This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft File: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft (raw, json) Hash identifier: vAf98CpCM2CN+ke4ZTD4HkdI6R0BN82EaTgEoQVwpu0= Subject key identifier: 39:20:50:2F:8F:F7:59:6A:C5:C8:AA:11:85:9B:36:3A:55:BE:BC:19 Authority key identifier: C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB Certificate issuer: /CN=c97edcedec3254b357b09615a02b16e06ebe63eb Certificate serial: 019AF163D0DC98C5F04543448292C1641FCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft Manifest number: 0DA4 Signing time: Sat 06 Dec 2025 02:00:41 +0000 Manifest this update: Sat 06 Dec 2025 02:00:41 +0000 Manifest next update: Sun 07 Dec 2025 02:00:41 +0000 Files and hashes: 1: 1GNJJW2MjxVD_5YjOAnhTl6g1zg.roa (hash: p9+B/bwGUg8wWWb+goY+HH8qOHNqvJrQlybwIBP6B1Y=) 2: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl (hash: IMiOJoZAEch4j72C64NV2sc0Z8xiHgi2TfqZrEpmtQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:d0:dc:98:c5:f0:45:43:44:82:92:c1:64:1f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c97edcedec3254b357b09615a02b16e06ebe63eb Validity Not Before: Dec 6 02:00:41 2025 GMT Not After : Dec 7 02:00:41 2025 GMT Subject: CN=3920502f8ff7596ac5c8aa11859b363a55bebc19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d2:80:65:15:91:f6:49:37:1c:26:29:43:6d: 2c:8b:ed:8b:02:3a:ff:ca:b4:4c:f4:36:45:59:10: 5f:e9:50:18:46:ea:df:39:bd:c2:f5:84:c8:f1:f1: 81:15:1d:90:20:0e:41:48:5c:48:65:ab:a4:66:9b: bb:bd:dc:40:7a:d1:9e:ce:db:48:ca:ed:9b:e0:1a: 1b:a2:5f:13:42:16:71:27:a8:19:4a:3a:dc:b1:a1: 73:1d:89:76:f1:ee:d1:92:42:0f:fd:fb:ae:6d:27: 79:76:44:fb:9b:b4:2f:8e:64:11:be:49:73:71:89: 9b:75:53:83:d1:5a:50:0a:0c:8d:8d:f5:ab:c9:ed: e3:d9:ad:6d:f3:58:b0:90:6e:28:a8:ab:5f:30:fa: 51:8d:17:a8:05:b9:8f:00:6c:fc:99:1a:60:4f:67: 4f:0b:11:81:5d:84:25:ff:5a:a9:71:fa:1a:85:f5: 0f:6a:86:c8:33:27:df:29:5b:f8:3e:86:86:06:68: 0b:0a:95:86:66:c4:34:27:9e:67:b3:50:1a:16:be: 9a:1b:d0:b3:59:85:48:c2:4d:e6:8c:1e:3f:83:32: 56:fb:8b:03:e0:5e:d9:58:02:ca:00:00:02:c2:a2: cf:b2:c2:64:4f:32:a4:8d:f2:2d:fa:77:5a:13:5e: 8b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:20:50:2F:8F:F7:59:6A:C5:C8:AA:11:85:9B:36:3A:55:BE:BC:19 X509v3 Authority Key Identifier: keyid:C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:07:b0:15:06:0b:e0:6e:a1:28:14:ce:53:ab:9e:cb:7f:52: 7f:98:61:53:48:c2:e5:b4:c6:75:cd:29:6d:1c:6f:06:0b:ed: e8:49:54:5a:4b:3a:37:dc:ac:f5:00:67:48:26:6c:8f:43:1a: 44:7f:40:fe:7d:9d:25:08:2d:a7:da:a8:70:89:aa:79:98:6e: eb:28:a0:0e:c0:b9:e8:a7:f4:85:ab:e9:e2:7c:a5:b6:8b:c3: 2f:ce:f8:fa:f6:0b:b5:40:a6:9b:ac:87:db:e2:43:d7:78:9e: 39:69:e4:96:95:1c:eb:e8:9b:00:f6:5d:f4:20:96:1c:99:7a: 79:bd:bc:44:5b:90:59:4d:ec:7a:09:b5:14:7d:c9:7b:4c:1c: 09:d0:ae:8c:11:50:50:c0:e9:69:a3:16:78:56:21:0e:b1:92: fe:b1:b9:65:fe:19:a1:ec:b2:14:cf:9d:b4:0e:6b:ad:57:f5: c4:9d:f7:48:1c:cd:44:6b:b8:d8:58:b3:62:d7:54:93:18:9e: 65:26:0e:81:c1:e9:d0:cb:69:6e:6e:4e:45:a2:de:23:14:4a: 3a:90:e1:09:a1:90:73:f1:12:9c:97:98:60:56:71:7b:dd:64: 25:32:1f:e7:ea:5f:9d:be:65:fa:03:69:4a:b5:03:fe:f4:45: 56:6b:b3:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9DcmMXwRUNEgpLBZB/MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5N2VkY2VkZWMzMjU0YjM1N2IwOTYxNWEwMmIxNmUwNmVi ZTYzZWIwHhcNMjUxMjA2MDIwMDQxWhcNMjUxMjA3MDIwMDQxWjAzMTEwLwYDVQQD EygzOTIwNTAyZjhmZjc1OTZhYzVjOGFhMTE4NTliMzYzYTU1YmViYzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9KAZRWR9kk3HCYpQ20si+2LAjr/ yrRM9DZFWRBf6VAYRurfOb3C9YTI8fGBFR2QIA5BSFxIZaukZpu7vdxAetGezttI yu2b4Bobol8TQhZxJ6gZSjrcsaFzHYl28e7RkkIP/fuubSd5dkT7m7QvjmQRvklz cYmbdVOD0VpQCgyNjfWrye3j2a1t81iwkG4oqKtfMPpRjReoBbmPAGz8mRpgT2dP CxGBXYQl/1qpcfoahfUPaobIMyffKVv4PoaGBmgLCpWGZsQ0J55ns1AaFr6aG9Cz WYVIwk3mjB4/gzJW+4sD4F7ZWALKAAACwqLPssJkTzKkjfIt+ndaE16LOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkgUC+P91lqxciqEYWbNjpVvrwZMB8GA1UdIwQY MBaAFMl+3O3sMlSzV7CWFaArFuBuvmPrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVg3Yzdld3lWTE5Yc0pZVm9Dc1c0RzYtWS1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lZmQyODItMzNiMi00MzczLTk5NDgt MzIzOWE4MWM5ZmM4LzEveVg3Yzdld3lWTE5Yc0pZVm9Dc1c0RzYtWS1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9lZmQyODItMzNiMi00MzczLTk5NDgtMzIzOWE4MWM5ZmM4 LzEveVg3Yzdld3lWTE5Yc0pZVm9Dc1c0RzYtWS1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgewFQYL 4G6hKBTOU6uey39Sf5hhU0jC5bTGdc0pbRxvBgvt6ElUWks6N9ys9QBnSCZsj0Ma RH9A/n2dJQgtp9qocImqeZhu6yigDsC56Kf0havp4nyltovDL874+vYLtUCmm6yH 2+JD13ieOWnklpUc6+ibAPZd9CCWHJl6eb28RFuQWU3segm1FH3Je0wcCdCujBFQ UMDpaaMWeFYhDrGS/rG5Zf4ZoeyyFM+dtA5rrVf1xJ33SBzNRGu42FizYtdUkxie ZSYOgcHp0Mtpbm5ORaLeIxRKOpDhCaGQc/ESnJeYYFZxe91kJTIf5+pfnb5l+gNp SrUD/vRFVmuzUQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:55 2025 by rpki-client