This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft File: yXZVaQIejbR5y9ZKWgsrr74qjqw.mft (raw, json) Hash identifier: due7wXP4uQlgB1wsBbC9+VE2k+Nz45r7n1ijMZGkByY= Subject key identifier: 0E:25:E5:E0:FF:7A:6E:D1:6B:1F:D1:55:2B:EB:4A:B4:67:9A:C0:F1 Authority key identifier: C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC Certificate issuer: /CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac Certificate serial: 019AF9F93E92DD3A761EE4DC9E5D0A562C3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft Manifest number: 07E1 Signing time: Sun 07 Dec 2025 18:00:52 +0000 Manifest this update: Sun 07 Dec 2025 18:00:52 +0000 Manifest next update: Mon 08 Dec 2025 18:00:52 +0000 Files and hashes: 1: yCnipoUsu7OGpYLMyUk7C5Mf4Y0.roa (hash: /0wnIB5zXFdR7lKXtpV7vbYLWJWmyCiIhUGInpg7xqg=) 2: yXZVaQIejbR5y9ZKWgsrr74qjqw.crl (hash: xS48iKJT9QjE2Peg8PMc2BfY/o2BGMQAgTtCrV5YHGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:f9:3e:92:dd:3a:76:1e:e4:dc:9e:5d:0a:56:2c:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac Validity Not Before: Dec 7 18:00:52 2025 GMT Not After : Dec 8 18:00:52 2025 GMT Subject: CN=0e25e5e0ff7a6ed16b1fd1552beb4ab4679ac0f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:39:c2:3e:e0:a2:82:7e:00:cb:c0:b3:c9:f8: 63:cf:9c:b1:ec:72:b9:73:46:ff:cb:26:61:be:a1: cf:ac:9e:7a:2d:00:9d:a5:c5:d0:2e:b3:ff:26:db: d8:0e:a6:99:9a:27:c7:f2:d5:83:6a:65:9c:09:f7: af:2f:2b:c6:4b:c0:1e:56:38:ff:22:78:30:f8:fa: 55:e4:b7:2b:5f:0e:44:6c:e6:21:ac:74:92:c3:1c: 1d:32:ab:49:a7:d4:63:89:20:2f:53:53:94:a9:87: 7f:53:c1:6b:30:fc:7c:e3:0a:d1:cb:7f:75:12:de: eb:12:1e:a7:51:c5:72:46:3f:4a:b3:93:52:42:d5: 05:1d:ce:ce:44:e8:d1:cc:6c:69:f2:1d:63:01:21: 7e:25:89:d5:da:d3:0a:36:69:3f:df:2a:f4:db:94: 6c:c0:35:28:47:3d:b3:59:2f:ad:78:cc:47:81:6a: e1:40:2d:0d:db:16:79:54:99:75:0e:75:7b:25:a0: ff:b3:cc:c5:28:4e:0c:c6:12:3f:88:ea:5d:93:1d: 75:b4:94:25:2a:14:17:5f:f9:7e:88:1b:c2:47:57: 5c:4d:4d:f1:13:49:07:1d:bc:ad:1e:59:5c:92:d1: 40:f7:76:3b:39:06:fb:e1:d7:c9:aa:53:ae:e4:28: 13:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:25:E5:E0:FF:7A:6E:D1:6B:1F:D1:55:2B:EB:4A:B4:67:9A:C0:F1 X509v3 Authority Key Identifier: keyid:C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:af:f0:7e:56:ad:88:de:f9:11:67:56:1b:65:e6:c1:3c:6f: cb:a3:99:2e:de:ac:66:c1:b5:39:37:b9:4b:d9:e1:5a:7c:68: 7b:f1:59:84:09:82:c1:57:cc:62:52:94:f6:97:73:f7:56:25: 03:97:18:9c:23:7e:98:78:e7:65:33:c3:a5:50:a1:55:86:c5: 22:d2:4a:fa:ee:8f:9c:8b:35:37:32:0a:2e:0c:4e:23:07:05: c8:6c:59:59:3a:02:d2:87:af:03:26:c8:24:c4:d0:20:3f:98: 76:74:74:00:de:24:c3:67:57:91:61:ae:e2:5f:7f:7a:6b:ad: a9:12:23:c8:9a:62:f7:52:24:eb:2b:42:ec:89:de:04:83:d1: 8d:15:cf:a9:84:94:27:60:22:a2:55:62:6f:cc:ef:b0:b0:a9: ea:fe:2a:29:bf:f9:51:ee:a0:a1:33:02:b1:ec:f4:63:71:6a: 24:9a:31:f8:12:4a:5c:a5:20:ff:b0:b9:99:54:d5:f5:c3:80: 76:d9:98:e2:16:11:e1:d0:ca:b4:83:30:df:74:b1:60:7b:ac: 07:5f:a2:95:2a:ce:06:e0:1d:7a:88:ad:8d:20:2b:03:cf:cb: 78:ca:55:94:6d:fe:ba:bc:9e:75:eb:2f:eb:d1:a0:41:2a:de: 5f:71:99:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5+T6S3Tp2HuTcnl0KViw/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5NzY1NTY5MDIxZThkYjQ3OWNiZDY0YTVhMGIyYmFmYmUy YThlYWMwHhcNMjUxMjA3MTgwMDUyWhcNMjUxMjA4MTgwMDUyWjAzMTEwLwYDVQQD EygwZTI1ZTVlMGZmN2E2ZWQxNmIxZmQxNTUyYmViNGFiNDY3OWFjMGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDnCPuCign4Ay8Czyfhjz5yx7HK5 c0b/yyZhvqHPrJ56LQCdpcXQLrP/JtvYDqaZmifH8tWDamWcCfevLyvGS8AeVjj/ Ingw+PpV5LcrXw5EbOYhrHSSwxwdMqtJp9RjiSAvU1OUqYd/U8FrMPx84wrRy391 Et7rEh6nUcVyRj9Ks5NSQtUFHc7OROjRzGxp8h1jASF+JYnV2tMKNmk/3yr025Rs wDUoRz2zWS+teMxHgWrhQC0N2xZ5VJl1DnV7JaD/s8zFKE4MxhI/iOpdkx11tJQl KhQXX/l+iBvCR1dcTU3xE0kHHbytHllcktFA93Y7OQb74dfJqlOu5CgT2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4l5eD/em7Rax/RVSvrSrRnmsDxMB8GA1UdIwQY MBaAFMl2VWkCHo20ecvWSloLK6++Ko6sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVhaVmFRSWVqYlI1eTlaS1dnc3JyNzRxanF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni84NjIzMjAtYzkzOC00NzUxLWFkMDct ZjQ4NGRhOGU2N2MzLzEveVhaVmFRSWVqYlI1eTlaS1dnc3JyNzRxanF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni84NjIzMjAtYzkzOC00NzUxLWFkMDctZjQ4NGRhOGU2N2Mz LzEveVhaVmFRSWVqYlI1eTlaS1dnc3JyNzRxanF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKa/wflat iN75EWdWG2XmwTxvy6OZLt6sZsG1OTe5S9nhWnxoe/FZhAmCwVfMYlKU9pdz91Yl A5cYnCN+mHjnZTPDpVChVYbFItJK+u6PnIs1NzIKLgxOIwcFyGxZWToC0oevAybI JMTQID+YdnR0AN4kw2dXkWGu4l9/emutqRIjyJpi91Ik6ytC7IneBIPRjRXPqYSU J2AiolVib8zvsLCp6v4qKb/5Ue6goTMCsez0Y3FqJJox+BJKXKUg/7C5mVTV9cOA dtmY4hYR4dDKtIMw33SxYHusB1+ilSrOBuAdeoitjSArA8/LeMpVlG3+uryedesv 69GgQSreX3GZCw== -----END CERTIFICATE-----Generated at Mon Dec 8 00:15:45 2025 by rpki-client