This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft File: p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft (raw, json) Hash identifier: 8I6hEQ83FnJpUiKgw7yH/2VLJgROOSeKR6Ll2tbhAB0= Subject key identifier: A2:B5:A4:D1:EC:B8:F5:6B:C2:86:60:2F:4D:2F:BF:D2:A2:A1:9A:A0 Authority key identifier: A7:F6:29:16:19:7F:77:96:CE:C5:78:EA:43:52:FA:E4:EF:89:AE:C2 Certificate issuer: /CN=a7f62916197f7796cec578ea4352fae4ef89aec2 Certificate serial: 019AF208B0E0CDBBEEBD5161422AB95AE613 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft Manifest number: 085A Signing time: Sat 06 Dec 2025 05:00:47 +0000 Manifest this update: Sat 06 Dec 2025 05:00:47 +0000 Manifest next update: Sun 07 Dec 2025 05:00:47 +0000 Files and hashes: 1: p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl (hash: 3zUz3xUh78+MOfq1FJbkZzH1f4UlJzdZnqd4r54ChMM=) 2: sJgvME5bJ6yVOF59D9xKTp2vpfs.roa (hash: RFFMtoYHpJBnhJPcD6pM/r00V/xv6R7sQSuEQXzi4Ow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b0:e0:cd:bb:ee:bd:51:61:42:2a:b9:5a:e6:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7f62916197f7796cec578ea4352fae4ef89aec2 Validity Not Before: Dec 6 05:00:47 2025 GMT Not After : Dec 7 05:00:47 2025 GMT Subject: CN=a2b5a4d1ecb8f56bc286602f4d2fbfd2a2a19aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f0:61:dd:42:63:3e:98:90:9a:40:be:59:cb: 02:32:b7:7c:51:17:25:81:f9:4c:b1:73:61:fb:3a: 33:1d:68:3f:d8:1b:0d:95:54:aa:25:64:3e:c3:e3: 05:7d:ef:c2:07:73:06:f4:e7:84:ea:fd:4d:d0:e8: 72:89:bb:63:30:59:b4:01:f9:89:ea:c1:60:f0:85: 50:c9:66:e2:5b:58:21:f1:44:17:e4:41:98:25:69: e3:fa:68:0d:02:25:fb:0e:e8:fb:b0:4d:69:66:8f: a7:db:55:6f:7d:0f:bc:83:7a:4b:8f:ee:14:2d:6e: 35:d1:d9:50:3c:b6:d7:c3:a9:92:ec:2c:e7:f0:cb: 6c:31:62:a6:f8:65:69:7d:ac:bf:f7:bc:b4:94:f7: 65:58:70:5d:bd:3f:45:3a:5e:42:86:f7:ab:9d:ad: 8b:1c:cd:5e:d1:7e:32:37:b2:b0:35:04:83:04:7d: bc:ee:6f:10:d3:87:ca:7b:4e:97:7a:84:0a:54:19: 42:6d:88:19:29:9c:56:1e:7b:c6:45:c2:13:d3:0d: 3d:4d:e1:35:19:17:cd:3f:c9:2a:ac:39:d7:fe:3b: f5:b7:2c:a4:21:d2:7d:6e:43:f2:41:3d:17:5b:0e: 63:ec:7b:09:e3:59:59:dc:08:02:6a:6e:39:40:fe: d7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B5:A4:D1:EC:B8:F5:6B:C2:86:60:2F:4D:2F:BF:D2:A2:A1:9A:A0 X509v3 Authority Key Identifier: keyid:A7:F6:29:16:19:7F:77:96:CE:C5:78:EA:43:52:FA:E4:EF:89:AE:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:d2:45:c3:32:38:62:eb:90:ef:30:4e:31:5d:52:fd:f2:72: b9:c5:a4:a7:17:5f:91:48:11:d9:d9:7e:64:0e:a9:2c:27:cf: d6:91:7b:7e:a9:32:58:c3:46:5a:cf:a5:32:aa:06:bf:77:36: 6c:f0:30:61:3b:8d:3a:8b:59:c8:1a:3a:a7:d2:9c:71:26:62: 55:b0:fb:c0:ee:37:72:56:30:2c:aa:d7:0c:73:fa:64:20:0a: c4:9f:d5:b4:e3:ac:92:5a:44:0c:26:4a:cf:65:3c:6e:4c:6d: 87:1b:a2:3e:f2:c8:74:a5:4f:9f:61:44:7f:e4:f7:b0:ea:d2: e3:2b:84:16:4c:61:36:53:f3:9e:c3:2e:b3:91:43:3d:a9:3d: 76:7a:0f:c8:a2:99:fc:38:7f:6d:bd:e5:ba:5f:fc:4f:be:a7: 85:93:2b:4d:4a:39:86:88:08:50:ef:ce:81:80:b0:48:3f:17: 3a:50:09:d9:9b:71:e8:dd:88:87:1e:db:5e:1b:f0:c3:97:0d: 4b:0e:fa:10:43:a7:05:30:cd:1b:5f:16:d9:10:60:82:d6:e2: 25:2e:97:1c:fd:8f:aa:e6:47:fa:a8:82:78:51:60:4b:5c:12: 7f:8c:c3:a8:2b:fa:32:c6:da:72:42:63:01:91:88:85:07:59: 12:90:84:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLDgzbvuvVFhQiq5WuYTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZjYyOTE2MTk3Zjc3OTZjZWM1NzhlYTQzNTJmYWU0ZWY4 OWFlYzIwHhcNMjUxMjA2MDUwMDQ3WhcNMjUxMjA3MDUwMDQ3WjAzMTEwLwYDVQQD EyhhMmI1YTRkMWVjYjhmNTZiYzI4NjYwMmY0ZDJmYmZkMmEyYTE5YWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPBh3UJjPpiQmkC+WcsCMrd8URcl gflMsXNh+zozHWg/2BsNlVSqJWQ+w+MFfe/CB3MG9OeE6v1N0OhyibtjMFm0AfmJ 6sFg8IVQyWbiW1gh8UQX5EGYJWnj+mgNAiX7Duj7sE1pZo+n21VvfQ+8g3pLj+4U LW410dlQPLbXw6mS7Czn8MtsMWKm+GVpfay/97y0lPdlWHBdvT9FOl5Chverna2L HM1e0X4yN7KwNQSDBH287m8Q04fKe06XeoQKVBlCbYgZKZxWHnvGRcIT0w09TeE1 GRfNP8kqrDnX/jv1tyykIdJ9bkPyQT0XWw5j7HsJ41lZ3AgCam45QP7XWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKK1pNHsuPVrwoZgL00vv9KioZqgMB8GA1UdIwQY MBaAFKf2KRYZf3eWzsV46kNS+uTvia7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcF9ZcEZobF9kNWJPeFhqcVExTDY1Ty1KcnNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iNzFjYTctNTA3MC00YmNjLWEwMGQt ZWM5N2YxOGE3OTRhLzEvcF9ZcEZobF9kNWJPeFhqcVExTDY1Ty1KcnNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9iNzFjYTctNTA3MC00YmNjLWEwMGQtZWM5N2YxOGE3OTRh LzEvcF9ZcEZobF9kNWJPeFhqcVExTDY1Ty1KcnNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtJFwzI4 YuuQ7zBOMV1S/fJyucWkpxdfkUgR2dl+ZA6pLCfP1pF7fqkyWMNGWs+lMqoGv3c2 bPAwYTuNOotZyBo6p9KccSZiVbD7wO43clYwLKrXDHP6ZCAKxJ/VtOOsklpEDCZK z2U8bkxthxuiPvLIdKVPn2FEf+T3sOrS4yuEFkxhNlPznsMus5FDPak9dnoPyKKZ /Dh/bb3lul/8T76nhZMrTUo5hogIUO/OgYCwSD8XOlAJ2Ztx6N2Ihx7bXhvww5cN Sw76EEOnBTDNG18W2RBggtbiJS6XHP2PquZH+qiCeFFgS1wSf4zDqCv6MsbackJj AZGIhQdZEpCEOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:59:38 2025 by rpki-client