This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft File: YmFlv7I92h-YcLJBf0lkhebAinQ.mft (raw, json) Hash identifier: e4ovzzZ38FKdwur+QaVsgkQIfIw9bjwLoE/B3cTrde4= Subject key identifier: 05:3A:95:B3:1F:22:B0:DC:C7:A5:29:13:CA:A9:22:52:64:2E:02:B6 Authority key identifier: 62:61:65:BF:B2:3D:DA:1F:98:70:B2:41:7F:49:64:85:E6:C0:8A:74 Certificate issuer: /CN=626165bfb23dda1f9870b2417f496485e6c08a74 Certificate serial: 019AF19AE6E6DA0D6D9A1112FAA97F0C27C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft Manifest number: 04EF Signing time: Sat 06 Dec 2025 03:00:51 +0000 Manifest this update: Sat 06 Dec 2025 03:00:51 +0000 Manifest next update: Sun 07 Dec 2025 03:00:51 +0000 Files and hashes: 1: YmFlv7I92h-YcLJBf0lkhebAinQ.crl (hash: 6mwkfju+5iB5wJ20PGb76l/wBWruKl2RRmjeIni3JrY=) 2: sqHnWw_DTKSgc5zNQG4iPku5PBw.roa (hash: w6R1JeMOp3KdC2WjMvic0T8urUWBQwEZKMQrdXTts0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e6:e6:da:0d:6d:9a:11:12:fa:a9:7f:0c:27:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=626165bfb23dda1f9870b2417f496485e6c08a74 Validity Not Before: Dec 6 03:00:51 2025 GMT Not After : Dec 7 03:00:51 2025 GMT Subject: CN=053a95b31f22b0dcc7a52913caa92252642e02b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9c:e4:33:d9:7f:6f:da:6d:39:4b:61:44:fa: 7b:80:4c:b7:c7:8e:d8:c8:7d:26:d8:c6:8b:ad:eb: 08:02:80:c3:16:d5:31:1b:f3:40:b5:51:5d:93:51: a9:a1:09:f2:bb:97:74:d6:01:c8:3b:82:d9:2c:af: f2:70:28:eb:18:30:87:e0:b4:fe:3b:14:ea:0a:b3: 21:81:da:15:cc:2b:83:b4:49:c6:85:7d:c9:28:78: 6f:f3:45:c6:aa:59:eb:82:01:28:ec:c7:51:8e:fa: 51:c2:c5:67:f3:99:fe:32:19:46:15:b3:ac:8c:db: 59:c4:27:64:3e:bd:a6:90:4a:a9:3f:ec:8a:a2:7c: 28:6c:63:39:87:d1:43:e0:ab:2e:76:ff:c3:3f:61: 07:1a:f9:25:59:a0:bf:50:d9:11:c3:7f:00:06:d4: 5c:a9:dd:c7:e1:09:e5:c9:18:b2:68:09:07:e9:3e: 89:27:4c:38:ce:e9:b6:9a:35:d8:7e:6c:b4:49:9b: 73:8b:04:51:83:ca:99:3a:33:4c:dc:a1:2e:22:88: d5:7e:d0:5b:e4:9b:25:01:46:83:15:b3:32:a2:ae: 38:e5:22:c4:d6:e8:d4:1d:27:87:91:9a:7d:3e:3c: c6:ca:4d:be:e7:f1:7d:ea:53:76:69:24:39:1e:99: 63:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3A:95:B3:1F:22:B0:DC:C7:A5:29:13:CA:A9:22:52:64:2E:02:B6 X509v3 Authority Key Identifier: keyid:62:61:65:BF:B2:3D:DA:1F:98:70:B2:41:7F:49:64:85:E6:C0:8A:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:7e:00:c5:29:0c:a1:79:46:03:e5:6a:fa:3a:06:71:f7:b0: 49:f0:1c:1c:0f:7a:ae:66:c3:e4:45:02:5f:c9:fe:d3:0b:9b: d8:f5:e8:c2:60:05:4b:91:ff:21:c8:3b:1d:d8:7e:12:e9:9d: 35:0c:e0:7f:9e:71:ee:8b:39:1b:ff:1a:49:2e:66:ff:ec:02: ff:12:bd:1c:d1:84:8b:c5:b6:99:3d:4d:9c:5d:ba:ef:4c:30: 53:3e:02:5c:4f:53:fb:22:cf:88:88:f5:e9:81:f3:2d:8e:04: 66:10:cb:35:9e:e3:e9:b2:9f:93:08:d2:57:74:b6:29:e2:80: b5:6d:06:a4:93:91:15:fd:d4:bc:e3:ee:c4:2b:ad:de:b3:b4: 0d:78:13:58:e5:7a:94:2e:01:f1:3d:c8:a9:41:d7:36:c7:b6: 4d:f1:6d:d5:0e:a7:bd:3c:87:e2:3f:aa:fa:c0:0c:30:dd:9e: 25:eb:7f:3c:e2:02:0b:50:07:1e:a4:e2:38:b6:b7:3e:55:37: b2:6c:6a:ed:35:3a:58:91:97:7a:9e:41:3b:53:50:a7:b6:e6: 8a:c6:39:83:75:b9:4d:29:0a:aa:cf:bb:10:43:d6:94:5d:39: b6:72:1f:87:eb:7c:59:c1:88:19:0d:9a:53:1a:1a:a7:75:ad: 72:29:20:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmubm2g1tmhES+ql/DCfBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNjE2NWJmYjIzZGRhMWY5ODcwYjI0MTdmNDk2NDg1ZTZj MDhhNzQwHhcNMjUxMjA2MDMwMDUxWhcNMjUxMjA3MDMwMDUxWjAzMTEwLwYDVQQD EygwNTNhOTViMzFmMjJiMGRjYzdhNTI5MTNjYWE5MjI1MjY0MmUwMmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZzkM9l/b9ptOUthRPp7gEy3x47Y yH0m2MaLresIAoDDFtUxG/NAtVFdk1GpoQnyu5d01gHIO4LZLK/ycCjrGDCH4LT+ OxTqCrMhgdoVzCuDtEnGhX3JKHhv80XGqlnrggEo7MdRjvpRwsVn85n+MhlGFbOs jNtZxCdkPr2mkEqpP+yKonwobGM5h9FD4Ksudv/DP2EHGvklWaC/UNkRw38ABtRc qd3H4QnlyRiyaAkH6T6JJ0w4zum2mjXYfmy0SZtziwRRg8qZOjNM3KEuIojVftBb 5JslAUaDFbMyoq445SLE1ujUHSeHkZp9PjzGyk2+5/F96lN2aSQ5HpljRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAU6lbMfIrDcx6UpE8qpIlJkLgK2MB8GA1UdIwQY MBaAFGJhZb+yPdofmHCyQX9JZIXmwIp0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1GbHY3STkyaC1ZY0xKQmYwbGtoZWJBaW5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi83MjEzNWQtZTQ5Ny00NGE2LWI0ZDAt NDYwZmI0YmFjMmRiLzEvWW1GbHY3STkyaC1ZY0xKQmYwbGtoZWJBaW5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi83MjEzNWQtZTQ5Ny00NGE2LWI0ZDAtNDYwZmI0YmFjMmRi LzEvWW1GbHY3STkyaC1ZY0xKQmYwbGtoZWJBaW5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASH4AxSkM oXlGA+Vq+joGcfewSfAcHA96rmbD5EUCX8n+0wub2PXowmAFS5H/Icg7Hdh+Eumd NQzgf55x7os5G/8aSS5m/+wC/xK9HNGEi8W2mT1NnF2670wwUz4CXE9T+yLPiIj1 6YHzLY4EZhDLNZ7j6bKfkwjSV3S2KeKAtW0GpJORFf3UvOPuxCut3rO0DXgTWOV6 lC4B8T3IqUHXNse2TfFt1Q6nvTyH4j+q+sAMMN2eJet/POICC1AHHqTiOLa3PlU3 smxq7TU6WJGXep5BO1NQp7bmisY5g3W5TSkKqs+7EEPWlF05tnIfh+t8WcGIGQ2a Uxoap3Wtcikgdg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:16 2025 by rpki-client