This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.mft File: _YgaVMfaqF6iOSqTEpRXjbzWp3c.mft (raw, json) Hash identifier: eUBny3hkX85faOYSorqN3OweJEU2zG+r9CkQT/XDbG8= Subject key identifier: CE:4D:16:E2:31:D5:75:A7:B2:9E:20:B2:D1:27:70:05:C8:AB:74:AD Authority key identifier: FD:88:1A:54:C7:DA:A8:5E:A2:39:2A:93:12:94:57:8D:BC:D6:A7:77 Certificate issuer: /CN=fd881a54c7daa85ea2392a931294578dbcd6a777 Certificate serial: 019AF1D265D069B1060893D29D188FC011F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YgaVMfaqF6iOSqTEpRXjbzWp3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.mft Manifest number: 02CD Signing time: Sat 06 Dec 2025 04:01:28 +0000 Manifest this update: Sat 06 Dec 2025 04:01:28 +0000 Manifest next update: Sun 07 Dec 2025 04:01:28 +0000 Files and hashes: 1: Nrv8RmxCZSwlroYNjaCzC_gNRbA.roa (hash: z0Wt+SHMhk+eKo3V2z0COv5ilnG0T4vZIO6vh0M7eRI=) 2: _YgaVMfaqF6iOSqTEpRXjbzWp3c.crl (hash: GXw62DMuFsvaBxP0apK/R6/Ubena+TdSumbnts8nk3U=) 3: mP9V6Aj18VCMrj4XFwGFW0OW6UE.roa (hash: toSYJiG8N793iae27SJdKYFpAYguNX3k92Kzmh23MYM=) 4: t_aUQpjmHC8hsa9s9dp7snO6GLM.roa (hash: EMjKr1hOyaIzjfvQlqtk+HjL3E6MN7ciA1JY5E4ZJKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.mft rsync://rpki.ripe.net/repository/DEFAULT/_YgaVMfaqF6iOSqTEpRXjbzWp3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:65:d0:69:b1:06:08:93:d2:9d:18:8f:c0:11:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd881a54c7daa85ea2392a931294578dbcd6a777 Validity Not Before: Dec 6 04:01:28 2025 GMT Not After : Dec 7 04:01:28 2025 GMT Subject: CN=ce4d16e231d575a7b29e20b2d1277005c8ab74ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:51:02:1c:0a:a2:43:68:0f:a0:4c:6a:aa:8f: 3c:e8:92:8d:4e:00:d3:1d:e9:95:0f:6a:9d:56:2e: 8d:f2:f5:ca:fe:b6:c6:49:6f:c6:ba:51:2f:7d:36: 28:9b:1a:e6:38:2f:db:de:7f:69:89:f6:2e:6c:8f: e5:25:0e:d6:71:39:40:26:09:52:1a:43:1a:8e:42: 7f:9d:e4:59:a8:8c:3a:ab:a1:70:48:2b:5f:22:5a: 98:3f:77:76:19:6b:a7:e9:93:cd:7c:63:d7:3b:f0: 60:98:1f:a9:6c:ef:ff:e3:a4:0f:c8:5e:cb:db:51: e0:af:4d:9b:e1:9e:fa:86:78:09:52:f2:df:c1:eb: 85:17:67:f2:94:18:14:c0:8b:75:11:1b:be:1f:d9: fa:00:c6:a9:97:93:ba:a4:62:ba:bd:af:65:39:fd: 4e:7c:ea:cd:62:fa:49:89:d7:9c:77:86:b7:3e:e1: 8a:59:73:7e:68:5b:81:04:b9:9c:17:06:17:28:ee: 65:c6:ec:10:57:97:d0:3c:64:3f:dd:a4:9a:54:16: 1d:41:94:ff:74:79:0e:44:53:52:7e:d5:22:f8:8c: 86:3c:48:a3:17:1d:69:81:9f:79:ba:da:ef:64:6a: 25:17:cb:0d:c9:d6:e8:0a:b8:e9:24:01:22:5a:52: d2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:4D:16:E2:31:D5:75:A7:B2:9E:20:B2:D1:27:70:05:C8:AB:74:AD X509v3 Authority Key Identifier: keyid:FD:88:1A:54:C7:DA:A8:5E:A2:39:2A:93:12:94:57:8D:BC:D6:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YgaVMfaqF6iOSqTEpRXjbzWp3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:cb:ff:12:b6:7c:74:0d:fc:c0:8d:b9:b0:fb:ff:b3:89:c9: 76:0c:8e:ad:c9:e7:de:ec:a6:20:1c:4c:20:cb:dd:3a:c1:75: 61:3f:ec:61:a8:a1:94:cf:3d:dc:8d:05:b1:f5:e1:57:38:eb: ab:1b:97:3b:61:8e:a5:15:a4:39:00:f6:67:45:be:db:8c:74: 40:bf:94:be:dc:6b:d9:40:35:a8:dd:04:4a:76:a5:f4:93:c7: 83:56:f9:c4:68:26:c1:fe:f7:44:a7:dc:09:97:0b:09:27:52: 55:d9:d8:6f:bb:8a:75:db:5b:a1:cb:b0:61:47:90:04:97:21: e4:40:a0:28:5c:8c:d5:7a:d3:ac:7d:a1:ee:7f:d3:38:ff:cd: 26:a3:ee:03:31:5b:5d:b0:ed:80:66:74:4e:a1:84:65:2c:58: 64:d8:f0:ac:47:52:37:fa:bb:f3:20:b3:ab:f7:6c:98:31:35: aa:a5:d0:e7:5f:06:6e:bb:b3:c2:4d:f5:39:34:86:68:03:c4: 91:6a:72:c3:70:c3:0a:01:49:87:db:8f:c1:81:4d:d1:82:28: 9b:2c:05:56:0a:5e:cd:4e:83:93:63:94:df:1c:23:5e:e1:d4: 4f:a2:04:86:62:07:5d:1b:14:0b:2b:78:35:d9:27:6c:92:96: 88:2c:be:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0mXQabEGCJPSnRiPwBHzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkODgxYTU0YzdkYWE4NWVhMjM5MmE5MzEyOTQ1NzhkYmNk NmE3NzcwHhcNMjUxMjA2MDQwMTI4WhcNMjUxMjA3MDQwMTI4WjAzMTEwLwYDVQQD EyhjZTRkMTZlMjMxZDU3NWE3YjI5ZTIwYjJkMTI3NzAwNWM4YWI3NGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVECHAqiQ2gPoExqqo886JKNTgDT HemVD2qdVi6N8vXK/rbGSW/GulEvfTYomxrmOC/b3n9pifYubI/lJQ7WcTlAJglS GkMajkJ/neRZqIw6q6FwSCtfIlqYP3d2GWun6ZPNfGPXO/BgmB+pbO//46QPyF7L 21Hgr02b4Z76hngJUvLfweuFF2fylBgUwIt1ERu+H9n6AMapl5O6pGK6va9lOf1O fOrNYvpJidecd4a3PuGKWXN+aFuBBLmcFwYXKO5lxuwQV5fQPGQ/3aSaVBYdQZT/ dHkORFNSftUi+IyGPEijFx1pgZ95utrvZGolF8sNydboCrjpJAEiWlLSDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5NFuIx1XWnsp4gstEncAXIq3StMB8GA1UdIwQY MBaAFP2IGlTH2qheojkqkxKUV4281qd3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1lnYVZNZmFxRjZpT1NxVEVwUlhqYnpXcDNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9iY2I3OTYtNTk0MS00Yzk3LWFkYTYt YmNkODVmMDBlMTM4LzEvX1lnYVZNZmFxRjZpT1NxVEVwUlhqYnpXcDNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9iY2I3OTYtNTk0MS00Yzk3LWFkYTYtYmNkODVmMDBlMTM4 LzEvX1lnYVZNZmFxRjZpT1NxVEVwUlhqYnpXcDNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADcv/ErZ8 dA38wI25sPv/s4nJdgyOrcnn3uymIBxMIMvdOsF1YT/sYaihlM893I0FsfXhVzjr qxuXO2GOpRWkOQD2Z0W+24x0QL+Uvtxr2UA1qN0ESnal9JPHg1b5xGgmwf73RKfc CZcLCSdSVdnYb7uKddtbocuwYUeQBJch5ECgKFyM1XrTrH2h7n/TOP/NJqPuAzFb XbDtgGZ0TqGEZSxYZNjwrEdSN/q78yCzq/dsmDE1qqXQ518Gbruzwk31OTSGaAPE kWpyw3DDCgFJh9uPwYFN0YIomywFVgpezU6Dk2OU3xwjXuHUT6IEhmIHXRsUCyt4 NdknbJKWiCy+ow== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:41 2025 by rpki-client