This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft File: YwITq6Hqkoue0ySR3puhBGSwY2w.mft (raw, json) Hash identifier: 2AqNkzhFRoz9nocHj/S0fte3xB7zgnAvFIRmyQkqk5w= Subject key identifier: DE:A3:F0:CC:5D:2D:FE:58:D9:D3:7C:9E:B9:20:6C:B4:79:A5:3F:B2 Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C Certificate issuer: /CN=630213aba1ea928b9ed32491de9ba10464b0636c Certificate serial: 019AF5779AFD92CC43BDEB6F84525105B1B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 21:00:47 +0000 Manifest this update: Sat 06 Dec 2025 21:00:47 +0000 Manifest next update: Sun 07 Dec 2025 21:00:47 +0000 Files and hashes: 1: 6ZqvxOIku_49tBv2G-O9_p-5hVM.roa (hash: TYPoYRQa9KHLM0V6FPsrIT1zwnhyRnA4uELbenS3VGM=) 2: YwITq6Hqkoue0ySR3puhBGSwY2w.crl (hash: lIW0nu5Sw7iz5C02ArbBOEZG6xYY25+aa2tjQO42kRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:9a:fd:92:cc:43:bd:eb:6f:84:52:51:05:b1:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c Validity Not Before: Dec 6 21:00:47 2025 GMT Not After : Dec 7 21:00:47 2025 GMT Subject: CN=dea3f0cc5d2dfe58d9d37c9eb9206cb479a53fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7a:48:2e:78:84:1e:09:e8:cd:8b:f5:bb:ad: e7:08:9d:5e:19:25:73:01:d0:5f:4b:4a:53:6e:41: 93:cf:b6:4c:31:e3:b5:f9:f3:a1:70:fe:1a:c3:2c: 72:ff:f6:06:71:a2:6e:60:f6:76:df:8d:0a:f4:74: d5:2c:b4:c5:71:3b:10:0e:9d:c1:5a:44:5b:2e:e6: 59:e0:cb:bf:30:4c:b4:b3:14:a2:5b:98:ee:84:10: 3c:9c:65:98:4a:5b:54:f6:66:49:c9:4b:31:cb:d6: cb:22:2b:f9:02:73:23:d9:88:64:3b:61:d3:79:b9: ac:ca:01:39:9b:c6:30:8c:44:25:f0:9e:f1:d1:87: 01:24:69:68:51:c3:e5:e6:67:bc:e6:5f:87:e5:ec: 61:4b:ca:1f:d0:9f:40:f4:4c:f7:3a:a9:a8:44:e6: d3:b0:c0:48:6d:8f:f0:c1:d7:b4:35:ab:29:3c:52: 00:63:e0:a5:a8:83:a3:59:a6:e6:17:ab:d4:e3:72: 3a:06:07:8c:6a:9c:b3:f1:27:9a:0f:b3:2e:dc:22: 7d:3f:e3:12:70:ed:0b:66:98:bb:03:14:6e:d7:0b: b1:27:f0:5f:b7:c0:18:30:79:0b:41:ef:23:52:b0: f6:60:a6:05:8c:ed:e4:7f:c7:3b:6e:95:7a:46:e2: db:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A3:F0:CC:5D:2D:FE:58:D9:D3:7C:9E:B9:20:6C:B4:79:A5:3F:B2 X509v3 Authority Key Identifier: keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:c0:29:d9:48:f8:82:75:2f:1e:86:8c:2d:7d:6b:b6:3c:a7: 7c:1f:79:1e:28:6b:1b:87:d5:d7:cd:4f:06:97:7a:59:e8:56: a9:a6:7e:0f:a2:9b:7e:f6:ec:a3:e9:a2:dc:2c:2e:3d:b2:df: 41:97:4e:ab:d9:43:80:de:f7:88:95:f4:c5:d2:e4:d6:7d:cf: f0:3e:59:1b:90:c9:f9:aa:fc:fa:79:90:09:47:0b:35:38:ec: dc:02:b9:f9:0b:42:ba:1f:dc:c3:e1:de:0e:5d:9e:46:18:e2: a5:6e:7b:53:d3:1a:5a:2a:2b:22:0b:d8:d1:27:3d:da:bd:dd: df:c7:3d:62:65:c9:ed:85:10:8f:5f:cd:ac:27:b5:7f:ea:19: 60:ad:77:ab:16:8d:23:68:d6:16:5c:a6:f1:08:55:5a:63:13: 56:04:7e:9d:4e:7e:ee:c5:07:58:0c:83:ce:65:c3:f7:16:27: a4:1a:8f:3f:48:c2:66:db:12:2b:0d:a0:50:0a:a0:19:47:d8: fb:9b:25:d5:04:0d:ff:ba:f0:d3:32:8e:94:22:57:a7:93:37: 5c:25:07:1d:7b:6b:78:23:dd:c2:f4:10:33:af:4f:b5:30:ca: 24:60:43:92:14:ed:28:39:7c:66:a2:35:f9:ce:e1:3c:97:0a: 5c:93:96:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d5r9ksxDvetvhFJRBbG2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMDIxM2FiYTFlYTkyOGI5ZWQzMjQ5MWRlOWJhMTA0NjRi MDYzNmMwHhcNMjUxMjA2MjEwMDQ3WhcNMjUxMjA3MjEwMDQ3WjAzMTEwLwYDVQQD EyhkZWEzZjBjYzVkMmRmZTU4ZDlkMzdjOWViOTIwNmNiNDc5YTUzZmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHpILniEHgnozYv1u63nCJ1eGSVz AdBfS0pTbkGTz7ZMMeO1+fOhcP4awyxy//YGcaJuYPZ2340K9HTVLLTFcTsQDp3B WkRbLuZZ4Mu/MEy0sxSiW5juhBA8nGWYSltU9mZJyUsxy9bLIiv5AnMj2YhkO2HT ebmsygE5m8YwjEQl8J7x0YcBJGloUcPl5me85l+H5exhS8of0J9A9Ez3OqmoRObT sMBIbY/wwde0NaspPFIAY+ClqIOjWabmF6vU43I6BgeMapyz8SeaD7Mu3CJ9P+MS cO0LZpi7AxRu1wuxJ/Bft8AYMHkLQe8jUrD2YKYFjO3kf8c7bpV6RuLbNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6j8MxdLf5Y2dN8nrkgbLR5pT+yMB8GA1UdIwQY MBaAFGMCE6uh6pKLntMkkd6boQRksGNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXdJVHE2SHFrb3VlMHlTUjNwdWhCR1N3WTJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9hY2NjNzYtZTEyMy00NWIxLTk2YjQt OGY0YzU5ZWMyMGJlLzEvWXdJVHE2SHFrb3VlMHlTUjNwdWhCR1N3WTJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9hY2NjNzYtZTEyMy00NWIxLTk2YjQtOGY0YzU5ZWMyMGJl LzEvWXdJVHE2SHFrb3VlMHlTUjNwdWhCR1N3WTJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMcAp2Uj4 gnUvHoaMLX1rtjynfB95HihrG4fV181PBpd6WehWqaZ+D6Kbfvbso+mi3CwuPbLf QZdOq9lDgN73iJX0xdLk1n3P8D5ZG5DJ+ar8+nmQCUcLNTjs3AK5+QtCuh/cw+He Dl2eRhjipW57U9MaWiorIgvY0Sc92r3d38c9YmXJ7YUQj1/NrCe1f+oZYK13qxaN I2jWFlym8QhVWmMTVgR+nU5+7sUHWAyDzmXD9xYnpBqPP0jCZtsSKw2gUAqgGUfY +5sl1QQN/7rw0zKOlCJXp5M3XCUHHXtreCPdwvQQM69PtTDKJGBDkhTtKDl8ZqI1 +c7hPJcKXJOW4w== -----END CERTIFICATE-----Generated at Sun Dec 7 06:09:00 2025 by rpki-client