This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft File: yzAqJzq07yWo6pGko3ebz30d5Zs.mft (raw, json) Hash identifier: pvM1B3m9/mxHoKaPmJvMi7iv1Oh/09lrcKgua8E6qxo= Subject key identifier: 56:3A:67:28:EE:77:F1:FC:54:EC:14:9B:7C:4B:0A:C9:16:32:04:C1 Authority key identifier: CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B Certificate issuer: /CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b Certificate serial: 019AF5E6218BE0AF6A77FE89F095BD54FD6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft Manifest number: 0EF2 Signing time: Sat 06 Dec 2025 23:01:30 +0000 Manifest this update: Sat 06 Dec 2025 23:01:30 +0000 Manifest next update: Sun 07 Dec 2025 23:01:30 +0000 Files and hashes: 1: DcSO93z7fLoOXoqmDIifEXGL2wg.roa (hash: nhLe1W2M8L/RVeyBnebjnTgtFIE/bzp14sFZY8G/wn8=) 2: yzAqJzq07yWo6pGko3ebz30d5Zs.crl (hash: MVKhFkKE8u5sDCr5SFUpCiTmbZNc1IPo/HV2NlSEIvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:21:8b:e0:af:6a:77:fe:89:f0:95:bd:54:fd:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b Validity Not Before: Dec 6 23:01:30 2025 GMT Not After : Dec 7 23:01:30 2025 GMT Subject: CN=563a6728ee77f1fc54ec149b7c4b0ac9163204c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1b:52:70:f2:85:19:59:7f:e9:62:83:0a:8d: 69:d7:c0:5e:29:00:e5:55:ea:5f:8c:d5:94:36:62: 22:73:b4:b1:71:2f:f1:b3:d0:cc:d3:92:7e:f5:84: c5:02:90:c6:6e:29:dc:4f:66:25:43:9b:3d:87:ed: ff:76:aa:52:b4:63:5a:c4:e4:db:9d:e7:46:26:e4: 2a:cc:60:0f:c9:84:5f:12:af:c3:e1:48:cb:46:0e: ee:34:07:80:05:ae:b5:62:75:52:af:dc:aa:13:38: 2f:60:1d:5c:b4:48:ac:71:6a:13:ed:e2:87:d3:a4: e2:c8:f6:24:ae:9c:34:f9:43:70:59:83:89:65:b8: 72:6a:7d:59:1d:43:58:bd:15:be:af:1c:eb:2c:ef: dc:2e:08:90:9f:25:dc:e4:76:4a:43:39:80:28:02: bd:1e:81:fa:04:54:eb:79:12:5e:f9:9d:d5:5d:3d: e7:21:ee:35:c7:69:de:a1:f6:bc:44:14:80:25:d9: 73:58:d0:2a:93:0e:fb:7c:e9:fa:ea:e8:5d:ec:e4: d6:45:6d:0f:f1:d3:6b:25:73:42:5b:17:cb:4f:35: 37:76:e7:55:f4:a4:94:cb:f0:ac:7a:4c:1c:0d:d2: 09:91:99:ca:33:92:60:eb:f8:41:e5:c3:8a:54:12: 64:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3A:67:28:EE:77:F1:FC:54:EC:14:9B:7C:4B:0A:C9:16:32:04:C1 X509v3 Authority Key Identifier: keyid:CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:31:a2:76:bb:06:3e:dd:83:28:2a:9e:f4:0e:2a:49:b9:02: d7:8c:8d:45:66:47:aa:f8:27:6d:d4:8d:fb:44:a0:a4:6c:7f: 4a:ca:2a:e4:fb:f8:5f:20:00:11:a9:7b:43:ca:b2:80:82:63: 6b:14:e7:00:63:60:71:b1:a7:89:74:c7:e5:db:7e:d6:a9:fb: 70:6d:f2:de:6d:1f:78:77:37:cd:82:cb:fe:72:41:a2:42:bd: 1f:75:9e:15:3b:78:59:b2:31:1d:6e:e1:d0:fa:c2:7a:63:56: 74:5e:f2:a7:e8:af:dd:79:b6:8a:04:4b:eb:6b:60:e1:70:c2: 58:03:27:80:3a:6c:d7:a4:97:b3:54:de:37:3b:3e:7a:f4:d1: 97:d8:6e:2c:d1:49:ce:00:01:7a:1a:63:59:3c:2c:c6:2e:27: 9d:24:06:65:94:1c:f8:fb:eb:c6:20:bd:35:21:81:07:fa:24: 9d:5b:aa:37:73:48:c0:d7:07:85:dc:a9:6a:3a:a9:91:d4:3a: 8d:ef:c3:e2:ae:ca:c6:59:f5:3c:8d:23:5c:2e:f1:1d:53:e4: 82:1f:60:2c:03:14:bd:58:4e:23:9c:92:de:a8:a6:5a:54:e8: 8a:6d:9b:30:8e:62:fd:c9:8e:8a:ab:60:8c:a4:6b:bc:61:fb: ac:c6:40:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15iGL4K9qd/6J8JW9VP1rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMzAyYTI3M2FiNGVmMjVhOGVhOTFhNGEzNzc5YmNmN2Qx ZGU1OWIwHhcNMjUxMjA2MjMwMTMwWhcNMjUxMjA3MjMwMTMwWjAzMTEwLwYDVQQD Eyg1NjNhNjcyOGVlNzdmMWZjNTRlYzE0OWI3YzRiMGFjOTE2MzIwNGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxtScPKFGVl/6WKDCo1p18BeKQDl VepfjNWUNmIic7SxcS/xs9DM05J+9YTFApDGbincT2YlQ5s9h+3/dqpStGNaxOTb nedGJuQqzGAPyYRfEq/D4UjLRg7uNAeABa61YnVSr9yqEzgvYB1ctEiscWoT7eKH 06TiyPYkrpw0+UNwWYOJZbhyan1ZHUNYvRW+rxzrLO/cLgiQnyXc5HZKQzmAKAK9 HoH6BFTreRJe+Z3VXT3nIe41x2neofa8RBSAJdlzWNAqkw77fOn66uhd7OTWRW0P 8dNrJXNCWxfLTzU3dudV9KSUy/CsekwcDdIJkZnKM5Jg6/hB5cOKVBJkqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFY6Zyjud/H8VOwUm3xLCskWMgTBMB8GA1UdIwQY MBaAFMswKic6tO8lqOqRpKN3m899HeWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXpBcUp6cTA3eVdvNnBHa28zZWJ6MzBkNVpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85NzdkZGItMzA5NS00ODhkLWIzNmIt ODAwOGQxZTdjMzhjLzEveXpBcUp6cTA3eVdvNnBHa28zZWJ6MzBkNVpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi85NzdkZGItMzA5NS00ODhkLWIzNmItODAwOGQxZTdjMzhj LzEveXpBcUp6cTA3eVdvNnBHa28zZWJ6MzBkNVpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzGidrsG Pt2DKCqe9A4qSbkC14yNRWZHqvgnbdSN+0SgpGx/Ssoq5Pv4XyAAEal7Q8qygIJj axTnAGNgcbGniXTH5dt+1qn7cG3y3m0feHc3zYLL/nJBokK9H3WeFTt4WbIxHW7h 0PrCemNWdF7yp+iv3Xm2igRL62tg4XDCWAMngDps16SXs1TeNzs+evTRl9huLNFJ zgABehpjWTwsxi4nnSQGZZQc+PvrxiC9NSGBB/oknVuqN3NIwNcHhdypajqpkdQ6 je/D4q7Kxln1PI0jXC7xHVPkgh9gLAMUvVhOI5yS3qimWlToim2bMI5i/cmOiqtg jKRrvGH7rMZAig== -----END CERTIFICATE-----Generated at Sun Dec 7 05:55:26 2025 by rpki-client