This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft File: YxGmnIFyBEhUkx8QClm9CJy4iBo.mft (raw, json) Hash identifier: mc5yQqcTFqwE+1/VsbQ0eyEJtHjAr2pnEqj8hKRkews= Subject key identifier: 61:4C:13:B1:27:B4:2B:56:89:23:5B:11:87:DB:70:11:CE:52:85:D4 Authority key identifier: 63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A Certificate issuer: /CN=6311a69c8172044854931f100a59bd089cb8881a Certificate serial: 019AF1D1DA86D0E19E0DF7823A4EA40A79EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 04:00:53 +0000 Manifest this update: Sat 06 Dec 2025 04:00:53 +0000 Manifest next update: Sun 07 Dec 2025 04:00:53 +0000 Files and hashes: 1: Iu34C6WTJwsC1Fqt5jh4X7IhtoM.roa (hash: pYBTjTgLbQQp6tqJYSrST6Bcv/MloC/SDIFHbD5N2uA=) 2: YxGmnIFyBEhUkx8QClm9CJy4iBo.crl (hash: ONxaUPaer9RyhlmeLp7RTk4TNvqFjiCSqnIE+wbdrB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:da:86:d0:e1:9e:0d:f7:82:3a:4e:a4:0a:79:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6311a69c8172044854931f100a59bd089cb8881a Validity Not Before: Dec 6 04:00:53 2025 GMT Not After : Dec 7 04:00:53 2025 GMT Subject: CN=614c13b127b42b5689235b1187db7011ce5285d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:56:f6:79:cc:b5:ed:65:d2:d0:8f:f4:56:fb: 50:9c:d0:9b:0d:2f:77:0c:6b:a9:b5:6f:17:77:70: e2:98:2e:22:13:4e:fa:c5:2d:08:8c:18:b8:4b:d6: a2:f9:ad:36:b7:a3:c2:bf:b1:d6:ee:b9:d0:a1:8b: a6:44:e3:fe:a5:b8:f1:78:db:41:36:8a:55:40:76: 74:75:9a:55:35:be:c6:5d:e8:66:09:0d:f2:b3:46: e8:58:3c:0a:aa:c7:ff:91:37:03:cd:39:b1:bc:ab: ab:75:fb:43:bc:79:b7:b6:60:f2:ad:72:63:70:04: 46:17:0f:4c:51:f6:f0:98:e6:a6:af:9a:a1:ea:bf: ee:5c:49:c7:2e:82:0f:cb:4f:bc:ba:dc:d3:16:0a: 16:36:55:69:32:57:7a:a8:7a:7e:15:42:69:61:a5: 5e:b0:f4:4d:29:ee:dc:9a:de:ba:5a:72:b7:bb:2b: 1d:9b:76:7b:e7:46:36:6a:ed:05:af:28:59:17:77: 48:34:2a:4d:be:43:6b:f1:fd:1b:10:bb:0b:7b:d6: 70:fb:00:1e:55:7d:71:f9:96:2e:5c:98:88:3e:64: 20:05:95:fe:ee:3e:ce:04:1c:9f:0d:d8:bf:e1:ab: 45:2c:c3:dd:b0:7d:4f:5e:79:ac:a8:72:1e:ae:8f: 7d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4C:13:B1:27:B4:2B:56:89:23:5B:11:87:DB:70:11:CE:52:85:D4 X509v3 Authority Key Identifier: keyid:63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:09:2c:0b:ae:1c:69:c9:93:6f:82:eb:69:a6:f2:3e:cb:c2: f7:70:b6:87:fe:99:5f:3b:ca:fd:57:c5:10:41:53:e9:1a:94: 23:aa:30:36:3f:d1:f6:f9:41:a6:40:41:13:dc:ed:17:67:a2: 10:6a:41:10:9d:be:15:b2:8b:34:3f:90:41:84:df:d9:3f:d0: d7:9b:ac:f5:4c:0c:d9:af:7d:21:d9:d0:c2:be:30:0d:5d:32: a0:91:94:a3:d0:c0:6a:06:a2:d2:4a:70:4f:2e:c5:54:5f:bf: a6:7d:d8:c9:2a:01:b1:e3:d5:23:96:ee:57:bc:66:13:fb:0f: c3:ba:56:03:0d:c2:bb:e9:0f:bf:8c:f7:08:2d:be:c3:57:b4: 03:93:43:4e:40:75:d6:d2:d0:da:ca:d4:73:35:e3:71:f5:9b: 1d:76:ea:74:53:70:45:18:1a:6c:48:25:12:58:2c:66:4a:80: 47:d5:36:35:14:6b:b0:78:67:b7:80:3b:7c:cc:f9:2d:8b:49: d8:2f:39:aa:ad:de:1a:36:97:67:21:ec:6c:87:2c:fc:c5:c3: f4:11:3d:4f:62:f3:da:f3:c6:7e:1e:69:ac:8f:99:de:8a:e5: 55:cc:79:5a:d9:22:2d:b1:b8:be:2f:9b:bd:2f:2c:bd:94:73: 3a:50:37:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dqG0OGeDfeCOk6kCnnuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMTFhNjljODE3MjA0NDg1NDkzMWYxMDBhNTliZDA4OWNi ODg4MWEwHhcNMjUxMjA2MDQwMDUzWhcNMjUxMjA3MDQwMDUzWjAzMTEwLwYDVQQD Eyg2MTRjMTNiMTI3YjQyYjU2ODkyMzViMTE4N2RiNzAxMWNlNTI4NWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllb2ecy17WXS0I/0VvtQnNCbDS93 DGuptW8Xd3DimC4iE076xS0IjBi4S9ai+a02t6PCv7HW7rnQoYumROP+pbjxeNtB NopVQHZ0dZpVNb7GXehmCQ3ys0boWDwKqsf/kTcDzTmxvKurdftDvHm3tmDyrXJj cARGFw9MUfbwmOamr5qh6r/uXEnHLoIPy0+8utzTFgoWNlVpMld6qHp+FUJpYaVe sPRNKe7cmt66WnK3uysdm3Z750Y2au0FryhZF3dINCpNvkNr8f0bELsLe9Zw+wAe VX1x+ZYuXJiIPmQgBZX+7j7OBByfDdi/4atFLMPdsH1PXnmsqHIero993QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFME7EntCtWiSNbEYfbcBHOUoXUMB8GA1UdIwQY MBaAFGMRppyBcgRIVJMfEApZvQicuIgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXhHbW5JRnlCRWhVa3g4UUNsbTlDSnk0aUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jNGFiZmUtYThlNi00YTE0LThiNWMt ZDBlMGYyMTM5MzZjLzEvWXhHbW5JRnlCRWhVa3g4UUNsbTlDSnk0aUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jNGFiZmUtYThlNi00YTE0LThiNWMtZDBlMGYyMTM5MzZj LzEvWXhHbW5JRnlCRWhVa3g4UUNsbTlDSnk0aUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADgksC64c acmTb4LraabyPsvC93C2h/6ZXzvK/VfFEEFT6RqUI6owNj/R9vlBpkBBE9ztF2ei EGpBEJ2+FbKLND+QQYTf2T/Q15us9UwM2a99IdnQwr4wDV0yoJGUo9DAagai0kpw Ty7FVF+/pn3YySoBsePVI5buV7xmE/sPw7pWAw3Cu+kPv4z3CC2+w1e0A5NDTkB1 1tLQ2srUczXjcfWbHXbqdFNwRRgabEglElgsZkqAR9U2NRRrsHhnt4A7fMz5LYtJ 2C85qq3eGjaXZyHsbIcs/MXD9BE9T2Lz2vPGfh5prI+Z3orlVcx5WtkiLbG4vi+b vS8svZRzOlA39Q== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:32 2025 by rpki-client