This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft File: ylIg5T5PgcoljM_qGHKAKA9fYho.mft (raw, json) Hash identifier: FszXuOyZTEIIzbo9h3v2lggEBXaZ17CqsDfnuLFS+ec= Subject key identifier: 09:04:A5:55:43:FA:48:42:21:64:FD:85:08:16:0E:8B:E7:1B:6E:AA Authority key identifier: CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A Certificate issuer: /CN=ca5220e53e4f81ca258ccfea187280280f5f621a Certificate serial: 019AF3F7CC959069F0F9E50B3E54205CE59D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 14:01:34 +0000 Manifest this update: Sat 06 Dec 2025 14:01:34 +0000 Manifest next update: Sun 07 Dec 2025 14:01:34 +0000 Files and hashes: 1: HnblzgjRhv7ohFCku2dgX5Jr7vw.roa (hash: o9K0gGCxUA0R4sGgN9lj9M6IzHoNtSXBjdq46DJlaa4=) 2: dem0uBwT7g7YZDZIQsS-aXVQdOI.roa (hash: XISttqO419C7SgkgSmOfFJd6GmXYZpUuMQWw/YZudzA=) 3: ylIg5T5PgcoljM_qGHKAKA9fYho.crl (hash: ipdw1OTf1Um1hVDhP6kXtupUGd6jL972fMYXF5vIh+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:cc:95:90:69:f0:f9:e5:0b:3e:54:20:5c:e5:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca5220e53e4f81ca258ccfea187280280f5f621a Validity Not Before: Dec 6 14:01:34 2025 GMT Not After : Dec 7 14:01:34 2025 GMT Subject: CN=0904a55543fa48422164fd8508160e8be71b6eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a6:26:9c:b0:54:d9:41:fb:00:77:4f:e4:eb: 4a:18:1a:85:32:de:a8:ce:aa:b8:57:2b:80:c3:72: e2:76:7d:64:2b:ec:69:cc:0d:32:84:9d:b4:50:89: 23:ce:0b:15:33:dc:95:01:31:6e:e5:75:e3:01:7d: e5:c1:31:e4:47:37:24:0e:69:ef:cf:13:8f:2e:ab: 29:93:c9:5a:f6:89:fd:6b:f8:3a:a0:bd:78:71:41: ac:50:e3:ce:8b:48:bc:99:2b:55:98:83:11:78:c6: 6f:44:52:6a:da:38:59:ba:2c:81:99:98:a4:05:53: bb:d5:d3:bf:2e:8b:57:5d:b7:17:fe:b5:64:bb:71: 09:bb:e5:62:73:4a:3c:58:b6:b8:f0:54:ec:d2:3f: 2a:8c:35:cd:ba:28:f1:49:8e:fe:6e:dc:72:b3:9b: 49:e3:39:c1:45:fc:77:2f:f7:37:cb:22:42:ac:ea: 77:c4:b7:ae:4e:c6:ea:6f:86:be:43:3f:ee:1b:71: 16:ce:4d:43:15:f4:83:2f:27:c4:18:9f:f2:64:94: c0:10:3c:ce:a8:8c:d6:71:79:3c:91:24:bb:ea:06: e5:bc:07:60:e3:74:aa:59:71:2c:5b:e0:30:20:3a: cb:b3:22:e0:2e:cc:d1:d5:77:d9:42:73:85:f8:2f: 67:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:04:A5:55:43:FA:48:42:21:64:FD:85:08:16:0E:8B:E7:1B:6E:AA X509v3 Authority Key Identifier: keyid:CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:33:fb:26:91:a4:30:ee:73:2d:b7:a4:5d:a8:b3:a2:b4:26: 25:39:b2:d1:a4:ce:46:bd:85:ae:fe:26:31:74:82:80:1b:e7: ef:64:63:d0:e9:3a:42:03:65:e1:93:af:93:e1:5b:1c:9b:d1: 93:ca:33:56:16:26:7f:f1:77:87:2a:18:78:a2:06:15:55:24: 4a:f3:ec:44:8e:0c:13:68:f1:1a:00:a0:cd:ae:4d:85:69:7d: 18:dc:6e:28:c3:87:0f:d9:69:9f:81:36:0f:56:83:ca:90:f8: 98:08:78:1d:75:21:bd:04:bd:aa:25:9e:3d:c3:76:8c:85:69: 21:a2:f4:dc:8f:cc:5c:08:cf:26:f8:e0:e5:3b:31:a6:38:52: 32:92:b2:bc:5c:5f:af:a5:d9:0c:8d:78:b7:bb:52:b5:5b:17: 29:e6:ac:f2:a4:d7:04:8d:1b:8a:3b:40:05:e8:6f:fa:2b:03: 34:4d:03:f6:ac:cf:ba:6c:b5:4f:5c:0d:ff:63:3e:22:60:2e: 90:f4:e6:e2:93:f6:27:22:e9:8a:3c:69:b2:dd:e4:2b:d4:6b: 3b:5a:87:2f:b0:f0:f2:69:9a:b6:81:7d:4a:6e:e6:94:43:96: 0e:48:8f:5e:b0:9f:4b:2e:66:84:29:23:de:b9:36:2c:1d:8b: 89:d5:91:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz98yVkGnw+eULPlQgXOWdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNTIyMGU1M2U0ZjgxY2EyNThjY2ZlYTE4NzI4MDI4MGY1 ZjYyMWEwHhcNMjUxMjA2MTQwMTM0WhcNMjUxMjA3MTQwMTM0WjAzMTEwLwYDVQQD EygwOTA0YTU1NTQzZmE0ODQyMjE2NGZkODUwODE2MGU4YmU3MWI2ZWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqYmnLBU2UH7AHdP5OtKGBqFMt6o zqq4VyuAw3Lidn1kK+xpzA0yhJ20UIkjzgsVM9yVATFu5XXjAX3lwTHkRzckDmnv zxOPLqspk8la9on9a/g6oL14cUGsUOPOi0i8mStVmIMReMZvRFJq2jhZuiyBmZik BVO71dO/LotXXbcX/rVku3EJu+Vic0o8WLa48FTs0j8qjDXNuijxSY7+btxys5tJ 4znBRfx3L/c3yyJCrOp3xLeuTsbqb4a+Qz/uG3EWzk1DFfSDLyfEGJ/yZJTAEDzO qIzWcXk8kSS76gblvAdg43SqWXEsW+AwIDrLsyLgLszR1XfZQnOF+C9n8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkEpVVD+khCIWT9hQgWDovnG26qMB8GA1UdIwQY MBaAFMpSIOU+T4HKJYzP6hhygCgPX2IaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWxJZzVUNVBnY29sak1fcUdIS0FLQTlmWWhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80MjQ5NDctMWM2YS00OGU5LWIyODkt ZjIzYzVhNTMxODIzLzEveWxJZzVUNVBnY29sak1fcUdIS0FLQTlmWWhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny80MjQ5NDctMWM2YS00OGU5LWIyODktZjIzYzVhNTMxODIz LzEveWxJZzVUNVBnY29sak1fcUdIS0FLQTlmWWhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezP7JpGk MO5zLbekXaizorQmJTmy0aTORr2Frv4mMXSCgBvn72Rj0Ok6QgNl4ZOvk+FbHJvR k8ozVhYmf/F3hyoYeKIGFVUkSvPsRI4ME2jxGgCgza5NhWl9GNxuKMOHD9lpn4E2 D1aDypD4mAh4HXUhvQS9qiWePcN2jIVpIaL03I/MXAjPJvjg5TsxpjhSMpKyvFxf r6XZDI14t7tStVsXKeas8qTXBI0bijtABehv+isDNE0D9qzPumy1T1wN/2M+ImAu kPTm4pP2JyLpijxpst3kK9RrO1qHL7Dw8mmatoF9Sm7mlEOWDkiPXrCfSy5mhCkj 3rk2LB2LidWRmA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:26:17 2025 by rpki-client