This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft File: yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft (raw, json) Hash identifier: GHc6ZK7abVdxxLBOx9yK/WROCabYI5S5kAu1tTv8VUE= Subject key identifier: CF:9E:16:A8:3D:26:56:C8:44:11:1D:88:7B:CC:3F:E5:66:9D:71:1C Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7 Certificate issuer: /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7 Certificate serial: 019AF3529316F813754687295F663A32DA69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft Manifest number: 0782 Signing time: Sat 06 Dec 2025 11:01:06 +0000 Manifest this update: Sat 06 Dec 2025 11:01:06 +0000 Manifest next update: Sun 07 Dec 2025 11:01:06 +0000 Files and hashes: 1: AM_8FnzBWvppCWEq5L2m7zOw4Xs.roa (hash: BSOdW4w3xzDGFEiTqGVLTD5VpVN1n3Tm2IL/b7m+dNI=) 2: Bofs4ohNskP7oRhXntEkamcTByY.roa (hash: 2wFqF3IDJ9WWoiEwRf3HPN+kDBVLZG7FcftR+HQ+PQ0=) 3: yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl (hash: 52LTLFV/h++iukUz92DNbEmgnA22Wtj4ysRnvlZhJG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:93:16:f8:13:75:46:87:29:5f:66:3a:32:da:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7 Validity Not Before: Dec 6 11:01:06 2025 GMT Not After : Dec 7 11:01:06 2025 GMT Subject: CN=cf9e16a83d2656c844111d887bcc3fe5669d711c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4e:0b:94:69:47:cf:a5:08:b6:9e:91:ac:0e: 07:a5:01:22:78:00:c6:13:1d:6d:5e:2c:e7:2c:4d: 79:32:68:c8:b0:ed:e5:9d:66:05:64:3c:36:3a:fc: 25:88:43:f6:cb:9b:d2:42:ee:e3:df:9f:a8:03:d9: 6d:fd:69:f1:a1:52:a6:b0:bf:ce:e0:a4:a2:57:e9: 5d:27:ac:46:22:9c:59:70:0c:a8:87:68:c3:e3:5d: ba:f5:f0:c1:7b:6d:c3:da:02:d3:e7:22:45:4c:d0: 4b:c0:df:a1:5a:83:2e:ce:44:30:47:a0:a9:f0:71: d0:77:41:86:7d:11:d5:d1:71:ef:0a:4c:0d:f6:0e: ff:29:0d:ed:71:70:06:41:78:15:aa:6f:bc:36:f1: ad:03:89:9e:b5:82:cb:b2:07:c7:90:8f:4c:5a:ed: 5d:d9:50:88:e0:14:6e:b2:a0:78:1a:ad:99:6c:7b: 01:4a:ef:94:81:7a:97:f1:36:7b:a2:4a:26:06:4e: e5:1a:52:d7:6f:9d:3c:bc:6d:ac:3d:30:06:17:0c: 94:5b:83:b9:69:b3:32:7b:f5:c6:eb:2a:59:2c:08: 60:b4:1e:10:ac:76:5c:51:28:9b:53:36:81:23:ed: 04:3a:19:4a:1e:7c:d8:ae:0d:ab:d1:44:11:f3:df: 48:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9E:16:A8:3D:26:56:C8:44:11:1D:88:7B:CC:3F:E5:66:9D:71:1C X509v3 Authority Key Identifier: keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d7:ed:b7:88:5f:f8:d8:8a:8a:45:42:29:4e:81:7a:a2:de: 1a:67:4e:00:c9:34:ac:3d:5e:33:18:63:99:e5:f7:14:2b:e5: fb:9f:6a:64:a7:0e:27:ab:dd:5e:6d:eb:f1:01:68:3b:fe:60: 5e:c8:1a:62:a9:b0:c2:ba:b3:9d:47:64:91:d7:fe:40:60:88: fd:b7:69:55:02:07:85:d0:52:56:b1:b4:db:85:72:f8:33:92: 78:99:ca:9d:77:ac:18:c2:15:07:11:87:d6:d5:63:68:ae:08: 85:6a:95:24:36:3d:d9:2b:5e:c4:e7:81:51:fe:2a:a5:6b:54: 65:29:cf:9d:89:ad:b7:64:be:67:da:0d:a0:34:ae:ac:9c:82: 7f:3a:75:01:96:f6:70:fe:43:c7:53:aa:46:72:5b:08:1f:9a: ba:2e:f2:5b:ad:4e:fe:e1:e5:e3:a0:a9:e2:0b:3c:bf:70:dc: bd:e4:df:cb:3d:cf:67:0c:18:71:40:51:39:58:ab:23:9d:f2: 11:bf:c9:79:77:f7:ef:7f:61:47:43:da:42:bc:ae:93:de:e1: 67:2b:47:91:72:db:d4:66:4f:63:aa:76:b2:63:5f:22:4d:c2: dd:f7:88:65:46:2e:b2:5b:1c:3c:4c:a6:43:de:c6:77:45:18: 5f:44:b0:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUpMW+BN1RocpX2Y6MtppMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZjIzYzliN2IzZWEwNTQ5MTQyYjcwMTU5NzcwNmZjN2E2 Mzg1ZTcwHhcNMjUxMjA2MTEwMTA2WhcNMjUxMjA3MTEwMTA2WjAzMTEwLwYDVQQD EyhjZjllMTZhODNkMjY1NmM4NDQxMTFkODg3YmNjM2ZlNTY2OWQ3MTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw04LlGlHz6UItp6RrA4HpQEieADG Ex1tXiznLE15MmjIsO3lnWYFZDw2OvwliEP2y5vSQu7j35+oA9lt/WnxoVKmsL/O 4KSiV+ldJ6xGIpxZcAyoh2jD41269fDBe23D2gLT5yJFTNBLwN+hWoMuzkQwR6Cp 8HHQd0GGfRHV0XHvCkwN9g7/KQ3tcXAGQXgVqm+8NvGtA4metYLLsgfHkI9MWu1d 2VCI4BRusqB4Gq2ZbHsBSu+UgXqX8TZ7okomBk7lGlLXb508vG2sPTAGFwyUW4O5 abMye/XG6ypZLAhgtB4QrHZcUSibUzaBI+0EOhlKHnzYrg2r0UQR899IPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+eFqg9JlbIRBEdiHvMP+VmnXEcMB8GA1UdIwQY MBaAFMnyPJt7PqBUkUK3AVl3Bvx6Y4XnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWZJOG0zcy1vRlNSUXJjQldYY0dfSHBqaGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jY2M3M2ItOWM4Ny00NWQ1LTgxYzQt M2Y5MjJiNDAxNjhhLzEveWZJOG0zcy1vRlNSUXJjQldYY0dfSHBqaGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9jY2M3M2ItOWM4Ny00NWQ1LTgxYzQtM2Y5MjJiNDAxNjhh LzEveWZJOG0zcy1vRlNSUXJjQldYY0dfSHBqaGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOtftt4hf +NiKikVCKU6BeqLeGmdOAMk0rD1eMxhjmeX3FCvl+59qZKcOJ6vdXm3r8QFoO/5g XsgaYqmwwrqznUdkkdf+QGCI/bdpVQIHhdBSVrG024Vy+DOSeJnKnXesGMIVBxGH 1tVjaK4IhWqVJDY92StexOeBUf4qpWtUZSnPnYmtt2S+Z9oNoDSurJyCfzp1AZb2 cP5Dx1OqRnJbCB+aui7yW61O/uHl46Cp4gs8v3DcveTfyz3PZwwYcUBROVirI53y Eb/JeXf3739hR0PaQryuk97hZytHkXLb1GZPY6p2smNfIk3C3feIZUYuslscPEym Q97Gd0UYX0SwRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:43 2025 by rpki-client