This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft File: yQs5SsYzN2B_obsOq6EUU6gx85g.mft (raw, json) Hash identifier: 92uJc7it646lYyt+Z1me+D40JvJsw1ZtMreHm5l3lFU= Subject key identifier: 83:5D:C5:BF:3D:B5:D5:2D:20:A0:FB:14:1F:D3:A1:AC:DE:E3:73:5A Authority key identifier: C9:0B:39:4A:C6:33:37:60:7F:A1:BB:0E:AB:A1:14:53:A8:31:F3:98 Certificate issuer: /CN=c90b394ac63337607fa1bb0eaba11453a831f398 Certificate serial: 019AF352677190294FEE8F26D7CAC78DE516 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft Manifest number: 0E00 Signing time: Sat 06 Dec 2025 11:00:55 +0000 Manifest this update: Sat 06 Dec 2025 11:00:55 +0000 Manifest next update: Sun 07 Dec 2025 11:00:55 +0000 Files and hashes: 1: xYOsm8BUsmYBwfKFXCGnakfV_m8.roa (hash: 061quaNl9U6/3ODiu8AkctDs7yOiVTs6PkYfEN9U9Cs=) 2: yQs5SsYzN2B_obsOq6EUU6gx85g.crl (hash: MB1KHKcHFkI9kfg0AYqx3UlroSYHmcVV59ijB/q3Xzo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.crl rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:67:71:90:29:4f:ee:8f:26:d7:ca:c7:8d:e5:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c90b394ac63337607fa1bb0eaba11453a831f398 Validity Not Before: Dec 6 11:00:55 2025 GMT Not After : Dec 7 11:00:55 2025 GMT Subject: CN=835dc5bf3db5d52d20a0fb141fd3a1acdee3735a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cd:e1:03:aa:9b:7c:49:fc:de:fd:da:fc:cc: b1:55:e7:27:e1:8d:e8:78:2e:b5:45:4d:68:36:ec: 1a:f9:9a:06:32:d3:17:37:f7:ee:07:67:46:1f:e7: 4b:36:b8:65:2f:f0:0e:f6:06:f2:e2:54:d2:40:8b: 57:f2:f8:67:ba:7c:cd:2f:41:66:32:93:d1:1d:52: 3b:db:f5:93:a0:fc:3a:3c:d1:b0:2c:9e:18:11:1f: eb:23:fc:13:5a:2a:58:1f:ff:fe:9e:b2:2f:49:4c: ac:6c:ac:07:5e:f2:08:a5:54:4c:d2:3e:6f:d0:7f: f7:10:38:56:eb:e8:50:1e:dd:70:2a:30:91:32:75: 81:ac:9a:3d:b8:35:8e:76:d4:e6:a1:b0:d9:33:74: 16:b2:cf:54:14:cf:89:d9:77:a9:96:c5:23:f9:c1: 1a:78:eb:b1:94:31:b9:cc:9e:09:96:8d:d1:16:d4: af:2d:f2:f4:04:1c:a9:41:dd:ea:bd:15:5c:a7:9e: 79:ae:91:a6:76:5e:79:3d:0c:d3:f6:a4:a1:39:c6: e8:ab:6f:af:9b:c4:61:18:26:0e:7d:37:28:66:02: 79:19:12:7d:ae:c4:54:de:7a:0b:61:bd:72:de:2a: 8d:20:d0:42:93:3c:f9:83:e3:c2:73:f3:d0:b5:6b: fe:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:5D:C5:BF:3D:B5:D5:2D:20:A0:FB:14:1F:D3:A1:AC:DE:E3:73:5A X509v3 Authority Key Identifier: keyid:C9:0B:39:4A:C6:33:37:60:7F:A1:BB:0E:AB:A1:14:53:A8:31:F3:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:35:1a:ef:5b:66:89:25:c0:5b:b8:2d:3b:3d:59:7b:0f:b0: 29:39:27:2e:d4:3b:a3:91:8b:13:cd:c9:87:97:67:b8:65:40: 5c:f2:4a:fa:af:6e:ad:f3:5b:d1:6e:0f:e0:16:42:14:9c:c6: 03:95:6a:86:e0:b8:db:1f:60:20:93:4e:df:ce:8c:3d:2e:32: a2:9f:de:a5:e9:3c:f7:ab:e6:87:a2:93:ce:01:2c:5e:03:02: 19:24:4b:62:79:f5:aa:e3:66:d3:4e:aa:8e:a4:84:6b:b4:48: 5e:7b:53:67:3f:4c:6e:36:b2:66:44:92:48:c9:5e:29:9c:7d: 1a:9c:32:d6:74:c1:1a:0a:d2:71:6e:c3:a2:b3:4a:25:c5:03: b6:a0:4e:41:e3:22:20:04:b0:d6:1a:da:38:93:63:9f:a0:15: ac:d9:12:1a:ce:67:db:a6:73:87:2e:31:9a:af:98:63:82:5d: 30:9b:29:25:29:8c:af:d4:04:9a:b1:b7:10:d8:fc:f6:08:72: 35:2f:17:91:9d:a9:40:ef:11:dc:a7:25:d3:7f:df:8f:9a:5b: 55:9c:2d:83:2c:47:2b:29:44:56:ed:bb:2a:04:5e:18:20:c3: 6e:a0:66:9d:1c:55:aa:f5:b1:44:a1:21:71:b5:1f:7d:b2:6c: 7e:f6:46:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUmdxkClP7o8m18rHjeUWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MGIzOTRhYzYzMzM3NjA3ZmExYmIwZWFiYTExNDUzYTgz MWYzOTgwHhcNMjUxMjA2MTEwMDU1WhcNMjUxMjA3MTEwMDU1WjAzMTEwLwYDVQQD Eyg4MzVkYzViZjNkYjVkNTJkMjBhMGZiMTQxZmQzYTFhY2RlZTM3MzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps3hA6qbfEn83v3a/MyxVecn4Y3o eC61RU1oNuwa+ZoGMtMXN/fuB2dGH+dLNrhlL/AO9gby4lTSQItX8vhnunzNL0Fm MpPRHVI72/WToPw6PNGwLJ4YER/rI/wTWipYH//+nrIvSUysbKwHXvIIpVRM0j5v 0H/3EDhW6+hQHt1wKjCRMnWBrJo9uDWOdtTmobDZM3QWss9UFM+J2XeplsUj+cEa eOuxlDG5zJ4Jlo3RFtSvLfL0BBypQd3qvRVcp555rpGmdl55PQzT9qShOcboq2+v m8RhGCYOfTcoZgJ5GRJ9rsRU3noLYb1y3iqNINBCkzz5g+PCc/PQtWv++wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINdxb89tdUtIKD7FB/Toaze43NaMB8GA1UdIwQY MBaAFMkLOUrGMzdgf6G7DquhFFOoMfOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVFzNVNzWXpOMkJfb2JzT3E2RVVVNmd4ODVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni83ZDc4NGItNjYzOS00YmMwLTlhYjkt MWEyMDBlNDFiMDA2LzEveVFzNVNzWXpOMkJfb2JzT3E2RVVVNmd4ODVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni83ZDc4NGItNjYzOS00YmMwLTlhYjktMWEyMDBlNDFiMDA2 LzEveVFzNVNzWXpOMkJfb2JzT3E2RVVVNmd4ODVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAizUa71tm iSXAW7gtOz1Zew+wKTknLtQ7o5GLE83Jh5dnuGVAXPJK+q9urfNb0W4P4BZCFJzG A5VqhuC42x9gIJNO386MPS4yop/epek896vmh6KTzgEsXgMCGSRLYnn1quNm006q jqSEa7RIXntTZz9MbjayZkSSSMleKZx9Gpwy1nTBGgrScW7DorNKJcUDtqBOQeMi IASw1hraOJNjn6AVrNkSGs5n26Zzhy4xmq+YY4JdMJspJSmMr9QEmrG3ENj89ghy NS8XkZ2pQO8R3Kcl03/fj5pbVZwtgyxHKylEVu27KgReGCDDbqBmnRxVqvWxRKEh cbUffbJsfvZGng== -----END CERTIFICATE-----Generated at Sat Dec 6 14:48:03 2025 by rpki-client