This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft File: yYuCXzbpzDMDFclA3oAMurzjOXs.mft (raw, json) Hash identifier: 2o+E7u2TaAxJB7o9PN69gew5ZCsLRBJYbF/dXeZd8i0= Subject key identifier: BC:94:86:44:64:8A:E7:36:27:55:50:36:5F:FE:A7:B2:3E:2C:B9:25 Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B Certificate issuer: /CN=c98b825f36e9cc330315c940de800cbabce3397b Certificate serial: 019AF276873BC47C3842E011626E8DB48A15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft Manifest number: 1371 Signing time: Sat 06 Dec 2025 07:00:45 +0000 Manifest this update: Sat 06 Dec 2025 07:00:45 +0000 Manifest next update: Sun 07 Dec 2025 07:00:45 +0000 Files and hashes: 1: 9fWXkacnWfLXH44Xb8HrXGzmknY.roa (hash: ueIT5017I7hv93aOprGzdVNSjT4YNhBA1fdwv5/AgdI=) 2: HRQ3zVG8fQhstKqXqVzvaQOYW-8.roa (hash: J4bA2yn+4d47gpldTm1th3QAEiyAys+UIYmTMp8Fvck=) 3: KW27n6S1v0MgxCxbh7E0buBfif8.roa (hash: toMOgZfSEbU3csqRPx4QZ9cAdliSmxp8YH9UOfmQEwM=) 4: f9hfmHvrY5AwY36q7MIQ4falWVM.roa (hash: poIPC46neVOYvv7bF8o92LK9XXWLEMpfpDFVMKy16AU=) 5: gu6tT7UFC6FmYiSvKO6wxYLbsHc.roa (hash: 33W9F+bpX2oF1GIOeMA/5dpyW1er0qfORrvZ4OzY3Zc=) 6: yYuCXzbpzDMDFclA3oAMurzjOXs.crl (hash: G3gKMz4l5WNmOV82PV7PlyToVsI1AdE+6Wawx8mlAvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:87:3b:c4:7c:38:42:e0:11:62:6e:8d:b4:8a:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b Validity Not Before: Dec 6 07:00:45 2025 GMT Not After : Dec 7 07:00:45 2025 GMT Subject: CN=bc948644648ae736275550365ffea7b23e2cb925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0a:20:5b:15:72:3b:a4:7e:8c:df:de:a4:fe: 60:fc:c2:69:f1:a0:bb:56:e2:50:72:5f:f3:24:e0: 32:27:c4:b2:74:30:7a:46:41:83:ac:e4:24:58:d1: a8:65:42:62:96:38:23:27:49:b2:12:84:52:c6:52: 03:ad:0d:55:52:9c:ad:98:15:f1:13:c0:e2:bc:57: 74:86:3e:f4:14:66:fa:99:f8:62:5f:b9:14:35:5d: d3:4b:47:a1:94:c7:c8:fa:48:b3:5e:6d:99:5e:27: 8c:10:fb:2f:cb:08:1f:ad:17:9d:0d:45:39:4a:11: ab:83:36:c9:27:1b:ee:6a:46:7d:71:db:4d:58:f0: 57:07:5e:12:86:6d:c7:8e:4e:04:ef:b2:de:1a:89: 18:ff:0b:7c:cf:14:58:8c:9f:d7:c0:2f:60:ad:eb: dd:5c:50:8e:67:eb:ee:1f:e5:5f:ae:22:aa:e2:18: 06:84:7e:02:50:39:30:33:f1:b4:e6:10:bd:87:29: 05:f9:65:0a:c9:4e:2f:e2:6a:6b:a6:86:47:fd:82: cc:45:e8:0f:aa:27:f7:4e:86:0b:97:d6:7d:82:02: fe:e5:7c:a0:ac:47:b0:83:dc:cd:d0:36:06:d8:3a: 50:98:01:23:b8:45:c9:e3:21:0f:32:1d:24:cd:c6: 90:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:94:86:44:64:8A:E7:36:27:55:50:36:5F:FE:A7:B2:3E:2C:B9:25 X509v3 Authority Key Identifier: keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:86:0f:73:ee:45:1c:a7:b7:47:3e:74:d0:9b:04:2b:98:9f: f6:f3:28:9c:35:a1:87:60:db:e2:c6:73:35:9f:aa:e4:6c:7d: 6b:55:b7:7c:b8:d4:f5:97:92:52:8e:b5:79:32:19:ee:26:ed: e5:6a:62:d7:29:7d:a7:0a:60:13:34:9b:86:ee:a3:b8:89:b1: e6:7d:99:1a:30:e2:33:dd:d6:45:ba:f3:f7:46:18:bb:3c:3d: 12:b6:3d:bf:0c:f8:81:18:27:91:04:cf:dc:24:3b:8e:47:e2: ed:4e:0f:48:9f:7d:a7:9a:a9:63:59:ac:ae:8c:6e:46:65:fb: de:18:6b:bc:4c:ec:82:05:d4:e2:3b:f6:f9:f0:84:f0:74:ca: 36:51:0f:8a:ca:5c:ce:a2:97:59:fc:4f:41:3a:78:c6:3d:74: 02:78:9e:bd:e5:e9:c9:3c:36:c1:d8:b1:31:c1:c3:33:d2:19: a0:8c:46:2d:d7:af:93:f2:f9:dd:fc:00:79:12:15:01:e6:e3: 1b:2c:1e:f4:0a:2d:96:8b:16:8a:f6:d1:f4:fb:52:be:97:9a: 68:08:c8:61:ba:74:16:9d:82:3f:b5:6a:b1:a8:65:92:59:f7: 1b:89:47:33:e0:6b:f9:94:17:c2:23:b8:a9:f4:d2:36:88:df: 59:a4:fc:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydoc7xHw4QuARYm6NtIoVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OGI4MjVmMzZlOWNjMzMwMzE1Yzk0MGRlODAwY2JhYmNl MzM5N2IwHhcNMjUxMjA2MDcwMDQ1WhcNMjUxMjA3MDcwMDQ1WjAzMTEwLwYDVQQD EyhiYzk0ODY0NDY0OGFlNzM2Mjc1NTUwMzY1ZmZlYTdiMjNlMmNiOTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAogWxVyO6R+jN/epP5g/MJp8aC7 VuJQcl/zJOAyJ8SydDB6RkGDrOQkWNGoZUJiljgjJ0myEoRSxlIDrQ1VUpytmBXx E8DivFd0hj70FGb6mfhiX7kUNV3TS0ehlMfI+kizXm2ZXieMEPsvywgfrRedDUU5 ShGrgzbJJxvuakZ9cdtNWPBXB14Shm3Hjk4E77LeGokY/wt8zxRYjJ/XwC9grevd XFCOZ+vuH+VfriKq4hgGhH4CUDkwM/G05hC9hykF+WUKyU4v4mprpoZH/YLMRegP qif3ToYLl9Z9ggL+5XygrEewg9zN0DYG2DpQmAEjuEXJ4yEPMh0kzcaQKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyUhkRkiuc2J1VQNl/+p7I+LLklMB8GA1UdIwQY MBaAFMmLgl826cwzAxXJQN6ADLq84zl7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVl1Q1h6YnB6RE1ERmNsQTNvQU11cnpqT1hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lYTM2MTQtZjA5MC00YTJiLTkzNTUt Yjg5YTUxMWMzYmJkLzEveVl1Q1h6YnB6RE1ERmNsQTNvQU11cnpqT1hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9lYTM2MTQtZjA5MC00YTJiLTkzNTUtYjg5YTUxMWMzYmJk LzEveVl1Q1h6YnB6RE1ERmNsQTNvQU11cnpqT1hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4YPc+5F HKe3Rz500JsEK5if9vMonDWhh2Db4sZzNZ+q5Gx9a1W3fLjU9ZeSUo61eTIZ7ibt 5Wpi1yl9pwpgEzSbhu6juImx5n2ZGjDiM93WRbrz90YYuzw9ErY9vwz4gRgnkQTP 3CQ7jkfi7U4PSJ99p5qpY1msroxuRmX73hhrvEzsggXU4jv2+fCE8HTKNlEPispc zqKXWfxPQTp4xj10AnieveXpyTw2wdixMcHDM9IZoIxGLdevk/L53fwAeRIVAebj Gywe9AotlosWivbR9PtSvpeaaAjIYbp0Fp2CP7Vqsahlkln3G4lHM+Br+ZQXwiO4 qfTSNojfWaT8Fg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:56:46 2025 by rpki-client