This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft File: YHzqbhA6IyXEjBZnqZx7F-s857Y.mft (raw, json) Hash identifier: MVs4HICj3Dqr/0evE8rpXBF7slmzqUUsIqiiOiqknW8= Subject key identifier: 8E:71:DA:26:02:B8:3C:7B:5F:ED:26:C1:EA:86:FB:F2:16:36:07:BE Authority key identifier: 60:7C:EA:6E:10:3A:23:25:C4:8C:16:67:A9:9C:7B:17:EB:3C:E7:B6 Certificate issuer: /CN=607cea6e103a2325c48c1667a99c7b17eb3ce7b6 Certificate serial: 019AF23FA6C3298CF576B25D7B41C0E710CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft Manifest number: 149F Signing time: Sat 06 Dec 2025 06:00:48 +0000 Manifest this update: Sat 06 Dec 2025 06:00:48 +0000 Manifest next update: Sun 07 Dec 2025 06:00:48 +0000 Files and hashes: 1: 8tqsaUcyKZIIKG75KzikfFZDjvk.roa (hash: zktR6lve6abwwBFYbdtbK1pvyhA4oW0U5RIxFZXPtoI=) 2: YHzqbhA6IyXEjBZnqZx7F-s857Y.crl (hash: CxNRyhrtPV853WCUXE6pXWOPNzx0eAXjp1ZKjGkwvy0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.crl rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a6:c3:29:8c:f5:76:b2:5d:7b:41:c0:e7:10:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=607cea6e103a2325c48c1667a99c7b17eb3ce7b6 Validity Not Before: Dec 6 06:00:48 2025 GMT Not After : Dec 7 06:00:48 2025 GMT Subject: CN=8e71da2602b83c7b5fed26c1ea86fbf2163607be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:13:b5:e0:07:cc:4d:25:f5:ac:7c:a7:27:ff: 40:33:d9:7d:f0:1d:94:72:59:8d:b0:01:80:47:b7: 44:21:62:24:c4:db:22:3d:da:46:42:9c:84:c5:d9: f9:78:a4:68:bc:4c:8f:bf:48:d5:b4:3e:62:66:1b: 80:1c:ca:d1:13:54:f1:44:f3:5c:74:0e:2b:1d:91: 62:bd:e2:dc:51:00:39:48:fe:79:9a:dd:fd:40:b5: 2d:83:67:1e:48:c3:0d:2f:49:76:a1:ba:e8:20:ab: fe:a1:a0:56:7b:bb:8f:ff:5a:0a:c9:ba:62:5e:38: 72:d3:d4:41:9a:47:b3:06:74:e8:d4:b7:35:65:2e: b3:e9:c6:7c:a0:8b:06:c7:65:7d:87:cc:10:d2:96: a0:b7:62:f2:bb:a1:98:23:be:29:9c:4e:5a:b1:b1: 73:9c:dc:c3:5f:68:b5:19:33:00:1b:66:86:85:bb: f0:77:ec:80:69:e6:c2:41:9b:f1:50:74:97:36:8a: f0:04:94:46:d2:bc:8a:15:3b:d6:1b:b1:23:76:0e: c8:02:1d:a8:56:fe:c5:82:d7:e2:96:c4:e5:bf:9a: b7:4b:3a:08:6d:88:9b:e0:85:ca:65:7b:ea:fc:ca: 68:3d:25:11:b9:84:61:e2:8a:5c:e4:fa:a2:fe:a5: 63:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:71:DA:26:02:B8:3C:7B:5F:ED:26:C1:EA:86:FB:F2:16:36:07:BE X509v3 Authority Key Identifier: keyid:60:7C:EA:6E:10:3A:23:25:C4:8C:16:67:A9:9C:7B:17:EB:3C:E7:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:82:0c:a9:30:52:4a:47:61:c1:ed:dd:76:ba:12:6e:0e:d1: 08:3e:16:59:12:25:bb:48:d4:bf:8e:be:56:b6:46:0e:fa:7f: f6:c6:a5:93:8c:af:23:ac:59:73:e6:30:c1:98:e1:0b:39:20: d1:32:9c:68:6b:98:81:76:32:94:34:eb:d5:79:4c:b1:3d:26: fc:51:4a:8b:c6:2a:29:db:01:23:f3:e4:d1:8e:89:63:91:33: 9a:84:8b:ba:74:1f:a8:80:35:b9:67:e9:43:de:55:43:43:bd: ae:36:f4:8c:16:70:34:72:9a:b9:91:09:c6:e0:8b:64:1b:ee: f4:54:0b:d3:c4:4b:e9:b7:5b:d6:11:6b:c6:76:f2:2a:c7:0e: 0c:87:da:47:e3:2f:e0:e6:c1:37:75:63:83:37:de:84:0f:c5: 65:e4:d7:df:d9:16:bc:34:98:8a:ca:dc:ab:b0:91:e2:ab:1e: 00:91:36:58:7c:ae:1b:45:a0:7f:b9:0f:93:d5:b7:7d:ed:40: b1:83:c2:8a:d3:89:1f:f1:51:48:0a:dd:31:c5:26:b3:87:60: f0:42:92:23:77:1a:d3:d2:b2:50:3a:1b:6b:71:bb:54:5d:7e: 70:f3:8f:e1:66:a9:98:aa:dc:40:17:34:4d:54:1a:a6:70:6b: 8c:b3:51:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6bDKYz1drJde0HA5xDNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwN2NlYTZlMTAzYTIzMjVjNDhjMTY2N2E5OWM3YjE3ZWIz Y2U3YjYwHhcNMjUxMjA2MDYwMDQ4WhcNMjUxMjA3MDYwMDQ4WjAzMTEwLwYDVQQD Eyg4ZTcxZGEyNjAyYjgzYzdiNWZlZDI2YzFlYTg2ZmJmMjE2MzYwN2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRO14AfMTSX1rHynJ/9AM9l98B2U clmNsAGAR7dEIWIkxNsiPdpGQpyExdn5eKRovEyPv0jVtD5iZhuAHMrRE1TxRPNc dA4rHZFiveLcUQA5SP55mt39QLUtg2ceSMMNL0l2obroIKv+oaBWe7uP/1oKybpi Xjhy09RBmkezBnTo1Lc1ZS6z6cZ8oIsGx2V9h8wQ0pagt2Lyu6GYI74pnE5asbFz nNzDX2i1GTMAG2aGhbvwd+yAaebCQZvxUHSXNorwBJRG0ryKFTvWG7Ejdg7IAh2o Vv7FgtfilsTlv5q3SzoIbYib4IXKZXvq/MpoPSURuYRh4opc5Pqi/qVjhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5x2iYCuDx7X+0mweqG+/IWNge+MB8GA1UdIwQY MBaAFGB86m4QOiMlxIwWZ6mcexfrPOe2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUh6cWJoQTZJeVhFakJabnFaeDdGLXM4NTdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9lNjE5ODUtZjg4MS00MDM1LWFiNWIt YzlhOWJhYTQzZjk0LzEvWUh6cWJoQTZJeVhFakJabnFaeDdGLXM4NTdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9lNjE5ODUtZjg4MS00MDM1LWFiNWItYzlhOWJhYTQzZjk0 LzEvWUh6cWJoQTZJeVhFakJabnFaeDdGLXM4NTdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIIMqTBS Skdhwe3ddroSbg7RCD4WWRIlu0jUv46+VrZGDvp/9salk4yvI6xZc+YwwZjhCzkg 0TKcaGuYgXYylDTr1XlMsT0m/FFKi8YqKdsBI/Pk0Y6JY5EzmoSLunQfqIA1uWfp Q95VQ0O9rjb0jBZwNHKauZEJxuCLZBvu9FQL08RL6bdb1hFrxnbyKscODIfaR+Mv 4ObBN3VjgzfehA/FZeTX39kWvDSYisrcq7CR4qseAJE2WHyuG0Wgf7kPk9W3fe1A sYPCitOJH/FRSArdMcUms4dg8EKSI3ca09KyUDoba3G7VF1+cPOP4WapmKrcQBc0 TVQapnBrjLNRGQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:24 2025 by rpki-client