This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft File: Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft (raw, json) Hash identifier: AYS1G2+Nsb5qSCm+wttx3LEsf4DEHNSudhU5Jgd7qZs= Subject key identifier: 13:34:5F:FF:03:DE:FE:94:AF:23:21:E8:4E:6F:29:4E:C3:43:7B:E4 Authority key identifier: 62:AF:1D:7F:36:B1:86:58:02:53:5E:49:A7:33:1E:03:5A:D0:10:08 Certificate issuer: /CN=62af1d7f36b1865802535e49a7331e035ad01008 Certificate serial: 019AF31B8A912E26083B667A493F3043B650 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft Manifest number: 0BC5 Signing time: Sat 06 Dec 2025 10:00:59 +0000 Manifest this update: Sat 06 Dec 2025 10:00:59 +0000 Manifest next update: Sun 07 Dec 2025 10:00:59 +0000 Files and hashes: 1: Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl (hash: 09enK7JT6cm3lzEee91T2xQB1WudKCaDUM83Oo0k7FA=) 2: y9JMR_ZxLXrYLvgRShORqLwJidY.roa (hash: Uw28deLkoDLLwc6/RTXYzT+/L0LSFoqfWT5M5xI68aM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:8a:91:2e:26:08:3b:66:7a:49:3f:30:43:b6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62af1d7f36b1865802535e49a7331e035ad01008 Validity Not Before: Dec 6 10:00:59 2025 GMT Not After : Dec 7 10:00:59 2025 GMT Subject: CN=13345fff03defe94af2321e84e6f294ec3437be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d4:81:df:4b:07:99:5e:9f:3a:65:2a:e9:2a: 03:a3:08:40:af:34:88:63:60:95:10:bf:0f:6f:23: b9:d7:82:84:cd:61:d1:de:59:74:15:14:e3:9c:5f: 7b:f4:f3:b9:51:08:5d:b1:b6:12:9f:69:94:8a:b5: 94:37:99:74:dd:d0:83:e9:b9:77:a5:37:8d:0b:6c: e4:3d:e5:e6:86:7c:bf:d4:17:b2:1b:48:00:8f:27: 2e:98:e8:c3:ff:b2:69:ea:60:9b:56:3d:6c:da:69: 8a:6f:62:f4:6f:9b:93:8a:51:dd:28:c5:e0:12:3d: a4:31:ff:5e:16:09:3b:83:41:e4:20:56:13:be:c6: fd:36:cd:a6:57:40:47:84:fe:4f:fd:e6:69:4c:ef: 25:e1:a2:18:1a:f3:82:da:16:22:1e:ed:26:f2:40: a6:bd:eb:0b:12:31:a5:b6:91:ae:16:7f:9d:82:5f: 15:26:18:24:90:d3:14:4e:fd:4d:89:9e:a0:9e:36: a7:07:92:cc:0c:ac:61:d5:2e:5b:2f:d0:84:60:a6: 36:ec:bd:d5:5f:b8:a8:9f:eb:1c:14:fe:8e:17:8e: 9c:29:b7:e7:9c:fe:4e:03:2e:66:1a:de:40:8f:9a: fa:80:6f:4c:46:7b:4a:df:98:70:7c:36:6c:33:0a: fd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:34:5F:FF:03:DE:FE:94:AF:23:21:E8:4E:6F:29:4E:C3:43:7B:E4 X509v3 Authority Key Identifier: keyid:62:AF:1D:7F:36:B1:86:58:02:53:5E:49:A7:33:1E:03:5A:D0:10:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:4f:53:a2:08:6a:13:df:47:12:47:35:09:91:8e:41:cf:75: c4:43:be:37:7e:28:da:cb:4c:3f:9b:f9:9c:f7:05:f4:47:b0: 31:86:8a:49:35:15:59:85:0c:87:d0:cd:18:ca:48:75:fd:a3: 66:e3:bb:48:86:ec:4d:fb:90:d2:40:61:bb:23:06:e2:f5:bb: 7a:05:6e:19:60:bc:6d:03:54:35:a0:88:73:7d:e8:f7:4a:d4: 08:a6:db:54:74:7d:f7:85:40:df:54:ce:2a:08:e7:48:a0:67: d4:57:14:f2:29:9b:14:d1:e1:c1:63:91:6a:04:0e:54:58:2c: c3:6a:4e:cd:ba:6d:f6:c1:23:8a:4d:6f:ec:ff:67:cf:4f:75: b1:8f:b1:ce:d5:04:d3:47:ac:b5:a7:77:0e:54:f2:54:c1:43: b9:f5:40:3b:04:bc:0a:31:c9:0c:57:3c:b2:7e:54:c5:ad:84: 63:b1:aa:c6:ea:c9:e4:79:2e:5f:8d:6e:db:09:19:72:25:96: 9b:b9:5f:1e:62:d3:7a:2a:3b:1d:55:64:05:a8:f0:83:7b:b2: 04:27:67:25:c6:8b:dd:63:02:c8:ca:3f:fa:8a:19:47:9f:94: e1:6a:29:56:a3:7b:a0:7e:42:0c:10:3f:01:90:51:c1:17:d4: 9c:61:fd:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG4qRLiYIO2Z6ST8wQ7ZQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYWYxZDdmMzZiMTg2NTgwMjUzNWU0OWE3MzMxZTAzNWFk MDEwMDgwHhcNMjUxMjA2MTAwMDU5WhcNMjUxMjA3MTAwMDU5WjAzMTEwLwYDVQQD EygxMzM0NWZmZjAzZGVmZTk0YWYyMzIxZTg0ZTZmMjk0ZWMzNDM3YmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktSB30sHmV6fOmUq6SoDowhArzSI Y2CVEL8PbyO514KEzWHR3ll0FRTjnF979PO5UQhdsbYSn2mUirWUN5l03dCD6bl3 pTeNC2zkPeXmhny/1BeyG0gAjycumOjD/7Jp6mCbVj1s2mmKb2L0b5uTilHdKMXg Ej2kMf9eFgk7g0HkIFYTvsb9Ns2mV0BHhP5P/eZpTO8l4aIYGvOC2hYiHu0m8kCm vesLEjGltpGuFn+dgl8VJhgkkNMUTv1NiZ6gnjanB5LMDKxh1S5bL9CEYKY27L3V X7ion+scFP6OF46cKbfnnP5OAy5mGt5Aj5r6gG9MRntK35hwfDZsMwr9WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBM0X/8D3v6UryMh6E5vKU7DQ3vkMB8GA1UdIwQY MBaAFGKvHX82sYZYAlNeSaczHgNa0BAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXE4ZGZ6YXhobGdDVTE1SnB6TWVBMXJRRUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lZDk2YzUtZDYzMy00MDJmLThlMDAt MmIxZDY3NDU5NWI3LzEvWXE4ZGZ6YXhobGdDVTE1SnB6TWVBMXJRRUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lZDk2YzUtZDYzMy00MDJmLThlMDAtMmIxZDY3NDU5NWI3 LzEvWXE4ZGZ6YXhobGdDVTE1SnB6TWVBMXJRRUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKU9Toghq E99HEkc1CZGOQc91xEO+N34o2stMP5v5nPcF9EewMYaKSTUVWYUMh9DNGMpIdf2j ZuO7SIbsTfuQ0kBhuyMG4vW7egVuGWC8bQNUNaCIc33o90rUCKbbVHR994VA31TO KgjnSKBn1FcU8imbFNHhwWORagQOVFgsw2pOzbpt9sEjik1v7P9nz091sY+xztUE 00estad3DlTyVMFDufVAOwS8CjHJDFc8sn5Uxa2EY7GqxurJ5HkuX41u2wkZciWW m7lfHmLTeio7HVVkBajwg3uyBCdnJcaL3WMCyMo/+ooZR5+U4WopVqN7oH5CDBA/ AZBRwRfUnGH97A== -----END CERTIFICATE-----Generated at Sat Dec 6 15:27:42 2025 by rpki-client