This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft File: yzNdxv6zhfaiM0QFahPCxZUCjpE.mft (raw, json) Hash identifier: rx774k/tGIjrTLQdLv7/MVOUXsOKtYlcJr56ynBd+m8= Subject key identifier: B1:CB:40:DE:D0:BD:C9:22:73:8B:49:F3:49:EE:41:14:51:22:3E:42 Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91 Certificate issuer: /CN=cb335dc6feb385f6a23344056a13c2c595028e91 Certificate serial: 019AF19B609CC5BB16F52026C3D2FB19E0A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 03:01:23 +0000 Manifest this update: Sat 06 Dec 2025 03:01:23 +0000 Manifest next update: Sun 07 Dec 2025 03:01:23 +0000 Files and hashes: 1: 174WdkpYr9777ZFQazXJ-iMRM-8.roa (hash: /zP6InCFbWaOP8FrHR5Yt4Nt/uR42z5t9/lR4P3NjaA=) 2: 4tF4-i9U2calaQJH5W9DdonR7g8.roa (hash: c6hF2fcYIr6EH2qbgW+meE0n3KbUVbdo/KfH+zDiN2k=) 3: k5xMorPADX6pjlz13eIpCR1YD6Y.roa (hash: zYtUaU0ku4oMSnzZFqoPkHIdrXIDxibBJ6DcraKtexc=) 4: yzNdxv6zhfaiM0QFahPCxZUCjpE.crl (hash: NM6ljU4i3CKH1POH44po75Vn2x/AilcjMOORGUEdQ1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:60:9c:c5:bb:16:f5:20:26:c3:d2:fb:19:e0:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91 Validity Not Before: Dec 6 03:01:23 2025 GMT Not After : Dec 7 03:01:23 2025 GMT Subject: CN=b1cb40ded0bdc922738b49f349ee411451223e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9f:f4:bb:e1:ea:bd:ef:4f:4e:96:8c:87:ad: 58:c5:f4:1a:0d:28:49:42:ff:5b:ce:10:99:1c:6d: 20:50:d8:5e:3a:46:72:00:f5:d1:72:36:db:15:4e: ba:53:a2:ec:5a:70:62:c2:0b:f0:7d:79:9e:e7:a0: 83:47:07:b6:51:af:2b:82:70:0b:4b:96:66:c5:02: d5:c3:20:56:64:6d:07:aa:b2:72:7c:d2:7a:2c:79: 0d:cc:36:fb:35:87:3b:a1:4e:a6:a3:5e:24:8a:c9: d6:40:de:94:5c:0e:60:30:5c:5c:65:12:10:79:4a: c0:2f:37:2c:5c:9e:4c:87:6c:33:b3:80:6e:a9:72: 33:4e:f1:ae:79:d9:2b:7b:12:25:d7:84:4d:a4:e0: 2d:6b:a4:e1:73:a9:79:dc:cb:cd:1a:4d:cc:bb:be: 9d:16:2f:f8:eb:9d:9c:5a:1c:47:72:d2:7a:80:79: 61:54:ce:6a:ec:b5:2e:a1:8d:40:c4:fb:22:41:db: 53:f8:ce:02:d5:7d:ea:e9:34:ad:d4:c5:14:99:a2: 17:5f:74:03:41:6b:4a:17:61:22:a7:22:bd:55:93: 4c:4e:c0:f8:2a:0e:d6:13:54:7a:0c:e0:e8:6d:ad: f2:b3:19:c3:1d:65:14:d8:32:9a:dc:1b:20:3a:b3: 49:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CB:40:DE:D0:BD:C9:22:73:8B:49:F3:49:EE:41:14:51:22:3E:42 X509v3 Authority Key Identifier: keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:d7:1a:08:27:f0:dd:17:9e:81:f5:a4:dd:95:0d:88:f1:d9: 42:17:d8:ab:dd:6a:4f:c3:c1:a6:29:50:2c:18:c3:68:c9:d8: 15:e8:48:81:0b:6d:7f:a3:e4:ba:56:4d:7c:a8:7f:69:1a:86: 4f:ef:1b:80:35:e7:d0:80:86:17:85:0b:fc:1c:01:90:1f:ca: 51:c2:f9:74:2a:c3:6f:08:78:0b:26:49:2d:56:54:55:8a:dd: e8:27:ff:41:55:5d:24:d5:68:a7:51:9d:4e:b9:e0:7c:95:98: fd:c7:fa:e4:54:42:ed:b3:64:4b:3c:25:d9:69:1d:22:fa:7a: 8c:58:ad:7e:87:5a:00:8f:f7:63:c9:1c:0d:d7:f1:00:52:c9: 42:c9:41:b2:02:7e:a0:e2:8b:13:eb:3c:d3:ff:6c:7e:dd:2d: d0:11:e3:93:de:79:56:51:e3:a7:2b:03:11:86:bd:4e:06:3d: 82:19:70:f9:d1:4d:bd:c6:3c:0d:e9:c4:77:46:30:ff:0e:20: fa:bc:60:0b:48:47:2d:dd:84:2a:11:73:e3:c1:91:ee:dd:a2: dc:a1:09:1d:17:3a:12:ce:9d:e4:57:5b:9d:20:38:7b:b2:88: 19:19:5e:cb:44:c0:30:81:27:99:24:60:51:00:60:17:f9:2a: 78:00:d3:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2CcxbsW9SAmw9L7GeCiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMzM1ZGM2ZmViMzg1ZjZhMjMzNDQwNTZhMTNjMmM1OTUw MjhlOTEwHhcNMjUxMjA2MDMwMTIzWhcNMjUxMjA3MDMwMTIzWjAzMTEwLwYDVQQD EyhiMWNiNDBkZWQwYmRjOTIyNzM4YjQ5ZjM0OWVlNDExNDUxMjIzZTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Z/0u+Hqve9PTpaMh61YxfQaDShJ Qv9bzhCZHG0gUNheOkZyAPXRcjbbFU66U6LsWnBiwgvwfXme56CDRwe2Ua8rgnAL S5ZmxQLVwyBWZG0HqrJyfNJ6LHkNzDb7NYc7oU6mo14kisnWQN6UXA5gMFxcZRIQ eUrALzcsXJ5Mh2wzs4BuqXIzTvGuedkrexIl14RNpOAta6Thc6l53MvNGk3Mu76d Fi/4652cWhxHctJ6gHlhVM5q7LUuoY1AxPsiQdtT+M4C1X3q6TSt1MUUmaIXX3QD QWtKF2EipyK9VZNMTsD4Kg7WE1R6DODoba3ysxnDHWUU2DKa3BsgOrNJMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHLQN7Qvckic4tJ80nuQRRRIj5CMB8GA1UdIwQY MBaAFMszXcb+s4X2ojNEBWoTwsWVAo6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mYTM0MmUtYjNiYy00MzczLThjNmIt ODg1NGM4MmI1NDVkLzEveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9mYTM0MmUtYjNiYy00MzczLThjNmItODg1NGM4MmI1NDVk LzEveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9caCCfw 3ReegfWk3ZUNiPHZQhfYq91qT8PBpilQLBjDaMnYFehIgQttf6PkulZNfKh/aRqG T+8bgDXn0ICGF4UL/BwBkB/KUcL5dCrDbwh4CyZJLVZUVYrd6Cf/QVVdJNVop1Gd TrngfJWY/cf65FRC7bNkSzwl2WkdIvp6jFitfodaAI/3Y8kcDdfxAFLJQslBsgJ+ oOKLE+s80/9sft0t0BHjk955VlHjpysDEYa9TgY9ghlw+dFNvcY8DenEd0Yw/w4g +rxgC0hHLd2EKhFz48GR7t2i3KEJHRc6Es6d5FdbnSA4e7KIGRley0TAMIEnmSRg UQBgF/kqeADTVg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:31:12 2025 by rpki-client