPw9WuJ7qhhc5k27r4o4cqoXmB2LXP04SWx2g/nGxvJjP9CSXzNTINRC ffyo42feUlmil5ibmC8+IhOMYL37LcKRUNcTF8Aqjuc5GNB5KaMg4wXs276e27KO ++SXiJiycjW9gCabJFHGFCmhp9hUqjmr+tI0ZeMElrLpKCPyXSvn+RBMaKSUIBCN 7vJX4nwGUSdhpiaK8V/LG2rQffbV0g96UC6H0hc/T8hCuO+J7nmQJEEQW6qWsWtq 0PgF41HOdhB8WcPCPe2IprjrZShnNU9SoRsoVW+OzqeC6vw6/do4D31l/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7/DpL4k9yBJ3ow5ZbzDwqxL403MB8GA1UdIwQY MBaAFP8qUO7f54BAIJ1sCrlfg7VGA5jdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3lwUTd0X25nRUFnbld3S3VWLUR0VVlEbU4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8wMTdmODktOTEzMC00YTRlLTg1NDct ZjNiOTc0MWQxZDRmLzEvX3lwUTd0X25nRUFnbld3S3VWLUR0VVlEbU4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8wMTdmODktOTEzMC00YTRlLTg1NDctZjNiOTc0MWQxZDRm LzEvX3lwUTd0X25nRUFnbld3S3VWLUR0VVlEbU4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJ+ZyvAZ OhIEZqyDWFFd3p8w80xqcGl5TR2fbjay6SqbFfkCmTUjtJM8wYzUFEDIpYgeH26R jR2DIi+EWC3xPeLFu88UFjWqOE6mZeVXTbsyGIZR5bI/rRhFJY2WwwOWm521La0q TNAElu6sLRQB06G2KLDrVTBzb9s8Sx4vN22EWiBalr3NEQqZIUHSnZu0lDw/lZPI lEjnZFW4qDCBO8O1UZW/7km+K2gvZEm94bNVY0IIeSSzdXFTisZdPtMIW5LudjAk bmvrB7X/QUgoYys7h/P9pNjE3zz9XBD6wdh38Jg+MpbteahXGMj4jXGQpSK+vL46 BHqw8BfgG5tGBA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:20 2025 by rpki-client