This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft File: yYlmC_FH9ij7fPiycYc3_qhimNA.mft (raw, json) Hash identifier: RTDW4e7e8rCPdIwW+o1AYJc7rNG4Fmb1AmTDNJrWK8Y= Subject key identifier: 45:A5:B5:E2:91:B3:64:9A:73:5A:79:FB:0D:7C:17:B6:EB:85:77:90 Authority key identifier: C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0 Certificate issuer: /CN=c989660bf147f628fb7cf8b2718737fea86298d0 Certificate serial: 019AF3521D613542AF5A6DACDC98CF2CAA9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft Manifest number: 0A6B Signing time: Sat 06 Dec 2025 11:00:36 +0000 Manifest this update: Sat 06 Dec 2025 11:00:36 +0000 Manifest next update: Sun 07 Dec 2025 11:00:36 +0000 Files and hashes: 1: EdKvKktbhV253248rH8OS7KgOJc.roa (hash: OVq8FxeeYttd7uYMiCGl4rm6BCNN8JrWv82y6k+zOKs=) 2: yYlmC_FH9ij7fPiycYc3_qhimNA.crl (hash: 1lSerRuZPmx0AE/gt4IuXdC7XVcqcLUAauytEsIEpVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:1d:61:35:42:af:5a:6d:ac:dc:98:cf:2c:aa:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c989660bf147f628fb7cf8b2718737fea86298d0 Validity Not Before: Dec 6 11:00:36 2025 GMT Not After : Dec 7 11:00:36 2025 GMT Subject: CN=45a5b5e291b3649a735a79fb0d7c17b6eb857790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b0:6d:8e:69:6c:37:1d:98:9b:75:16:19:bd: 8a:68:43:6c:f0:52:6d:09:7b:f3:a0:8e:80:4e:6a: 73:be:b9:c4:b3:41:48:2b:b3:32:5b:77:0c:3e:14: b3:c6:7d:bd:eb:12:78:22:12:64:4f:79:03:9b:07: 7d:31:ab:0c:3c:ed:21:63:cf:86:9e:a0:74:8e:cb: 7d:07:59:7a:a5:69:29:9b:1f:f6:7c:2d:67:5a:f8: 33:c8:eb:f0:bf:21:39:37:2f:cc:89:31:dc:0c:92: 37:9f:d2:ba:b8:aa:97:e7:0b:9e:a1:ff:0b:c8:6a: ff:fe:7a:2e:2b:de:b2:aa:03:14:ed:2e:9c:5f:57: b1:16:2d:e6:80:df:d1:31:d2:07:e1:87:d1:01:5f: 43:e8:3d:5b:08:56:f8:33:e6:36:1b:25:03:d4:cb: b6:d0:c8:f9:68:a1:90:89:1b:9d:3d:00:52:5b:b8: 7e:32:50:01:ff:20:a6:02:6c:c1:e4:60:40:dc:fc: e1:8b:a0:c0:c9:c5:b5:a0:2d:05:76:c4:f0:16:e9: 50:c3:25:16:73:63:e9:ee:e3:82:83:32:41:8b:7c: 37:68:c5:bf:db:db:a7:6d:fd:47:70:6e:ff:eb:a1: 67:be:f7:db:a5:1d:f2:da:cb:77:1f:dd:cf:8c:1c: c0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A5:B5:E2:91:B3:64:9A:73:5A:79:FB:0D:7C:17:B6:EB:85:77:90 X509v3 Authority Key Identifier: keyid:C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:6b:c3:9c:eb:d9:48:ce:e3:8d:0f:c5:9f:47:97:65:41:d7: 6c:2d:24:e1:17:5f:c8:0c:17:b6:fb:d0:6c:5c:52:6f:5e:1e: 2b:7f:5b:1f:86:8e:5e:74:8e:2d:7d:6a:3f:db:10:d8:12:a0: ec:65:5c:a8:9f:30:a8:12:e2:2e:b5:92:b8:d1:35:64:e2:49: 10:db:f3:89:a3:8f:85:b1:65:c3:61:18:37:2a:12:09:dc:0c: 80:89:8f:06:95:b1:26:4e:24:b8:11:71:59:06:49:3d:b7:3e: fb:2a:d2:a4:2a:e4:9f:da:e0:22:e1:08:cf:b0:03:bb:e5:2c: 3b:b5:75:83:96:71:74:d5:29:48:9a:a8:62:1a:47:7a:15:ab: a4:72:ad:a7:03:3b:43:3d:2c:fa:0d:6a:3b:52:e1:65:ff:5b: d8:99:d4:86:56:27:0b:31:0c:89:11:0b:cb:02:7d:43:c6:bd: b8:73:d8:32:12:f3:61:85:70:5e:3c:1d:2c:c3:c0:7b:59:c1: be:b4:36:4b:da:24:5f:96:5b:2f:a3:14:01:5b:c6:bb:92:5c: 17:b6:68:c7:19:f2:56:7c:49:e9:d6:84:86:2a:9f:e7:e9:e6: 7c:56:e3:f3:d0:af:33:60:c3:3d:b5:99:c8:b8:56:17:19:ab: 45:e5:f6:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUh1hNUKvWm2s3JjPLKqfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ODk2NjBiZjE0N2Y2MjhmYjdjZjhiMjcxODczN2ZlYTg2 Mjk4ZDAwHhcNMjUxMjA2MTEwMDM2WhcNMjUxMjA3MTEwMDM2WjAzMTEwLwYDVQQD Eyg0NWE1YjVlMjkxYjM2NDlhNzM1YTc5ZmIwZDdjMTdiNmViODU3NzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7BtjmlsNx2Ym3UWGb2KaENs8FJt CXvzoI6ATmpzvrnEs0FIK7MyW3cMPhSzxn296xJ4IhJkT3kDmwd9MasMPO0hY8+G nqB0jst9B1l6pWkpmx/2fC1nWvgzyOvwvyE5Ny/MiTHcDJI3n9K6uKqX5wueof8L yGr//nouK96yqgMU7S6cX1exFi3mgN/RMdIH4YfRAV9D6D1bCFb4M+Y2GyUD1Mu2 0Mj5aKGQiRudPQBSW7h+MlAB/yCmAmzB5GBA3Pzhi6DAycW1oC0FdsTwFulQwyUW c2Pp7uOCgzJBi3w3aMW/29unbf1HcG7/66FnvvfbpR3y2st3H93PjBzAAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWlteKRs2Sac1p5+w18F7brhXeQMB8GA1UdIwQY MBaAFMmJZgvxR/Yo+3z4snGHN/6oYpjQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVlsbUNfRkg5aWo3ZlBpeWNZYzNfcWhpbU5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82ZjAzOTItOGE4NS00N2FiLTg3NDYt YzE5ODY1M2FhYzVmLzEveVlsbUNfRkg5aWo3ZlBpeWNZYzNfcWhpbU5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy82ZjAzOTItOGE4NS00N2FiLTg3NDYtYzE5ODY1M2FhYzVm LzEveVlsbUNfRkg5aWo3ZlBpeWNZYzNfcWhpbU5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWvDnOvZ SM7jjQ/Fn0eXZUHXbC0k4RdfyAwXtvvQbFxSb14eK39bH4aOXnSOLX1qP9sQ2BKg 7GVcqJ8wqBLiLrWSuNE1ZOJJENvziaOPhbFlw2EYNyoSCdwMgImPBpWxJk4kuBFx WQZJPbc++yrSpCrkn9rgIuEIz7ADu+UsO7V1g5ZxdNUpSJqoYhpHehWrpHKtpwM7 Qz0s+g1qO1LhZf9b2JnUhlYnCzEMiRELywJ9Q8a9uHPYMhLzYYVwXjwdLMPAe1nB vrQ2S9okX5ZbL6MUAVvGu5JcF7ZoxxnyVnxJ6daEhiqf5+nmfFbj89CvM2DDPbWZ yLhWFxmrReX2uQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:48:37 2025 by rpki-client