This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft File: yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft (raw, json) Hash identifier: gFryo6qZGlbDb7wX5ObAgFWJLwX/St11PdG7Iwho99M= Subject key identifier: 06:14:BE:BF:C1:3A:D1:9B:1D:CB:12:37:D4:0A:CD:77:E3:E8:37:3D Authority key identifier: C8:F2:34:5A:3F:EA:4B:3D:BF:25:CB:12:0F:1B:78:42:53:62:68:CD Certificate issuer: /CN=c8f2345a3fea4b3dbf25cb120f1b7842536268cd Certificate serial: 019AF24019BC92EB1A3514C81DD026D0B989 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft Manifest number: 0305 Signing time: Sat 06 Dec 2025 06:01:18 +0000 Manifest this update: Sat 06 Dec 2025 06:01:18 +0000 Manifest next update: Sun 07 Dec 2025 06:01:18 +0000 Files and hashes: 1: bh_jxWLWM4ERu-tO2W_vtiAaR34.roa (hash: q67OJI4bSTnxGyWpXxOC2jeYAfoLHFvQvpzctzRe0VE=) 2: sibHr2FGPjo5CfPD_x82IFZOyjI.roa (hash: 5o3OHC/8KmGr6JnUosFKoE0TLY9c878SbcJe1V+5e/c=) 3: tthzNj1Ph4KhPBGu_Ij-vA_jDKI.roa (hash: dYA2gqzlNnRY/+Z83i04orn08vaFeOTWTefS4wKcEJw=) 4: yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl (hash: T43PlHIeqk0ZkJ4CTM1/AwvCRcbJNybmepdVO+NCjFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:19:bc:92:eb:1a:35:14:c8:1d:d0:26:d0:b9:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8f2345a3fea4b3dbf25cb120f1b7842536268cd Validity Not Before: Dec 6 06:01:18 2025 GMT Not After : Dec 7 06:01:18 2025 GMT Subject: CN=0614bebfc13ad19b1dcb1237d40acd77e3e8373d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:34:b6:14:2c:aa:f0:13:02:8d:4d:d3:62:f7: 46:3b:e3:f3:e2:3c:60:bf:48:db:13:3c:7f:d1:d2: b2:1b:a9:7b:5d:0a:59:cb:03:7e:0c:52:a0:6b:90: d8:d6:a1:b5:cc:9e:6b:97:cb:e4:dc:35:53:2a:25: d7:be:17:8c:e9:d4:ce:47:9f:0f:a0:be:8f:15:04: 29:ab:de:a7:5a:b2:be:3c:55:9d:d7:6f:0b:79:5e: 10:36:cd:91:6f:d9:53:bc:ac:ec:b9:94:62:cb:5d: 09:3e:6d:84:1f:fd:64:23:13:4b:fa:21:fa:e3:d5: 86:4c:6d:34:69:45:fa:b5:32:2d:cb:7a:97:42:65: 5f:a4:a3:17:eb:41:93:29:be:5b:be:92:c9:a7:e1: 41:43:41:e0:42:09:d1:41:4b:5b:94:e2:53:ba:7a: 61:a7:b6:d0:a6:df:de:6f:9d:ba:98:32:66:ba:56: 23:6d:2a:64:39:70:2e:84:e9:2b:de:bb:a0:81:2d: 52:03:ef:c4:0a:2a:6f:65:f2:68:d5:52:05:2c:1a: ab:f5:51:09:12:87:8a:54:6a:b4:0d:64:15:fb:2b: 4d:22:39:e5:88:5a:99:5e:24:46:d2:e1:2c:03:cb: 11:03:62:c0:21:30:75:5f:09:3f:3d:21:69:9a:11: 12:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:14:BE:BF:C1:3A:D1:9B:1D:CB:12:37:D4:0A:CD:77:E3:E8:37:3D X509v3 Authority Key Identifier: keyid:C8:F2:34:5A:3F:EA:4B:3D:BF:25:CB:12:0F:1B:78:42:53:62:68:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:44:c1:9d:a3:20:49:9f:70:81:a5:c7:82:0f:a1:d3:a4:28: f7:a7:00:17:b9:cb:b8:f7:d5:94:91:1f:71:1a:82:8b:b8:43: d1:a5:75:be:9f:2a:28:2a:74:b6:ea:47:1b:2c:1f:99:59:2b: 8b:e3:88:ea:c7:72:df:a9:3f:14:2e:50:dc:bf:6f:f1:d5:7b: ca:8d:55:9d:82:4f:d2:91:92:46:36:42:5e:52:69:34:9d:40: d2:30:7e:69:d4:b4:8e:21:d7:a5:58:38:d6:82:4b:55:21:99: ce:17:89:f1:b2:f6:97:7f:01:f9:2e:8b:73:22:92:ca:f6:d4: 81:0e:32:de:d6:cd:e3:e3:09:f2:6b:be:ae:ba:92:e0:2e:bc: 86:96:1c:12:45:1e:9e:e1:0b:88:4d:65:c5:33:30:52:66:cf: 34:1f:a1:aa:f4:92:cd:a4:2f:08:d4:a0:41:cb:f2:62:9c:a3: 19:56:2c:ae:20:07:ba:69:13:58:d9:8f:8d:c8:a3:41:c4:72: 3f:1d:8b:df:4f:07:e9:40:33:15:da:e4:71:57:0b:03:53:19: 88:1a:17:a9:09:34:2d:0b:7d:12:b2:31:bf:f1:15:65:ea:1f: 3e:b9:ab:48:e3:8c:d4:4b:36:c4:ac:ec:2c:07:1e:31:58:eb: ed:85:fd:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBm8kusaNRTIHdAm0LmJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZjIzNDVhM2ZlYTRiM2RiZjI1Y2IxMjBmMWI3ODQyNTM2 MjY4Y2QwHhcNMjUxMjA2MDYwMTE4WhcNMjUxMjA3MDYwMTE4WjAzMTEwLwYDVQQD EygwNjE0YmViZmMxM2FkMTliMWRjYjEyMzdkNDBhY2Q3N2UzZTgzNzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDS2FCyq8BMCjU3TYvdGO+Pz4jxg v0jbEzx/0dKyG6l7XQpZywN+DFKga5DY1qG1zJ5rl8vk3DVTKiXXvheM6dTOR58P oL6PFQQpq96nWrK+PFWd128LeV4QNs2Rb9lTvKzsuZRiy10JPm2EH/1kIxNL+iH6 49WGTG00aUX6tTIty3qXQmVfpKMX60GTKb5bvpLJp+FBQ0HgQgnRQUtblOJTunph p7bQpt/eb526mDJmulYjbSpkOXAuhOkr3ruggS1SA+/ECipvZfJo1VIFLBqr9VEJ EoeKVGq0DWQV+ytNIjnliFqZXiRG0uEsA8sRA2LAITB1Xwk/PSFpmhEShQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYUvr/BOtGbHcsSN9QKzXfj6Dc9MB8GA1UdIwQY MBaAFMjyNFo/6ks9vyXLEg8beEJTYmjNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVBJMFdqX3FTejJfSmNzU0R4dDRRbE5pYU0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC80OGMyOGEtMDg0OC00YjBiLTkxNGEt MGVhMWUxMjM0MTdhLzEveVBJMFdqX3FTejJfSmNzU0R4dDRRbE5pYU0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC80OGMyOGEtMDg0OC00YjBiLTkxNGEtMGVhMWUxMjM0MTdh LzEveVBJMFdqX3FTejJfSmNzU0R4dDRRbE5pYU0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuUTBnaMg SZ9wgaXHgg+h06Qo96cAF7nLuPfVlJEfcRqCi7hD0aV1vp8qKCp0tupHGywfmVkr i+OI6sdy36k/FC5Q3L9v8dV7yo1VnYJP0pGSRjZCXlJpNJ1A0jB+adS0jiHXpVg4 1oJLVSGZzheJ8bL2l38B+S6LcyKSyvbUgQ4y3tbN4+MJ8mu+rrqS4C68hpYcEkUe nuELiE1lxTMwUmbPNB+hqvSSzaQvCNSgQcvyYpyjGVYsriAHumkTWNmPjcijQcRy Px2L308H6UAzFdrkcVcLA1MZiBoXqQk0LQt9ErIxv/EVZeofPrmrSOOM1Es2xKzs LAceMVjr7YX9kg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:16 2025 by rpki-client