This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft File: YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft (raw, json) Hash identifier: 2prYYHdmrz1KdvzQAEcBgsL/PyXQULr7o5kHa0BJUR4= Subject key identifier: 2F:1E:EF:82:11:55:84:81:29:EB:D0:8C:C6:B4:94:40:3F:DB:DA:E4 Authority key identifier: 60:3B:31:BC:6E:7F:42:F6:30:38:70:F0:23:4B:40:DE:F7:1F:A0:3D Certificate issuer: /CN=603b31bc6e7f42f6303870f0234b40def71fa03d Certificate serial: 019AF3C057EA64AEEAA498E46F81520833F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft Manifest number: 0654 Signing time: Sat 06 Dec 2025 13:01:00 +0000 Manifest this update: Sat 06 Dec 2025 13:01:00 +0000 Manifest next update: Sun 07 Dec 2025 13:01:00 +0000 Files and hashes: 1: 59_xhKD0T6uSuFEYj3I2uhiqG1c.roa (hash: MYVrtUe54xpHaYsIcVLfMIx5ZncQsO+bXIz8ZL41Ros=) 2: 9qqMkqBIjABklRo0TcvZzdRORAI.roa (hash: 2MCPGhcnLXE4oMEI7o6/tc2uu9oOZ9cwxOU5/mzOPUI=) 3: YDsxvG5_QvYwOHDwI0tA3vcfoD0.crl (hash: JR3kOln3gGTofUuFv//J3/h6IUs6FAo0H8BWPeEYy5w=) 4: wXfYanJeLekulCR6gXF4hFd0qi4.roa (hash: kVi1Jps4RtrSVg9+xQdU2e8mO6fPm3vlK9bwNs7JRMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft rsync://rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:57:ea:64:ae:ea:a4:98:e4:6f:81:52:08:33:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=603b31bc6e7f42f6303870f0234b40def71fa03d Validity Not Before: Dec 6 13:01:00 2025 GMT Not After : Dec 7 13:01:00 2025 GMT Subject: CN=2f1eef821155848129ebd08cc6b494403fdbdae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a2:5c:04:52:08:f1:82:ca:b6:92:e4:87:8b: 3d:e7:2f:06:da:dd:a5:0d:4d:f7:66:a1:1d:d3:ab: 8c:b6:f7:60:d3:81:e0:4f:e0:53:d8:85:ab:89:39: 51:53:b2:0d:07:97:ab:0c:4c:98:08:aa:07:92:2a: d7:07:ed:81:7e:83:f1:d5:2a:b6:4d:24:89:b0:07: 4f:2c:71:e0:e9:20:20:1f:0b:39:42:3c:a0:b0:fa: 17:e0:5a:15:f1:31:fd:2b:87:0d:e5:66:6a:9a:a8: 7d:5b:1e:75:da:21:48:00:13:15:e7:89:75:36:b6: 5a:4a:65:fd:8d:a0:79:22:65:0d:3d:85:63:63:a7: 27:90:55:65:fa:d0:c9:94:8a:b5:68:06:3b:a1:5b: 3d:af:3a:9e:16:92:c4:19:d3:83:b5:e2:62:6e:c9: a2:cf:a9:0f:99:08:d5:0c:c3:69:57:c2:9a:d6:47: 72:73:82:93:62:e2:3b:20:35:7c:97:50:4d:ba:95: f2:2a:5b:32:7b:dc:68:36:a3:c1:7c:63:f0:0e:c1: 9a:7c:31:dc:1a:e8:99:14:36:04:f2:80:c5:d2:71: a2:e6:3b:49:5d:12:ac:95:7e:b4:02:1a:30:c9:37: 80:0a:4c:f0:e8:1e:52:4c:80:4f:e1:c1:31:36:9c: 10:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:1E:EF:82:11:55:84:81:29:EB:D0:8C:C6:B4:94:40:3F:DB:DA:E4 X509v3 Authority Key Identifier: keyid:60:3B:31:BC:6E:7F:42:F6:30:38:70:F0:23:4B:40:DE:F7:1F:A0:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:77:7c:bb:8b:6c:0c:26:29:35:57:16:57:44:35:3f:cf:a8: 9c:89:73:85:9f:cc:20:63:2d:7b:8b:03:d1:c0:80:a4:83:bf: 29:2b:50:11:c4:66:7b:ef:45:58:11:3c:5b:1e:97:42:87:f7: 2f:3a:c4:f8:e9:d2:be:9c:c8:3d:f8:84:fb:a5:5a:5a:e8:c7: 6e:b8:f9:4f:30:ea:26:f6:32:d0:e6:12:63:1a:be:15:4e:3e: 55:8f:d6:45:94:76:38:b2:b9:5a:86:9d:30:81:24:4e:48:b9: 1b:ae:29:c7:79:3c:f5:ab:fb:e5:45:80:cc:46:c9:e1:32:39: 61:3b:1f:cc:46:6d:e7:3f:26:5e:d2:40:d5:b2:3a:b5:2d:e1: 15:d5:10:cd:fd:c4:a7:8a:a5:34:12:23:b2:67:52:66:ba:8a: 4a:88:75:8a:1f:c4:e1:4a:f5:41:cf:c9:ad:82:2b:d4:e8:4a: 82:a0:43:d3:68:21:4c:c8:ad:a9:86:e3:b8:26:dc:f8:5a:6a: 3a:39:d6:24:16:a7:05:1a:d7:3c:40:1b:4b:94:5f:ab:34:59: fb:0b:0c:f8:22:c4:04:c7:33:e6:16:a4:72:cc:b0:e7:9b:bf: 9b:f8:73:98:2d:ee:38:54:31:2f:a4:f0:94:2c:4d:03:48:a2: 90:f2:20:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwFfqZK7qpJjkb4FSCDP5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwM2IzMWJjNmU3ZjQyZjYzMDM4NzBmMDIzNGI0MGRlZjcx ZmEwM2QwHhcNMjUxMjA2MTMwMTAwWhcNMjUxMjA3MTMwMTAwWjAzMTEwLwYDVQQD EygyZjFlZWY4MjExNTU4NDgxMjllYmQwOGNjNmI0OTQ0MDNmZGJkYWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qJcBFII8YLKtpLkh4s95y8G2t2l DU33ZqEd06uMtvdg04HgT+BT2IWriTlRU7INB5erDEyYCKoHkirXB+2BfoPx1Sq2 TSSJsAdPLHHg6SAgHws5QjygsPoX4FoV8TH9K4cN5WZqmqh9Wx512iFIABMV54l1 NrZaSmX9jaB5ImUNPYVjY6cnkFVl+tDJlIq1aAY7oVs9rzqeFpLEGdODteJibsmi z6kPmQjVDMNpV8Ka1kdyc4KTYuI7IDV8l1BNupXyKlsye9xoNqPBfGPwDsGafDHc GuiZFDYE8oDF0nGi5jtJXRKslX60AhowyTeACkzw6B5STIBP4cExNpwQcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8e74IRVYSBKevQjMa0lEA/29rkMB8GA1UdIwQY MBaAFGA7Mbxuf0L2MDhw8CNLQN73H6A9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWURzeHZHNV9Rdll3T0hEd0kwdEEzdmNmb0QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wZjIyNjYtYjRmMS00OGZjLWIyOTMt Njc5MzI2NTZlNTk0LzEvWURzeHZHNV9Rdll3T0hEd0kwdEEzdmNmb0QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8wZjIyNjYtYjRmMS00OGZjLWIyOTMtNjc5MzI2NTZlNTk0 LzEvWURzeHZHNV9Rdll3T0hEd0kwdEEzdmNmb0QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArnd8u4ts DCYpNVcWV0Q1P8+onIlzhZ/MIGMte4sD0cCApIO/KStQEcRme+9FWBE8Wx6XQof3 LzrE+OnSvpzIPfiE+6VaWujHbrj5TzDqJvYy0OYSYxq+FU4+VY/WRZR2OLK5Woad MIEkTki5G64px3k89av75UWAzEbJ4TI5YTsfzEZt5z8mXtJA1bI6tS3hFdUQzf3E p4qlNBIjsmdSZrqKSoh1ih/E4Ur1Qc/JrYIr1OhKgqBD02ghTMitqYbjuCbc+Fpq OjnWJBanBRrXPEAbS5RfqzRZ+wsM+CLEBMcz5hakcsyw55u/m/hzmC3uOFQxL6Tw lCxNA0iikPIgOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:44:21 2025 by rpki-client