This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft File: yjNIUNrzcSIFIBmSKevekO8osBg.mft (raw, json) Hash identifier: Mx3+/9MQ23LFQjov5Yrr3ed1dtCZm8Ev93U1QCxzYoA= Subject key identifier: 0A:59:E5:47:9E:18:E6:A4:25:94:5D:E6:02:2C:AA:7C:5E:D8:E2:61 Authority key identifier: CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18 Certificate issuer: /CN=ca334850daf371220520199229ebde90ef28b018 Certificate serial: 019AF23FDD253BC21A340280FE91540E4727 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft Manifest number: 07DE Signing time: Sat 06 Dec 2025 06:01:02 +0000 Manifest this update: Sat 06 Dec 2025 06:01:02 +0000 Manifest next update: Sun 07 Dec 2025 06:01:02 +0000 Files and hashes: 1: 6eOqvZGDKFDuA6yXPPPze8WOsrA.roa (hash: ERZvSVqw/o5/S8YL0KRBFbpGBsSfCd4T3Hhjomrg6eY=) 2: yjNIUNrzcSIFIBmSKevekO8osBg.crl (hash: TL/t51ux7cxmRSJ8Dq6h6Jgk5e0zrDNR2uKF9BUC+LM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:dd:25:3b:c2:1a:34:02:80:fe:91:54:0e:47:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca334850daf371220520199229ebde90ef28b018 Validity Not Before: Dec 6 06:01:02 2025 GMT Not After : Dec 7 06:01:02 2025 GMT Subject: CN=0a59e5479e18e6a425945de6022caa7c5ed8e261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:19:51:a7:39:bb:79:6d:14:ab:96:fd:c0:65: 64:8b:e1:cb:a0:e8:27:b4:99:45:0a:97:87:3d:bc: ab:80:5e:95:c4:2c:a7:19:4b:1d:42:53:a9:3d:60: 4c:e2:30:2e:41:f8:de:de:e7:b6:d6:c1:74:69:1f: e2:5b:ed:0f:a5:b5:96:2d:cb:a4:dd:65:f7:40:bb: fc:23:ab:f0:a5:d8:ce:19:50:7a:41:4c:3d:89:78: ba:13:c1:0c:21:ae:7e:59:b7:72:22:b3:f4:32:4e: 10:1c:8f:42:9c:39:05:45:31:39:5e:4c:a3:12:8a: 20:40:0c:0b:40:1c:43:94:a9:a8:39:53:60:da:b3: be:e3:de:9d:bd:93:49:69:56:25:a5:fc:54:a8:84: 9a:1e:8a:b7:d0:79:68:4c:eb:4b:f0:c8:38:e0:cd: f3:7b:b9:b8:05:dd:67:16:58:e1:9d:b4:a6:7a:8c: 25:98:d9:3d:58:b8:fb:41:b0:09:16:a6:6a:61:5f: 6d:92:b6:ac:a4:a6:ff:4c:9a:98:cb:5f:52:e5:44: f5:8b:eb:fa:1a:da:cf:82:e0:44:f3:49:5d:2c:35: 7b:ce:65:06:e4:f8:56:ee:4b:a4:13:6b:f0:c0:df: f4:57:16:68:42:a8:b6:13:bb:72:92:1f:41:e3:14: ff:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:59:E5:47:9E:18:E6:A4:25:94:5D:E6:02:2C:AA:7C:5E:D8:E2:61 X509v3 Authority Key Identifier: keyid:CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:4b:49:0c:90:27:14:9a:46:13:25:a1:91:fb:fd:8f:38:1a: 0f:29:4d:8b:04:3e:a3:0d:0d:12:40:63:27:7f:39:0c:00:5a: 36:73:80:c1:ac:ab:15:43:3a:8f:3b:bd:88:3c:56:ce:fa:74: cf:85:29:05:97:34:a7:89:6f:97:45:c4:1a:71:34:3b:df:36: cf:bd:26:43:3e:3e:aa:b9:ad:36:f5:ff:9a:b8:aa:45:bc:e3: e7:c1:0f:3e:cb:82:7f:ad:e5:21:c8:d9:2d:01:5b:38:c0:d1: 99:1d:c5:77:89:7e:e7:bf:f0:20:1b:7f:b5:17:98:6e:8e:06: 61:6d:68:8e:e0:77:cf:a5:e7:12:2b:d0:d1:65:55:ed:92:21: 5e:41:d6:b1:f5:35:4f:a0:d0:a1:91:20:75:98:d4:30:b6:3f: b6:6d:02:0f:2c:3a:fe:a5:eb:5e:3f:70:32:f7:f1:a7:a5:7c: fc:0f:39:02:70:12:1a:73:92:f7:8f:2a:00:2c:b0:9d:0f:73: d4:7a:b0:8a:27:d8:d5:5b:4a:23:81:09:ab:ac:80:fc:e0:7d: e8:7a:7f:aa:cc:3f:63:5e:50:43:a6:2f:05:a6:6d:f0:5c:32: 6c:2f:9f:a2:4c:ec:27:3f:b7:ee:b9:f8:b6:3c:cb:e3:ef:dd: b8:85:fc:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP90lO8IaNAKA/pFUDkcnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzM0ODUwZGFmMzcxMjIwNTIwMTk5MjI5ZWJkZTkwZWYy OGIwMTgwHhcNMjUxMjA2MDYwMTAyWhcNMjUxMjA3MDYwMTAyWjAzMTEwLwYDVQQD EygwYTU5ZTU0NzllMThlNmE0MjU5NDVkZTYwMjJjYWE3YzVlZDhlMjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRlRpzm7eW0Uq5b9wGVki+HLoOgn tJlFCpeHPbyrgF6VxCynGUsdQlOpPWBM4jAuQfje3ue21sF0aR/iW+0PpbWWLcuk 3WX3QLv8I6vwpdjOGVB6QUw9iXi6E8EMIa5+WbdyIrP0Mk4QHI9CnDkFRTE5Xkyj EoogQAwLQBxDlKmoOVNg2rO+496dvZNJaVYlpfxUqISaHoq30HloTOtL8Mg44M3z e7m4Bd1nFljhnbSmeowlmNk9WLj7QbAJFqZqYV9tkraspKb/TJqYy19S5UT1i+v6 GtrPguBE80ldLDV7zmUG5PhW7kukE2vwwN/0VxZoQqi2E7tykh9B4xT/0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApZ5UeeGOakJZRd5gIsqnxe2OJhMB8GA1UdIwQY MBaAFMozSFDa83EiBSAZkinr3pDvKLAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWpOSVVOcnpjU0lGSUJtU0tldmVrTzhvc0JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lZTVlNDctNGUyOS00NjAzLWI5NjIt MGUwMDQ2YzhhODdiLzEveWpOSVVOcnpjU0lGSUJtU0tldmVrTzhvc0JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lZTVlNDctNGUyOS00NjAzLWI5NjItMGUwMDQ2YzhhODdi LzEveWpOSVVOcnpjU0lGSUJtU0tldmVrTzhvc0JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0tJDJAn FJpGEyWhkfv9jzgaDylNiwQ+ow0NEkBjJ385DABaNnOAwayrFUM6jzu9iDxWzvp0 z4UpBZc0p4lvl0XEGnE0O982z70mQz4+qrmtNvX/mriqRbzj58EPPsuCf63lIcjZ LQFbOMDRmR3Fd4l+57/wIBt/tReYbo4GYW1ojuB3z6XnEivQ0WVV7ZIhXkHWsfU1 T6DQoZEgdZjUMLY/tm0CDyw6/qXrXj9wMvfxp6V8/A85AnASGnOS948qACywnQ9z 1HqwiifY1VtKI4EJq6yA/OB96Hp/qsw/Y15QQ6YvBaZt8FwybC+fokzsJz+37rn4 tjzL4+/duIX8WA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:17:16 2025 by rpki-client