This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft File: yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft (raw, json) Hash identifier: KLq9bi5dK7UNRk4jl1037n7c32iiGl3Qw6gBI45HHbY= Subject key identifier: 4B:48:89:FE:F4:08:D2:C1:75:72:FE:5B:CA:53:C0:AC:B9:31:F2:2D Authority key identifier: CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76 Certificate issuer: /CN=cab11f493b31a5a2c1f23ce0e3004647a3242576 Certificate serial: 019AF051131B218B0C69449B25A4B6EC8158 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft Manifest number: 047C Signing time: Fri 05 Dec 2025 21:00:36 +0000 Manifest this update: Fri 05 Dec 2025 21:00:36 +0000 Manifest next update: Sat 06 Dec 2025 21:00:36 +0000 Files and hashes: 1: iO6OOltzYSW2yZ_5E85X-P4mF_0.roa (hash: 2XDE+mCyZurCdSAHCb4+FLC8SwOf/SeiDXoheU8dhOI=) 2: yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl (hash: EbL6cnSVxsN4F5A+aZ96/9VTt1+P7Zz3EcrWL1caHYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:13:1b:21:8b:0c:69:44:9b:25:a4:b6:ec:81:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cab11f493b31a5a2c1f23ce0e3004647a3242576 Validity Not Before: Dec 5 21:00:36 2025 GMT Not After : Dec 6 21:00:36 2025 GMT Subject: CN=4b4889fef408d2c17572fe5bca53c0acb931f22d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ea:e2:55:60:84:4d:40:1e:41:eb:60:8d:46: 39:25:dc:26:54:7d:12:b2:a6:68:51:a9:95:fa:45: b3:9b:ea:07:82:66:a9:87:e3:19:85:7e:ed:a1:dc: 26:4f:6e:56:b6:24:ab:45:5a:78:9e:92:7e:5f:a0: 64:57:3a:c8:af:46:4f:06:8f:9f:76:81:43:7c:dc: 76:a3:f6:6f:99:cc:94:c6:67:3d:42:1e:fb:55:35: d9:72:e3:cd:1a:76:28:d5:1b:8c:05:fa:d1:ab:40: 22:bb:af:3b:11:cd:9c:99:7d:64:ef:12:b8:50:bb: 81:52:f6:5e:c0:02:db:99:31:59:7c:19:f8:6e:db: bd:99:81:3b:23:8a:d4:8d:2e:e7:96:38:14:c8:c0: 17:66:02:d7:94:33:0c:f8:be:a8:4e:4c:fe:43:f3: 13:72:18:7c:e4:cd:ff:d0:ab:44:8c:f3:69:31:c8: ad:3e:93:36:b5:3d:b3:aa:28:45:d0:77:a2:12:ea: 9c:4d:1a:3a:a9:0d:8d:a2:79:31:9b:87:f6:e8:4c: c6:d3:d4:ce:dc:ea:90:c2:b6:d5:9f:35:39:e2:6e: 8e:d1:81:0d:eb:16:5b:02:e8:c9:65:c4:68:52:db: a7:13:ff:90:cb:a2:25:e6:ca:75:26:62:8a:6a:a8: d2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:48:89:FE:F4:08:D2:C1:75:72:FE:5B:CA:53:C0:AC:B9:31:F2:2D X509v3 Authority Key Identifier: keyid:CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:6e:b8:da:7d:96:e8:61:e4:30:c0:a3:58:20:81:50:f5:6a: 09:a8:61:a1:03:48:d1:71:a3:cc:af:cc:c4:76:6b:02:e8:52: 14:bf:58:2a:91:2f:c3:1b:44:67:aa:ec:bc:32:f7:63:35:98: e5:a8:27:40:3d:68:d3:f9:1e:04:a6:9e:f8:77:35:c1:3c:15: be:7f:77:7f:d8:68:f4:36:6a:38:97:e4:b3:ff:59:76:05:89: b6:12:50:69:f0:c2:78:bf:49:fc:08:4a:32:75:89:1a:c8:d1: 6f:2b:19:4d:a3:c6:5c:9b:67:34:3c:7c:08:9a:eb:09:07:3b: ee:3c:01:bf:60:b3:e6:d6:84:13:51:4a:d8:34:be:0b:3c:10: 8f:ee:18:0a:4b:35:30:50:0a:cb:fe:bb:4a:51:2d:0b:9a:79: a3:a1:d0:28:80:7d:8c:5d:0c:da:72:12:a1:99:b2:6f:43:f6: dd:2f:46:97:41:67:e9:69:18:ee:75:c5:5b:91:4b:9e:bb:80: c7:74:b4:2e:9a:9e:e0:d1:b3:28:18:bf:1c:ce:7c:f7:fd:70: eb:31:43:1b:ee:16:a3:f1:22:f1:1c:a9:32:2f:82:bb:b8:83: 44:0b:ea:6f:f4:db:ac:1f:48:1e:7b:74:33:ac:a1:9e:02:c2: 2c:de:e7:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwURMbIYsMaUSbJaS27IFYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYjExZjQ5M2IzMWE1YTJjMWYyM2NlMGUzMDA0NjQ3YTMy NDI1NzYwHhcNMjUxMjA1MjEwMDM2WhcNMjUxMjA2MjEwMDM2WjAzMTEwLwYDVQQD Eyg0YjQ4ODlmZWY0MDhkMmMxNzU3MmZlNWJjYTUzYzBhY2I5MzFmMjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuriVWCETUAeQetgjUY5JdwmVH0S sqZoUamV+kWzm+oHgmaph+MZhX7todwmT25WtiSrRVp4npJ+X6BkVzrIr0ZPBo+f doFDfNx2o/ZvmcyUxmc9Qh77VTXZcuPNGnYo1RuMBfrRq0Aiu687Ec2cmX1k7xK4 ULuBUvZewALbmTFZfBn4btu9mYE7I4rUjS7nljgUyMAXZgLXlDMM+L6oTkz+Q/MT chh85M3/0KtEjPNpMcitPpM2tT2zqihF0HeiEuqcTRo6qQ2Nonkxm4f26EzG09TO 3OqQwrbVnzU54m6O0YEN6xZbAujJZcRoUtunE/+Qy6Il5sp1JmKKaqjSCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtIif70CNLBdXL+W8pTwKy5MfItMB8GA1UdIwQY MBaAFMqxH0k7MaWiwfI84OMARkejJCV2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXJFZlNUc3hwYUxCOGp6ZzR3QkdSNk1rSlhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83NGQyZWEtNmU2MC00MGFmLWE1NmEt MTUxZjZlZDE3NjkxLzEveXJFZlNUc3hwYUxCOGp6ZzR3QkdSNk1rSlhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83NGQyZWEtNmU2MC00MGFmLWE1NmEtMTUxZjZlZDE3Njkx LzEveXJFZlNUc3hwYUxCOGp6ZzR3QkdSNk1rSlhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2642n2W 6GHkMMCjWCCBUPVqCahhoQNI0XGjzK/MxHZrAuhSFL9YKpEvwxtEZ6rsvDL3YzWY 5agnQD1o0/keBKae+Hc1wTwVvn93f9ho9DZqOJfks/9ZdgWJthJQafDCeL9J/AhK MnWJGsjRbysZTaPGXJtnNDx8CJrrCQc77jwBv2Cz5taEE1FK2DS+CzwQj+4YCks1 MFAKy/67SlEtC5p5o6HQKIB9jF0M2nISoZmyb0P23S9Gl0Fn6WkY7nXFW5FLnruA x3S0Lpqe4NGzKBi/HM589/1w6zFDG+4Wo/Ei8RypMi+Cu7iDRAvqb/TbrB9IHnt0 M6yhngLCLN7nzg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:44 2025 by rpki-client