This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.mft File: YeVlVi0-P1ZenApBlG6lPUXV1lc.mft (raw, json) Hash identifier: jeqtu0aiinT0H8xhsqMM0uYhVH9WDzpGb/1djKWh7Bc= Subject key identifier: D6:E9:A3:72:66:80:5E:00:65:80:3F:B0:4B:05:EB:7C:32:96:FF:A6 Authority key identifier: 61:E5:65:56:2D:3E:3F:56:5E:9C:0A:41:94:6E:A5:3D:45:D5:D6:57 Certificate issuer: /CN=61e565562d3e3f565e9c0a41946ea53d45d5d657 Certificate serial: 019AF1D2472210CB82C2E06CC5D07A131090 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeVlVi0-P1ZenApBlG6lPUXV1lc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.mft Manifest number: 1196 Signing time: Sat 06 Dec 2025 04:01:21 +0000 Manifest this update: Sat 06 Dec 2025 04:01:21 +0000 Manifest next update: Sun 07 Dec 2025 04:01:21 +0000 Files and hashes: 1: M9EtDFxlEJ9A-FmeV5HNDDZqAp0.roa (hash: WI4ltzw0D8SzP8YIN3g88mLVBUuOvksyWitDll+8J8M=) 2: YeVlVi0-P1ZenApBlG6lPUXV1lc.crl (hash: Bur11Go+Csxu/4SJXAPIi8I9GTogKC/uJw5x8pE64Y8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.mft rsync://rpki.ripe.net/repository/DEFAULT/YeVlVi0-P1ZenApBlG6lPUXV1lc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:47:22:10:cb:82:c2:e0:6c:c5:d0:7a:13:10:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61e565562d3e3f565e9c0a41946ea53d45d5d657 Validity Not Before: Dec 6 04:01:21 2025 GMT Not After : Dec 7 04:01:21 2025 GMT Subject: CN=d6e9a37266805e0065803fb04b05eb7c3296ffa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2e:ca:be:5b:c0:6f:fc:79:d7:b5:bd:30:43: 2e:36:34:24:ab:05:11:6a:52:1d:5a:3b:14:19:b7: b8:ce:95:0e:9d:6c:d9:fa:6f:da:53:50:f5:2d:09: e6:c2:a0:0f:18:0d:4b:5a:4a:1f:bf:bf:e9:0c:a7: 95:20:62:a2:dd:fd:2e:ae:d2:87:8e:46:31:7c:d2: b0:d9:3c:51:78:7d:08:0a:d9:1f:37:fa:c7:7a:11: 3f:15:e4:64:57:92:63:76:b0:17:eb:ba:97:c8:ac: d8:9c:ea:b0:f2:65:c9:f0:a6:d1:64:1a:99:a7:da: 30:19:af:7d:fd:cb:e6:2d:e9:df:1e:4d:07:bc:9e: 43:15:d7:c9:c6:44:f0:82:d5:2a:2e:6b:b7:71:7e: 27:53:11:e8:65:8a:71:ec:1d:e3:ea:57:4d:e8:59: e9:2f:1e:5a:e8:f9:f9:a0:d9:09:b8:c5:6a:86:87: 6f:86:97:02:bd:90:4d:c8:52:7e:3b:e7:c8:97:e8: 42:97:cb:0c:6e:d7:0e:d1:b6:4d:cf:a6:d5:cf:42: 61:b0:48:89:ae:ad:e4:85:46:4b:9e:4b:d8:11:57: d8:64:ec:71:f9:cf:b1:33:27:b2:77:a7:70:05:fd: 9f:2d:90:90:f0:03:b2:62:bd:11:e6:11:27:d5:11: 8a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E9:A3:72:66:80:5E:00:65:80:3F:B0:4B:05:EB:7C:32:96:FF:A6 X509v3 Authority Key Identifier: keyid:61:E5:65:56:2D:3E:3F:56:5E:9C:0A:41:94:6E:A5:3D:45:D5:D6:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeVlVi0-P1ZenApBlG6lPUXV1lc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:2b:10:41:7d:d1:b4:a6:ad:f2:fb:b4:c4:57:d4:3f:85:11: 95:f0:fb:fd:1f:30:cb:8e:ee:35:f2:e6:0d:b6:65:7c:4c:9e: a9:a9:27:a0:8d:15:88:01:fd:e1:33:ae:80:f5:8c:a7:0e:d0: 13:e8:0b:9b:ce:dc:e1:aa:c9:4c:89:73:92:d0:09:4c:f8:a8: c9:f4:09:d9:69:16:78:04:b8:91:f9:b9:3e:da:ef:e7:af:49: 35:cf:fa:e4:07:7e:c0:70:f3:fd:19:6a:d4:c0:a9:0e:16:61: d4:3a:58:cb:02:9f:e0:c4:f4:00:88:54:67:57:49:f0:e6:f2: 3a:aa:bd:23:b5:2c:88:c3:5a:c3:7d:31:b9:68:a6:2c:4a:71: 6a:58:47:19:4d:2d:be:93:b3:44:12:82:d1:85:f3:14:7d:d2: e6:b8:0f:2a:38:66:92:6e:98:10:c6:71:ae:a7:ed:1c:b9:96: 81:2d:11:77:db:5d:39:ba:6f:90:07:25:ce:5b:19:65:98:44: b4:cb:69:4e:ff:87:7d:4c:45:c0:9b:d4:07:20:d4:aa:92:fb: f5:0e:21:be:4e:fe:83:d8:fe:72:24:7c:89:10:da:01:d3:6b: 01:8a:5f:99:b7:95:c9:c6:3d:20:04:0f:55:99:57:47:09:65: f2:09:cc:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kciEMuCwuBsxdB6ExCQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxZTU2NTU2MmQzZTNmNTY1ZTljMGE0MTk0NmVhNTNkNDVk NWQ2NTcwHhcNMjUxMjA2MDQwMTIxWhcNMjUxMjA3MDQwMTIxWjAzMTEwLwYDVQQD EyhkNmU5YTM3MjY2ODA1ZTAwNjU4MDNmYjA0YjA1ZWI3YzMyOTZmZmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi7KvlvAb/x517W9MEMuNjQkqwUR alIdWjsUGbe4zpUOnWzZ+m/aU1D1LQnmwqAPGA1LWkofv7/pDKeVIGKi3f0urtKH jkYxfNKw2TxReH0ICtkfN/rHehE/FeRkV5JjdrAX67qXyKzYnOqw8mXJ8KbRZBqZ p9owGa99/cvmLenfHk0HvJ5DFdfJxkTwgtUqLmu3cX4nUxHoZYpx7B3j6ldN6Fnp Lx5a6Pn5oNkJuMVqhodvhpcCvZBNyFJ+O+fIl+hCl8sMbtcO0bZNz6bVz0JhsEiJ rq3khUZLnkvYEVfYZOxx+c+xMyeyd6dwBf2fLZCQ8AOyYr0R5hEn1RGK8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbpo3JmgF4AZYA/sEsF63wylv+mMB8GA1UdIwQY MBaAFGHlZVYtPj9WXpwKQZRupT1F1dZXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWVWbFZpMC1QMVplbkFwQmxHNmxQVVhWMWxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NjIxNGItMDFkZi00YjAxLWJhNzYt ZjRjYmQ2YmE2YzBmLzEvWWVWbFZpMC1QMVplbkFwQmxHNmxQVVhWMWxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NjIxNGItMDFkZi00YjAxLWJhNzYtZjRjYmQ2YmE2YzBm LzEvWWVWbFZpMC1QMVplbkFwQmxHNmxQVVhWMWxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACisQQX3R tKat8vu0xFfUP4URlfD7/R8wy47uNfLmDbZlfEyeqaknoI0ViAH94TOugPWMpw7Q E+gLm87c4arJTIlzktAJTPioyfQJ2WkWeAS4kfm5Ptrv569JNc/65Ad+wHDz/Rlq 1MCpDhZh1DpYywKf4MT0AIhUZ1dJ8ObyOqq9I7UsiMNaw30xuWimLEpxalhHGU0t vpOzRBKC0YXzFH3S5rgPKjhmkm6YEMZxrqftHLmWgS0Rd9tdObpvkAclzlsZZZhE tMtpTv+HfUxFwJvUByDUqpL79Q4hvk7+g9j+ciR8iRDaAdNrAYpfmbeVycY9IAQP VZlXRwll8gnMcg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:34:51 2025 by rpki-client