This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft File: yjvKh2SUaTK6Lai9t9E82GiVr2k.mft (raw, json) Hash identifier: cpHdsFIJutkTGvPI/7renRy75nIHIIOLuWZgkFVhtLw= Subject key identifier: 55:F7:DB:E8:A4:2B:E6:90:98:5C:27:D7:B8:37:D0:1F:C9:5B:41:A3 Authority key identifier: CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69 Certificate issuer: /CN=ca3bca8764946932ba2da8bdb7d13cd86895af69 Certificate serial: 019AF276F43134D1F5AB587E0F2D778E69DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft Manifest number: 16F6 Signing time: Sat 06 Dec 2025 07:01:13 +0000 Manifest this update: Sat 06 Dec 2025 07:01:13 +0000 Manifest next update: Sun 07 Dec 2025 07:01:13 +0000 Files and hashes: 1: l3CxsRe6lXWBML9apstKtmGDLng.roa (hash: R2ig12fHn/XZc83X/g+gRKab+UR2maUGxkjxgHc5+u0=) 2: yjvKh2SUaTK6Lai9t9E82GiVr2k.crl (hash: hKQ4QVzbW6+nbk7qPO4FG3zD9PhVkgTPczefWGszHH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f4:31:34:d1:f5:ab:58:7e:0f:2d:77:8e:69:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca3bca8764946932ba2da8bdb7d13cd86895af69 Validity Not Before: Dec 6 07:01:13 2025 GMT Not After : Dec 7 07:01:13 2025 GMT Subject: CN=55f7dbe8a42be690985c27d7b837d01fc95b41a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0b:5d:3b:02:44:88:07:e3:a5:4c:26:64:4d: 58:71:55:14:58:6e:cb:34:73:88:9a:1b:f3:29:a9: 60:f2:63:60:9b:38:3b:63:6e:23:5a:5b:5f:95:c1: e5:69:3f:5c:d1:b1:15:c5:e5:c9:34:9c:b9:ba:67: 85:52:da:15:3d:db:8e:87:0c:f4:d0:41:c4:71:1a: 43:bd:06:6d:5c:87:79:c3:57:4f:7f:f4:e0:10:2c: 07:77:e3:e6:ee:12:f6:46:48:a8:b0:50:6b:ed:59: 17:28:21:b8:af:4a:9f:f5:19:5f:dc:b6:31:09:a5: a0:1c:bb:f3:7d:2e:4c:ad:f6:e3:10:1d:f7:65:ae: 59:a9:55:37:5f:7b:fa:47:ea:6b:a9:eb:fe:bd:8e: 7f:22:98:b2:6c:9b:7a:da:97:0c:11:38:a0:7f:98: 7a:ff:0a:e2:02:1c:ef:d7:23:b0:72:28:42:cc:b0: d3:36:b3:74:14:0c:99:b7:68:d4:70:aa:31:8d:e2: ab:c6:51:b0:1d:5f:2d:46:93:55:f2:2c:6b:36:7f: 6d:c1:12:37:1c:c9:26:91:b4:e4:2c:0d:dd:82:53: be:3f:c5:9b:18:69:07:19:e9:d3:cc:06:56:e3:77: a9:a9:70:9a:c3:6f:c2:fd:96:2e:ff:f5:48:e6:50: 44:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F7:DB:E8:A4:2B:E6:90:98:5C:27:D7:B8:37:D0:1F:C9:5B:41:A3 X509v3 Authority Key Identifier: keyid:CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:83:b9:e7:8d:34:96:92:90:4a:a6:f6:69:ce:83:56:30:f8: 77:81:b5:7c:c8:ca:b3:99:2a:a5:ad:48:e9:c4:5b:03:00:fb: 3a:e0:e6:f1:fc:db:cf:97:20:c4:d9:16:5c:9f:bd:33:b5:94: 77:78:21:ee:27:c3:a5:84:06:65:cb:ca:f4:2d:9b:8d:1c:b1: fb:f1:b5:00:e8:ea:dd:e2:37:5d:7d:ae:d0:1f:79:7c:de:79: a8:24:d5:96:7d:b8:c9:e8:37:4c:0d:6a:8f:fe:e3:8d:57:17: 08:98:41:86:ca:2d:dc:47:e4:52:5f:8f:f6:1c:75:6a:d9:df: 7b:ab:03:16:62:93:f0:8e:bf:f2:f9:6e:df:35:b7:da:07:8f: c6:65:6d:57:6c:31:c5:eb:70:a8:55:a8:4e:d5:b2:e9:00:f6: ea:43:13:e0:1b:8b:65:de:0a:0b:c4:a4:d0:fd:58:14:29:73: fd:0b:4e:ca:11:5d:ca:40:42:88:c3:37:99:87:ef:99:b2:e0: 1e:90:29:1a:3d:8f:39:24:fd:38:96:34:4e:a6:26:18:63:2d: cf:dc:83:ce:ce:23:76:5e:54:44:d4:d1:95:da:a3:90:53:c9: 4c:18:9a:33:ff:0a:ca:7d:59:18:3c:eb:cd:1d:41:d4:d1:ae: 0b:31:bf:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvQxNNH1q1h+Dy13jmncMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhM2JjYTg3NjQ5NDY5MzJiYTJkYThiZGI3ZDEzY2Q4Njg5 NWFmNjkwHhcNMjUxMjA2MDcwMTEzWhcNMjUxMjA3MDcwMTEzWjAzMTEwLwYDVQQD Eyg1NWY3ZGJlOGE0MmJlNjkwOTg1YzI3ZDdiODM3ZDAxZmM5NWI0MWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwtdOwJEiAfjpUwmZE1YcVUUWG7L NHOImhvzKalg8mNgmzg7Y24jWltflcHlaT9c0bEVxeXJNJy5umeFUtoVPduOhwz0 0EHEcRpDvQZtXId5w1dPf/TgECwHd+Pm7hL2RkiosFBr7VkXKCG4r0qf9Rlf3LYx CaWgHLvzfS5MrfbjEB33Za5ZqVU3X3v6R+prqev+vY5/IpiybJt62pcMETigf5h6 /wriAhzv1yOwcihCzLDTNrN0FAyZt2jUcKoxjeKrxlGwHV8tRpNV8ixrNn9twRI3 HMkmkbTkLA3dglO+P8WbGGkHGenTzAZW43epqXCaw2/C/ZYu//VI5lBEkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFX32+ikK+aQmFwn17g30B/JW0GjMB8GA1UdIwQY MBaAFMo7yodklGkyui2ovbfRPNhola9pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWp2S2gyU1VhVEs2TGFpOXQ5RTgyR2lWcjJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80ZTBmMmYtNDBiNy00NGQ5LTlmYTAt MDEyZGRlYWRmNzVlLzEveWp2S2gyU1VhVEs2TGFpOXQ5RTgyR2lWcjJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80ZTBmMmYtNDBiNy00NGQ5LTlmYTAtMDEyZGRlYWRmNzVl LzEveWp2S2gyU1VhVEs2TGFpOXQ5RTgyR2lWcjJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmYO55400 lpKQSqb2ac6DVjD4d4G1fMjKs5kqpa1I6cRbAwD7OuDm8fzbz5cgxNkWXJ+9M7WU d3gh7ifDpYQGZcvK9C2bjRyx+/G1AOjq3eI3XX2u0B95fN55qCTVln24yeg3TA1q j/7jjVcXCJhBhsot3EfkUl+P9hx1atnfe6sDFmKT8I6/8vlu3zW32gePxmVtV2wx xetwqFWoTtWy6QD26kMT4BuLZd4KC8Sk0P1YFClz/QtOyhFdykBCiMM3mYfvmbLg HpApGj2POST9OJY0TqYmGGMtz9yDzs4jdl5URNTRldqjkFPJTBiaM/8Kyn1ZGDzr zR1B1NGuCzG/4g== -----END CERTIFICATE-----Generated at Sat Dec 6 16:28:24 2025 by rpki-client