This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft File: yNMivrfjY_TUV14eT-7lzLhOEnU.mft (raw, json) Hash identifier: M4Qo7Wk9/dVqeHzPvHDc5xTVTMLqfioJAal4RBSsWdQ= Subject key identifier: AA:13:CE:7A:79:2B:0E:32:82:8F:62:16:FA:BF:E4:7C:F1:3D:94:14 Authority key identifier: C8:D3:22:BE:B7:E3:63:F4:D4:57:5E:1E:4F:EE:E5:CC:B8:4E:12:75 Certificate issuer: /CN=c8d322beb7e363f4d4575e1e4feee5ccb84e1275 Certificate serial: 019AF19ABB93EB31168E45B0F1B07D057E30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:00:40 +0000 Manifest this update: Sat 06 Dec 2025 03:00:40 +0000 Manifest next update: Sun 07 Dec 2025 03:00:40 +0000 Files and hashes: 1: nvq-TJNbL0ajM2TA5cfgJ-DqXBg.roa (hash: pDByD6dp3Va0k7qBPd8tHFheIh5zQKazx/nAE02gXa4=) 2: yNMivrfjY_TUV14eT-7lzLhOEnU.crl (hash: CsOzwqOQ0qtXcTRrHNQHYqlqWe5LpNbQFJWYXQMDtCU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:bb:93:eb:31:16:8e:45:b0:f1:b0:7d:05:7e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8d322beb7e363f4d4575e1e4feee5ccb84e1275 Validity Not Before: Dec 6 03:00:40 2025 GMT Not After : Dec 7 03:00:40 2025 GMT Subject: CN=aa13ce7a792b0e32828f6216fabfe47cf13d9414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:23:6e:52:d8:27:63:f8:e4:91:2f:96:68:3a: 2a:5d:1b:c1:7c:44:60:c2:48:55:1e:2f:21:1b:92: ad:65:54:ac:60:b8:40:96:e3:96:09:59:ce:d2:1e: 5c:28:51:42:79:5c:63:70:e4:3f:fd:07:38:d0:1c: 05:ce:8f:76:09:76:04:76:af:7f:5b:be:c5:fb:a2: 9d:4f:50:60:11:a6:c0:cb:ba:8a:19:27:d2:1c:2b: 12:22:79:2b:37:9f:27:dd:e5:52:d7:e4:c6:74:fc: 11:ea:f0:fd:d7:e4:48:29:ce:7a:18:53:8d:64:6f: 32:9e:91:66:d5:d0:ca:7c:66:31:f3:a1:74:3e:6d: 68:95:a7:3e:08:04:87:e2:3a:db:0e:13:b8:1a:a5: 60:b4:09:4c:a5:e1:de:7c:b8:1e:44:fc:fe:3d:33: 50:03:27:55:0e:9b:9c:6a:aa:29:25:29:03:ec:54: bd:3e:a9:cc:6c:16:23:07:df:a1:d3:6f:04:ad:0e: e3:31:5d:2d:dc:99:c0:51:98:24:b9:3d:f6:cd:89: 95:9b:07:f8:82:25:5f:8d:d4:99:30:96:96:b3:11: fb:1f:37:71:e9:bf:b4:3f:11:fb:88:e4:28:23:d4: 4e:2e:f3:59:8f:f4:fe:38:a7:b8:e8:f3:02:58:86: ea:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:13:CE:7A:79:2B:0E:32:82:8F:62:16:FA:BF:E4:7C:F1:3D:94:14 X509v3 Authority Key Identifier: keyid:C8:D3:22:BE:B7:E3:63:F4:D4:57:5E:1E:4F:EE:E5:CC:B8:4E:12:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:5f:57:9b:c1:c3:52:34:79:ad:1e:95:f9:b8:05:d9:52:e1: d5:81:bb:e8:31:16:af:05:58:ef:66:f2:6e:53:ac:8f:b7:33: 95:93:5f:6d:34:65:f1:43:fb:f4:cb:02:5e:06:13:c2:36:0f: af:41:c3:8b:66:c6:3c:28:25:b3:91:4b:7a:6d:9c:88:f4:4f: 6e:0d:66:e8:d0:a0:1d:aa:bf:3c:1e:54:6b:09:6a:79:04:8f: ec:90:f2:e2:fc:79:f0:7d:b4:60:6d:64:0e:18:d8:f2:21:87: 76:d3:c8:ee:a2:f2:12:1c:f2:af:0b:3c:a9:49:fe:46:73:04: 2d:e5:dd:da:39:c7:d4:29:54:f9:2b:4d:d6:fa:ba:d1:c1:83: c4:fa:7f:8e:c3:a1:6f:fb:0b:a1:a3:25:35:8e:65:9e:5c:60: 2f:bc:75:1d:85:0d:77:ca:31:9f:e5:82:97:3a:fb:a5:eb:40: 76:aa:70:4b:17:1d:0e:63:b3:c2:00:78:b5:6b:3a:25:e1:c5: eb:0b:9d:99:d6:0b:65:32:5a:7d:7b:d3:e1:42:26:67:41:d5: 52:16:0d:49:b2:c3:c2:a7:72:ea:28:d7:2b:f4:8b:d8:83:a8: 58:b6:92:f9:74:ce:f6:f4:58:ec:a8:d3:bc:b1:0b:02:fe:29: 14:ae:8d:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmruT6zEWjkWw8bB9BX4wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZDMyMmJlYjdlMzYzZjRkNDU3NWUxZTRmZWVlNWNjYjg0 ZTEyNzUwHhcNMjUxMjA2MDMwMDQwWhcNMjUxMjA3MDMwMDQwWjAzMTEwLwYDVQQD EyhhYTEzY2U3YTc5MmIwZTMyODI4ZjYyMTZmYWJmZTQ3Y2YxM2Q5NDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCNuUtgnY/jkkS+WaDoqXRvBfERg wkhVHi8hG5KtZVSsYLhAluOWCVnO0h5cKFFCeVxjcOQ//Qc40BwFzo92CXYEdq9/ W77F+6KdT1BgEabAy7qKGSfSHCsSInkrN58n3eVS1+TGdPwR6vD91+RIKc56GFON ZG8ynpFm1dDKfGYx86F0Pm1olac+CASH4jrbDhO4GqVgtAlMpeHefLgeRPz+PTNQ AydVDpucaqopJSkD7FS9PqnMbBYjB9+h028ErQ7jMV0t3JnAUZgkuT32zYmVmwf4 giVfjdSZMJaWsxH7Hzdx6b+0PxH7iOQoI9ROLvNZj/T+OKe46PMCWIbqxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKoTznp5Kw4ygo9iFvq/5HzxPZQUMB8GA1UdIwQY MBaAFMjTIr6342P01FdeHk/u5cy4ThJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU5NaXZyZmpZX1RVVjE0ZVQtN2x6TGhPRW5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lZjRkYjAtYjZjOS00N2FhLTg0YzEt ZGMzNzY5ZThmNmExLzEveU5NaXZyZmpZX1RVVjE0ZVQtN2x6TGhPRW5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9lZjRkYjAtYjZjOS00N2FhLTg0YzEtZGMzNzY5ZThmNmEx LzEveU5NaXZyZmpZX1RVVjE0ZVQtN2x6TGhPRW5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAol9Xm8HD UjR5rR6V+bgF2VLh1YG76DEWrwVY72byblOsj7czlZNfbTRl8UP79MsCXgYTwjYP r0HDi2bGPCgls5FLem2ciPRPbg1m6NCgHaq/PB5UawlqeQSP7JDy4vx58H20YG1k DhjY8iGHdtPI7qLyEhzyrws8qUn+RnMELeXd2jnH1ClU+StN1vq60cGDxPp/jsOh b/sLoaMlNY5lnlxgL7x1HYUNd8oxn+WClzr7petAdqpwSxcdDmOzwgB4tWs6JeHF 6wudmdYLZTJafXvT4UImZ0HVUhYNSbLDwqdy6ijXK/SL2IOoWLaS+XTO9vRY7KjT vLELAv4pFK6Ntg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:20:53 2025 by rpki-client