This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft File: Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft (raw, json) Hash identifier: Du9ypsHWN+8QBMFmjWuCBXvfE+onTxfvawbvkzmd6tw= Subject key identifier: 2C:53:7B:C0:1F:98:DA:DE:0D:25:80:C3:51:57:31:71:62:55:A0:77 Authority key identifier: 61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC Certificate issuer: /CN=61aedfdc7133e95f42498f7760f68fb80faa84ac Certificate serial: 019AF08857AB3A21B00444F4ACA51AB1D00D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft Manifest number: 10B2 Signing time: Fri 05 Dec 2025 22:00:58 +0000 Manifest this update: Fri 05 Dec 2025 22:00:58 +0000 Manifest next update: Sat 06 Dec 2025 22:00:58 +0000 Files and hashes: 1: Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl (hash: usWxxrJcjgLTDNSHgfy7JI4UhUaE+OD4r4HwCm30l28=) 2: iUluP9dzGEFPZV1QT7qhxKlYtLc.roa (hash: dqFbgrXc+CPp5bc1uUsZ9NzSqOeylcrCuwJIJApbIDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:57:ab:3a:21:b0:04:44:f4:ac:a5:1a:b1:d0:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61aedfdc7133e95f42498f7760f68fb80faa84ac Validity Not Before: Dec 5 22:00:58 2025 GMT Not After : Dec 6 22:00:58 2025 GMT Subject: CN=2c537bc01f98dade0d2580c3515731716255a077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:17:7e:6c:ac:4b:d0:3a:73:65:48:0a:e3:91: 56:22:5e:e3:3d:8d:b9:dd:24:2d:95:84:2f:62:ab: 3c:23:7e:55:0a:35:0c:58:19:ac:37:c8:39:87:0a: 44:c2:47:d8:2c:1f:e5:6c:67:65:ce:3c:0f:51:f3: a7:27:1f:a4:30:42:c1:2e:88:c2:f0:66:d6:23:59: a1:4a:89:a2:81:88:eb:86:22:cd:7a:42:d1:10:44: a6:32:e0:00:63:94:30:34:9d:68:63:56:e3:79:af: d2:e1:5a:78:fa:43:0f:e9:40:c8:c9:27:08:e1:00: 96:d0:7d:f8:0b:2c:d0:ab:58:a3:2c:a7:bc:c6:e8: e9:73:10:8a:dd:0a:25:c9:d4:fb:8a:4f:8a:52:25: 41:23:6a:ae:fc:f9:0b:6b:ba:d2:c5:bb:4c:e0:8b: df:c2:a4:aa:5b:17:21:06:1c:9b:2c:34:cf:7f:e6: c5:7f:80:79:88:df:90:30:00:c2:96:cf:2a:d9:07: b3:f8:e9:2f:27:b0:3f:c7:bc:7b:23:6c:f3:53:53: 71:f9:ad:1b:e7:ca:aa:6e:c4:7b:46:e8:11:8c:d5: c0:5c:80:70:2d:91:ec:04:ea:41:8a:bf:3d:a6:7f: 62:62:32:f0:08:36:a6:32:64:5a:1e:b6:40:db:41: e4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:53:7B:C0:1F:98:DA:DE:0D:25:80:C3:51:57:31:71:62:55:A0:77 X509v3 Authority Key Identifier: keyid:61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:b1:ad:74:9f:3a:ba:0f:ec:20:78:2e:65:a2:47:47:fc:b5: 54:78:84:6f:67:7e:aa:e0:ef:71:c8:62:93:3b:19:b2:5e:e9: 2a:90:d8:27:9b:98:cc:02:88:af:91:15:fb:21:87:af:82:08: 12:19:b9:08:fc:3b:2d:2f:54:3f:00:5d:9f:d9:e3:71:94:17: 84:dc:14:5a:50:01:5b:fe:2a:14:60:c9:a9:3b:c4:a8:7e:33: 84:7b:19:3f:d9:e6:3b:74:06:f1:8a:f0:1e:f4:9d:84:1f:6f: 89:fd:de:6f:37:53:bd:dd:01:27:d6:13:fa:07:5e:ff:f5:52: c9:39:ab:a7:06:eb:d2:8f:e6:b5:c3:1a:a5:47:d9:33:1c:e2: f4:a9:ac:08:71:dc:9c:a5:33:b6:cd:0d:1e:60:16:6e:6a:58: 90:8d:1e:47:24:f0:14:3d:ac:1c:45:cb:7a:3b:09:80:ac:5b: 5b:45:14:df:be:7d:84:42:92:46:d8:47:96:2c:c6:26:88:67: 20:cc:c0:67:9b:92:e1:3f:74:a1:43:48:d8:c7:98:63:f7:e7: ab:db:3d:9a:f6:f5:a6:00:a1:86:ba:4d:85:15:73:ba:2a:86: 6d:54:be:12:d4:46:ed:2d:4b:32:43:df:25:c3:7e:5d:f7:e6: da:aa:a4:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiFerOiGwBET0rKUasdANMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYWVkZmRjNzEzM2U5NWY0MjQ5OGY3NzYwZjY4ZmI4MGZh YTg0YWMwHhcNMjUxMjA1MjIwMDU4WhcNMjUxMjA2MjIwMDU4WjAzMTEwLwYDVQQD EygyYzUzN2JjMDFmOThkYWRlMGQyNTgwYzM1MTU3MzE3MTYyNTVhMDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRd+bKxL0DpzZUgK45FWIl7jPY25 3SQtlYQvYqs8I35VCjUMWBmsN8g5hwpEwkfYLB/lbGdlzjwPUfOnJx+kMELBLojC 8GbWI1mhSomigYjrhiLNekLREESmMuAAY5QwNJ1oY1bjea/S4Vp4+kMP6UDIyScI 4QCW0H34CyzQq1ijLKe8xujpcxCK3QolydT7ik+KUiVBI2qu/PkLa7rSxbtM4Ivf wqSqWxchBhybLDTPf+bFf4B5iN+QMADCls8q2Qez+OkvJ7A/x7x7I2zzU1Nx+a0b 58qqbsR7RugRjNXAXIBwLZHsBOpBir89pn9iYjLwCDamMmRaHrZA20HkUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxTe8AfmNreDSWAw1FXMXFiVaB3MB8GA1UdIwQY MBaAFGGu39xxM+lfQkmPd2D2j7gPqoSsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWE3ZjNIRXo2VjlDU1k5M1lQYVB1QS1xaEt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wMmI1MjItOWYwOC00NmZjLTk5ZWEt OWYzZThmOWVmYzk5LzEvWWE3ZjNIRXo2VjlDU1k5M1lQYVB1QS1xaEt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8wMmI1MjItOWYwOC00NmZjLTk5ZWEtOWYzZThmOWVmYzk5 LzEvWWE3ZjNIRXo2VjlDU1k5M1lQYVB1QS1xaEt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbGtdJ86 ug/sIHguZaJHR/y1VHiEb2d+quDvcchikzsZsl7pKpDYJ5uYzAKIr5EV+yGHr4II Ehm5CPw7LS9UPwBdn9njcZQXhNwUWlABW/4qFGDJqTvEqH4zhHsZP9nmO3QG8Yrw HvSdhB9vif3ebzdTvd0BJ9YT+gde//VSyTmrpwbr0o/mtcMapUfZMxzi9KmsCHHc nKUzts0NHmAWbmpYkI0eRyTwFD2sHEXLejsJgKxbW0UU3759hEKSRthHlizGJohn IMzAZ5uS4T90oUNI2MeYY/fnq9s9mvb1pgChhrpNhRVzuiqGbVS+EtRG7S1LMkPf JcN+Xffm2qqkYw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:05:31 2025 by rpki-client