This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft File: YmqokTLSpoTY0qGj9-QPIjRjbzg.mft (raw, json) Hash identifier: 0cExY77VU5avUxAl9FnPihkkQ40KXu2SNemxiRQQgXw= Subject key identifier: 31:73:4F:6D:41:45:1A:7D:4C:9E:C2:F2:5A:57:73:5B:8E:48:C1:53 Authority key identifier: 62:6A:A8:91:32:D2:A6:84:D8:D2:A1:A3:F7:E4:0F:22:34:63:6F:38 Certificate issuer: /CN=626aa89132d2a684d8d2a1a3f7e40f2234636f38 Certificate serial: 019AF19B1A623EB43FFC74478C0CDF8B4073 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft Manifest number: 153D Signing time: Sat 06 Dec 2025 03:01:05 +0000 Manifest this update: Sat 06 Dec 2025 03:01:05 +0000 Manifest next update: Sun 07 Dec 2025 03:01:05 +0000 Files and hashes: 1: YmqokTLSpoTY0qGj9-QPIjRjbzg.crl (hash: n1l3hsXO/XHpb89lQ0a/+ab4jdd2PtN5ZeD8oUhbwfM=) 2: xj0Zl5jyKNtmExsm8HUfZTBh1W4.roa (hash: qJ7mmoo0SJOyk9TkckQkyKsoiQJfN7oKl35vQICMSm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.crl rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:1a:62:3e:b4:3f:fc:74:47:8c:0c:df:8b:40:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=626aa89132d2a684d8d2a1a3f7e40f2234636f38 Validity Not Before: Dec 6 03:01:05 2025 GMT Not After : Dec 7 03:01:05 2025 GMT Subject: CN=31734f6d41451a7d4c9ec2f25a57735b8e48c153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c3:c0:bb:d5:c2:28:92:83:58:58:b4:0e:3f: 53:66:90:3e:6e:54:25:1c:93:dc:a4:7f:63:8d:8b: b2:df:d7:3d:36:1c:d1:4c:2d:58:78:0d:67:55:7b: 54:8e:70:6c:d5:44:4c:b8:12:a6:e5:d5:82:6c:e6: f4:98:38:36:f0:b8:1f:34:62:b4:41:c1:93:aa:c8: 75:80:da:56:af:c7:28:ff:5e:66:51:0c:27:10:33: 5a:5d:9c:74:72:a1:9f:08:ca:0c:37:45:0a:9c:3b: 1e:f6:05:6d:45:5b:37:db:1e:cf:f2:61:47:46:1d: 3a:3e:41:65:4d:0b:73:6d:fa:6a:3a:06:c5:da:f8: 50:81:35:5e:a7:d9:70:5e:b4:fc:8d:90:4d:b3:bb: 99:0f:ea:73:7f:1b:8e:d3:ce:8c:f9:5f:56:7d:d1: 20:65:05:82:37:61:2d:09:4f:d2:36:73:3b:3f:f9: f5:d0:c5:ca:ff:f2:96:9c:75:b6:7b:0d:8f:60:9a: 54:c8:d5:75:56:ad:55:90:b5:53:fc:5a:15:14:08: f9:9b:06:c2:cc:2f:f8:06:8a:2c:44:e0:45:d4:59: aa:3a:af:c0:0f:8e:8d:4d:44:71:dd:38:8e:d5:d6: 01:b8:fd:32:00:a6:9f:9b:73:13:79:64:bf:80:a4: 1d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:73:4F:6D:41:45:1A:7D:4C:9E:C2:F2:5A:57:73:5B:8E:48:C1:53 X509v3 Authority Key Identifier: keyid:62:6A:A8:91:32:D2:A6:84:D8:D2:A1:A3:F7:E4:0F:22:34:63:6F:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:08:ca:26:ea:cc:dd:a8:80:21:8e:9f:85:e7:0c:08:99:47: a0:2a:4f:70:0d:9c:b3:2a:37:59:2c:78:86:7c:3c:de:2d:53: 66:15:d5:8c:80:7b:bb:fc:2e:f2:19:78:f1:b9:f0:de:e4:74: 9e:b3:b7:8a:8a:32:5b:b2:cb:b5:af:59:d8:34:d2:20:7f:4c: fe:e7:ca:31:fc:80:7b:66:11:f2:65:df:f5:8a:8a:e8:9e:25: 96:81:e6:f2:ec:a0:fe:d7:97:81:70:36:ce:64:0a:16:47:a1: 0c:4d:2c:cf:84:59:70:61:b1:00:52:76:5b:9d:7b:03:38:10: af:89:35:a5:21:c7:12:07:cf:80:bf:b4:48:62:1e:50:d3:33: 4c:d9:f0:96:0f:ea:76:4d:cf:fb:13:9c:4f:ad:bb:b0:9e:44: 6f:e7:a9:72:c4:79:15:c9:62:90:8b:ef:0b:71:c1:bf:ad:99: dc:0e:a5:6e:4c:22:a2:3b:03:df:bc:66:c9:65:ae:64:a1:89: 4c:d6:9b:c8:7a:9e:23:9d:cb:69:5a:0b:70:24:01:6e:8b:4d: 57:97:3a:66:91:1e:36:83:e3:91:0c:12:85:35:ce:af:cf:dd: 15:70:4b:ae:aa:0a:2d:45:9b:48:65:65:be:19:1d:1d:ea:e4: 4e:ca:b5:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxpiPrQ//HRHjAzfi0BzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNmFhODkxMzJkMmE2ODRkOGQyYTFhM2Y3ZTQwZjIyMzQ2 MzZmMzgwHhcNMjUxMjA2MDMwMTA1WhcNMjUxMjA3MDMwMTA1WjAzMTEwLwYDVQQD EygzMTczNGY2ZDQxNDUxYTdkNGM5ZWMyZjI1YTU3NzM1YjhlNDhjMTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsPAu9XCKJKDWFi0Dj9TZpA+blQl HJPcpH9jjYuy39c9NhzRTC1YeA1nVXtUjnBs1URMuBKm5dWCbOb0mDg28LgfNGK0 QcGTqsh1gNpWr8co/15mUQwnEDNaXZx0cqGfCMoMN0UKnDse9gVtRVs32x7P8mFH Rh06PkFlTQtzbfpqOgbF2vhQgTVep9lwXrT8jZBNs7uZD+pzfxuO086M+V9WfdEg ZQWCN2EtCU/SNnM7P/n10MXK//KWnHW2ew2PYJpUyNV1Vq1VkLVT/FoVFAj5mwbC zC/4BoosROBF1FmqOq/AD46NTURx3TiO1dYBuP0yAKafm3MTeWS/gKQdUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDFzT21BRRp9TJ7C8lpXc1uOSMFTMB8GA1UdIwQY MBaAFGJqqJEy0qaE2NKho/fkDyI0Y284MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1xb2tUTFNwb1RZMHFHajktUVBJalJqYnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80Y2MwYTgtZWM0NC00OWRkLWEzZTIt MjkyNmZjNWY2MWI3LzEvWW1xb2tUTFNwb1RZMHFHajktUVBJalJqYnpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC80Y2MwYTgtZWM0NC00OWRkLWEzZTItMjkyNmZjNWY2MWI3 LzEvWW1xb2tUTFNwb1RZMHFHajktUVBJalJqYnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgjKJurM 3aiAIY6fhecMCJlHoCpPcA2csyo3WSx4hnw83i1TZhXVjIB7u/wu8hl48bnw3uR0 nrO3iooyW7LLta9Z2DTSIH9M/ufKMfyAe2YR8mXf9YqK6J4lloHm8uyg/teXgXA2 zmQKFkehDE0sz4RZcGGxAFJ2W517AzgQr4k1pSHHEgfPgL+0SGIeUNMzTNnwlg/q dk3P+xOcT627sJ5Eb+epcsR5FclikIvvC3HBv62Z3A6lbkwiojsD37xmyWWuZKGJ TNabyHqeI53LaVoLcCQBbotNV5c6ZpEeNoPjkQwShTXOr8/dFXBLrqoKLUWbSGVl vhkdHerkTsq1zQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:03:08 2025 by rpki-client