This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft File: yc040dHEojBTzZlxYzGNZJp7Klc.mft (raw, json) Hash identifier: zTbGuzd0dMncm5R9aK1tN6+rPBQSqPdUrf5cQxQs8qc= Subject key identifier: AF:A9:3B:CE:74:D2:08:CE:AF:7D:37:20:E8:43:7F:23:32:2D:0B:93 Authority key identifier: C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57 Certificate issuer: /CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57 Certificate serial: 019AF1D1FD69F934FE27D319E2CFE5925699 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 04:01:02 +0000 Manifest this update: Sat 06 Dec 2025 04:01:02 +0000 Manifest next update: Sun 07 Dec 2025 04:01:02 +0000 Files and hashes: 1: 85I4pfyLQKX8k9V-tQtyQU5bDYo.roa (hash: TN5K/hNnnHvE6u0/+9oRgawldt2710m801enGA9Infw=) 2: 9Ddwg04k-x748SWw8ZAq8FwjEC0.roa (hash: hAsF5Dd97oXArWDCgchVp4XLtAVACH5ddk2EH9+qQDM=) 3: yc040dHEojBTzZlxYzGNZJp7Klc.crl (hash: 5vP+cF8C2MkrpFKQYqdQLVOqg+8CcClFbsDfcK/SwQQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:fd:69:f9:34:fe:27:d3:19:e2:cf:e5:92:56:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57 Validity Not Before: Dec 6 04:01:02 2025 GMT Not After : Dec 7 04:01:02 2025 GMT Subject: CN=afa93bce74d208ceaf7d3720e8437f23322d0b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:95:2d:59:b1:54:4a:2e:d7:8e:09:87:1b:3b: 5a:88:21:b0:7e:ad:ed:89:56:89:2d:37:1b:c9:fc: bf:dc:2d:0f:64:73:32:c8:5f:31:0c:52:fb:ef:88: 84:c0:2d:1b:8e:32:18:56:d5:a1:a4:cf:2d:30:35: 71:5b:f5:55:55:14:ab:40:20:23:89:6b:cd:d6:7a: de:ab:e3:17:cd:b3:6f:ff:2f:57:14:b9:0c:8e:fd: 16:25:74:43:1e:93:94:86:22:79:c0:fc:1c:9b:63: 72:57:df:9f:52:04:98:e7:63:28:b7:43:90:d8:1d: 87:1d:1e:c5:6b:0e:16:85:97:97:b7:d5:69:43:1b: 2a:c4:22:66:5d:99:ae:26:d6:cc:18:1b:77:e2:4c: a6:65:e9:c5:91:0f:64:ee:7d:56:55:61:0a:8e:c0: c7:0f:81:38:bb:7a:00:64:c4:05:d4:77:18:f3:56: 24:7f:88:98:9c:50:d3:28:61:aa:83:ce:e3:70:81: e8:f4:b1:ea:93:01:5f:70:4a:ad:68:16:50:df:74: 0b:51:3b:12:ad:9c:f6:b4:45:7d:61:cf:19:cb:19: c4:66:51:49:1a:4d:e3:6d:f9:d3:dc:85:6d:30:cb: aa:56:aa:aa:a8:9b:6b:3d:1d:23:ed:cb:60:08:fc: 4f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A9:3B:CE:74:D2:08:CE:AF:7D:37:20:E8:43:7F:23:32:2D:0B:93 X509v3 Authority Key Identifier: keyid:C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:d3:77:76:5c:1c:25:b3:7b:ca:d7:9d:fd:2f:87:c9:b4:ae: ff:77:5f:c9:23:a2:1a:6f:d0:c4:ef:25:98:ac:ff:32:35:ac: 3f:91:d4:3f:1b:37:82:95:a7:bb:80:b4:89:16:83:ea:ff:51: b8:b3:b2:09:09:59:42:e3:ce:d5:de:27:7e:95:9a:7b:e4:56: 17:71:96:fb:5e:66:9a:be:06:af:24:28:94:db:f6:ed:3d:e8: fb:47:3d:03:26:fe:5a:8b:9b:0a:00:fc:5a:1b:f1:6b:b4:b7: 6c:87:d5:b5:c4:49:9d:dc:34:cc:77:68:5c:96:d6:1c:7e:2e: 1e:70:6c:d6:a1:77:25:d0:23:6e:9e:8f:31:ef:7b:2b:60:22: 65:66:eb:bb:6a:a2:62:66:51:19:39:23:e4:90:fc:49:57:60: 73:97:44:05:ef:6b:d8:44:77:fd:cc:06:57:6c:02:19:2b:60: 35:52:a5:15:c9:8f:47:b3:54:34:fb:0f:88:9a:22:dd:8a:47: 5f:e9:6d:23:c6:aa:47:25:e3:70:16:05:fb:f4:d4:68:a4:32: 9c:f4:16:a6:4b:ef:b2:96:77:80:42:bb:13:33:32:1a:67:ba: 47:d8:30:dd:78:e8:b4:35:62:a0:8f:6d:5c:76:f3:aa:ba:61: b2:08:a3:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0f1p+TT+J9MZ4s/lklaZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5Y2QzOGQxZDFjNGEyMzA1M2NkOTk3MTYzMzE4ZDY0OWE3 YjJhNTcwHhcNMjUxMjA2MDQwMTAyWhcNMjUxMjA3MDQwMTAyWjAzMTEwLwYDVQQD EyhhZmE5M2JjZTc0ZDIwOGNlYWY3ZDM3MjBlODQzN2YyMzMyMmQwYjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35UtWbFUSi7XjgmHGztaiCGwfq3t iVaJLTcbyfy/3C0PZHMyyF8xDFL774iEwC0bjjIYVtWhpM8tMDVxW/VVVRSrQCAj iWvN1nreq+MXzbNv/y9XFLkMjv0WJXRDHpOUhiJ5wPwcm2NyV9+fUgSY52Mot0OQ 2B2HHR7Faw4WhZeXt9VpQxsqxCJmXZmuJtbMGBt34kymZenFkQ9k7n1WVWEKjsDH D4E4u3oAZMQF1HcY81Ykf4iYnFDTKGGqg87jcIHo9LHqkwFfcEqtaBZQ33QLUTsS rZz2tEV9Yc8ZyxnEZlFJGk3jbfnT3IVtMMuqVqqqqJtrPR0j7ctgCPxPowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+pO8500gjOr303IOhDfyMyLQuTMB8GA1UdIwQY MBaAFMnNONHRxKIwU82ZcWMxjWSaeypXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWMwNDBkSEVvakJUelpseFl6R05aSnA3S2xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yMmU0OWQtNjk1My00ZmM4LWE4OTYt YzVjMzU4ODM3YTg0LzEveWMwNDBkSEVvakJUelpseFl6R05aSnA3S2xjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8yMmU0OWQtNjk1My00ZmM4LWE4OTYtYzVjMzU4ODM3YTg0 LzEveWMwNDBkSEVvakJUelpseFl6R05aSnA3S2xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE9N3dlwc JbN7yted/S+HybSu/3dfySOiGm/QxO8lmKz/MjWsP5HUPxs3gpWnu4C0iRaD6v9R uLOyCQlZQuPO1d4nfpWae+RWF3GW+15mmr4GryQolNv27T3o+0c9Ayb+WoubCgD8 Whvxa7S3bIfVtcRJndw0zHdoXJbWHH4uHnBs1qF3JdAjbp6PMe97K2AiZWbru2qi YmZRGTkj5JD8SVdgc5dEBe9r2ER3/cwGV2wCGStgNVKlFcmPR7NUNPsPiJoi3YpH X+ltI8aqRyXjcBYF+/TUaKQynPQWpkvvspZ3gEK7EzMyGme6R9gw3XjotDVioI9t XHbzqrphsgijyg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:39:52 2025 by rpki-client