This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft File: yTsGP8Y-ihq6H0MLLQdNvicL45U.mft (raw, json) Hash identifier: f7xS8l9Ftwdubl+aGpPauhYAkvZ9kwhL4W2mhNDVKB8= Subject key identifier: 90:78:D0:A1:17:DE:8D:CD:1C:0E:25:FE:02:66:7F:70:E6:6E:66:BC Authority key identifier: C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95 Certificate issuer: /CN=c93b063fc63e8a1aba1f430b2d074dbe270be395 Certificate serial: 019AF1D209FF18207CBC8FD0634A491B2C04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 04:01:05 +0000 Manifest this update: Sat 06 Dec 2025 04:01:05 +0000 Manifest next update: Sun 07 Dec 2025 04:01:05 +0000 Files and hashes: 1: 1F8onmseCNCuGUO4DR0wCF969LM.roa (hash: 5Q04Z/04ubuR0XnIvzjk6WhZzGAxE4KZkR5m6+NYcEk=) 2: yTsGP8Y-ihq6H0MLLQdNvicL45U.crl (hash: pSo92z/rPlkuN3D7k4j/iNmbduQRTk2gpWHiQnUHwyg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:09:ff:18:20:7c:bc:8f:d0:63:4a:49:1b:2c:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c93b063fc63e8a1aba1f430b2d074dbe270be395 Validity Not Before: Dec 6 04:01:05 2025 GMT Not After : Dec 7 04:01:05 2025 GMT Subject: CN=9078d0a117de8dcd1c0e25fe02667f70e66e66bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b4:a8:40:5f:90:fc:d1:97:64:0d:9b:27:fe: dd:bb:98:48:71:f3:80:92:20:eb:8e:0d:81:f7:2a: 46:15:7f:77:78:0e:a3:bc:39:86:a9:81:54:53:5a: 27:9a:48:94:8c:45:42:12:26:7a:ee:6d:c5:18:8c: 8e:b2:48:53:22:f9:61:80:0f:65:e4:6f:d9:10:6b: 1b:b7:57:6a:2b:a9:cd:1b:f8:84:28:08:41:fd:99: 6f:52:36:3d:cf:bf:e9:8e:f4:5a:3f:0d:3d:df:f1: ea:b7:52:a5:3e:6d:8e:1f:56:4c:56:70:10:61:b7: ca:f5:07:ad:9a:37:e9:8c:25:4b:a1:e0:fa:f6:7b: e5:d6:78:a4:fc:81:84:a5:d4:10:d7:04:09:20:6c: d0:fb:9b:44:eb:cf:43:4d:c3:c4:0c:77:bd:25:28: a0:14:48:fa:f6:47:f7:35:7c:48:85:80:05:82:3c: e9:b5:c0:a8:68:c1:ca:40:0f:35:cc:8d:6f:0a:2a: c4:a6:3a:51:03:90:b2:f6:d4:a0:3a:d0:a2:30:ac: 95:bb:6b:09:9c:fe:29:7c:16:18:32:f2:68:4d:b0: e0:7b:af:fc:27:eb:9a:12:c0:74:a8:be:f9:de:b8: d0:2b:a0:85:9b:d1:5e:fb:c9:c8:1b:53:3b:21:7e: 6c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:78:D0:A1:17:DE:8D:CD:1C:0E:25:FE:02:66:7F:70:E6:6E:66:BC X509v3 Authority Key Identifier: keyid:C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ff:90:bb:a2:55:40:b5:d4:e0:fd:e0:d0:61:3c:3f:97:91: 10:52:a2:a4:86:4d:28:07:d7:5c:9f:f7:52:ed:c9:e8:17:4d: 75:65:94:51:3e:f6:d5:f5:f4:6e:0b:55:68:99:f8:d0:ec:fa: e6:b0:a6:b0:1b:ed:31:6c:9c:08:32:87:2e:e6:ac:8e:73:4a: 41:9d:43:0d:08:28:3e:51:9d:fa:82:30:2e:0d:31:69:1a:b1: f7:71:66:98:6a:e9:66:24:09:5d:2b:ee:d3:c0:3b:8d:a6:19: ad:7a:0b:f9:77:83:cf:a6:66:bb:58:31:2f:55:dd:c6:72:b6: aa:9a:cb:9d:5d:08:be:bf:b2:f0:2c:83:3a:7b:a0:3e:5e:30: 0a:fb:a6:ea:ab:37:22:3f:a0:87:c6:d2:30:dd:38:4e:3b:e1: d7:5a:d0:86:8d:23:df:1f:b7:27:ea:58:89:4a:ea:00:ca:bc: 03:3d:f5:a7:99:94:c2:e8:91:42:f7:4e:f8:ff:2c:ee:9e:60: 9d:be:84:33:46:cb:c3:43:ae:c6:6b:0c:b2:40:53:23:11:c7: 5b:9a:c7:d3:c7:1f:cb:79:bc:11:ae:c2:11:d3:df:df:b0:7a: de:8c:80:64:7d:05:ef:b0:33:06:25:cc:fb:be:05:af:36:5d: fa:97:e2:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gn/GCB8vI/QY0pJGywEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5M2IwNjNmYzYzZThhMWFiYTFmNDMwYjJkMDc0ZGJlMjcw YmUzOTUwHhcNMjUxMjA2MDQwMTA1WhcNMjUxMjA3MDQwMTA1WjAzMTEwLwYDVQQD Eyg5MDc4ZDBhMTE3ZGU4ZGNkMWMwZTI1ZmUwMjY2N2Y3MGU2NmU2NmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rSoQF+Q/NGXZA2bJ/7du5hIcfOA kiDrjg2B9ypGFX93eA6jvDmGqYFUU1onmkiUjEVCEiZ67m3FGIyOskhTIvlhgA9l 5G/ZEGsbt1dqK6nNG/iEKAhB/ZlvUjY9z7/pjvRaPw093/Hqt1KlPm2OH1ZMVnAQ YbfK9QetmjfpjCVLoeD69nvl1nik/IGEpdQQ1wQJIGzQ+5tE689DTcPEDHe9JSig FEj69kf3NXxIhYAFgjzptcCoaMHKQA81zI1vCirEpjpRA5Cy9tSgOtCiMKyVu2sJ nP4pfBYYMvJoTbDge6/8J+uaEsB0qL753rjQK6CFm9Fe+8nIG1M7IX5sdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJB40KEX3o3NHA4l/gJmf3Dmbma8MB8GA1UdIwQY MBaAFMk7Bj/GPooauh9DCy0HTb4nC+OVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVRzR1A4WS1paHE2SDBNTExRZE52aWNMNDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNjMyYjAtMDhmNi00MjE3LTk0YmMt OTQwYmM4MTkxNjU5LzEveVRzR1A4WS1paHE2SDBNTExRZE52aWNMNDVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9lNjMyYjAtMDhmNi00MjE3LTk0YmMtOTQwYmM4MTkxNjU5 LzEveVRzR1A4WS1paHE2SDBNTExRZE52aWNMNDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAff+Qu6JV QLXU4P3g0GE8P5eREFKipIZNKAfXXJ/3Uu3J6BdNdWWUUT721fX0bgtVaJn40Oz6 5rCmsBvtMWycCDKHLuasjnNKQZ1DDQgoPlGd+oIwLg0xaRqx93FmmGrpZiQJXSvu 08A7jaYZrXoL+XeDz6Zmu1gxL1XdxnK2qprLnV0Ivr+y8CyDOnugPl4wCvum6qs3 Ij+gh8bSMN04Tjvh11rQho0j3x+3J+pYiUrqAMq8Az31p5mUwuiRQvdO+P8s7p5g nb6EM0bLw0OuxmsMskBTIxHHW5rH08cfy3m8Ea7CEdPf37B63oyAZH0F77AzBiXM +74FrzZd+pfiPg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:10 2025 by rpki-client