This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft File: yGjKghR-0id7S8xppShbrnNfLkQ.mft (raw, json) Hash identifier: BL6GL4tOU6iuxD1BNBRkWZCJZ955U3sVTk/EZroaaIY= Subject key identifier: 02:F1:9F:BF:91:D6:86:97:DD:3C:36:6B:D3:00:B8:6E:18:4A:1F:98 Authority key identifier: C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44 Certificate issuer: /CN=c868ca82147ed2277b4bcc69a5285bae735f2e44 Certificate serial: 019AF50B954356F2B853335FC650A846D1F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft Manifest number: 1783 Signing time: Sat 06 Dec 2025 19:02:48 +0000 Manifest this update: Sat 06 Dec 2025 19:02:48 +0000 Manifest next update: Sun 07 Dec 2025 19:02:48 +0000 Files and hashes: 1: BiH4T1QItrDeKmbSQQD10MbyJM0.roa (hash: 1DccZm+wbtnRwvwFHLQW36Ec7g4Qt5rsBnmXwCd1CCk=) 2: lIzlzaB9MfYSOvJtbmvms4JbSXQ.roa (hash: 7pNuzEMq5SGi7oY7hUTVuLhRAftrVbTi7LJ5DaYy2Z4=) 3: yGjKghR-0id7S8xppShbrnNfLkQ.crl (hash: 0cnaE7aUDSjCodVH4l/fFzU0lSFQH81p6JaVPJmQTgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:95:43:56:f2:b8:53:33:5f:c6:50:a8:46:d1:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c868ca82147ed2277b4bcc69a5285bae735f2e44 Validity Not Before: Dec 6 19:02:48 2025 GMT Not After : Dec 7 19:02:48 2025 GMT Subject: CN=02f19fbf91d68697dd3c366bd300b86e184a1f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:57:fa:72:30:4e:b9:ad:ae:3b:ac:e2:00:84: 61:bb:b8:fe:df:7a:e0:e8:04:8f:d9:73:dd:ad:d3: 33:ae:ac:ac:ba:be:a0:97:66:f9:f9:28:46:09:90: a7:b3:98:2e:fd:82:9f:6f:f3:58:b3:38:d4:d4:14: 7a:bb:05:1b:44:11:89:41:aa:ee:6d:a3:1e:83:ee: 1c:ab:26:72:b5:60:7a:48:7c:c5:43:5e:45:19:cb: 60:86:79:5e:8e:69:0d:ec:0d:2d:ed:8e:72:22:c2: 6f:bb:b4:99:fc:56:2c:88:19:4a:4f:6f:aa:c2:fe: 84:6a:17:73:10:f2:3f:de:15:bc:e2:82:32:db:7c: 14:f5:a0:18:63:07:b3:5d:29:4b:08:6c:54:46:bc: 4d:22:87:69:bd:8c:1d:84:54:91:dc:e4:d1:f0:30: c3:b2:4a:23:de:d7:3a:88:77:0a:ff:16:33:25:49: 55:fc:ac:8f:ce:3d:5f:86:f2:ea:e2:b9:d3:14:05: 85:4c:be:f5:23:1a:da:a1:54:83:3c:11:e7:93:b4: 0f:a0:11:47:ed:ff:70:4f:f8:85:ca:1e:a3:ee:51: 21:bc:41:82:34:d8:fe:d9:86:1d:58:a8:b8:88:6b: 11:3e:75:cb:b8:a6:cc:14:c3:be:e2:81:0b:38:f9: 39:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F1:9F:BF:91:D6:86:97:DD:3C:36:6B:D3:00:B8:6E:18:4A:1F:98 X509v3 Authority Key Identifier: keyid:C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:9f:5d:68:72:a0:ba:3e:9d:bc:55:8e:d8:bf:74:8a:c2:3e: 3c:00:ed:57:8e:bd:45:c5:1f:70:a2:0e:b4:a1:ff:52:f4:02: 6c:53:4c:7b:35:65:19:87:bf:82:5a:c9:6d:d3:b8:07:38:c2: 84:de:93:2e:41:ea:6c:7e:09:86:42:53:de:45:81:eb:17:e3: 26:fc:35:ef:6c:f6:9b:19:4d:fd:26:b3:87:7a:7d:40:c2:ba: 8c:6b:ba:75:66:de:b6:1a:03:ec:f3:c8:3c:b7:12:da:03:73: 2b:2f:6f:c3:4f:35:d7:83:5c:a7:22:f9:d2:ec:eb:5e:9c:42: ab:b8:b2:f1:0e:b0:54:67:c8:92:39:68:82:2a:fb:c8:9f:df: 1d:30:73:72:48:6f:f0:0b:86:d7:50:64:c3:f3:43:67:67:db: a4:08:20:17:e5:07:62:0f:56:29:d9:cc:ba:f3:2b:7d:16:94: 5f:21:4b:3c:c8:d1:7a:0c:19:3a:1e:ee:69:ee:a2:d1:e9:5a: fd:30:43:78:c1:aa:1c:a3:e6:68:4d:48:34:92:e6:e8:d4:e0: d1:9f:93:90:76:9d:e6:57:92:41:20:84:8a:bb:68:c9:ad:b7: 91:58:41:5f:a2:7d:a1:27:8d:6c:a7:d9:39:2c:72:f1:14:99: 55:15:73:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C5VDVvK4UzNfxlCoRtH5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NjhjYTgyMTQ3ZWQyMjc3YjRiY2M2OWE1Mjg1YmFlNzM1 ZjJlNDQwHhcNMjUxMjA2MTkwMjQ4WhcNMjUxMjA3MTkwMjQ4WjAzMTEwLwYDVQQD EygwMmYxOWZiZjkxZDY4Njk3ZGQzYzM2NmJkMzAwYjg2ZTE4NGExZjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ff6cjBOua2uO6ziAIRhu7j+33rg 6ASP2XPdrdMzrqysur6gl2b5+ShGCZCns5gu/YKfb/NYszjU1BR6uwUbRBGJQaru baMeg+4cqyZytWB6SHzFQ15FGctghnlejmkN7A0t7Y5yIsJvu7SZ/FYsiBlKT2+q wv6EahdzEPI/3hW84oIy23wU9aAYYwezXSlLCGxURrxNIodpvYwdhFSR3OTR8DDD skoj3tc6iHcK/xYzJUlV/KyPzj1fhvLq4rnTFAWFTL71IxraoVSDPBHnk7QPoBFH 7f9wT/iFyh6j7lEhvEGCNNj+2YYdWKi4iGsRPnXLuKbMFMO+4oELOPk5QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALxn7+R1oaX3Tw2a9MAuG4YSh+YMB8GA1UdIwQY MBaAFMhoyoIUftIne0vMaaUoW65zXy5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUdqS2doUi0waWQ3Uzh4cHBTaGJybk5mTGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wNDJjMzMtYWI2Yi00OGJlLWE0OTIt NjY4NDkwMTk2MjdlLzEveUdqS2doUi0waWQ3Uzh4cHBTaGJybk5mTGtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8wNDJjMzMtYWI2Yi00OGJlLWE0OTItNjY4NDkwMTk2Mjdl LzEveUdqS2doUi0waWQ3Uzh4cHBTaGJybk5mTGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY59daHKg uj6dvFWO2L90isI+PADtV469RcUfcKIOtKH/UvQCbFNMezVlGYe/glrJbdO4BzjC hN6TLkHqbH4JhkJT3kWB6xfjJvw172z2mxlN/Sazh3p9QMK6jGu6dWbethoD7PPI PLcS2gNzKy9vw08114NcpyL50uzrXpxCq7iy8Q6wVGfIkjlogir7yJ/fHTBzckhv 8AuG11Bkw/NDZ2fbpAggF+UHYg9WKdnMuvMrfRaUXyFLPMjRegwZOh7uae6i0ela /TBDeMGqHKPmaE1INJLm6NTg0Z+TkHad5leSQSCEirtoya23kVhBX6J9oSeNbKfZ OSxy8RSZVRVzaw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:55:38 2025 by rpki-client