This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft File: yyBgbecwRW7dczXMiCy99DlvNGA.mft (raw, json) Hash identifier: 107pKDba5EKoz7ZNA5F5e4Q+ggvjAjyijSyJx6E5seY= Subject key identifier: C6:A3:63:E8:9E:3B:8D:F3:18:BF:F2:01:06:83:50:8D:88:E3:C6:5B Authority key identifier: CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60 Certificate issuer: /CN=cb20606de730456edd7335cc882cbdf4396f3460 Certificate serial: 019AF19BA1BAE0839BDCC6837BEDA5709EDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 03:01:39 +0000 Manifest this update: Sat 06 Dec 2025 03:01:39 +0000 Manifest next update: Sun 07 Dec 2025 03:01:39 +0000 Files and hashes: 1: 1-g2qGyIDLotxJr6jyvuCwE9SDoo.roa (hash: ox4h4LnoAr4/PMYjKkzxk/lX+kgpfI0xggGwFC9kUEg=) 2: BzvUzHnovBo7nbKCDh0scDdCP1E.roa (hash: XCMbu5qQUTLpP7fneXdNrRlDCpPbQNcvgmAEextNWVg=) 3: rHfF7qdYMYkIEjqJPBDOaXebEf0.roa (hash: P0aBQMtyJt0CjcoQ0RWfWtjHju57iTgw6JSMTWTBUj0=) 4: yyBgbecwRW7dczXMiCy99DlvNGA.crl (hash: ZjyNSHS2vufRyDpg2zisdIb1ikYaiT9UjfWHgt1ftp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.crl rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:a1:ba:e0:83:9b:dc:c6:83:7b:ed:a5:70:9e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb20606de730456edd7335cc882cbdf4396f3460 Validity Not Before: Dec 6 03:01:39 2025 GMT Not After : Dec 7 03:01:39 2025 GMT Subject: CN=c6a363e89e3b8df318bff2010683508d88e3c65b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:99:c9:9b:18:57:65:6e:20:ef:57:af:49:de: a4:cb:3f:ee:06:a5:6b:9f:06:41:39:bc:d7:28:19: fe:70:43:13:ba:dd:85:6b:93:26:1c:db:84:48:49: 3a:d0:6b:e8:2b:23:40:c2:fd:6d:fd:c9:79:09:63: 66:e3:9d:38:6a:00:98:5b:f7:6b:4a:6f:69:77:8b: 1e:c6:e9:c1:a9:16:d6:9a:0e:0e:0f:81:c9:6b:94: 1f:70:e8:9c:7a:e3:c1:27:02:f7:5c:4a:89:70:48: 31:62:22:6c:17:dd:b4:b8:79:cd:d3:42:67:9e:dd: ab:8c:82:67:9e:84:bd:cd:16:ca:ce:68:95:c5:86: a3:a6:5c:ea:e4:44:da:a3:95:62:58:ae:3c:5c:ec: 87:43:e3:0f:f9:4d:62:07:e9:e3:9d:78:d4:2b:25: d3:c2:21:98:e2:cf:79:99:9d:60:be:1d:50:5f:02: b5:d9:12:c2:f4:4d:54:a4:16:ab:7d:3c:7e:8d:5e: f1:27:72:f3:5e:8e:63:31:0a:27:d1:8e:b9:de:16: 6b:02:e0:f0:c1:10:83:d9:63:55:f3:c0:5f:44:bc: c1:3d:7b:1e:95:9e:85:b0:0b:99:a2:29:2e:bb:b8: 61:10:7d:37:fa:f2:46:d8:ff:05:63:46:8e:4f:91: 14:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A3:63:E8:9E:3B:8D:F3:18:BF:F2:01:06:83:50:8D:88:E3:C6:5B X509v3 Authority Key Identifier: keyid:CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:32:8f:29:c6:63:e5:e0:da:4d:82:58:c6:a3:c2:89:02:bc: 5c:85:c6:ba:e0:56:42:3b:15:f9:26:25:b6:61:5c:82:ac:d7: 8f:04:02:ed:95:fd:d4:98:e2:88:43:4e:9d:15:d7:a8:d4:fd: 2b:9f:ab:e4:05:eb:a9:5b:46:a3:1a:b8:13:33:18:ee:c3:85: 62:22:60:15:fa:ee:cc:64:ad:a1:18:f8:31:70:86:1b:cb:a4: 61:7e:8f:97:01:b1:8d:73:b6:29:48:5d:a4:8d:f7:7e:47:6b: 65:22:40:32:f2:4f:d8:b5:47:f7:c2:af:33:e7:09:04:aa:04: 2d:33:06:6f:fa:d6:fc:64:0d:af:48:16:28:93:ee:c0:e9:dc: 15:70:16:4b:75:19:a8:24:de:94:1d:10:3f:ba:25:97:90:af: 78:fe:ed:9e:fc:53:f9:60:9c:24:0e:bd:c9:26:41:ac:4a:0a: a0:b8:21:6a:f7:58:08:4c:72:f1:13:5a:74:5d:4f:96:53:a8: 8c:5e:90:93:9d:c7:a7:34:e8:df:5d:e4:8d:e4:d1:0c:f9:b6: 76:9f:aa:cf:83:c6:f8:df:03:78:89:41:6e:37:d8:c0:cf:c6: 65:7f:4f:9e:47:1e:92:d6:c5:74:11:3b:ca:43:09:79:49:9b: 49:e0:04:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6G64IOb3MaDe+2lcJ7bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMjA2MDZkZTczMDQ1NmVkZDczMzVjYzg4MmNiZGY0Mzk2 ZjM0NjAwHhcNMjUxMjA2MDMwMTM5WhcNMjUxMjA3MDMwMTM5WjAzMTEwLwYDVQQD EyhjNmEzNjNlODllM2I4ZGYzMThiZmYyMDEwNjgzNTA4ZDg4ZTNjNjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJnJmxhXZW4g71evSd6kyz/uBqVr nwZBObzXKBn+cEMTut2Fa5MmHNuESEk60GvoKyNAwv1t/cl5CWNm4504agCYW/dr Sm9pd4sexunBqRbWmg4OD4HJa5QfcOiceuPBJwL3XEqJcEgxYiJsF920uHnN00Jn nt2rjIJnnoS9zRbKzmiVxYajplzq5ETao5ViWK48XOyHQ+MP+U1iB+njnXjUKyXT wiGY4s95mZ1gvh1QXwK12RLC9E1UpBarfTx+jV7xJ3LzXo5jMQon0Y653hZrAuDw wRCD2WNV88BfRLzBPXselZ6FsAuZoikuu7hhEH03+vJG2P8FY0aOT5EUNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMajY+ieO43zGL/yAQaDUI2I48ZbMB8GA1UdIwQY MBaAFMsgYG3nMEVu3XM1zIgsvfQ5bzRgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXlCZ2JlY3dSVzdkY3pYTWlDeTk5RGx2TkdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iZjdhMjgtYmYxZS00ODM1LWJlZWQt YjNkODZhYTQzYmM1LzEveXlCZ2JlY3dSVzdkY3pYTWlDeTk5RGx2TkdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9iZjdhMjgtYmYxZS00ODM1LWJlZWQtYjNkODZhYTQzYmM1 LzEveXlCZ2JlY3dSVzdkY3pYTWlDeTk5RGx2TkdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDKPKcZj 5eDaTYJYxqPCiQK8XIXGuuBWQjsV+SYltmFcgqzXjwQC7ZX91JjiiENOnRXXqNT9 K5+r5AXrqVtGoxq4EzMY7sOFYiJgFfruzGStoRj4MXCGG8ukYX6PlwGxjXO2KUhd pI33fkdrZSJAMvJP2LVH98KvM+cJBKoELTMGb/rW/GQNr0gWKJPuwOncFXAWS3UZ qCTelB0QP7oll5CveP7tnvxT+WCcJA69ySZBrEoKoLghavdYCExy8RNadF1PllOo jF6Qk53HpzTo313kjeTRDPm2dp+qz4PG+N8DeIlBbjfYwM/GZX9PnkcektbFdBE7 ykMJeUmbSeAE5w== -----END CERTIFICATE-----Generated at Sat Dec 6 13:00:41 2025 by rpki-client