This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft File: rYY6WJMusYMjlBahz2ao_8POchU.mft (raw, json) Hash identifier: sAcD+9uFJbep23XA1llm2N0PBDcZVPlGDH1HtvuKLAo= Subject key identifier: EB:34:26:01:84:93:F6:98:47:4A:B9:5B:F0:A9:DF:A8:9B:7E:F6:92 Authority key identifier: AD:86:3A:58:93:2E:B1:83:23:94:16:A1:CF:66:A8:FF:C3:CE:72:15 Certificate issuer: /CN=ad863a58932eb183239416a1cf66a8ffc3ce7215 Certificate serial: 019AF3F795F6ECFC844D3602FB7C57130622 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft Manifest number: 0E54 Signing time: Sat 06 Dec 2025 14:01:20 +0000 Manifest this update: Sat 06 Dec 2025 14:01:20 +0000 Manifest next update: Sun 07 Dec 2025 14:01:20 +0000 Files and hashes: 1: NsCamS0MlFkmbAx5_LAOWrtBals.roa (hash: LDrv3G809jHIGwEDwg2A1Kbn0Oo37yQBk0cRSClCqYU=) 2: rYY6WJMusYMjlBahz2ao_8POchU.crl (hash: 3wNNdlSDCceqm6HFiDBz3ZxwUebzzTQIDnnIkfCp3Zg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.crl rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:95:f6:ec:fc:84:4d:36:02:fb:7c:57:13:06:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad863a58932eb183239416a1cf66a8ffc3ce7215 Validity Not Before: Dec 6 14:01:20 2025 GMT Not After : Dec 7 14:01:20 2025 GMT Subject: CN=eb3426018493f698474ab95bf0a9dfa89b7ef692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:05:58:6b:0e:16:03:f6:79:7b:58:17:c4:35: 48:55:e4:e3:c4:3d:53:f1:69:25:0a:bf:da:d6:e8: c7:34:6c:75:f5:06:73:ab:a6:7a:62:17:3d:21:a4: 36:60:16:d2:20:3f:b4:b8:b4:97:4e:41:df:c2:7b: 2d:62:b5:33:11:9c:c1:fa:6b:d0:3f:19:5b:22:14: a6:0c:16:49:04:1d:c6:60:4b:c8:c6:f7:0e:14:bf: 0c:ec:89:5a:bf:78:46:ed:17:88:30:52:28:03:af: 46:f4:9d:a7:29:44:58:9f:8c:d9:cb:2c:10:1a:f8: 70:34:96:b3:b2:3d:9f:bf:2c:10:26:0f:ab:b7:ad: 45:64:81:a4:7d:1b:14:88:ae:a8:6f:be:84:73:d3: b5:d5:2d:ed:d0:75:0d:48:31:2b:dc:c8:ae:20:b4: e6:78:04:ae:fa:b8:fc:7e:49:5e:8c:e7:1e:8b:47: bd:a3:94:fb:82:6a:06:bd:d0:09:30:d6:e8:2c:c7: aa:65:97:e2:44:af:d5:30:2b:59:55:20:c4:8b:6d: a1:4f:d6:90:b9:57:32:73:b0:b1:28:9f:06:e4:d5: 2c:c5:35:25:6e:0b:84:26:8e:e2:07:62:4b:a7:c5: fd:b9:3e:3d:a1:1e:08:83:d3:84:93:46:e3:c6:47: 46:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:34:26:01:84:93:F6:98:47:4A:B9:5B:F0:A9:DF:A8:9B:7E:F6:92 X509v3 Authority Key Identifier: keyid:AD:86:3A:58:93:2E:B1:83:23:94:16:A1:CF:66:A8:FF:C3:CE:72:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:c9:12:10:a3:f8:ed:de:1a:ea:b7:9a:e4:4a:63:66:d5:31: 32:a1:1a:6a:b6:e3:dc:e1:a5:8e:16:03:c9:26:35:70:6e:da: 28:93:71:0f:6b:c0:62:b0:c2:0d:6e:38:2b:4e:da:82:bb:98: a2:db:50:64:8b:5e:91:6c:b2:d7:d3:84:df:af:05:b1:f8:a1: 41:c7:5f:eb:2b:80:f4:f2:f3:0a:9c:4a:16:a4:ac:e1:5d:5f: 6e:da:59:17:0e:6f:5d:91:21:85:6b:62:88:d8:52:ba:56:08: f6:94:24:46:93:dc:6d:f5:ec:8b:5b:ca:12:39:87:ad:5d:f0: 4b:5c:fb:dd:23:cb:1b:49:f4:36:5f:25:d7:9a:85:ba:d2:32: 77:01:57:fc:f0:11:6d:91:8d:94:1b:13:32:65:cf:44:7a:3d: 5d:b3:2e:1c:e2:8d:e0:34:98:11:27:ea:f8:67:ac:58:33:26: 04:c4:03:d5:5a:59:95:30:ad:1f:8e:6a:87:91:93:97:01:70: a6:8d:e1:69:a1:f9:e8:ed:61:eb:ea:09:81:61:14:65:79:4c: 6d:1b:2b:c3:e3:a9:5f:68:87:33:6a:fc:43:e4:cc:91:90:e9: e0:4e:8a:4a:9a:bb:6f:c8:54:cf:7e:fd:63:0d:bb:41:7b:00: a5:6f:a9:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz95X27PyETTYC+3xXEwYiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkODYzYTU4OTMyZWIxODMyMzk0MTZhMWNmNjZhOGZmYzNj ZTcyMTUwHhcNMjUxMjA2MTQwMTIwWhcNMjUxMjA3MTQwMTIwWjAzMTEwLwYDVQQD EyhlYjM0MjYwMTg0OTNmNjk4NDc0YWI5NWJmMGE5ZGZhODliN2VmNjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQVYaw4WA/Z5e1gXxDVIVeTjxD1T 8WklCr/a1ujHNGx19QZzq6Z6Yhc9IaQ2YBbSID+0uLSXTkHfwnstYrUzEZzB+mvQ PxlbIhSmDBZJBB3GYEvIxvcOFL8M7Ilav3hG7ReIMFIoA69G9J2nKURYn4zZyywQ GvhwNJazsj2fvywQJg+rt61FZIGkfRsUiK6ob76Ec9O11S3t0HUNSDEr3MiuILTm eASu+rj8fklejOcei0e9o5T7gmoGvdAJMNboLMeqZZfiRK/VMCtZVSDEi22hT9aQ uVcyc7CxKJ8G5NUsxTUlbguEJo7iB2JLp8X9uT49oR4Ig9OEk0bjxkdGnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOs0JgGEk/aYR0q5W/Cp36ibfvaSMB8GA1UdIwQY MBaAFK2GOliTLrGDI5QWoc9mqP/DznIVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcllZNldKTXVzWU1qbEJhaHoyYW9fOFBPY2hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC82YWQ2NzUtYzQ5Yi00NzhhLWJhNjAt M2I4ZTU2MWRjMjc2LzEvcllZNldKTXVzWU1qbEJhaHoyYW9fOFBPY2hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC82YWQ2NzUtYzQ5Yi00NzhhLWJhNjAtM2I4ZTU2MWRjMjc2 LzEvcllZNldKTXVzWU1qbEJhaHoyYW9fOFBPY2hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAockSEKP4 7d4a6rea5EpjZtUxMqEaarbj3OGljhYDySY1cG7aKJNxD2vAYrDCDW44K07agruY ottQZItekWyy19OE368FsfihQcdf6yuA9PLzCpxKFqSs4V1fbtpZFw5vXZEhhWti iNhSulYI9pQkRpPcbfXsi1vKEjmHrV3wS1z73SPLG0n0Nl8l15qFutIydwFX/PAR bZGNlBsTMmXPRHo9XbMuHOKN4DSYESfq+GesWDMmBMQD1VpZlTCtH45qh5GTlwFw po3haaH56O1h6+oJgWEUZXlMbRsrw+OpX2iHM2r8Q+TMkZDp4E6KSpq7b8hUz379 Yw27QXsApW+pVw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:31:53 2025 by rpki-client