This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft File: YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft (raw, json) Hash identifier: pe3eepVgeYJERODi2yyS4gsFvxf7PctlNyVGhvHb+N8= Subject key identifier: 02:52:3C:81:25:77:8A:98:4E:C9:BB:A4:A4:A8:9D:C3:B5:53:73:03 Authority key identifier: 61:7F:6F:6E:15:0A:60:43:CB:20:93:B0:8D:DD:3A:2A:4A:B9:7A:37 Certificate issuer: /CN=617f6f6e150a6043cb2093b08ddd3a2a4ab97a37 Certificate serial: 019AF2E437AE680F94339D9822DD006E2579 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft Manifest number: B4 Signing time: Sat 06 Dec 2025 09:00:33 +0000 Manifest this update: Sat 06 Dec 2025 09:00:33 +0000 Manifest next update: Sun 07 Dec 2025 09:00:33 +0000 Files and hashes: 1: YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl (hash: JZ7W2vVcaI6U17COGHmlJIR/roRV6O4O8oTERKheQYY=) 2: bcgwm0IXZl2cgnOU43vtGxwCk5s.roa (hash: pOqSUBN1yoYOlROah8VVMTjUQwi9pDp8K4UguM3751U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:37:ae:68:0f:94:33:9d:98:22:dd:00:6e:25:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=617f6f6e150a6043cb2093b08ddd3a2a4ab97a37 Validity Not Before: Dec 6 09:00:33 2025 GMT Not After : Dec 7 09:00:33 2025 GMT Subject: CN=02523c8125778a984ec9bba4a4a89dc3b5537303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2b:a7:de:ae:6a:34:c5:e8:c9:0c:ec:31:91: 77:26:56:0e:90:69:09:3c:b4:11:24:a6:a9:99:72: c8:9f:fc:52:a8:d9:bd:c5:b3:b3:1b:bc:c6:7a:f6: e9:b5:f4:e8:9b:cf:7a:4e:99:7b:4c:b5:6a:11:d8: 50:65:e1:c2:69:4a:da:d0:d5:2f:d2:d8:79:df:ba: c3:f4:e2:5c:8f:68:1c:6b:93:3d:bd:09:5e:e9:ca: 20:2e:e9:43:b0:a6:e0:1f:01:b0:0d:49:a6:a6:8a: 65:17:97:48:84:69:da:fe:a8:a0:6c:a8:b9:39:a5: 9b:19:bc:82:96:08:ac:b7:8d:1c:56:0b:bd:cf:9e: 3c:08:98:61:0e:06:cc:60:ba:d2:c3:b2:d3:28:46: 66:cd:8f:ff:a7:fa:bd:bf:65:d3:d9:4b:f6:7f:b0: e5:70:b9:9f:7a:ff:cc:fc:18:29:57:48:bf:bb:b6: 18:dd:3c:e2:59:d1:0f:f0:95:1e:29:b7:83:5e:ca: a1:72:e4:50:1f:0b:7d:76:5e:87:76:1e:96:2f:97: 13:5c:a5:26:d0:45:54:14:75:0e:22:9a:8b:64:33: d1:a8:46:43:00:a1:87:57:6c:1a:2f:46:eb:2c:1d: 8b:68:a6:3e:7b:b2:fc:d7:31:b3:92:8b:2d:7e:31: de:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:52:3C:81:25:77:8A:98:4E:C9:BB:A4:A4:A8:9D:C3:B5:53:73:03 X509v3 Authority Key Identifier: keyid:61:7F:6F:6E:15:0A:60:43:CB:20:93:B0:8D:DD:3A:2A:4A:B9:7A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:79:4d:ed:00:cd:cb:d9:b2:40:66:d6:2c:3b:32:c3:e9:0e: c6:42:3b:b1:2e:bf:12:1f:d3:24:66:16:66:f9:12:23:14:bd: 5f:e5:85:1b:c2:cb:f7:2a:29:b4:fd:29:26:77:3b:25:20:4c: 31:a8:a2:92:fe:ea:53:ca:40:aa:8c:09:39:01:98:06:3e:98: b3:bb:cd:19:b3:c9:c0:4f:9e:fd:93:f6:0f:06:a1:8f:3a:cd: ee:e4:82:5c:bd:75:ac:44:90:21:41:07:0e:e2:dd:82:a5:90: c6:d3:31:e8:ca:38:04:97:25:c5:5d:f8:86:13:ec:f4:b2:a6: f7:0a:46:bf:38:90:c8:9e:ad:e4:fb:a0:e0:f6:ee:62:7a:1c: 19:16:f5:12:e1:d9:8e:3f:aa:d7:0b:fa:59:82:ea:49:83:87: cb:bb:a9:56:51:7b:72:e1:45:7a:cd:6a:82:f4:cc:a0:21:d8: 7f:36:90:95:d7:15:cd:94:61:a3:e0:ad:2d:8c:81:ab:fc:3c: 78:a1:e9:f7:78:31:23:32:7e:36:fa:99:9b:b0:33:da:7c:36: 4d:a3:ab:11:d7:50:5b:f5:d0:57:0d:2a:67:71:63:31:c1:0b: c7:c7:7c:05:25:76:b5:ea:0e:fd:99:c3:f4:b3:d8:64:bd:2d: 18:12:7e:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5DeuaA+UM52YIt0AbiV5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxN2Y2ZjZlMTUwYTYwNDNjYjIwOTNiMDhkZGQzYTJhNGFi OTdhMzcwHhcNMjUxMjA2MDkwMDMzWhcNMjUxMjA3MDkwMDMzWjAzMTEwLwYDVQQD EygwMjUyM2M4MTI1Nzc4YTk4NGVjOWJiYTRhNGE4OWRjM2I1NTM3MzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iun3q5qNMXoyQzsMZF3JlYOkGkJ PLQRJKapmXLIn/xSqNm9xbOzG7zGevbptfTom896Tpl7TLVqEdhQZeHCaUra0NUv 0th537rD9OJcj2gca5M9vQle6cogLulDsKbgHwGwDUmmpoplF5dIhGna/qigbKi5 OaWbGbyClgist40cVgu9z548CJhhDgbMYLrSw7LTKEZmzY//p/q9v2XT2Uv2f7Dl cLmfev/M/BgpV0i/u7YY3TziWdEP8JUeKbeDXsqhcuRQHwt9dl6Hdh6WL5cTXKUm 0EVUFHUOIpqLZDPRqEZDAKGHV2waL0brLB2LaKY+e7L81zGzkostfjHeLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJSPIEld4qYTsm7pKSoncO1U3MDMB8GA1UdIwQY MBaAFGF/b24VCmBDyyCTsI3dOipKuXo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVg5dmJoVUtZRVBMSUpPd2pkMDZLa3E1ZWpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82Yzk5MDItY2Q0NS00NDA0LTg1MTMt NzFjM2Q2YWEyODk5LzEvWVg5dmJoVUtZRVBMSUpPd2pkMDZLa3E1ZWpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi82Yzk5MDItY2Q0NS00NDA0LTg1MTMtNzFjM2Q2YWEyODk5 LzEvWVg5dmJoVUtZRVBMSUpPd2pkMDZLa3E1ZWpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanlN7QDN y9myQGbWLDsyw+kOxkI7sS6/Eh/TJGYWZvkSIxS9X+WFG8LL9yoptP0pJnc7JSBM Maiikv7qU8pAqowJOQGYBj6Ys7vNGbPJwE+e/ZP2DwahjzrN7uSCXL11rESQIUEH DuLdgqWQxtMx6Mo4BJclxV34hhPs9LKm9wpGvziQyJ6t5Pug4PbuYnocGRb1EuHZ jj+q1wv6WYLqSYOHy7upVlF7cuFFes1qgvTMoCHYfzaQldcVzZRho+CtLYyBq/w8 eKHp93gxIzJ+NvqZm7Az2nw2TaOrEddQW/XQVw0qZ3FjMcELx8d8BSV2teoO/ZnD 9LPYZL0tGBJ+dA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:26:10 2025 by rpki-client