This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft File: YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft (raw, json) Hash identifier: 8SdGmxX5Igp2/coBakYWtWioyrdmCoqDsaNeQXRZPzE= Subject key identifier: F4:C2:2A:DF:A6:FE:28:06:B9:33:0E:34:CF:A6:C2:74:45:B5:FA:3F Authority key identifier: 62:F6:2A:84:7A:4E:DF:F9:95:71:A3:2E:94:ED:FF:05:25:B0:3B:66 Certificate issuer: /CN=62f62a847a4edff99571a32e94edff0525b03b66 Certificate serial: 019AF2768B6BB682F257B5F89ECA6EDD06A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 07:00:46 +0000 Manifest this update: Sat 06 Dec 2025 07:00:46 +0000 Manifest next update: Sun 07 Dec 2025 07:00:46 +0000 Files and hashes: 1: YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl (hash: sq7Zb7aWPAPG7Do4kfylZ7kUGmh0L0m9A0VoQJ6FS3c=) 2: yj99MOmgQbzvoc18YD5uSOARIoI.roa (hash: YzvqgfFVZqoKhUwvVTIX6xIFRaZOm+FhcD12kqdj8mo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:8b:6b:b6:82:f2:57:b5:f8:9e:ca:6e:dd:06:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62f62a847a4edff99571a32e94edff0525b03b66 Validity Not Before: Dec 6 07:00:46 2025 GMT Not After : Dec 7 07:00:46 2025 GMT Subject: CN=f4c22adfa6fe2806b9330e34cfa6c27445b5fa3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b8:31:a8:11:2a:1c:21:2f:2b:e5:9a:cd:43: 06:aa:d5:39:1b:19:57:9e:b2:1e:ab:ea:9a:7a:37: 61:e5:3c:f5:4d:85:d3:73:9b:65:52:43:2b:74:ee: 2a:e7:b2:74:c7:43:57:c3:10:17:b9:d9:d9:8c:bd: 04:d4:97:05:90:a3:4f:6c:a9:c8:4b:26:76:9d:43: e2:f7:38:99:e5:fe:03:20:ea:5d:1f:34:a4:38:ed: 6f:e0:ce:e5:66:fd:39:e1:76:a2:57:2b:6d:75:1e: 57:e2:2f:14:fd:a0:1b:10:8b:9f:9a:c7:f3:02:51: 8e:57:f1:44:7b:e8:20:74:de:ea:d5:78:9b:b8:4e: 0e:e4:b6:f2:d4:58:3c:d8:81:0a:ea:6c:d2:d2:c7: 45:bb:ff:9f:bc:3c:00:1a:44:78:e7:8f:9e:87:ca: 43:50:79:39:29:8d:7b:ef:0b:51:9c:9b:25:08:dc: b9:d8:69:d1:59:98:e7:0e:32:6b:6d:95:1b:29:54: 44:50:1a:cc:b7:c0:e9:86:0e:a3:ba:15:bf:a9:ba: 96:27:02:a7:05:4c:14:67:5e:eb:e5:92:07:2b:0b: 25:47:1e:ee:49:ec:57:29:a9:e9:d8:93:55:fa:bf: 26:7b:ac:a4:3d:8c:52:5a:eb:58:0c:7a:72:29:c1: 5b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C2:2A:DF:A6:FE:28:06:B9:33:0E:34:CF:A6:C2:74:45:B5:FA:3F X509v3 Authority Key Identifier: keyid:62:F6:2A:84:7A:4E:DF:F9:95:71:A3:2E:94:ED:FF:05:25:B0:3B:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:0d:de:b3:3b:cc:0f:52:c1:13:81:ad:a0:d0:8b:59:99:60: 0b:77:50:43:f1:21:a2:70:1b:33:7e:be:90:e5:2d:5a:ea:75: 5a:7d:62:73:af:a2:ee:9d:18:c7:24:98:70:fd:7c:ef:11:df: 85:86:cf:4f:ad:c9:96:81:ee:58:f3:bf:c3:31:2d:73:74:7a: 61:d0:70:c4:c4:3b:bf:c4:69:37:63:f8:a6:80:e2:b8:92:d4: c8:36:64:fd:10:89:ce:b9:0d:6b:a3:37:69:1a:70:49:43:d2: 84:28:34:96:f9:05:9d:81:db:cb:ac:62:3b:b2:d3:9d:cf:62: fa:27:02:f9:03:f8:2d:43:3e:db:bd:67:48:80:84:72:d1:5b: 50:ad:fa:e0:83:be:0a:12:8d:b5:a4:5e:ef:28:27:c3:3f:1a: 9b:4b:e5:13:fe:b8:ba:71:12:ec:a1:a0:2e:8e:30:62:bd:30: 23:56:fd:41:89:2c:5b:21:8e:6d:1d:10:50:7b:71:f5:1e:da: ae:77:fb:9d:ae:8c:8a:6e:be:1e:40:4c:ae:a6:57:a4:b6:9a: 6e:08:d4:77:c6:aa:bd:62:da:9c:2a:29:8e:4e:d8:0b:52:b4: 17:43:0b:90:c5:56:d2:75:f8:59:8a:62:ab:8c:03:ed:e9:b8: 77:fa:69:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydotrtoLyV7X4nspu3QaiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZjYyYTg0N2E0ZWRmZjk5NTcxYTMyZTk0ZWRmZjA1MjVi MDNiNjYwHhcNMjUxMjA2MDcwMDQ2WhcNMjUxMjA3MDcwMDQ2WjAzMTEwLwYDVQQD EyhmNGMyMmFkZmE2ZmUyODA2YjkzMzBlMzRjZmE2YzI3NDQ1YjVmYTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7gxqBEqHCEvK+WazUMGqtU5GxlX nrIeq+qaejdh5Tz1TYXTc5tlUkMrdO4q57J0x0NXwxAXudnZjL0E1JcFkKNPbKnI SyZ2nUPi9ziZ5f4DIOpdHzSkOO1v4M7lZv054XaiVyttdR5X4i8U/aAbEIufmsfz AlGOV/FEe+ggdN7q1XibuE4O5Lby1Fg82IEK6mzS0sdFu/+fvDwAGkR454+eh8pD UHk5KY177wtRnJslCNy52GnRWZjnDjJrbZUbKVREUBrMt8Dphg6juhW/qbqWJwKn BUwUZ17r5ZIHKwslRx7uSexXKanp2JNV+r8me6ykPYxSWutYDHpyKcFb/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTCKt+m/igGuTMONM+mwnRFtfo/MB8GA1UdIwQY MBaAFGL2KoR6Tt/5lXGjLpTt/wUlsDtmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXZZcWhIcE8zX21WY2FNdWxPM19CU1d3TzJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC84ZjQ3ODAtZWZhZi00ZTA2LWExZmEt MjU1MGU0YjBmYmIyLzEvWXZZcWhIcE8zX21WY2FNdWxPM19CU1d3TzJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC84ZjQ3ODAtZWZhZi00ZTA2LWExZmEtMjU1MGU0YjBmYmIy LzEvWXZZcWhIcE8zX21WY2FNdWxPM19CU1d3TzJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIg3eszvM D1LBE4GtoNCLWZlgC3dQQ/EhonAbM36+kOUtWup1Wn1ic6+i7p0YxySYcP187xHf hYbPT63JloHuWPO/wzEtc3R6YdBwxMQ7v8RpN2P4poDiuJLUyDZk/RCJzrkNa6M3 aRpwSUPShCg0lvkFnYHby6xiO7LTnc9i+icC+QP4LUM+271nSICEctFbUK364IO+ ChKNtaRe7ygnwz8am0vlE/64unES7KGgLo4wYr0wI1b9QYksWyGObR0QUHtx9R7a rnf7na6Mim6+HkBMrqZXpLaabgjUd8aqvWLanCopjk7YC1K0F0MLkMVW0nX4WYpi q4wD7em4d/ppNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:02:36 2025 by rpki-client