This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft File: yAkUktLOioDAh7h2-R1qPCm-eiU.mft (raw, json) Hash identifier: +9L+2HahnExS7NeCGqc3MyX6+OEvc4OZrmP5515vRp0= Subject key identifier: 53:D9:8D:FA:FC:52:40:AF:BD:8D:E5:35:29:91:4A:98:17:33:65:76 Authority key identifier: C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25 Certificate issuer: /CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25 Certificate serial: 019AF19B061B81FC1E4A6080541497115AA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft Manifest number: 0D5A Signing time: Sat 06 Dec 2025 03:00:59 +0000 Manifest this update: Sat 06 Dec 2025 03:00:59 +0000 Manifest next update: Sun 07 Dec 2025 03:00:59 +0000 Files and hashes: 1: IUu38IEhp9FcGXHXO7VwuMNYV6E.roa (hash: 0chzG77l4zUiIxP7svJWJ4YTzi1qnItTODpt8dd9BKQ=) 2: yAkUktLOioDAh7h2-R1qPCm-eiU.crl (hash: pYW0ygEnJ8OE7exA6XnvDQH3fswZJdJBF5mvEnMOWZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:06:1b:81:fc:1e:4a:60:80:54:14:97:11:5a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25 Validity Not Before: Dec 6 03:00:59 2025 GMT Not After : Dec 7 03:00:59 2025 GMT Subject: CN=53d98dfafc5240afbd8de53529914a9817336576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:5f:48:04:eb:d9:32:f7:a8:4c:0d:37:56:85: 62:cd:ac:24:9e:34:90:3e:29:c0:3c:60:79:56:ae: 46:62:79:d6:1d:a9:e7:8a:10:4e:d2:2b:96:a9:e8: d7:af:3a:11:f3:7b:9a:fb:84:11:8a:c9:f6:e5:2c: 56:07:6f:d7:37:0b:b9:b2:94:16:f7:62:c3:8e:05: a7:cb:fd:42:31:9b:50:4c:31:fc:39:86:3a:7b:45: 7c:6e:96:5d:b3:7f:8f:28:6b:98:a6:85:d3:07:61: 35:1f:fe:e2:98:db:70:dc:99:22:21:6a:0c:ef:8c: 5b:dd:b7:23:8c:90:21:e8:9e:01:32:75:53:27:92: fe:d0:8f:8d:9e:d8:09:5a:17:de:92:88:54:b4:f1: 30:d3:00:e3:b8:39:57:9c:01:65:e1:e3:17:8c:5c: 2e:aa:da:03:a6:48:3e:02:77:cc:9e:aa:b6:a8:e7: ed:df:8e:2c:e9:7a:04:85:93:0f:b2:ab:7b:35:08: d6:78:e0:d1:62:35:87:9a:2c:c5:94:0e:97:cb:73: e1:3e:08:af:26:d1:ad:30:2d:02:b4:c6:06:78:50: f8:21:eb:b2:17:fd:e8:68:36:3f:8a:7f:48:e1:cb: 51:13:55:ac:89:db:97:82:1b:57:a9:00:0b:e8:67: a1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D9:8D:FA:FC:52:40:AF:BD:8D:E5:35:29:91:4A:98:17:33:65:76 X509v3 Authority Key Identifier: keyid:C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:f9:45:08:be:a4:2d:79:7d:99:6d:08:9d:4b:25:ee:0f:ad: fe:68:c1:72:be:07:3d:85:70:1f:2a:25:de:d5:48:b5:13:ea: 19:ca:7f:47:75:19:84:db:70:44:5e:86:49:42:62:4d:c1:fa: 5a:0a:1b:3e:24:ef:56:a4:b2:fd:74:72:c0:53:44:8a:60:41: 87:7e:29:dc:ce:56:64:4e:53:60:be:35:3f:96:9a:12:cb:6c: 72:12:c6:65:ab:c6:c5:fd:d7:74:42:a0:53:6c:6f:4e:72:6d: b7:11:30:dc:a7:65:6e:a8:a7:6b:a9:2f:2b:cb:67:ff:39:d3: f7:19:0f:20:08:9f:ec:fd:eb:67:fb:07:94:f8:c2:5d:c5:40: c1:30:31:e3:b3:6f:e2:0b:5e:72:f5:15:0e:4b:d0:16:c0:c8: bd:f2:8a:1b:88:d4:53:c5:c7:87:9b:7a:c8:65:4a:8a:49:be: a8:25:7b:71:20:2e:fa:e9:33:aa:dd:9d:60:f9:7b:85:c3:6a: 65:fb:3d:3a:46:7b:34:e5:ff:10:2b:5a:3b:5d:66:47:15:e7: 86:72:a1:7b:f7:39:32:54:eb:a8:94:5c:ab:52:bf:3b:8c:2b: 56:1f:8c:aa:df:2c:c8:a3:f4:0c:4f:d9:d8:da:aa:ce:bd:0f: 60:d5:39:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwYbgfweSmCAVBSXEVqoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MDkxNDkyZDJjZThhODBjMDg3Yjg3NmY5MWQ2YTNjMjli ZTdhMjUwHhcNMjUxMjA2MDMwMDU5WhcNMjUxMjA3MDMwMDU5WjAzMTEwLwYDVQQD Eyg1M2Q5OGRmYWZjNTI0MGFmYmQ4ZGU1MzUyOTkxNGE5ODE3MzM2NTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6V9IBOvZMveoTA03VoVizawknjSQ PinAPGB5Vq5GYnnWHannihBO0iuWqejXrzoR83ua+4QRisn25SxWB2/XNwu5spQW 92LDjgWny/1CMZtQTDH8OYY6e0V8bpZds3+PKGuYpoXTB2E1H/7imNtw3JkiIWoM 74xb3bcjjJAh6J4BMnVTJ5L+0I+NntgJWhfekohUtPEw0wDjuDlXnAFl4eMXjFwu qtoDpkg+AnfMnqq2qOft344s6XoEhZMPsqt7NQjWeODRYjWHmizFlA6Xy3PhPgiv JtGtMC0CtMYGeFD4IeuyF/3oaDY/in9I4ctRE1WsiduXghtXqQAL6GehxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPZjfr8UkCvvY3lNSmRSpgXM2V2MB8GA1UdIwQY MBaAFMgJFJLSzoqAwIe4dvkdajwpvnolMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUFrVWt0TE9pb0RBaDdoMi1SMXFQQ20tZWlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jMzVhOTktZjg3YS00MjExLWFmN2Et ODFlMjEwNmE1ODU3LzEveUFrVWt0TE9pb0RBaDdoMi1SMXFQQ20tZWlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9jMzVhOTktZjg3YS00MjExLWFmN2EtODFlMjEwNmE1ODU3 LzEveUFrVWt0TE9pb0RBaDdoMi1SMXFQQ20tZWlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyflFCL6k LXl9mW0InUsl7g+t/mjBcr4HPYVwHyol3tVItRPqGcp/R3UZhNtwRF6GSUJiTcH6 WgobPiTvVqSy/XRywFNEimBBh34p3M5WZE5TYL41P5aaEstschLGZavGxf3XdEKg U2xvTnJttxEw3Kdlbqina6kvK8tn/znT9xkPIAif7P3rZ/sHlPjCXcVAwTAx47Nv 4gtecvUVDkvQFsDIvfKKG4jUU8XHh5t6yGVKikm+qCV7cSAu+ukzqt2dYPl7hcNq Zfs9OkZ7NOX/ECtaO11mRxXnhnKhe/c5MlTrqJRcq1K/O4wrVh+Mqt8syKP0DE/Z 2Nqqzr0PYNU5lQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:03 2025 by rpki-client