This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft File: yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft (raw, json) Hash identifier: eL8b3AVLzpIzyKGaoQLsZ9D+zHHx3Zrqp4jO4Beq1JM= Subject key identifier: 0F:4D:20:B0:96:9D:E9:DA:C8:83:E2:CC:13:18:91:77:21:44:9C:3A Authority key identifier: C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64 Certificate issuer: /CN=c8df337cea56a083f46b799072e70da345cc2364 Certificate serial: 019AF1D22AC99CC7777DF4229A469880BC04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 04:01:13 +0000 Manifest this update: Sat 06 Dec 2025 04:01:13 +0000 Manifest next update: Sun 07 Dec 2025 04:01:13 +0000 Files and hashes: 1: yEMlFNYIo_7PBG15hC66LWSw4E0.roa (hash: 0NF8QaEpF30c3qMJTec6Bga4N+I8Ns4AqntJ51k9D0k=) 2: yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl (hash: /M5dGA1wUvsyymfMII3kqcQVBhRxoTUGfxnFRz6Xh2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:2a:c9:9c:c7:77:7d:f4:22:9a:46:98:80:bc:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8df337cea56a083f46b799072e70da345cc2364 Validity Not Before: Dec 6 04:01:13 2025 GMT Not After : Dec 7 04:01:13 2025 GMT Subject: CN=0f4d20b0969de9dac883e2cc1318917721449c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:23:da:52:14:5f:e2:1a:da:80:92:da:e2:04: 74:1d:3d:2c:77:00:49:3a:0c:45:26:a9:f8:27:2f: b9:f8:8a:1c:14:73:1a:d6:16:a8:47:23:83:db:87: 97:1b:95:4a:08:af:5a:17:31:f1:91:6d:18:c6:81: 39:c0:0e:8d:c2:fa:9f:67:ef:6e:fb:93:ca:88:42: 54:49:2d:74:d4:0d:a4:22:e4:25:7d:e5:8e:50:27: 17:02:18:34:19:cd:52:14:82:51:9a:f7:aa:4d:36: ba:0c:b2:9f:c2:73:0b:5e:7d:d1:18:a2:e4:02:01: 21:d7:70:4e:b6:f1:7a:fe:ad:24:f7:a8:e7:0e:1a: 1b:2b:bf:33:13:17:8d:4d:6f:53:30:24:7f:21:0b: e1:92:a6:78:77:43:81:07:dc:c9:4a:8b:b6:5b:52: 56:f6:46:68:89:b4:04:0f:e1:9b:0d:cd:7c:2a:35: 3c:e3:76:16:83:08:3c:14:2f:3b:0f:75:62:05:4e: e1:68:09:aa:e0:0e:ae:0b:6a:44:12:45:fb:3e:25: 41:4a:93:0d:b4:9b:2c:12:2d:8d:17:3a:bc:04:e9: 22:25:03:15:02:64:d4:87:ce:58:43:bc:63:a6:a8: b0:61:6c:54:b3:30:c0:8e:a2:f1:99:f6:4e:e4:6a: 6a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4D:20:B0:96:9D:E9:DA:C8:83:E2:CC:13:18:91:77:21:44:9C:3A X509v3 Authority Key Identifier: keyid:C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:6a:20:3c:71:fa:eb:de:71:85:03:cb:fc:b1:91:74:68:92: db:73:43:bb:bb:9c:54:f9:ad:fd:93:0c:93:eb:17:a7:0f:2c: 2b:50:9f:70:89:10:58:9b:f9:d1:23:d0:54:8c:ae:41:bf:26: b9:c0:25:1f:83:70:24:70:cf:7a:0a:65:5f:91:63:91:64:df: df:17:72:75:86:ad:33:7d:a5:20:a6:98:76:de:db:dc:d7:e0: 74:65:74:f2:fe:64:1d:51:e8:87:bb:61:08:14:50:06:57:8c: b1:f3:3c:65:34:ef:83:94:45:dc:6a:be:a5:08:5f:c3:99:de: 86:dd:ba:ff:1e:61:57:0c:4d:24:02:b0:89:74:d0:2b:a4:e4: 1a:58:76:74:38:9e:53:7e:a3:89:ba:a0:61:54:9a:2f:f3:95: 52:60:71:35:08:c6:1d:f1:c7:48:78:76:2e:53:a0:e0:58:ee: be:c3:23:54:27:42:0a:c3:30:f2:d5:35:97:76:98:3e:e5:45: eb:a3:23:92:36:83:08:13:94:f8:7a:83:ab:35:a8:aa:d6:23: 28:d9:1e:b9:8e:a4:b9:dd:d9:a7:9a:86:58:6f:0e:ff:30:c3: d9:8e:a9:f1:47:31:ef:60:28:c5:d4:89:78:91:6a:2e:c9:e5: a2:22:61:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0irJnMd3ffQimkaYgLwEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZGYzMzdjZWE1NmEwODNmNDZiNzk5MDcyZTcwZGEzNDVj YzIzNjQwHhcNMjUxMjA2MDQwMTEzWhcNMjUxMjA3MDQwMTEzWjAzMTEwLwYDVQQD EygwZjRkMjBiMDk2OWRlOWRhYzg4M2UyY2MxMzE4OTE3NzIxNDQ5YzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyPaUhRf4hragJLa4gR0HT0sdwBJ OgxFJqn4Jy+5+IocFHMa1haoRyOD24eXG5VKCK9aFzHxkW0YxoE5wA6NwvqfZ+9u +5PKiEJUSS101A2kIuQlfeWOUCcXAhg0Gc1SFIJRmveqTTa6DLKfwnMLXn3RGKLk AgEh13BOtvF6/q0k96jnDhobK78zExeNTW9TMCR/IQvhkqZ4d0OBB9zJSou2W1JW 9kZoibQED+GbDc18KjU843YWgwg8FC87D3ViBU7haAmq4A6uC2pEEkX7PiVBSpMN tJssEi2NFzq8BOkiJQMVAmTUh85YQ7xjpqiwYWxUszDAjqLxmfZO5GpqwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9NILCWnenayIPizBMYkXchRJw6MB8GA1UdIwQY MBaAFMjfM3zqVqCD9Gt5kHLnDaNFzCNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU44emZPcFdvSVAwYTNtUWN1Y05vMFhNSTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yOTdkNTQtYmQ4Mi00MmUwLTljNDIt NmZkYmNhNjAwZTAwLzEveU44emZPcFdvSVAwYTNtUWN1Y05vMFhNSTJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8yOTdkNTQtYmQ4Mi00MmUwLTljNDItNmZkYmNhNjAwZTAw LzEveU44emZPcFdvSVAwYTNtUWN1Y05vMFhNSTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQmogPHH6 695xhQPL/LGRdGiS23NDu7ucVPmt/ZMMk+sXpw8sK1CfcIkQWJv50SPQVIyuQb8m ucAlH4NwJHDPegplX5FjkWTf3xdydYatM32lIKaYdt7b3NfgdGV08v5kHVHoh7th CBRQBleMsfM8ZTTvg5RF3Gq+pQhfw5neht26/x5hVwxNJAKwiXTQK6TkGlh2dDie U36jibqgYVSaL/OVUmBxNQjGHfHHSHh2LlOg4FjuvsMjVCdCCsMw8tU1l3aYPuVF 66MjkjaDCBOU+HqDqzWoqtYjKNkeuY6kud3Zp5qGWG8O/zDD2Y6p8Ucx72AoxdSJ eJFqLsnloiJh3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:14:53 2025 by rpki-client