This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft File: yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft (raw, json) Hash identifier: WQ3JZ5j5JcPw4FLBPytheCjGmx31ZR0DVvZvFioq1CU= Subject key identifier: 4A:FB:42:E7:04:55:8C:0F:B7:78:BF:4F:D6:B7:97:EB:83:B5:AD:A1 Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22 Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622 Certificate serial: 019AF209212EB39A44F7B080293C96B8CA92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft Manifest number: 14AF Signing time: Sat 06 Dec 2025 05:01:15 +0000 Manifest this update: Sat 06 Dec 2025 05:01:15 +0000 Manifest next update: Sun 07 Dec 2025 05:01:15 +0000 Files and hashes: 1: 1-0Y1K8-7iyhXdhoTYDD_MThh3vE.roa (hash: UqK1yASRyJvFv5c4mwnLEN1kbb6bTTjQR+7JRYc/30A=) 2: 8ugftUXGOYARk8hNtz_dZIPLHoY.roa (hash: fXuh9GYhE6qY7sn2WSDIqQCBrlOo2zt5TZUsfH3qCOk=) 3: CDJht7IkCxl1Fd3V0Jw0C5lDhbA.roa (hash: hC6TckJd7vZ/EVDDKvs8SlMNOJG6j0LoJJkkefT5TcY=) 4: MjdKbFiEyBYefwEqDa5k32efH84.roa (hash: yMrvEUe4dfvDGnvXjb6T/gK+z8B3+E50n+nxlmXb8j8=) 5: bAetBQfQtIL8HDlRLQtzqRXsmJw.roa (hash: KlLcSQqNQG0Ri5k3fpJMz79RuQ+R0fvjpj0v09+VZkU=) 6: yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl (hash: bPhSDw5Lllw46N48uUnIavrweyd5ghM4Ef45ezZVqvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:21:2e:b3:9a:44:f7:b0:80:29:3c:96:b8:ca:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622 Validity Not Before: Dec 6 05:01:15 2025 GMT Not After : Dec 7 05:01:15 2025 GMT Subject: CN=4afb42e704558c0fb778bf4fd6b797eb83b5ada1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:86:30:bb:08:c8:d7:be:74:5c:98:a6:49:c4: d8:9d:e2:34:c5:cb:3f:33:24:87:4f:9e:23:45:2f: 28:4c:4c:02:82:3d:97:57:02:e4:ff:c8:6d:f9:52: ae:3b:9d:c3:cd:ed:91:7d:1e:3d:c8:51:ee:f0:a6: ee:f9:93:8a:19:d6:6a:a4:9f:53:34:b9:5d:19:a4: 17:da:27:84:13:e8:e9:a5:1e:bd:9a:b6:85:40:4c: 2d:06:f6:94:d1:c2:6e:30:bd:3c:a7:ac:a7:2f:89: c0:2f:d7:98:86:30:2d:76:c5:1a:5f:24:36:38:6e: fc:96:fb:d8:e6:86:b8:03:69:f2:10:eb:92:5c:47: 13:c6:02:74:bc:4b:85:3a:f8:49:f0:c8:5a:69:ac: 4d:51:d5:09:b1:b1:2a:af:90:9e:19:e7:39:4e:23: d5:a8:ff:21:4c:f7:f0:ba:a6:7b:f6:78:a8:1f:06: db:4b:df:e7:b0:5b:fb:60:32:13:6c:f3:49:21:80: 2c:64:15:2a:09:ab:5b:20:2b:c1:65:db:19:48:73: da:e5:b3:f7:bc:5f:6c:2c:72:39:21:7c:55:fc:e1: c6:1d:00:f3:0d:a2:f0:05:fa:94:13:1b:26:53:a3: 83:ba:68:4b:cc:5e:ce:19:d4:43:93:56:90:51:07: 0b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FB:42:E7:04:55:8C:0F:B7:78:BF:4F:D6:B7:97:EB:83:B5:AD:A1 X509v3 Authority Key Identifier: keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:eb:84:c4:f9:ea:30:da:18:d6:b8:d3:37:d4:6f:bf:d1:52: e1:56:bf:63:46:21:b6:62:70:07:05:46:ab:fb:03:e5:ee:4e: f1:9a:44:c2:fa:68:b4:37:20:f7:4f:14:ca:c0:5a:0f:1f:ef: ac:f4:43:03:8e:47:42:ee:ad:5b:b4:94:b2:87:e8:13:85:f3: f5:11:94:06:55:c1:3b:f1:30:73:40:7e:9b:ee:3a:91:f2:34: 43:c2:6d:c2:6a:3d:ee:e8:f0:0d:95:2d:d7:e4:8d:31:38:02: b6:10:f2:1d:1e:a6:8b:a6:38:6d:92:f4:4d:34:c0:93:f0:af: d8:e8:22:92:c8:dc:9c:5b:59:ee:28:f7:00:a9:b4:5f:42:05: 86:7b:1a:24:77:df:86:06:b8:af:13:34:2e:2d:28:70:e3:20: c6:86:08:23:fd:27:95:b7:db:f3:77:8b:5a:b1:a1:fa:8e:94: 4e:d8:67:03:5b:13:0d:fe:e3:04:57:57:f0:c7:f0:67:79:9b: 05:2a:3e:53:c1:ff:ea:b3:e5:5a:36:e2:00:aa:cc:55:f1:d1: 0c:8a:3c:17:af:fc:31:c4:29:eb:36:c5:ce:7e:78:ed:9f:fb: c5:47:5f:d1:92:0a:cd:1f:58:3c:98:c0:a7:f0:1f:70:2d:03: a9:a9:ed:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSEus5pE97CAKTyWuMqSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZDVlMzcxNzhkODUyNGM3MjY2MGExZDc5NjE2NTk5OWU1 ODY2MjIwHhcNMjUxMjA2MDUwMTE1WhcNMjUxMjA3MDUwMTE1WjAzMTEwLwYDVQQD Eyg0YWZiNDJlNzA0NTU4YzBmYjc3OGJmNGZkNmI3OTdlYjgzYjVhZGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIYwuwjI1750XJimScTYneI0xcs/ MySHT54jRS8oTEwCgj2XVwLk/8ht+VKuO53Dze2RfR49yFHu8Kbu+ZOKGdZqpJ9T NLldGaQX2ieEE+jppR69mraFQEwtBvaU0cJuML08p6ynL4nAL9eYhjAtdsUaXyQ2 OG78lvvY5oa4A2nyEOuSXEcTxgJ0vEuFOvhJ8MhaaaxNUdUJsbEqr5CeGec5TiPV qP8hTPfwuqZ79nioHwbbS9/nsFv7YDITbPNJIYAsZBUqCatbICvBZdsZSHPa5bP3 vF9sLHI5IXxV/OHGHQDzDaLwBfqUExsmU6ODumhLzF7OGdRDk1aQUQcLVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEr7QucEVYwPt3i/T9a3l+uDta2hMB8GA1UdIwQY MBaAFMjV43F42FJMcmYKHXlhZZmeWGYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODIt OWUwYWVkMmZiOGVjLzEveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODItOWUwYWVkMmZiOGVj LzEveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOuExPnq MNoY1rjTN9Rvv9FS4Va/Y0YhtmJwBwVGq/sD5e5O8ZpEwvpotDcg908UysBaDx/v rPRDA45HQu6tW7SUsofoE4Xz9RGUBlXBO/Ewc0B+m+46kfI0Q8Jtwmo97ujwDZUt 1+SNMTgCthDyHR6mi6Y4bZL0TTTAk/Cv2OgiksjcnFtZ7ij3AKm0X0IFhnsaJHff hga4rxM0Li0ocOMgxoYII/0nlbfb83eLWrGh+o6UTthnA1sTDf7jBFdX8MfwZ3mb BSo+U8H/6rPlWjbiAKrMVfHRDIo8F6/8McQp6zbFzn547Z/7xUdf0ZIKzR9YPJjA p/AfcC0Dqantig== -----END CERTIFICATE-----Generated at Sat Dec 6 14:48:17 2025 by rpki-client