This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft File: yxODRz6KqHJwaPx1LgYOPb9j4O8.mft (raw, json) Hash identifier: a/Qv8GiqF8DRSXuF8gY6SHHdU0ds/13+ephxLWdsVUE= Subject key identifier: 7F:C5:8C:82:17:B3:D9:3E:E4:4E:2B:0F:4A:58:9E:9B:0C:B6:9F:C7 Authority key identifier: CB:13:83:47:3E:8A:A8:72:70:68:FC:75:2E:06:0E:3D:BF:63:E0:EF Certificate issuer: /CN=cb1383473e8aa8727068fc752e060e3dbf63e0ef Certificate serial: 019AF31BB1D53FFD8F5B447C18588B37DC64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft Manifest number: 091E Signing time: Sat 06 Dec 2025 10:01:09 +0000 Manifest this update: Sat 06 Dec 2025 10:01:09 +0000 Manifest next update: Sun 07 Dec 2025 10:01:09 +0000 Files and hashes: 1: rOX9zRwObaYZKZTR0WDKGvQYCI8.roa (hash: AVl8Cu7AhfVM1Wh1VdzrltPVEMOUXlEEy7ZTpT+wzAA=) 2: yxODRz6KqHJwaPx1LgYOPb9j4O8.crl (hash: 4Aqzag+VNV0hi4K/pT/taNmeeZHOhdTARBHgka94PG0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:b1:d5:3f:fd:8f:5b:44:7c:18:58:8b:37:dc:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb1383473e8aa8727068fc752e060e3dbf63e0ef Validity Not Before: Dec 6 10:01:09 2025 GMT Not After : Dec 7 10:01:09 2025 GMT Subject: CN=7fc58c8217b3d93ee44e2b0f4a589e9b0cb69fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a0:6b:d3:1e:90:5b:52:31:8c:57:f3:cc:4f: 7a:d0:d4:4d:1f:16:df:ef:63:72:b9:9a:44:5c:ea: 59:84:ee:04:7e:5c:d9:35:d8:44:9a:92:6b:2b:60: c2:d0:6b:99:57:57:a0:c5:24:d6:3c:3d:8d:65:7e: d2:9e:19:b3:34:48:bf:94:59:0e:61:4c:3d:b9:05: b7:e6:8f:5f:8b:90:b5:ae:d8:ee:c9:97:fc:35:ec: d1:85:42:f2:24:d6:fc:46:c0:08:96:3a:02:bb:1b: 23:a5:8f:07:e1:39:00:23:6b:b7:82:4c:94:e9:5a: 04:e1:31:57:7a:8f:97:27:c9:d9:5e:8a:3c:e2:6d: 9a:bf:e9:5c:b0:5c:e2:cb:0c:a9:f5:be:98:60:1d: 50:54:8e:62:53:d5:92:ba:7a:e7:1c:a5:b5:f3:20: 50:3c:22:49:52:28:df:e2:09:f7:8e:91:a3:a9:09: e0:ec:29:84:c1:ee:ca:19:36:72:1c:57:ef:0e:36: cb:75:76:5f:1a:6e:a6:ef:c4:24:5a:5e:01:3f:5f: 88:7f:98:fd:13:00:07:9e:0c:7e:f3:2f:48:a4:40: 1f:60:a7:31:2b:1b:fd:40:22:dd:50:0c:b3:d4:47: ad:bf:bd:fc:0b:23:73:ee:c3:4d:c0:97:ac:c8:3c: df:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C5:8C:82:17:B3:D9:3E:E4:4E:2B:0F:4A:58:9E:9B:0C:B6:9F:C7 X509v3 Authority Key Identifier: keyid:CB:13:83:47:3E:8A:A8:72:70:68:FC:75:2E:06:0E:3D:BF:63:E0:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:6e:ca:90:5c:94:4f:7b:2b:16:5a:13:58:16:94:51:93:48: 30:5e:47:5e:ba:3b:18:86:36:e7:8a:e8:04:a9:d3:6c:6a:0a: b1:1a:98:24:33:0c:9a:24:8d:f9:d3:83:fd:37:8a:76:c9:d0: b6:9c:d5:fa:66:3f:f6:cb:b6:52:34:fd:fa:eb:f0:7c:95:78: f1:21:13:a9:1d:4c:14:a7:ed:81:0b:c2:75:23:80:a4:d3:10: a1:0f:3d:54:5c:df:3b:b5:47:cf:4d:c3:7c:0c:48:74:e4:31: 75:a8:5b:bd:18:42:eb:22:df:92:bb:bf:b0:da:ec:2f:90:00: 7b:ab:dc:36:8d:81:0a:44:7e:bc:92:cc:7f:74:30:b5:f0:65: 87:ee:7e:26:2c:da:32:43:27:f8:34:87:21:c7:7d:78:82:dd: da:80:09:81:2b:00:55:71:88:4f:15:e2:bc:65:23:19:09:42: 67:1a:b3:02:b7:20:16:02:98:2c:33:7f:ac:de:60:da:30:dd: 40:e4:9a:bd:ee:97:d6:28:70:ff:90:9d:2e:96:8f:bf:1f:65: 53:0f:70:09:2d:be:03:4b:d0:b8:cb:0e:20:54:df:b5:15:87: db:c6:6b:1b:3a:fb:1c:36:b6:98:b6:d1:8f:58:2d:f5:b7:5c: 00:56:d6:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG7HVP/2PW0R8GFiLN9xkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMTM4MzQ3M2U4YWE4NzI3MDY4ZmM3NTJlMDYwZTNkYmY2 M2UwZWYwHhcNMjUxMjA2MTAwMTA5WhcNMjUxMjA3MTAwMTA5WjAzMTEwLwYDVQQD Eyg3ZmM1OGM4MjE3YjNkOTNlZTQ0ZTJiMGY0YTU4OWU5YjBjYjY5ZmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKBr0x6QW1IxjFfzzE960NRNHxbf 72NyuZpEXOpZhO4EflzZNdhEmpJrK2DC0GuZV1egxSTWPD2NZX7SnhmzNEi/lFkO YUw9uQW35o9fi5C1rtjuyZf8NezRhULyJNb8RsAIljoCuxsjpY8H4TkAI2u3gkyU 6VoE4TFXeo+XJ8nZXoo84m2av+lcsFziywyp9b6YYB1QVI5iU9WSunrnHKW18yBQ PCJJUijf4gn3jpGjqQng7CmEwe7KGTZyHFfvDjbLdXZfGm6m78QkWl4BP1+If5j9 EwAHngx+8y9IpEAfYKcxKxv9QCLdUAyz1Eetv738CyNz7sNNwJesyDzfKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/FjIIXs9k+5E4rD0pYnpsMtp/HMB8GA1UdIwQY MBaAFMsTg0c+iqhycGj8dS4GDj2/Y+DvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXhPRFJ6NktxSEp3YVB4MUxnWU9QYjlqNE84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9jNjNjOTQtZTU2OS00MWI4LThlMmIt ZDE4YjA5Y2YzYTFkLzEveXhPRFJ6NktxSEp3YVB4MUxnWU9QYjlqNE84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9jNjNjOTQtZTU2OS00MWI4LThlMmItZDE4YjA5Y2YzYTFk LzEveXhPRFJ6NktxSEp3YVB4MUxnWU9QYjlqNE84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArG7KkFyU T3srFloTWBaUUZNIMF5HXro7GIY254roBKnTbGoKsRqYJDMMmiSN+dOD/TeKdsnQ tpzV+mY/9su2UjT9+uvwfJV48SETqR1MFKftgQvCdSOApNMQoQ89VFzfO7VHz03D fAxIdOQxdahbvRhC6yLfkru/sNrsL5AAe6vcNo2BCkR+vJLMf3QwtfBlh+5+Jiza MkMn+DSHIcd9eILd2oAJgSsAVXGITxXivGUjGQlCZxqzArcgFgKYLDN/rN5g2jDd QOSave6X1ihw/5CdLpaPvx9lUw9wCS2+A0vQuMsOIFTftRWH28ZrGzr7HDa2mLbR j1gt9bdcAFbWFw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:18:54 2025 by rpki-client