This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft File: yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft (raw, json) Hash identifier: uA4ozzhpDqlyz+xPUq72QTztgSRHcEoUBYNBWtdMXrI= Subject key identifier: 32:B2:E9:6B:BA:63:2E:6F:85:9D:F2:75:7F:6F:4C:A2:EA:60:88:74 Authority key identifier: CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29 Certificate issuer: /CN=cb1d15194278a29aad57ca375f99588b976ef829 Certificate serial: 019AF5779CD22500259084C7836DA8189138 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 21:00:48 +0000 Manifest this update: Sat 06 Dec 2025 21:00:48 +0000 Manifest next update: Sun 07 Dec 2025 21:00:48 +0000 Files and hashes: 1: vKmVyZKo1mVbWaxUYsU2k0zxDdU.roa (hash: gYV9eOLfrWkPtH6rFSHehM6qyeO4Oplr2KmQKju1kVs=) 2: yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl (hash: WMTRfwI/O3j0u7yJldRJfWLCCX5N7FwXbRony9eCJXc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:9c:d2:25:00:25:90:84:c7:83:6d:a8:18:91:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb1d15194278a29aad57ca375f99588b976ef829 Validity Not Before: Dec 6 21:00:48 2025 GMT Not After : Dec 7 21:00:48 2025 GMT Subject: CN=32b2e96bba632e6f859df2757f6f4ca2ea608874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:25:b4:70:2e:13:c7:96:94:d3:63:16:17:4b: 7f:3b:a2:2f:b7:c8:5e:de:d0:e9:04:f2:0d:6a:58: a7:e0:22:d8:0e:49:54:9d:32:13:b9:68:8c:c9:07: 72:7c:c5:e7:16:88:66:4d:8d:34:cc:57:9a:63:69: 4f:19:4a:0a:de:e6:3a:d2:83:97:c8:28:83:83:ac: 56:59:73:84:19:95:d0:fa:22:1d:b8:c2:45:5d:73: 89:b0:2f:82:53:83:d6:ec:06:d1:d5:50:45:00:4a: 3e:e3:03:3b:54:88:62:07:e6:70:3f:c0:f4:cc:9a: e1:50:25:54:a6:c1:70:52:b0:df:be:66:aa:f6:e3: 24:f0:18:c0:25:ad:9b:df:97:17:1f:8b:86:0a:24: c6:6e:d5:cc:f1:10:c5:7e:37:43:90:e4:93:66:3e: fd:5f:df:21:d4:86:48:31:ab:d4:c2:cf:b5:5d:90: 79:02:62:28:5c:ac:1c:d0:b6:df:04:d9:89:44:ea: 57:a2:cf:78:0f:73:90:13:85:7d:4d:78:2c:de:51: c2:3b:59:ca:a3:44:3c:05:71:13:8b:1b:a1:8a:88: f1:a4:9a:74:c0:17:6f:6e:8c:3b:54:80:7a:39:0a: c0:e7:f7:04:23:e7:4a:0b:11:61:00:7d:3a:b7:2c: 94:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B2:E9:6B:BA:63:2E:6F:85:9D:F2:75:7F:6F:4C:A2:EA:60:88:74 X509v3 Authority Key Identifier: keyid:CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:02:11:51:3a:80:9b:b3:22:fb:f1:71:e4:e5:a3:1a:3f:7e: 00:34:a5:57:bd:4b:8e:6c:81:f2:c8:91:cc:26:0a:59:02:fb: 94:fc:8c:dc:31:b5:6e:16:8e:b4:87:ea:3f:3c:21:04:4f:ff: 4b:95:91:0f:4b:d1:f2:bb:3b:99:6d:d1:5c:c8:61:79:10:7b: 3f:b7:f8:9a:30:87:45:4b:4e:ac:02:1a:5d:4a:48:c0:7f:e6: aa:1f:e9:e8:d4:90:67:84:74:7e:4c:64:ce:e9:02:73:66:9d: 80:01:93:b9:4f:71:7a:e3:42:cf:76:38:18:91:19:89:fa:da: 10:95:b6:55:8e:e6:7a:4e:69:18:85:bb:47:f1:68:26:7c:0a: d0:a6:9a:8d:d5:f1:ac:88:d0:9b:ac:77:28:81:f0:1f:58:2e: 29:e9:d3:de:9e:a7:fd:6d:85:16:97:63:98:f6:c6:ce:f4:bd: 2f:fa:ce:88:62:b5:f1:36:01:9d:6f:ce:35:cc:b9:79:4c:44: d1:48:9f:d6:7e:b4:65:a6:7a:6b:b8:e0:28:f1:d8:9d:15:be: 0f:4c:e5:f6:37:23:c0:0b:6b:ad:18:21:6d:30:0f:53:62:75: b9:17:4f:d9:ab:5e:c0:58:4f:25:78:14:83:f1:af:ba:22:7a: c4:22:4a:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d5zSJQAlkITHg22oGJE4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMWQxNTE5NDI3OGEyOWFhZDU3Y2EzNzVmOTk1ODhiOTc2 ZWY4MjkwHhcNMjUxMjA2MjEwMDQ4WhcNMjUxMjA3MjEwMDQ4WjAzMTEwLwYDVQQD EygzMmIyZTk2YmJhNjMyZTZmODU5ZGYyNzU3ZjZmNGNhMmVhNjA4ODc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviW0cC4Tx5aU02MWF0t/O6Ivt8he 3tDpBPINalin4CLYDklUnTITuWiMyQdyfMXnFohmTY00zFeaY2lPGUoK3uY60oOX yCiDg6xWWXOEGZXQ+iIduMJFXXOJsC+CU4PW7AbR1VBFAEo+4wM7VIhiB+ZwP8D0 zJrhUCVUpsFwUrDfvmaq9uMk8BjAJa2b35cXH4uGCiTGbtXM8RDFfjdDkOSTZj79 X98h1IZIMavUws+1XZB5AmIoXKwc0LbfBNmJROpXos94D3OQE4V9TXgs3lHCO1nK o0Q8BXETixuhiojxpJp0wBdvbow7VIB6OQrA5/cEI+dKCxFhAH06tyyUfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKy6Wu6Yy5vhZ3ydX9vTKLqYIh0MB8GA1UdIwQY MBaAFMsdFRlCeKKarVfKN1+ZWIuXbvgpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXgwVkdVSjRvcHF0VjhvM1g1bFlpNWR1LUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lYjIzNjEtOGQzNC00ZmY0LWIzZDEt MWZiMzg0MzVhZjc3LzEveXgwVkdVSjRvcHF0VjhvM1g1bFlpNWR1LUNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9lYjIzNjEtOGQzNC00ZmY0LWIzZDEtMWZiMzg0MzVhZjc3 LzEveXgwVkdVSjRvcHF0VjhvM1g1bFlpNWR1LUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQIRUTqA m7Mi+/Fx5OWjGj9+ADSlV71LjmyB8siRzCYKWQL7lPyM3DG1bhaOtIfqPzwhBE// S5WRD0vR8rs7mW3RXMhheRB7P7f4mjCHRUtOrAIaXUpIwH/mqh/p6NSQZ4R0fkxk zukCc2adgAGTuU9xeuNCz3Y4GJEZifraEJW2VY7mek5pGIW7R/FoJnwK0KaajdXx rIjQm6x3KIHwH1guKenT3p6n/W2FFpdjmPbGzvS9L/rOiGK18TYBnW/ONcy5eUxE 0Uif1n60ZaZ6a7jgKPHYnRW+D0zl9jcjwAtrrRghbTAPU2J1uRdP2atewFhPJXgU g/GvuiJ6xCJKIg== -----END CERTIFICATE-----Generated at Sun Dec 7 06:09:01 2025 by rpki-client