This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft File: YXJS67szSErc7HQFrepN4IoK-wQ.mft (raw, json) Hash identifier: add5NbrUdmZ1OjUGN8KLAvRRG4iflAjSfNp6owiKCuE= Subject key identifier: C4:0F:65:A4:43:1E:A6:07:51:09:EC:30:39:65:7C:A3:16:8B:86:0F Authority key identifier: 61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04 Certificate issuer: /CN=617252ebbb33484adcec7405adea4de08a0afb04 Certificate serial: 019AF2771596CF4E828D6D77FF822529422D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 07:01:21 +0000 Manifest this update: Sat 06 Dec 2025 07:01:21 +0000 Manifest next update: Sun 07 Dec 2025 07:01:21 +0000 Files and hashes: 1: YXJS67szSErc7HQFrepN4IoK-wQ.crl (hash: npX3DEZsSr/qApoe9Pi6tRFf/ksepWF8lEeH6fHOO94=) 2: f5gkUuOv8CmtQpEO3xPPjhP9Wx4.roa (hash: XrKyMUfqix9Q7fDqjUpFFepbhKG4XNUKO4C0R0W/49E=) 3: u3PN03nF5VRKETuxZ9hrIBp3WRM.roa (hash: rHF4nTbYLmbRxQ2ai3QsJ15aqStQlt+XG0ZvOMJP3fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:15:96:cf:4e:82:8d:6d:77:ff:82:25:29:42:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=617252ebbb33484adcec7405adea4de08a0afb04 Validity Not Before: Dec 6 07:01:21 2025 GMT Not After : Dec 7 07:01:21 2025 GMT Subject: CN=c40f65a4431ea6075109ec3039657ca3168b860f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e9:57:36:60:d7:93:98:d1:4a:eb:a9:54:69: 7a:fc:72:75:f4:26:56:11:6f:5e:9e:af:3d:31:a9: 3c:2e:48:77:e0:c7:f8:6e:97:c3:a0:33:64:7e:67: c3:c5:b7:29:1b:01:dd:a6:74:f8:be:8e:76:82:b1: f5:37:a7:1b:29:92:01:17:8d:be:0f:5f:c5:c6:b3: 62:ad:65:6d:0b:44:11:cd:d9:a2:0e:93:e5:e9:eb: 4f:db:c0:1d:50:5e:13:c6:44:73:97:63:d4:fb:74: 89:f7:82:d1:64:c7:7f:70:47:f0:e8:49:60:4d:8b: 02:60:ca:63:33:72:7e:8f:60:e4:07:a4:c3:1f:70: 10:ea:b9:ec:3b:37:ed:10:f3:0c:71:75:dd:58:da: 23:46:8d:ba:6f:ca:eb:ef:41:ef:0c:65:fe:46:14: 88:0a:c7:cf:9e:50:c1:e4:20:04:96:32:d0:81:d2: f1:06:9f:3b:e3:42:9f:84:fb:98:4e:cf:05:ee:2c: 2f:d4:52:94:ef:d0:5f:9c:5c:94:6f:9a:e4:b4:8b: e9:03:2b:ba:35:a1:73:4c:20:ca:af:cd:ec:a5:fc: e7:41:69:f8:4a:f8:99:26:27:44:ae:f9:7e:82:aa: 60:90:dd:ec:46:58:91:69:b2:68:f7:d7:4b:ee:f0: cc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:0F:65:A4:43:1E:A6:07:51:09:EC:30:39:65:7C:A3:16:8B:86:0F X509v3 Authority Key Identifier: keyid:61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:fc:1a:f7:b6:c5:cc:a8:90:4d:9a:fe:ce:31:63:84:66:c2: a1:77:11:5e:fa:a6:bb:ca:2e:86:ae:4b:78:1e:e8:1b:a0:2d: 75:9b:43:fb:be:d4:bf:4f:ed:74:36:5f:fd:d0:7e:5d:44:79: 22:2b:ca:05:fc:df:7f:bf:1a:b9:a3:d8:90:3f:49:f2:ef:99: 17:4e:c3:01:d1:da:60:cc:62:8f:11:fd:30:65:30:60:f4:86: 96:5f:99:71:a4:80:69:41:e4:c4:7a:8a:d5:f0:4c:bf:ac:1a: 35:ca:d9:41:b7:4b:81:a3:32:e1:61:63:e4:7e:8e:7d:22:c4: f6:f7:be:95:17:31:2f:b8:82:c3:2c:70:94:3b:ab:f2:13:82: 2b:f4:65:30:02:71:76:b1:60:13:6f:a5:7e:18:84:1c:17:62: ca:21:81:af:8a:35:e1:81:90:ac:18:6f:09:7a:e3:7a:96:2c: 80:cd:a8:66:9d:50:ee:39:ba:14:bb:fe:48:b5:e1:39:c1:87: 62:bc:fc:6b:6a:9a:24:16:37:46:dd:82:de:68:f0:c3:72:b5: 16:ae:8c:24:f6:3c:12:e2:3b:b6:ec:1c:a7:93:c4:45:13:e1: 80:d1:15:05:29:79:c3:63:45:2b:7c:21:bf:1a:21:aa:5c:47: 65:15:7c:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxWWz06CjW13/4IlKUItMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNzI1MmViYmIzMzQ4NGFkY2VjNzQwNWFkZWE0ZGUwOGEw YWZiMDQwHhcNMjUxMjA2MDcwMTIxWhcNMjUxMjA3MDcwMTIxWjAzMTEwLwYDVQQD EyhjNDBmNjVhNDQzMWVhNjA3NTEwOWVjMzAzOTY1N2NhMzE2OGI4NjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqelXNmDXk5jRSuupVGl6/HJ19CZW EW9enq89Mak8Lkh34Mf4bpfDoDNkfmfDxbcpGwHdpnT4vo52grH1N6cbKZIBF42+ D1/FxrNirWVtC0QRzdmiDpPl6etP28AdUF4TxkRzl2PU+3SJ94LRZMd/cEfw6Elg TYsCYMpjM3J+j2DkB6TDH3AQ6rnsOzftEPMMcXXdWNojRo26b8rr70HvDGX+RhSI CsfPnlDB5CAEljLQgdLxBp8740KfhPuYTs8F7iwv1FKU79BfnFyUb5rktIvpAyu6 NaFzTCDKr83spfznQWn4SviZJidErvl+gqpgkN3sRliRabJo99dL7vDMXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQPZaRDHqYHUQnsMDllfKMWi4YPMB8GA1UdIwQY MBaAFGFyUuu7M0hK3Ox0Ba3qTeCKCvsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVhKUzY3c3pTRXJjN0hRRnJlcE40SW9LLXdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zN2E5M2ItODdiNS00OTk1LTllOGMt NjYzNWRlYmMzOTVjLzEvWVhKUzY3c3pTRXJjN0hRRnJlcE40SW9LLXdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8zN2E5M2ItODdiNS00OTk1LTllOGMtNjYzNWRlYmMzOTVj LzEvWVhKUzY3c3pTRXJjN0hRRnJlcE40SW9LLXdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/wa97bF zKiQTZr+zjFjhGbCoXcRXvqmu8ouhq5LeB7oG6AtdZtD+77Uv0/tdDZf/dB+XUR5 IivKBfzff78auaPYkD9J8u+ZF07DAdHaYMxijxH9MGUwYPSGll+ZcaSAaUHkxHqK 1fBMv6waNcrZQbdLgaMy4WFj5H6OfSLE9ve+lRcxL7iCwyxwlDur8hOCK/RlMAJx drFgE2+lfhiEHBdiyiGBr4o14YGQrBhvCXrjepYsgM2oZp1Q7jm6FLv+SLXhOcGH Yrz8a2qaJBY3Rt2C3mjww3K1Fq6MJPY8EuI7tuwcp5PERRPhgNEVBSl5w2NFK3wh vxohqlxHZRV8QA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:06 2025 by rpki-client