This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft File: YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft (raw, json) Hash identifier: U2aBMlQ8qc7DQMVhQ1+o1YWRVVUIDlCBgIQOb5DLyKs= Subject key identifier: 87:C3:88:A8:E5:8D:26:66:1B:F6:F4:C4:FD:5C:4D:72:5C:F8:29:37 Authority key identifier: 63:25:F5:14:27:01:67:A4:3E:65:E2:7D:F9:B3:D2:6E:FB:29:C3:1C Certificate issuer: /CN=6325f514270167a43e65e27df9b3d26efb29c31c Certificate serial: 019AF19BBFAE90DAB10B52D1B3B59CD1BC9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:01:47 +0000 Manifest this update: Sat 06 Dec 2025 03:01:47 +0000 Manifest next update: Sun 07 Dec 2025 03:01:47 +0000 Files and hashes: 1: 7i3ElD5IcOtwR7N5wXzR1mVlNsw.roa (hash: eiPh0DahvU1iWHrSLpqP3W+j96pO/2cFZ0BXyIe6o9g=) 2: YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.crl (hash: d3HtDxRU0njgLrqD2rCabknszkO3D1/LqhpXB0d96SA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.crl rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft rsync://rpki.ripe.net/repository/DEFAULT/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:bf:ae:90:da:b1:0b:52:d1:b3:b5:9c:d1:bc:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6325f514270167a43e65e27df9b3d26efb29c31c Validity Not Before: Dec 6 03:01:47 2025 GMT Not After : Dec 7 03:01:47 2025 GMT Subject: CN=87c388a8e58d26661bf6f4c4fd5c4d725cf82937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3e:c8:cf:e9:a6:8d:2c:4e:b6:20:d4:b3:9c: 8f:00:dd:66:37:18:51:a6:72:5e:5d:e5:5e:26:ba: f2:b5:08:dd:df:40:f4:3a:a8:1a:18:72:bc:d3:36: ad:0a:24:90:e6:ee:ff:0e:84:75:a1:b0:6a:47:81: 6c:4c:1c:34:c2:7b:40:0e:f6:dd:2d:80:b1:0c:ab: 95:9e:1b:4b:2f:30:d7:25:d4:18:d5:0c:4d:c4:56: 7f:f4:e5:da:f9:37:24:cf:29:42:13:66:c3:05:e8: c1:df:4f:40:2c:18:45:7c:2f:e3:02:6d:cb:46:65: 31:f4:f0:bd:25:e2:f2:8e:0b:4a:c5:ba:29:4f:36: 64:e3:86:e0:33:d5:9f:02:cd:69:2b:dd:37:d7:36: 24:cc:10:52:c9:ce:cf:f4:a8:87:c0:31:91:d6:a9: 29:7c:19:01:1b:c2:8f:d5:1d:c6:38:2a:66:10:dd: 55:81:b8:02:83:94:99:c7:b9:e7:74:9b:d8:91:c1: 0f:e7:9c:76:a1:8b:57:74:67:d0:0f:81:18:bf:90: 1b:1b:23:61:fe:ab:f0:33:ff:a3:ac:27:5c:10:5b: 43:12:a0:e5:53:31:5e:fe:1d:81:39:4b:17:91:32: dd:1a:24:ec:41:e3:41:a2:36:2f:36:b8:2a:b5:56: e9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C3:88:A8:E5:8D:26:66:1B:F6:F4:C4:FD:5C:4D:72:5C:F8:29:37 X509v3 Authority Key Identifier: keyid:63:25:F5:14:27:01:67:A4:3E:65:E2:7D:F9:B3:D2:6E:FB:29:C3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:45:d8:db:16:86:ee:10:4a:a7:f3:d2:d4:b7:37:68:d5:08: 53:66:cf:51:7e:4e:c7:e3:fa:5d:fb:df:90:9a:48:2c:bd:64: 33:85:2f:95:ed:fc:2e:c0:bb:42:b7:dd:54:0c:8e:68:d4:1a: b0:81:fb:cb:31:e3:18:d9:fb:ec:a4:8c:fc:47:15:77:02:39: f5:dc:93:e0:5f:95:32:54:f4:44:11:b6:00:d2:e5:06:bc:24: 7f:08:8f:2c:fa:28:af:e9:d6:38:9d:5f:3b:07:07:4f:a3:84: 66:4a:2b:2a:17:d5:c2:31:08:9a:36:4b:ff:4b:a1:74:4a:2c: ea:65:00:b1:97:81:84:8b:5c:53:b9:22:df:b5:4c:9b:de:4c: e7:02:33:17:dd:76:85:bb:27:f6:c3:15:83:26:28:c0:d1:6c: bc:18:ad:6a:27:6a:16:90:3f:cd:c6:fa:90:2b:22:98:e9:4e: a1:ff:a6:7a:d1:a4:08:79:2d:7b:9a:80:4d:33:7f:e7:5f:5f: 85:2b:67:33:68:42:2a:14:e3:83:cc:23:4e:a3:c7:46:bf:09: c8:e7:2b:4d:ba:07:c5:e7:ed:da:ef:45:e8:93:2a:c6:48:3c: e9:1d:b4:6e:db:eb:c5:77:ba:dd:7e:e9:bd:1e:93:85:79:51: af:81:9e:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7+ukNqxC1LRs7Wc0byaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMjVmNTE0MjcwMTY3YTQzZTY1ZTI3ZGY5YjNkMjZlZmIy OWMzMWMwHhcNMjUxMjA2MDMwMTQ3WhcNMjUxMjA3MDMwMTQ3WjAzMTEwLwYDVQQD Eyg4N2MzODhhOGU1OGQyNjY2MWJmNmY0YzRmZDVjNGQ3MjVjZjgyOTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT7Iz+mmjSxOtiDUs5yPAN1mNxhR pnJeXeVeJrrytQjd30D0OqgaGHK80zatCiSQ5u7/DoR1obBqR4FsTBw0wntADvbd LYCxDKuVnhtLLzDXJdQY1QxNxFZ/9OXa+TckzylCE2bDBejB309ALBhFfC/jAm3L RmUx9PC9JeLyjgtKxbopTzZk44bgM9WfAs1pK9031zYkzBBSyc7P9KiHwDGR1qkp fBkBG8KP1R3GOCpmEN1VgbgCg5SZx7nndJvYkcEP55x2oYtXdGfQD4EYv5AbGyNh /qvwM/+jrCdcEFtDEqDlUzFe/h2BOUsXkTLdGiTsQeNBojYvNrgqtVbp4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfDiKjljSZmG/b0xP1cTXJc+Ck3MB8GA1UdIwQY MBaAFGMl9RQnAWekPmXiffmz0m77KcMcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXlYMUZDY0JaNlEtWmVKOS1iUFNidnNwd3h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MjYyYjgtYTFhNy00ZDEzLTg3OTMt ZDM4ODdkYzQ1YzZkLzEvWXlYMUZDY0JaNlEtWmVKOS1iUFNidnNwd3h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83MjYyYjgtYTFhNy00ZDEzLTg3OTMtZDM4ODdkYzQ1YzZk LzEvWXlYMUZDY0JaNlEtWmVKOS1iUFNidnNwd3h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKkXY2xaG 7hBKp/PS1Lc3aNUIU2bPUX5Ox+P6XfvfkJpILL1kM4Uvle38LsC7QrfdVAyOaNQa sIH7yzHjGNn77KSM/EcVdwI59dyT4F+VMlT0RBG2ANLlBrwkfwiPLPoor+nWOJ1f OwcHT6OEZkorKhfVwjEImjZL/0uhdEos6mUAsZeBhItcU7ki37VMm95M5wIzF912 hbsn9sMVgyYowNFsvBitaidqFpA/zcb6kCsimOlOof+metGkCHkte5qATTN/519f hStnM2hCKhTjg8wjTqPHRr8JyOcrTboHxeft2u9F6JMqxkg86R20btvrxXe63X7p vR6ThXlRr4Ge7w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:15 2025 by rpki-client