This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft File: yJgrANxgA9zFz9fSe1WV0MrKXaE.mft (raw, json) Hash identifier: tv3be9r51eQqlpV/QlUDVWawoCqZ+T+UqTUi7dUMoLE= Subject key identifier: E4:42:38:C8:D2:C8:6E:4B:A3:1C:60:7A:97:95:51:E9:14:8F:9C:D4 Authority key identifier: C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1 Certificate issuer: /CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1 Certificate serial: 019AF19ADC2D03B74FCACF1D171A103ECEB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:00:49 +0000 Manifest this update: Sat 06 Dec 2025 03:00:49 +0000 Manifest next update: Sun 07 Dec 2025 03:00:49 +0000 Files and hashes: 1: fF2XIJTPCrRrtW2Ed7f3XI5YBGE.roa (hash: yAyZKCviC/wjO248iuIwgpoUtsrF9JNp+X9B5Xdnj9A=) 2: yJgrANxgA9zFz9fSe1WV0MrKXaE.crl (hash: rYWfK8HhJnHjusMxCpbo4SliK4LcCpweCEV2yRUfww0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:dc:2d:03:b7:4f:ca:cf:1d:17:1a:10:3e:ce:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1 Validity Not Before: Dec 6 03:00:49 2025 GMT Not After : Dec 7 03:00:49 2025 GMT Subject: CN=e44238c8d2c86e4ba31c607a979551e9148f9cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:45:8d:d9:55:db:e0:60:2a:85:90:35:6f:b5: 1a:8e:af:9c:ab:5c:87:96:3a:87:49:d1:fa:17:e2: 23:f9:a1:2c:3b:8a:18:0d:e0:bb:59:98:b5:fa:ff: 0b:dc:af:49:bf:23:91:82:ab:47:fb:c5:2f:2c:36: d6:05:a4:29:91:a2:90:17:bd:69:25:1a:97:ed:d7: 21:26:dd:75:2c:c3:b1:ad:a1:8e:23:3a:4d:71:f0: df:bb:e5:e8:3a:a5:28:a9:66:1d:d3:0a:2f:c8:7b: b4:3b:f7:88:dc:f9:3a:17:42:32:17:34:75:d8:dc: b2:b0:3c:61:43:fb:89:85:d4:01:ca:a8:60:8d:8a: 3a:eb:64:a9:7a:31:19:23:54:2b:ff:ab:c5:69:bc: 95:99:1e:88:46:4f:9d:39:97:2f:8d:74:88:d9:f6: 01:65:88:87:78:30:73:03:a0:d7:e4:aa:dc:41:e6: ef:91:be:8e:fc:34:b3:1d:ef:40:93:19:7a:db:a8: e1:fc:64:e4:83:1f:7c:3d:14:c5:76:d1:a9:46:40: 8f:cb:2d:24:39:39:21:7f:17:10:1b:c2:0e:78:29: 5e:70:be:17:28:b8:fe:d1:86:de:92:d2:88:9b:59: c7:24:72:40:e1:d1:a1:51:6c:6d:02:fb:1d:e1:cb: 9d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:42:38:C8:D2:C8:6E:4B:A3:1C:60:7A:97:95:51:E9:14:8F:9C:D4 X509v3 Authority Key Identifier: keyid:C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:8a:8f:98:ba:cc:c1:ff:cf:bc:f0:2a:d3:f5:df:f5:ad:a7: 64:30:1f:86:9e:22:4f:0c:08:87:eb:61:15:6f:64:1f:17:82: 2a:58:8b:ad:45:4b:0e:df:c3:15:e8:94:00:e6:e0:80:3b:b9: e4:57:c4:df:bd:65:ab:ae:87:ba:4d:e0:fe:1d:e5:98:7e:2f: c4:f3:35:9e:34:8c:18:20:e7:3a:89:6b:8e:f7:6c:ae:19:94: 2d:e2:00:f6:de:81:fd:f2:04:8e:9d:2f:23:b1:1a:dc:0d:7b: 8f:9d:8b:34:db:7e:38:55:ca:42:71:31:33:64:9c:89:7f:bb: 95:49:af:6c:fc:92:c1:61:84:2e:a2:6d:f6:0d:7d:5f:5c:42: 45:08:35:4e:1d:4a:d2:62:5b:4b:12:bf:56:49:f2:e0:76:13: f7:55:3b:b2:95:37:83:b9:2c:d1:22:8d:76:d9:50:96:08:d2: be:69:ad:c8:6a:a7:30:5e:37:87:a0:37:7f:bf:24:16:ed:b6: 05:93:f8:fb:e5:1c:2d:20:48:c1:e4:70:51:79:75:c9:d6:74: 2f:de:ff:0f:55:11:2b:5c:ce:e1:db:ec:68:26:3e:d1:15:9b: e4:49:93:48:d7:7c:bc:8e:86:d3:21:8b:f3:ff:aa:46:c1:b5: 97:27:c8:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtwtA7dPys8dFxoQPs62MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4OTgyYjAwZGM2MDAzZGNjNWNmZDdkMjdiNTU5NWQwY2Fj YTVkYTEwHhcNMjUxMjA2MDMwMDQ5WhcNMjUxMjA3MDMwMDQ5WjAzMTEwLwYDVQQD EyhlNDQyMzhjOGQyYzg2ZTRiYTMxYzYwN2E5Nzk1NTFlOTE0OGY5Y2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUWN2VXb4GAqhZA1b7Uajq+cq1yH ljqHSdH6F+Ij+aEsO4oYDeC7WZi1+v8L3K9JvyORgqtH+8UvLDbWBaQpkaKQF71p JRqX7dchJt11LMOxraGOIzpNcfDfu+XoOqUoqWYd0wovyHu0O/eI3Pk6F0IyFzR1 2NyysDxhQ/uJhdQByqhgjYo662SpejEZI1Qr/6vFabyVmR6IRk+dOZcvjXSI2fYB ZYiHeDBzA6DX5KrcQebvkb6O/DSzHe9Akxl626jh/GTkgx98PRTFdtGpRkCPyy0k OTkhfxcQG8IOeClecL4XKLj+0YbektKIm1nHJHJA4dGhUWxtAvsd4cudwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORCOMjSyG5LoxxgepeVUekUj5zUMB8GA1UdIwQY MBaAFMiYKwDcYAPcxc/X0ntVldDKyl2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUpnckFOeGdBOXpGejlmU2UxV1YwTXJLWGFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8yMTY4YmEtMWM0Yy00MjA2LTkyOTkt MTY1M2UwZGU0MDUwLzEveUpnckFOeGdBOXpGejlmU2UxV1YwTXJLWGFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8yMTY4YmEtMWM0Yy00MjA2LTkyOTktMTY1M2UwZGU0MDUw LzEveUpnckFOeGdBOXpGejlmU2UxV1YwTXJLWGFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABoqPmLrM wf/PvPAq0/Xf9a2nZDAfhp4iTwwIh+thFW9kHxeCKliLrUVLDt/DFeiUAObggDu5 5FfE371lq66Huk3g/h3lmH4vxPM1njSMGCDnOolrjvdsrhmULeIA9t6B/fIEjp0v I7Ea3A17j52LNNt+OFXKQnExM2SciX+7lUmvbPySwWGELqJt9g19X1xCRQg1Th1K 0mJbSxK/Vkny4HYT91U7spU3g7ks0SKNdtlQlgjSvmmtyGqnMF43h6A3f78kFu22 BZP4++UcLSBIweRwUXl1ydZ0L97/D1URK1zO4dvsaCY+0RWb5EmTSNd8vI6G0yGL 8/+qRsG1lyfIsw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:29:32 2025 by rpki-client