This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft File: yeG79grg631AB2JxhcXxRyP_864.mft (raw, json) Hash identifier: xz1prYW+1jnR4DCqrxzukG3JQYyr5jzjp2VRGpTFyMs= Subject key identifier: 34:21:2A:B5:47:2C:75:94:6C:76:93:94:7F:94:16:B7:9C:69:C4:D2 Authority key identifier: C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE Certificate issuer: /CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae Certificate serial: 019AF23F5AC50210B7A3AF7757C98D210976 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft Manifest number: 02A5 Signing time: Sat 06 Dec 2025 06:00:29 +0000 Manifest this update: Sat 06 Dec 2025 06:00:29 +0000 Manifest next update: Sun 07 Dec 2025 06:00:29 +0000 Files and hashes: 1: qP-gsAFmgVOc4H-oZTo26Ptp5vw.roa (hash: QT6Tbak41BDvyGiXFOwS3KI7ZlriOjq7qFbGvl+22Ak=) 2: yeG79grg631AB2JxhcXxRyP_864.crl (hash: XGInr0vZ6z5znaiPFNSByLetKlVplWCcMFWN5H35dwU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:5a:c5:02:10:b7:a3:af:77:57:c9:8d:21:09:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae Validity Not Before: Dec 6 06:00:29 2025 GMT Not After : Dec 7 06:00:29 2025 GMT Subject: CN=34212ab5472c75946c7693947f9416b79c69c4d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e8:b3:4d:65:9a:14:05:22:10:23:b7:c1:fd: 6f:8d:1b:0a:89:13:2b:f3:07:1d:eb:00:33:b6:4a: 7d:69:4d:89:5c:36:3d:5a:db:df:ca:ff:da:18:57: d2:84:8d:1a:09:2b:45:7b:19:af:59:3f:66:9a:fd: 65:35:5a:9f:24:b2:33:cb:e0:a3:10:6d:a5:d2:3c: 63:ab:d8:55:dd:0f:9b:c6:ad:5e:27:97:ab:49:2d: 34:70:f5:a3:8a:2a:e4:f9:10:83:08:bb:b3:8f:9f: bf:95:10:52:29:61:42:cd:5d:22:ec:e5:a0:77:78: d4:01:a9:24:51:73:8e:c2:5a:df:f4:20:e1:82:de: 4d:c7:3b:de:28:be:33:0c:56:91:b7:e8:64:20:7f: 83:9f:a2:1a:98:44:51:2d:e2:f0:96:e5:03:57:78: 36:71:3e:10:7e:27:cd:2f:54:3c:fa:24:9d:51:4e: d8:b7:06:58:eb:da:e2:80:a1:27:8a:40:71:6a:11: 75:a9:9a:12:c5:be:d0:ce:b8:a0:e7:95:0b:84:f9: f9:ac:68:51:7e:89:ef:19:d4:71:70:2c:4b:e7:bc: 32:d8:6e:de:79:b3:94:16:7a:f9:16:4f:e8:ff:be: 2d:24:ae:fb:3e:d3:a5:6d:33:87:68:c0:db:be:23: 5b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:21:2A:B5:47:2C:75:94:6C:76:93:94:7F:94:16:B7:9C:69:C4:D2 X509v3 Authority Key Identifier: keyid:C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:f1:e5:64:24:12:88:5c:66:c4:1f:b9:a7:d1:0f:4c:44:90: f6:05:15:4b:1c:a6:ba:e0:44:b2:28:0c:57:66:a7:e7:fc:04: 78:d0:98:fd:21:d4:80:74:12:3c:a2:b1:15:e6:b9:e2:73:d6: 16:89:07:6a:a6:e6:99:53:5b:e1:3d:71:d0:7e:cd:a9:7e:54: f7:e9:29:e3:2d:0c:a1:2e:54:f0:27:a6:d9:04:66:67:46:ee: 4d:b0:46:e4:d5:e4:04:66:53:f8:42:2d:0a:89:cd:54:f5:8e: 32:30:18:82:fd:9a:d8:8d:c6:08:97:2e:d0:30:fb:07:e4:75: 79:e0:fa:98:52:7d:6b:43:f5:34:8a:71:8e:96:b7:e4:92:c3: 9f:bf:fa:d8:dc:f8:74:cd:46:72:14:72:a4:28:50:13:a4:c3: ad:82:7c:25:de:ff:4c:99:a3:f1:59:cc:c3:8d:80:b0:c6:c3: a0:7c:73:5c:c7:e0:9c:70:7f:74:06:54:d6:27:64:b0:85:c0: 15:f3:52:5f:2e:57:ac:94:41:07:0d:b7:d0:9a:c7:38:5a:c4: 3c:06:8a:42:70:bd:96:9d:a8:b7:8a:76:f6:e4:f7:4e:1b:3f: a9:e2:5f:c4:96:03:52:32:90:19:d6:b7:02:85:39:35:75:54: 9c:79:e9:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP1rFAhC3o693V8mNIQl2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZTFiYmY2MGFlMGViN2Q0MDA3NjI3MTg1YzVmMTQ3MjNm ZmYzYWUwHhcNMjUxMjA2MDYwMDI5WhcNMjUxMjA3MDYwMDI5WjAzMTEwLwYDVQQD EygzNDIxMmFiNTQ3MmM3NTk0NmM3NjkzOTQ3Zjk0MTZiNzljNjljNGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+izTWWaFAUiECO3wf1vjRsKiRMr 8wcd6wAztkp9aU2JXDY9Wtvfyv/aGFfShI0aCStFexmvWT9mmv1lNVqfJLIzy+Cj EG2l0jxjq9hV3Q+bxq1eJ5erSS00cPWjiirk+RCDCLuzj5+/lRBSKWFCzV0i7OWg d3jUAakkUXOOwlrf9CDhgt5NxzveKL4zDFaRt+hkIH+Dn6IamERRLeLwluUDV3g2 cT4QfifNL1Q8+iSdUU7YtwZY69rigKEnikBxahF1qZoSxb7Qzrig55ULhPn5rGhR fonvGdRxcCxL57wy2G7eebOUFnr5Fk/o/74tJK77PtOlbTOHaMDbviNbgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQhKrVHLHWUbHaTlH+UFrecacTSMB8GA1UdIwQY MBaAFMnhu/YK4Ot9QAdicYXF8Ucj//OuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWVHNzlncmc2MzFBQjJKeGhjWHhSeVBfODY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kYTUyOTYtZjczYi00NWQ2LWE5NDIt ZTEyOTZiMzJhMTFmLzEveWVHNzlncmc2MzFBQjJKeGhjWHhSeVBfODY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9kYTUyOTYtZjczYi00NWQ2LWE5NDItZTEyOTZiMzJhMTFm LzEveWVHNzlncmc2MzFBQjJKeGhjWHhSeVBfODY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp/HlZCQS iFxmxB+5p9EPTESQ9gUVSxymuuBEsigMV2an5/wEeNCY/SHUgHQSPKKxFea54nPW FokHaqbmmVNb4T1x0H7NqX5U9+kp4y0MoS5U8Cem2QRmZ0buTbBG5NXkBGZT+EIt ConNVPWOMjAYgv2a2I3GCJcu0DD7B+R1eeD6mFJ9a0P1NIpxjpa35JLDn7/62Nz4 dM1GchRypChQE6TDrYJ8Jd7/TJmj8VnMw42AsMbDoHxzXMfgnHB/dAZU1idksIXA FfNSXy5XrJRBBw230JrHOFrEPAaKQnC9lp2ot4p29uT3Ths/qeJfxJYDUjKQGda3 AoU5NXVUnHnptA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:21:46 2025 by rpki-client