This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft File: cYZUy47T9V1cYJctMQ9e1iBLT-U.mft (raw, json) Hash identifier: dQJ2kiUALz+KFTkLInvf8ZkILIW/xjko0uvyapZSAQA= Subject key identifier: 21:6D:E9:82:AF:61:35:E2:CB:B3:FC:CA:88:E6:36:88:F0:48:E1:B5 Authority key identifier: 71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5 Certificate issuer: /CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5 Certificate serial: 019AF0F5CA5A8367CEFEF0E10652B01CC6A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft Manifest number: 68 Signing time: Sat 06 Dec 2025 00:00:31 +0000 Manifest this update: Sat 06 Dec 2025 00:00:31 +0000 Manifest next update: Sun 07 Dec 2025 00:00:31 +0000 Files and hashes: 1: Tjr5jtgtbJ3fEJ5GPFAzKe-rKao.roa (hash: 3YYOamn4sYIPHKkC+u6jZmcp0RjEInV5oQMY2Ch7hiU=) 2: cYZUy47T9V1cYJctMQ9e1iBLT-U.crl (hash: MZwSeRvyn/oRLsUggzo6duaIwtS7413tvshJBNnR20Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:ca:5a:83:67:ce:fe:f0:e1:06:52:b0:1c:c6:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5 Validity Not Before: Dec 6 00:00:31 2025 GMT Not After : Dec 7 00:00:31 2025 GMT Subject: CN=216de982af6135e2cbb3fcca88e63688f048e1b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:38:86:80:49:11:67:f3:23:ea:d3:bd:57:9e: 2c:28:92:4a:23:ea:d4:cb:29:e1:ed:65:5a:b4:2d: 83:f0:d5:b9:21:ca:98:7a:24:82:49:87:92:d0:2d: 3a:21:51:6d:48:51:ad:02:55:d7:2f:8d:e7:01:4c: 1e:e1:20:b2:2e:d6:0c:d3:7c:43:05:62:60:0a:e7: 30:f0:94:b1:60:5c:52:99:00:56:a3:5b:98:a1:87: 67:ed:84:37:d6:65:75:b1:fb:ca:6b:f6:63:73:ab: 96:0c:6d:15:a7:b3:8a:03:34:0c:f3:99:26:4e:02: 87:ce:52:ea:17:33:fb:c4:02:2b:83:33:f9:e0:ef: cf:25:4c:fb:4b:f5:1a:bf:c3:5a:96:fc:81:a6:38: 93:3c:cb:5b:0d:77:4f:6d:08:03:13:07:81:ae:6d: e8:90:e6:a7:18:af:e7:56:f5:5e:5d:a8:1f:35:97: 1f:0d:82:7a:0a:ea:2d:72:1a:db:f1:77:f7:95:ff: 64:c6:d3:79:bc:f9:93:e0:74:fc:ce:de:57:47:28: e9:30:0a:72:93:fc:89:20:46:6d:03:d8:f1:37:af: 65:40:e2:63:1a:15:63:35:15:f5:15:0f:8d:bb:a1: d3:76:19:ce:cf:d3:10:d4:9c:2c:5f:e0:ec:1a:d3: ff:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:6D:E9:82:AF:61:35:E2:CB:B3:FC:CA:88:E6:36:88:F0:48:E1:B5 X509v3 Authority Key Identifier: keyid:71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:78:ba:cb:25:fa:17:4d:93:99:e9:e1:d3:55:2f:74:7e:4f: f7:41:2e:c3:00:30:37:72:b5:f7:80:04:f1:9e:db:32:e1:88: 8e:22:7e:38:e2:19:a0:bc:01:41:82:ad:5c:1d:bf:72:42:82: 38:11:c4:cb:92:9b:25:56:9a:f1:3f:32:a6:1a:db:85:d1:ec: 74:1f:2e:86:04:8a:dc:3b:12:8b:ee:38:c5:69:b4:af:2a:d2: 2b:67:ba:6c:bf:44:85:d0:52:2c:cb:6c:28:d1:a8:4b:fa:13: 03:4a:0e:32:7c:50:b3:fb:e9:c0:74:55:27:ee:42:b3:c5:fc: 24:f9:9e:63:b2:7a:26:7c:15:8d:75:6c:53:0c:82:0c:0c:11: 48:64:b4:01:a7:71:1f:6c:1b:37:99:8b:ad:2a:bd:31:6b:be: ed:92:54:88:d7:8e:d9:99:7f:cd:7c:e6:fd:ea:f0:bb:a0:d1: 61:02:25:32:3a:14:cb:8f:8c:0f:1e:20:e1:b7:d2:9b:81:cf: d4:d7:88:6b:ff:aa:a5:55:4b:fa:98:0d:72:a0:d8:17:f9:44: 7b:79:fc:89:d8:54:a6:0b:f8:6f:f1:4a:ad:55:ed:30:9f:ac: 5e:78:18:93:20:c2:da:1c:e3:a4:51:46:76:bd:35:8c:23:7a: 2b:ed:0e:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9cpag2fO/vDhBlKwHMakMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxODY1NGNiOGVkM2Y1NWQ1YzYwOTcyZDMxMGY1ZWQ2MjA0 YjRmZTUwHhcNMjUxMjA2MDAwMDMxWhcNMjUxMjA3MDAwMDMxWjAzMTEwLwYDVQQD EygyMTZkZTk4MmFmNjEzNWUyY2JiM2ZjY2E4OGU2MzY4OGYwNDhlMWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnziGgEkRZ/Mj6tO9V54sKJJKI+rU yynh7WVatC2D8NW5IcqYeiSCSYeS0C06IVFtSFGtAlXXL43nAUwe4SCyLtYM03xD BWJgCucw8JSxYFxSmQBWo1uYoYdn7YQ31mV1sfvKa/Zjc6uWDG0Vp7OKAzQM85km TgKHzlLqFzP7xAIrgzP54O/PJUz7S/Uav8NalvyBpjiTPMtbDXdPbQgDEweBrm3o kOanGK/nVvVeXagfNZcfDYJ6Cuotchrb8Xf3lf9kxtN5vPmT4HT8zt5XRyjpMApy k/yJIEZtA9jxN69lQOJjGhVjNRX1FQ+Nu6HTdhnOz9MQ1JwsX+DsGtP/dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFt6YKvYTXiy7P8yojmNojwSOG1MB8GA1UdIwQY MBaAFHGGVMuO0/VdXGCXLTEPXtYgS0/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1laVXk0N1Q5VjFjWUpjdE1ROWUxaUJMVC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9mZmU1NjctMjdlNi00YTY0LWJhZjQt YTI4YmNlNWQ1ZGE1LzEvY1laVXk0N1Q5VjFjWUpjdE1ROWUxaUJMVC1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9mZmU1NjctMjdlNi00YTY0LWJhZjQtYTI4YmNlNWQ1ZGE1 LzEvY1laVXk0N1Q5VjFjWUpjdE1ROWUxaUJMVC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJni6yyX6 F02Tmenh01UvdH5P90EuwwAwN3K194AE8Z7bMuGIjiJ+OOIZoLwBQYKtXB2/ckKC OBHEy5KbJVaa8T8yphrbhdHsdB8uhgSK3DsSi+44xWm0ryrSK2e6bL9EhdBSLMts KNGoS/oTA0oOMnxQs/vpwHRVJ+5Cs8X8JPmeY7J6JnwVjXVsUwyCDAwRSGS0Aadx H2wbN5mLrSq9MWu+7ZJUiNeO2Zl/zXzm/erwu6DRYQIlMjoUy4+MDx4g4bfSm4HP 1NeIa/+qpVVL+pgNcqDYF/lEe3n8idhUpgv4b/FKrVXtMJ+sXngYkyDC2hzjpFFG dr01jCN6K+0OQA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:42:00 2025 by rpki-client