This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft File: Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft (raw, json) Hash identifier: byfqTdrQ8i+wFyiCiEnNI1KDhhXdSZLBsqh3Iwh9qm0= Subject key identifier: 32:73:99:0E:3A:4C:CB:39:79:4B:A2:E2:44:8E:7C:BA:DB:09:05:E9 Authority key identifier: 62:9E:80:E8:8B:B7:66:29:1E:5E:C8:03:38:73:25:11:E4:D4:1E:04 Certificate issuer: /CN=629e80e88bb766291e5ec80338732511e4d41e04 Certificate serial: 019AF12DD8B301E249878BC06D2FA7568B48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft Manifest number: 0C7D Signing time: Sat 06 Dec 2025 01:01:44 +0000 Manifest this update: Sat 06 Dec 2025 01:01:44 +0000 Manifest next update: Sun 07 Dec 2025 01:01:44 +0000 Files and hashes: 1: Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.crl (hash: +S7z8rK66/FjzQUt/SMUU5xTxOh7GCPQYUXrjn1xKEc=) 2: mD91GJWTGSKSHSgbgQ6P8S7ubME.roa (hash: rmUWh8AmrxJuI/WhfjCkpLYkhkimbTnBeIi7uD7XWfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:d8:b3:01:e2:49:87:8b:c0:6d:2f:a7:56:8b:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=629e80e88bb766291e5ec80338732511e4d41e04 Validity Not Before: Dec 6 01:01:44 2025 GMT Not After : Dec 7 01:01:44 2025 GMT Subject: CN=3273990e3a4ccb39794ba2e2448e7cbadb0905e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4b:a3:63:ba:dd:aa:16:aa:a2:96:40:09:85: 2e:06:0a:7c:d9:87:e5:dc:43:27:bf:29:9c:94:25: cc:df:2b:55:40:ef:82:80:b1:31:a1:bc:34:d0:91: ba:0e:24:03:25:df:fe:c7:7d:17:ae:72:91:7e:39: 85:f1:b1:6e:fb:c3:5d:7c:be:c7:05:e7:6f:e2:0f: ac:84:2a:6b:d3:e4:36:fb:8f:3c:ba:d5:17:80:ea: 2d:2f:a5:3c:0b:73:59:78:59:88:1e:18:5c:09:17: b0:f1:98:c6:48:49:ca:ce:47:0c:a6:da:6a:5d:eb: 83:03:fc:98:54:d3:09:7f:88:91:f0:b1:27:06:3f: 43:be:e9:4d:34:3c:df:f5:31:9c:3e:50:c2:06:1f: 30:8c:fb:d4:34:4f:0d:f1:de:92:a8:5e:a1:e8:75: 49:70:74:c1:8b:78:cf:ef:1c:a1:3d:de:fd:dd:af: ed:58:24:c5:9e:55:98:7c:d9:52:67:56:a6:80:7c: 0d:7a:17:92:88:d2:9e:48:e4:e0:4a:a1:0e:0d:5f: 6a:e9:73:d2:41:18:fe:66:38:14:f4:ad:88:b7:03: 73:c4:6a:b8:69:cc:68:e5:18:99:f9:37:bd:ec:84: 71:ed:fd:c4:19:ea:f0:4e:eb:1f:4c:cd:f8:d6:15: 8c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:73:99:0E:3A:4C:CB:39:79:4B:A2:E2:44:8E:7C:BA:DB:09:05:E9 X509v3 Authority Key Identifier: keyid:62:9E:80:E8:8B:B7:66:29:1E:5E:C8:03:38:73:25:11:E4:D4:1E:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:e0:3f:5b:4b:91:65:87:c3:f1:8b:99:cd:fb:61:23:23:a6: bb:ce:2f:c3:23:2b:89:08:93:de:5c:b0:4d:cf:8d:5b:65:57: f5:57:65:71:03:51:35:a5:f9:0d:f3:a0:5b:83:57:9f:18:cc: bb:cb:60:63:44:3e:69:27:ab:14:41:82:a9:d3:f3:f9:2a:7d: 1e:8c:0c:d6:6f:89:17:8e:e6:c4:06:a8:50:e1:bd:b5:c5:ec: 18:96:10:37:89:1a:a1:bd:2a:1a:e2:34:8a:fe:6e:1a:b0:e1: 4a:2b:57:0d:91:13:83:8a:a4:a6:ba:9d:72:c0:6d:1a:61:9f: b0:84:09:e8:19:2a:6c:59:90:cf:6f:b6:92:f7:8c:f1:1e:7a: 77:9d:e3:f7:c2:d2:21:f8:34:06:f5:3d:b1:bf:97:a3:de:19: 47:9f:1d:3c:41:a5:4b:fb:a2:07:e7:78:84:2d:51:a9:48:c5: 2d:62:57:e7:45:7e:bb:d7:81:a2:aa:bd:ac:04:58:db:5d:b5: 82:64:08:cd:6b:76:a6:f4:79:71:83:4f:5c:dd:e7:0c:82:17: 94:73:98:67:f1:9a:87:6f:f7:cc:ca:7c:77:11:f5:8b:fa:01: 0f:7b:85:c4:09:0b:75:0f:c4:cc:20:b7:11:63:4a:e4:d8:d8: 8e:62:4c:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdizAeJJh4vAbS+nVotIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyOWU4MGU4OGJiNzY2MjkxZTVlYzgwMzM4NzMyNTExZTRk NDFlMDQwHhcNMjUxMjA2MDEwMTQ0WhcNMjUxMjA3MDEwMTQ0WjAzMTEwLwYDVQQD EygzMjczOTkwZTNhNGNjYjM5Nzk0YmEyZTI0NDhlN2NiYWRiMDkwNWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0ujY7rdqhaqopZACYUuBgp82Yfl 3EMnvymclCXM3ytVQO+CgLExobw00JG6DiQDJd/+x30XrnKRfjmF8bFu+8NdfL7H Bedv4g+shCpr0+Q2+488utUXgOotL6U8C3NZeFmIHhhcCRew8ZjGSEnKzkcMptpq XeuDA/yYVNMJf4iR8LEnBj9DvulNNDzf9TGcPlDCBh8wjPvUNE8N8d6SqF6h6HVJ cHTBi3jP7xyhPd793a/tWCTFnlWYfNlSZ1amgHwNeheSiNKeSOTgSqEODV9q6XPS QRj+ZjgU9K2ItwNzxGq4acxo5RiZ+Te97IRx7f3EGerwTusfTM341hWMfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJzmQ46TMs5eUui4kSOfLrbCQXpMB8GA1UdIwQY MBaAFGKegOiLt2YpHl7IAzhzJRHk1B4EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXA2QTZJdTNaaWtlWHNnRE9ITWxFZVRVSGdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9mYjg0NGEtZjM3My00ZTNjLThmNzYt NWI3YzQzMWFiNjFlLzEvWXA2QTZJdTNaaWtlWHNnRE9ITWxFZVRVSGdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9mYjg0NGEtZjM3My00ZTNjLThmNzYtNWI3YzQzMWFiNjFl LzEvWXA2QTZJdTNaaWtlWHNnRE9ITWxFZVRVSGdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+A/W0uR ZYfD8YuZzfthIyOmu84vwyMriQiT3lywTc+NW2VX9VdlcQNRNaX5DfOgW4NXnxjM u8tgY0Q+aSerFEGCqdPz+Sp9HowM1m+JF47mxAaoUOG9tcXsGJYQN4kaob0qGuI0 iv5uGrDhSitXDZETg4qkprqdcsBtGmGfsIQJ6BkqbFmQz2+2kveM8R56d53j98LS Ifg0BvU9sb+Xo94ZR58dPEGlS/uiB+d4hC1RqUjFLWJX50V+u9eBoqq9rARY2121 gmQIzWt2pvR5cYNPXN3nDIIXlHOYZ/Gah2/3zMp8dxH1i/oBD3uFxAkLdQ/EzCC3 EWNK5NjYjmJMTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:13:07 2025 by rpki-client