This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft File: YXfFgJJlmeg6tzW6LgT8EId4xEE.mft (raw, json) Hash identifier: SnAAr0wqfzwLSz7EN+CopYsgni4T9gZ96Kc0TCT+fjA= Subject key identifier: 1E:65:F2:0B:EE:40:5B:FB:4F:EF:DD:5E:88:77:6F:23:2C:A2:C3:A1 Authority key identifier: 61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41 Certificate issuer: /CN=6177c580926599e83ab735ba2e04fc108778c441 Certificate serial: 019AF31BFFA7680722431F226103A92FC11A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft Manifest number: 0EB9 Signing time: Sat 06 Dec 2025 10:01:29 +0000 Manifest this update: Sat 06 Dec 2025 10:01:29 +0000 Manifest next update: Sun 07 Dec 2025 10:01:29 +0000 Files and hashes: 1: Gu9ez5zlQGgsXPCgSAa011q3NCY.roa (hash: XMVaMgOJ4WWG4Lp4VxV89GlWKPKFR9zZG9BiqqxMKyA=) 2: YXfFgJJlmeg6tzW6LgT8EId4xEE.crl (hash: /FdnfmzdGP9Kk91AflkE2odzyY6ZhQFeSgZNH7WJwRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:ff:a7:68:07:22:43:1f:22:61:03:a9:2f:c1:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6177c580926599e83ab735ba2e04fc108778c441 Validity Not Before: Dec 6 10:01:29 2025 GMT Not After : Dec 7 10:01:29 2025 GMT Subject: CN=1e65f20bee405bfb4fefdd5e88776f232ca2c3a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a5:83:be:9d:cc:f1:46:45:11:01:0e:6b:5d: 54:cd:0d:4e:57:80:24:00:e7:02:76:56:12:72:52: e1:30:bf:a3:8f:de:60:ad:fd:73:78:c6:0e:5d:8b: db:40:91:80:84:7d:e6:17:da:3d:ad:ca:e1:fd:ac: f3:0a:eb:f4:eb:98:de:11:9d:73:9f:b5:35:35:7a: 2f:1a:0c:d7:6a:22:0e:bb:6c:f4:d1:fd:6b:82:4b: ca:a8:f4:a5:59:4a:7a:e1:b8:bc:e9:f5:ec:63:e7: d3:84:80:79:ad:f2:80:97:76:cd:9b:a1:5d:58:ee: 88:37:5f:1d:7c:ee:c7:c5:79:b0:cd:20:07:b5:19: 68:0d:80:05:af:88:f1:38:44:07:96:56:d3:83:40: 27:8b:11:2c:dd:7a:ef:d9:fe:fc:17:d0:58:04:15: cb:44:84:60:1e:58:0b:17:ad:fa:fb:98:2e:2d:56: 8c:40:5e:35:90:67:3f:e7:1f:d4:8f:fb:a7:2a:c7: 1c:9e:ed:ae:34:21:9f:d1:d5:e1:5e:55:62:08:01: de:ca:84:8e:e1:73:b8:ad:5b:30:d1:aa:8f:09:0f: 39:55:ee:34:fc:93:ad:7b:37:5f:e8:45:0c:a5:0f: 87:08:f1:e0:57:ff:7d:dc:d4:61:e8:4c:69:41:3b: 2c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:65:F2:0B:EE:40:5B:FB:4F:EF:DD:5E:88:77:6F:23:2C:A2:C3:A1 X509v3 Authority Key Identifier: keyid:61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:82:b6:5b:16:3e:db:c7:7d:2a:90:65:58:10:99:c8:66:2a: 9f:82:a1:a6:7c:b6:68:a9:d7:58:ae:75:df:41:13:21:0b:a8: 48:9c:3f:fa:b6:e9:33:1c:bf:04:86:67:d8:10:e2:e4:ca:db: 60:7e:9b:71:b4:69:a5:43:ba:c1:d4:b7:cc:d0:a3:03:ad:64: 0f:48:94:b4:e9:c4:a3:34:b7:0e:39:cd:73:ef:63:06:09:bb: 1f:0b:aa:83:0a:ef:90:60:94:ab:61:e8:29:a5:e3:d9:6a:f4: aa:4e:eb:b8:dc:88:70:35:c6:5c:8b:4e:b5:3c:57:83:2f:01: 64:38:b8:85:bc:1d:97:56:b3:3c:d2:37:42:77:da:e2:a0:a7: dd:77:21:e0:bb:71:47:e8:f6:48:da:68:ba:34:51:ba:c2:72: c7:86:e5:14:30:0c:9f:06:f1:0b:17:37:84:43:40:15:dd:5b: 4c:03:03:b9:27:71:15:62:09:33:a1:92:c1:53:77:ca:a3:88: d1:89:0f:4e:4c:c4:f3:b9:cf:cf:49:41:e4:7d:5f:2c:71:b3: d4:a4:e0:c5:81:fd:4c:d9:38:2a:ef:5a:52:78:ff:5c:8b:60: 36:a2:18:87:03:c7:1f:4c:9e:42:d7:1d:ab:e2:1e:eb:04:c0: 0a:02:0a:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG/+naAciQx8iYQOpL8EaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNzdjNTgwOTI2NTk5ZTgzYWI3MzViYTJlMDRmYzEwODc3 OGM0NDEwHhcNMjUxMjA2MTAwMTI5WhcNMjUxMjA3MTAwMTI5WjAzMTEwLwYDVQQD EygxZTY1ZjIwYmVlNDA1YmZiNGZlZmRkNWU4ODc3NmYyMzJjYTJjM2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6WDvp3M8UZFEQEOa11UzQ1OV4Ak AOcCdlYSclLhML+jj95grf1zeMYOXYvbQJGAhH3mF9o9rcrh/azzCuv065jeEZ1z n7U1NXovGgzXaiIOu2z00f1rgkvKqPSlWUp64bi86fXsY+fThIB5rfKAl3bNm6Fd WO6IN18dfO7HxXmwzSAHtRloDYAFr4jxOEQHllbTg0AnixEs3Xrv2f78F9BYBBXL RIRgHlgLF636+5guLVaMQF41kGc/5x/Uj/unKsccnu2uNCGf0dXhXlViCAHeyoSO 4XO4rVsw0aqPCQ85Ve40/JOtezdf6EUMpQ+HCPHgV/993NRh6ExpQTssXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5l8gvuQFv7T+/dXoh3byMsosOhMB8GA1UdIwQY MBaAFGF3xYCSZZnoOrc1ui4E/BCHeMRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVhmRmdKSmxtZWc2dHpXNkxnVDhFSWQ0eEVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yOWJmN2ItNDc0NS00NDIzLWE4ZmEt YTMyZTJlZDBjZmQzLzEvWVhmRmdKSmxtZWc2dHpXNkxnVDhFSWQ0eEVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8yOWJmN2ItNDc0NS00NDIzLWE4ZmEtYTMyZTJlZDBjZmQz LzEvWVhmRmdKSmxtZWc2dHpXNkxnVDhFSWQ0eEVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfoK2WxY+ 28d9KpBlWBCZyGYqn4Khpny2aKnXWK5130ETIQuoSJw/+rbpMxy/BIZn2BDi5Mrb YH6bcbRppUO6wdS3zNCjA61kD0iUtOnEozS3DjnNc+9jBgm7HwuqgwrvkGCUq2Ho KaXj2Wr0qk7ruNyIcDXGXItOtTxXgy8BZDi4hbwdl1azPNI3Qnfa4qCn3Xch4Ltx R+j2SNpoujRRusJyx4blFDAMnwbxCxc3hENAFd1bTAMDuSdxFWIJM6GSwVN3yqOI 0YkPTkzE87nPz0lB5H1fLHGz1KTgxYH9TNk4Ku9aUnj/XItgNqIYhwPHH0yeQtcd q+Ie6wTACgIKNg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:10:45 2025 by rpki-client