This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft File: ysmhVQ09sawK6xHBbWPkimg7ygM.mft (raw, json) Hash identifier: CYitjLLtLIDyDcSMLsJiP675p6XmpouTqfAG1K0WK6w= Subject key identifier: 62:56:C9:A6:7D:72:32:B9:D6:FA:C1:20:99:01:43:3E:64:A1:6E:8C Authority key identifier: CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03 Certificate issuer: /CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03 Certificate serial: 019AF208EF5FCDF1EBC19427D7822E50E39A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft Manifest number: 04BC Signing time: Sat 06 Dec 2025 05:01:03 +0000 Manifest this update: Sat 06 Dec 2025 05:01:03 +0000 Manifest next update: Sun 07 Dec 2025 05:01:03 +0000 Files and hashes: 1: luS_MUgmzdMuGS76ZPW7jEugNFA.roa (hash: zmYIzq2i+Cnfy8rt1xmt5c6X8SNFIcSJe0+Xd9kMxgE=) 2: ysmhVQ09sawK6xHBbWPkimg7ygM.crl (hash: BqsIzUYQ24ctGawkcO8hGMkvR/coNUqa6w5QQF1c6G4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ef:5f:cd:f1:eb:c1:94:27:d7:82:2e:50:e3:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03 Validity Not Before: Dec 6 05:01:03 2025 GMT Not After : Dec 7 05:01:03 2025 GMT Subject: CN=6256c9a67d7232b9d6fac1209901433e64a16e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:72:8a:aa:3e:dc:e2:3a:9f:e9:7b:18:e8:75: 0b:f8:c3:b9:fc:7f:97:46:e8:37:0d:70:b4:02:73: 1b:39:ff:74:25:5c:46:3e:36:b0:e1:fc:28:62:ea: 75:5b:eb:5b:bf:48:55:81:b5:b8:0d:71:21:51:e4: 19:53:6e:0e:93:f2:1c:86:24:bc:fe:7a:a4:8b:a7: 53:02:4e:67:4c:f3:54:51:1c:10:ea:aa:cc:1e:08: b7:49:4d:68:aa:09:12:7a:7b:fe:05:81:4a:09:6b: d5:91:4e:85:b0:31:20:c2:83:44:f7:08:53:ee:9a: 63:29:0b:df:95:33:78:97:e2:de:ab:6f:19:1c:00: f4:09:cf:1c:cf:b4:53:4b:5c:05:f4:ef:77:69:68: 3e:75:3c:c9:4a:0f:8b:bf:e1:a3:79:bc:94:33:a9: 5a:57:4f:12:36:26:e6:38:4d:fe:a4:cb:68:42:fb: a9:17:b9:13:7f:1d:eb:8f:b6:79:37:de:07:01:aa: c6:cb:e8:f5:6c:b1:48:ff:6f:1e:00:9b:10:f4:8e: 45:87:46:99:14:fa:1c:b6:11:02:60:23:29:21:34: 2e:7c:de:62:bb:1d:93:34:2c:d6:3a:02:4c:4d:b8: 13:ed:f1:34:ab:cb:88:0e:57:39:8d:8a:c8:6d:60: 88:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:56:C9:A6:7D:72:32:B9:D6:FA:C1:20:99:01:43:3E:64:A1:6E:8C X509v3 Authority Key Identifier: keyid:CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b1:a3:15:1e:9c:e2:4c:3d:bf:5f:5c:f5:9a:7e:14:76:0b: ec:ff:12:94:cf:4a:59:96:12:a6:65:ed:98:44:bc:04:78:94: ba:34:73:03:6f:74:20:de:de:ce:bb:2e:ec:c8:25:63:15:b2: 50:66:28:af:c3:a1:18:d9:42:5a:c3:1e:39:ed:ac:7f:ac:23: b9:53:0a:17:2e:20:33:1c:08:30:93:4c:cb:54:f1:f4:51:0a: 29:9d:1b:8b:1f:1b:f1:b0:b3:50:73:80:03:6a:86:96:7c:42: 61:a3:d3:59:fd:e4:97:fb:3f:be:17:df:a2:de:5b:21:50:eb: 7e:fa:e2:cd:a3:63:4f:61:cc:82:39:ea:b0:42:2e:d1:b6:ba: 14:c1:33:22:41:b5:34:bd:79:ac:57:59:c0:9a:6b:4e:e1:04: 04:8c:e0:9d:40:ee:a2:85:00:d0:ac:d8:92:23:d3:8f:78:e4: 5d:1b:57:83:00:4a:dc:4b:bc:fd:82:98:d6:07:d3:5f:1a:de: a6:9d:30:a0:5a:70:0b:ef:21:b4:21:18:c8:d8:8a:0a:22:d3: 06:9e:eb:44:e8:b4:8a:97:42:5c:17:4e:60:a9:49:5a:e8:8b: 42:73:00:92:3f:f2:d4:90:4b:1d:e1:43:45:35:f6:5a:70:46: a0:cf:2a:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCO9fzfHrwZQn14IuUOOaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYzlhMTU1MGQzZGIxYWMwYWViMTFjMTZkNjNlNDhhNjgz YmNhMDMwHhcNMjUxMjA2MDUwMTAzWhcNMjUxMjA3MDUwMTAzWjAzMTEwLwYDVQQD Eyg2MjU2YzlhNjdkNzIzMmI5ZDZmYWMxMjA5OTAxNDMzZTY0YTE2ZThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnKKqj7c4jqf6XsY6HUL+MO5/H+X Rug3DXC0AnMbOf90JVxGPjaw4fwoYup1W+tbv0hVgbW4DXEhUeQZU24Ok/IchiS8 /nqki6dTAk5nTPNUURwQ6qrMHgi3SU1oqgkSenv+BYFKCWvVkU6FsDEgwoNE9whT 7ppjKQvflTN4l+Leq28ZHAD0Cc8cz7RTS1wF9O93aWg+dTzJSg+Lv+GjebyUM6la V08SNibmOE3+pMtoQvupF7kTfx3rj7Z5N94HAarGy+j1bLFI/28eAJsQ9I5Fh0aZ FPocthECYCMpITQufN5iux2TNCzWOgJMTbgT7fE0q8uIDlc5jYrIbWCIzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJWyaZ9cjK51vrBIJkBQz5koW6MMB8GA1UdIwQY MBaAFMrJoVUNPbGsCusRwW1j5IpoO8oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXNtaFZRMDlzYXdLNnhIQmJXUGtpbWc3eWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83NDI0YzUtMmM5OS00OTUyLTg2ZTct MDczZmI4M2FiZmM2LzEveXNtaFZRMDlzYXdLNnhIQmJXUGtpbWc3eWdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni83NDI0YzUtMmM5OS00OTUyLTg2ZTctMDczZmI4M2FiZmM2 LzEveXNtaFZRMDlzYXdLNnhIQmJXUGtpbWc3eWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7GjFR6c 4kw9v19c9Zp+FHYL7P8SlM9KWZYSpmXtmES8BHiUujRzA290IN7ezrsu7MglYxWy UGYor8OhGNlCWsMeOe2sf6wjuVMKFy4gMxwIMJNMy1Tx9FEKKZ0bix8b8bCzUHOA A2qGlnxCYaPTWf3kl/s/vhffot5bIVDrfvrizaNjT2HMgjnqsEIu0ba6FMEzIkG1 NL15rFdZwJprTuEEBIzgnUDuooUA0KzYkiPTj3jkXRtXgwBK3Eu8/YKY1gfTXxre pp0woFpwC+8htCEYyNiKCiLTBp7rROi0ipdCXBdOYKlJWuiLQnMAkj/y1JBLHeFD RTX2WnBGoM8qSg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:35 2025 by rpki-client