This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft File: yAA8l5YD986hKsoB68IFfDb9fzA.mft (raw, json) Hash identifier: SZJ3+2VlviimGGhUcyPIZASHxhiy38P6rYkIX8ef9c0= Subject key identifier: 77:0E:8F:20:DB:2D:4D:D3:AA:F8:12:95:A5:B9:E6:C8:CA:87:9F:30 Authority key identifier: C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30 Certificate issuer: /CN=c8003c979603f7cea12aca01ebc2057c36fd7f30 Certificate serial: 019AF50B73CF655078870D112126F5E82497 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft Manifest number: 0C84 Signing time: Sat 06 Dec 2025 19:02:39 +0000 Manifest this update: Sat 06 Dec 2025 19:02:39 +0000 Manifest next update: Sun 07 Dec 2025 19:02:39 +0000 Files and hashes: 1: 1-xE0-vSES3q7X24C7bA8kScsYVE.roa (hash: AMR+YDswQHGejlMnTq+0urVDztOvK2YpsO5lA8H1zXk=) 2: BHRefR2VcU9Cwhnc_jkStzqaKRk.roa (hash: ZrbTFGtHCrlkSMciC2wWa2wqdIxNJiFYUjns0T4P09g=) 3: KwFiVQgCHTlXMY_TYL_laU7APsg.roa (hash: qfYaVhKwplFB9wdvFF2eG+ZvwUUFbi4aeim7C9EVTCM=) 4: yAA8l5YD986hKsoB68IFfDb9fzA.crl (hash: unPd0hS6Xzvb54UEjuzYMW+hw/J/UALvDZTxbd1u8Kc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:73:cf:65:50:78:87:0d:11:21:26:f5:e8:24:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8003c979603f7cea12aca01ebc2057c36fd7f30 Validity Not Before: Dec 6 19:02:39 2025 GMT Not After : Dec 7 19:02:39 2025 GMT Subject: CN=770e8f20db2d4dd3aaf81295a5b9e6c8ca879f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:02:08:75:34:5e:b4:32:0c:63:e6:84:48:fb: 7c:34:53:69:a3:45:d4:ae:19:80:7b:00:17:16:73: 9c:e3:49:a4:c7:47:e9:3b:00:46:ed:d6:ff:0a:c4: 81:a3:84:b6:2d:b2:b9:30:f6:ae:58:cd:13:89:95: 21:2d:d6:fe:bc:69:cf:ce:30:23:6a:6e:03:38:fd: 55:94:57:21:8f:04:54:0e:d6:5e:a6:e2:11:68:b0: 4f:c8:bb:3e:d6:fb:03:20:70:1a:86:de:9c:68:d8: 19:e0:3e:71:cd:4c:d8:d2:f4:da:fd:03:b8:42:ad: 38:2a:3e:ba:4a:3d:1c:27:75:09:16:26:7e:54:e1: 7e:1e:3b:bd:7d:fa:96:44:a2:c3:c4:fd:25:9d:a2: c6:47:0b:c2:63:24:15:ae:20:5b:2e:71:09:c7:b9: a8:75:be:c5:b6:7f:05:64:96:d6:e0:af:a5:c6:77: 95:38:a8:b8:0b:ba:88:32:6d:95:f9:25:6f:d3:49: 8c:41:26:b5:49:fb:76:1e:2f:ef:67:e0:e2:40:f4: 27:45:13:06:91:f3:78:7b:37:a8:b8:ab:07:97:4f: 3c:aa:0c:10:85:a5:fe:d3:6e:ed:e1:69:8b:e1:21: 02:44:16:1f:54:41:13:40:f2:16:7f:9b:5f:cd:1c: 24:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0E:8F:20:DB:2D:4D:D3:AA:F8:12:95:A5:B9:E6:C8:CA:87:9F:30 X509v3 Authority Key Identifier: keyid:C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:84:64:40:2c:bd:bd:0c:6b:24:de:03:64:13:bf:81:67:cf: af:da:b4:9f:64:4a:bb:19:88:68:41:55:3b:5e:6f:9e:24:1c: 0e:38:51:73:81:67:3d:6c:8e:af:b2:56:72:87:44:d8:aa:80: 13:98:d3:28:a1:43:e4:8c:57:19:e3:a6:b4:2e:1a:42:03:27: e8:bc:a1:71:9d:02:16:82:26:02:dd:c7:96:51:13:5d:cc:83: 5f:08:de:ac:ac:71:ac:a1:b8:b2:6d:a8:ba:06:48:a5:7b:d1: 02:54:50:1a:7f:9c:33:47:a9:05:e1:74:95:17:92:c0:9f:66: 6f:54:f6:5a:68:a5:d8:4b:ee:e5:f1:82:00:12:3f:16:7b:d0: 42:b3:91:b4:67:c2:5e:9a:48:a4:8f:9f:e4:22:c3:33:53:d4: 57:ef:dc:b1:ae:91:91:61:60:85:be:b9:96:0c:25:d7:6f:ff: 93:cd:44:ec:81:f1:26:7e:ff:d4:3c:8d:c7:dd:bf:a8:6f:ff: 06:9c:79:e1:f5:b9:27:c7:38:5c:6a:5a:a7:3c:32:ce:da:a6: 47:ff:9a:67:08:e3:96:02:aa:6c:8a:a2:79:a4:95:67:6f:13: b3:7d:ed:45:e8:74:5a:92:e4:fc:d3:ba:eb:1e:df:a9:66:63: db:ea:a2:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C3PPZVB4hw0RISb16CSXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MDAzYzk3OTYwM2Y3Y2VhMTJhY2EwMWViYzIwNTdjMzZm ZDdmMzAwHhcNMjUxMjA2MTkwMjM5WhcNMjUxMjA3MTkwMjM5WjAzMTEwLwYDVQQD Eyg3NzBlOGYyMGRiMmQ0ZGQzYWFmODEyOTVhNWI5ZTZjOGNhODc5ZjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugIIdTRetDIMY+aESPt8NFNpo0XU rhmAewAXFnOc40mkx0fpOwBG7db/CsSBo4S2LbK5MPauWM0TiZUhLdb+vGnPzjAj am4DOP1VlFchjwRUDtZepuIRaLBPyLs+1vsDIHAaht6caNgZ4D5xzUzY0vTa/QO4 Qq04Kj66Sj0cJ3UJFiZ+VOF+Hju9ffqWRKLDxP0lnaLGRwvCYyQVriBbLnEJx7mo db7Ftn8FZJbW4K+lxneVOKi4C7qIMm2V+SVv00mMQSa1Sft2Hi/vZ+DiQPQnRRMG kfN4ezeouKsHl088qgwQhaX+027t4WmL4SECRBYfVEETQPIWf5tfzRwkPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHcOjyDbLU3TqvgSlaW55sjKh58wMB8GA1UdIwQY MBaAFMgAPJeWA/fOoSrKAevCBXw2/X8wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUFBOGw1WUQ5ODZoS3NvQjY4SUZmRGI5ZnpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8wM2NhMDEtYjk1OS00MWE2LTgxMzMt MDcyMjg4MTJkMDE3LzEveUFBOGw1WUQ5ODZoS3NvQjY4SUZmRGI5ZnpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8wM2NhMDEtYjk1OS00MWE2LTgxMzMtMDcyMjg4MTJkMDE3 LzEveUFBOGw1WUQ5ODZoS3NvQjY4SUZmRGI5ZnpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApIRkQCy9 vQxrJN4DZBO/gWfPr9q0n2RKuxmIaEFVO15vniQcDjhRc4FnPWyOr7JWcodE2KqA E5jTKKFD5IxXGeOmtC4aQgMn6LyhcZ0CFoImAt3HllETXcyDXwjerKxxrKG4sm2o ugZIpXvRAlRQGn+cM0epBeF0lReSwJ9mb1T2Wmil2Evu5fGCABI/FnvQQrORtGfC XppIpI+f5CLDM1PUV+/csa6RkWFghb65lgwl12//k81E7IHxJn7/1DyNx92/qG// Bpx54fW5J8c4XGpapzwyztqmR/+aZwjjlgKqbIqieaSVZ28Ts33tReh0WpLk/NO6 6x7fqWZj2+qijg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:58:31 2025 by rpki-client