This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft File: YoVOil7h3sifJbKnhZAj_7Ejufg.mft (raw, json) Hash identifier: b335QQxxo9aqi2DidmVnfSe0XV8BqLBWC7bFmt8XQC4= Subject key identifier: 79:9C:41:D0:92:79:F6:6C:89:D9:FA:28:A4:78:A9:6F:B8:88:07:08 Authority key identifier: 62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8 Certificate issuer: /CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8 Certificate serial: 019AF12F3F87296AD7457C7FD687474EACA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft Manifest number: 06E8 Signing time: Sat 06 Dec 2025 01:03:16 +0000 Manifest this update: Sat 06 Dec 2025 01:03:16 +0000 Manifest next update: Sun 07 Dec 2025 01:03:16 +0000 Files and hashes: 1: TrtZuni9BXkr6xZOXYLQCg04wuw.roa (hash: SIw1RJxvKD/HG9TI34PNPQ5r5zhuKGFFi0wwoRLgCSI=) 2: YoVOil7h3sifJbKnhZAj_7Ejufg.crl (hash: 3/24um31fzpVzgQ0I5Iem1V5KT/e9w1ztl+wsXxjxRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2f:3f:87:29:6a:d7:45:7c:7f:d6:87:47:4e:ac:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8 Validity Not Before: Dec 6 01:03:16 2025 GMT Not After : Dec 7 01:03:16 2025 GMT Subject: CN=799c41d09279f66c89d9fa28a478a96fb8880708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ed:ee:c4:fb:ac:b1:2b:4f:b8:73:cd:ed:12: aa:9a:f0:f3:5f:73:f5:b3:3f:b1:6e:73:1d:a8:6b: 99:3f:6c:3f:a9:5b:7f:ce:f6:fd:2e:b2:d7:b4:f0: af:63:4b:0c:39:93:0d:33:05:cd:e2:c6:9b:15:e9: 1d:ed:7a:dc:eb:50:70:2f:36:0d:65:1a:f5:a0:ad: e8:00:66:cf:da:24:54:24:c1:0c:e9:6b:01:b5:0b: 06:e3:44:ed:20:a1:80:2e:6f:a0:02:a9:32:2d:53: 43:77:a2:fe:ac:f7:a9:09:fb:6b:16:f4:f5:ee:56: 34:a0:e2:8c:e1:a7:02:ef:25:5e:2a:3c:8a:a3:da: c7:5f:68:a0:b1:d7:ca:98:e4:f4:07:26:60:5f:d8: 57:0d:f8:b6:df:cb:15:83:cd:eb:09:0e:12:12:a4: c9:cb:75:00:66:cb:e7:df:68:6f:fc:05:79:e6:a4: 57:5e:2f:f8:c5:bd:2a:f5:56:fb:09:fa:e9:35:7b: ef:23:fb:95:3b:a7:34:5a:44:b1:be:5c:1a:db:f7: 44:6d:64:95:f9:40:e0:b0:85:69:04:59:de:6f:de: 17:bf:ea:2b:73:50:b5:21:2c:f2:07:41:a0:ce:49: 37:3d:57:8d:8c:55:6c:9a:85:70:62:ba:69:c9:39: ea:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9C:41:D0:92:79:F6:6C:89:D9:FA:28:A4:78:A9:6F:B8:88:07:08 X509v3 Authority Key Identifier: keyid:62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ff:34:5a:4d:3d:89:7b:2b:d5:46:18:f7:d0:14:7f:79:80: 28:f3:f0:8d:80:dd:d8:f2:c7:0e:f7:36:81:85:43:c9:1c:60: 75:86:80:7b:d8:88:b6:72:81:4a:94:a6:9d:f5:c3:09:36:8f: 85:7e:4f:f8:25:ec:31:39:bf:4c:8b:ba:60:83:8f:fd:38:ac: e9:c7:a9:88:72:81:8f:32:55:75:42:ca:85:e5:5f:b4:46:61: 2b:17:ec:cc:53:a1:f1:11:e8:c9:34:5c:2a:98:a1:01:99:00: b3:c9:cf:e1:5f:43:2d:e1:b1:7d:11:e4:e2:4c:8c:5a:59:6c: 55:47:5f:90:c6:98:7a:35:ef:0f:db:f1:21:2a:a7:02:21:c3: 8b:c8:f1:af:e7:e7:ec:b5:2f:9e:38:7c:32:52:65:8d:9d:d2: de:e1:fb:e5:88:13:8e:ee:34:4a:54:01:0f:e8:26:21:6d:ef: 91:fc:80:d2:33:06:89:63:8c:fe:f7:87:8d:88:df:ad:7b:29: 4b:cf:48:ec:11:d9:01:51:89:b9:f4:bf:2a:4f:18:8b:c4:ae: 17:be:87:e9:c9:14:4a:1f:e4:c7:8f:f0:96:f7:66:7a:e3:b9: 47:e1:aa:27:d5:29:5e:10:46:11:09:75:ae:28:3c:f3:a6:f0: 6e:b0:8b:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLz+HKWrXRXx/1odHTqynMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyODU0ZThhNWVlMWRlYzg5ZjI1YjJhNzg1OTAyM2ZmYjEy M2I5ZjgwHhcNMjUxMjA2MDEwMzE2WhcNMjUxMjA3MDEwMzE2WjAzMTEwLwYDVQQD Eyg3OTljNDFkMDkyNzlmNjZjODlkOWZhMjhhNDc4YTk2ZmI4ODgwNzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue3uxPussStPuHPN7RKqmvDzX3P1 sz+xbnMdqGuZP2w/qVt/zvb9LrLXtPCvY0sMOZMNMwXN4sabFekd7Xrc61BwLzYN ZRr1oK3oAGbP2iRUJMEM6WsBtQsG40TtIKGALm+gAqkyLVNDd6L+rPepCftrFvT1 7lY0oOKM4acC7yVeKjyKo9rHX2igsdfKmOT0ByZgX9hXDfi238sVg83rCQ4SEqTJ y3UAZsvn32hv/AV55qRXXi/4xb0q9Vb7CfrpNXvvI/uVO6c0WkSxvlwa2/dEbWSV +UDgsIVpBFneb94Xv+orc1C1ISzyB0Ggzkk3PVeNjFVsmoVwYrppyTnqJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmcQdCSefZsidn6KKR4qW+4iAcIMB8GA1UdIwQY MBaAFGKFTope4d7InyWyp4WQI/+xI7n4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW9WT2lsN2gzc2lmSmJLbmhaQWpfN0VqdWZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNjFkM2QtODkwZC00OTI2LThmMzgt MzViMWM1YjhhZDM0LzEvWW9WT2lsN2gzc2lmSmJLbmhaQWpfN0VqdWZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNjFkM2QtODkwZC00OTI2LThmMzgtMzViMWM1YjhhZDM0 LzEvWW9WT2lsN2gzc2lmSmJLbmhaQWpfN0VqdWZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYv80Wk09 iXsr1UYY99AUf3mAKPPwjYDd2PLHDvc2gYVDyRxgdYaAe9iItnKBSpSmnfXDCTaP hX5P+CXsMTm/TIu6YIOP/Tis6cepiHKBjzJVdULKheVftEZhKxfszFOh8RHoyTRc KpihAZkAs8nP4V9DLeGxfRHk4kyMWllsVUdfkMaYejXvD9vxISqnAiHDi8jxr+fn 7LUvnjh8MlJljZ3S3uH75YgTju40SlQBD+gmIW3vkfyA0jMGiWOM/veHjYjfrXsp S89I7BHZAVGJufS/Kk8Yi8SuF76H6ckUSh/kx4/wlvdmeuO5R+GqJ9UpXhBGEQl1 rig886bwbrCL7w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:07:06 2025 by rpki-client