This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft File: yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft (raw, json) Hash identifier: OqryRuHemcle4WOHD3qxB99r9U+utKXoqq2ec9fepmc= Subject key identifier: 7F:4F:4D:46:99:2B:0B:A9:02:D0:BC:71:B4:BF:B4:C6:4C:51:21:B4 Authority key identifier: CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B Certificate issuer: /CN=ca37843f0752224459e6034569a217c8b611564b Certificate serial: 019AF509F83FF525BF04773C517C956CB5EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 19:01:02 +0000 Manifest this update: Sat 06 Dec 2025 19:01:02 +0000 Manifest next update: Sun 07 Dec 2025 19:01:02 +0000 Files and hashes: 1: VUGB_aCyOLA1Q6JSyAIK8Xkmymc.roa (hash: IOfuqkQd8JjyCobA5qA+5uEdvI2UFX4aZo+Aq0Rs/7c=) 2: Wp47mYbGIM1Wn1TH4UytNLnpCRE.roa (hash: s3jKeR589toj6Nv3VDplJDroNH801WsVAu93zGQYjRo=) 3: yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl (hash: 80mybMCB54I+vGEYdzd3Ns4hdevWeIqPxcTIx4uDL50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:f8:3f:f5:25:bf:04:77:3c:51:7c:95:6c:b5:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca37843f0752224459e6034569a217c8b611564b Validity Not Before: Dec 6 19:01:02 2025 GMT Not After : Dec 7 19:01:02 2025 GMT Subject: CN=7f4f4d46992b0ba902d0bc71b4bfb4c64c5121b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c5:3e:eb:0a:fd:e4:7b:9f:1b:de:03:89:99: 4a:7f:dd:31:2c:79:7c:de:18:4f:c4:fd:c5:91:22: b8:2a:ea:7a:03:4e:71:21:7d:25:f5:ea:51:29:c4: 9b:6d:48:7b:0d:03:90:57:0e:64:43:26:7c:82:2f: 20:1f:7b:41:2e:62:a7:54:38:ac:70:2f:8b:43:6a: 23:fe:f7:9d:85:ad:20:2f:9a:10:6b:52:e9:0b:c9: 1a:f0:05:09:5a:69:6b:64:ec:21:cf:63:23:f3:8b: 41:af:e4:da:6d:56:1e:25:21:12:e8:cb:f1:ed:da: b3:99:5d:44:8b:91:c5:6f:a1:59:ac:f7:61:d6:cd: 13:7e:57:9f:f4:6c:c9:f2:7e:83:a3:d9:7f:4d:29: 51:bb:26:be:6e:53:92:ae:66:44:cf:5a:94:11:a6: 40:dc:1f:c4:fe:32:13:8d:cc:60:55:40:a1:fa:3c: bd:3a:5b:6b:76:3c:2a:ef:2e:6a:77:74:77:be:fe: 96:3c:ae:10:70:37:9c:fc:0a:07:86:ab:a9:19:86: 10:fc:b1:eb:b8:2d:ee:5f:fd:d4:b9:15:80:38:fc: 04:4e:34:ac:b4:ad:b2:af:b2:3d:92:11:e8:74:7a: 4a:cc:91:f0:36:e1:69:71:4d:f4:ae:46:b4:3b:a5: 2f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:4F:4D:46:99:2B:0B:A9:02:D0:BC:71:B4:BF:B4:C6:4C:51:21:B4 X509v3 Authority Key Identifier: keyid:CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:12:d1:4c:fb:72:98:8e:1c:be:3b:29:5f:55:e1:39:49:7b: f6:4c:66:ff:49:90:64:fd:44:46:41:f3:21:7f:89:6d:f3:17: a2:49:fc:ed:94:7f:4c:f7:14:db:05:56:7c:7e:85:64:6d:77: d3:17:b2:2a:88:fc:ec:a7:1f:1c:22:80:cc:84:c1:49:17:33: 33:eb:61:0e:e3:99:65:09:ac:a0:09:84:75:42:8f:36:e1:d1: ff:4e:52:94:fe:3d:05:e0:e2:4d:f5:25:8a:6d:c8:a5:43:2f: 30:dc:ca:42:24:6e:b0:c1:55:2d:f6:52:b1:d2:61:0a:ba:44: b8:61:25:cf:80:2e:77:3a:51:fa:ab:0e:4c:85:f7:69:7a:d7: 54:d6:7f:4b:b3:d7:53:4b:40:ec:b8:ae:29:2d:c0:6b:d8:97: 3e:f3:b9:3f:6b:48:2d:ce:30:81:fe:38:bd:60:5a:a4:a7:dd: e9:78:eb:93:ef:0b:6f:96:49:51:d2:bd:64:22:36:0d:fa:c3: a4:e8:f1:37:08:63:a8:90:f8:b6:24:87:25:77:0a:17:c3:f5: b7:23:8a:ac:4b:ae:73:98:49:b3:25:c9:2f:51:d8:a6:6b:dc: 2b:8b:6a:34:a7:5c:af:e7:a4:62:23:e6:ba:2c:2f:6a:3c:3b: a2:fe:73:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cfg/9SW/BHc8UXyVbLXvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzc4NDNmMDc1MjIyNDQ1OWU2MDM0NTY5YTIxN2M4YjYx MTU2NGIwHhcNMjUxMjA2MTkwMTAyWhcNMjUxMjA3MTkwMTAyWjAzMTEwLwYDVQQD Eyg3ZjRmNGQ0Njk5MmIwYmE5MDJkMGJjNzFiNGJmYjRjNjRjNTEyMWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cU+6wr95HufG94DiZlKf90xLHl8 3hhPxP3FkSK4Kup6A05xIX0l9epRKcSbbUh7DQOQVw5kQyZ8gi8gH3tBLmKnVDis cC+LQ2oj/vedha0gL5oQa1LpC8ka8AUJWmlrZOwhz2Mj84tBr+TabVYeJSES6Mvx 7dqzmV1Ei5HFb6FZrPdh1s0Tflef9GzJ8n6Do9l/TSlRuya+blOSrmZEz1qUEaZA 3B/E/jITjcxgVUCh+jy9Oltrdjwq7y5qd3R3vv6WPK4QcDec/AoHhqupGYYQ/LHr uC3uX/3UuRWAOPwETjSstK2yr7I9khHodHpKzJHwNuFpcU30rka0O6UvtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9PTUaZKwupAtC8cbS/tMZMUSG0MB8GA1UdIwQY MBaAFMo3hD8HUiJEWeYDRWmiF8i2EVZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWplRVB3ZFNJa1JaNWdORmFhSVh5TFlSVmtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9kNzE2Y2QtZDc5Zi00NDg0LTk2ODUt OGZlNzg0ZTMxZTVkLzEveWplRVB3ZFNJa1JaNWdORmFhSVh5TFlSVmtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9kNzE2Y2QtZDc5Zi00NDg0LTk2ODUtOGZlNzg0ZTMxZTVk LzEveWplRVB3ZFNJa1JaNWdORmFhSVh5TFlSVmtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRLRTPty mI4cvjspX1XhOUl79kxm/0mQZP1ERkHzIX+JbfMXokn87ZR/TPcU2wVWfH6FZG13 0xeyKoj87KcfHCKAzITBSRczM+thDuOZZQmsoAmEdUKPNuHR/05SlP49BeDiTfUl im3IpUMvMNzKQiRusMFVLfZSsdJhCrpEuGElz4AudzpR+qsOTIX3aXrXVNZ/S7PX U0tA7LiuKS3Aa9iXPvO5P2tILc4wgf44vWBapKfd6Xjrk+8Lb5ZJUdK9ZCI2DfrD pOjxNwhjqJD4tiSHJXcKF8P1tyOKrEuuc5hJsyXJL1HYpmvcK4tqNKdcr+ekYiPm uiwvajw7ov5zMg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:58:44 2025 by rpki-client