This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft File: yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft (raw, json) Hash identifier: xi9B2w6mGrZTPToZViIcuPPLvKtxhE+GLBo16GsDOYA= Subject key identifier: 68:6D:85:D8:E9:DB:B8:CC:F6:E9:ED:B4:0B:6B:23:CD:C7:90:78:25 Authority key identifier: CB:2C:C7:CE:42:E7:9C:35:1A:C7:D2:8F:64:5D:E7:F5:93:8A:CC:9C Certificate issuer: /CN=cb2cc7ce42e79c351ac7d28f645de7f5938acc9c Certificate serial: 019AF3C03631F448B2F86E21F7D550A0E930 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 13:00:51 +0000 Manifest this update: Sat 06 Dec 2025 13:00:51 +0000 Manifest next update: Sun 07 Dec 2025 13:00:51 +0000 Files and hashes: 1: rYX5OSjisXVBgIC77wXTzITcbqs.roa (hash: SPnPR9xhnE7+gAosfCHCqCDCEcNhjAT2MXJYL+lu5nM=) 2: yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl (hash: OHSy0h9jIw3R1gE+s1U1RkVE8YpExT+e9O0fPq0IJc4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:36:31:f4:48:b2:f8:6e:21:f7:d5:50:a0:e9:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb2cc7ce42e79c351ac7d28f645de7f5938acc9c Validity Not Before: Dec 6 13:00:51 2025 GMT Not After : Dec 7 13:00:51 2025 GMT Subject: CN=686d85d8e9dbb8ccf6e9edb40b6b23cdc7907825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:73:c9:e9:74:2f:8c:1f:dd:3b:5e:de:a5:77: d1:26:ff:c6:30:71:ad:13:fc:8d:50:73:51:ea:21: c2:4e:60:a6:d8:5b:41:7e:2d:18:ad:11:cc:2a:3c: 74:09:b2:31:e0:ad:e2:f2:52:4e:18:75:0b:28:14: 46:7e:d2:70:74:12:84:91:64:32:cc:b0:dc:7f:65: 34:bb:22:68:74:ab:02:a7:7e:5d:94:dc:14:10:dd: 5e:a2:9c:95:96:30:42:93:33:2a:ff:13:3f:77:b4: 9f:1a:ba:e9:4d:9c:e4:07:e2:62:d4:51:0f:77:ff: 17:79:f6:54:19:8e:05:b9:9a:c1:74:d3:4f:ae:b3: 28:41:25:a4:24:00:e3:e9:cc:7d:f8:ad:06:38:84: 4f:dc:75:5e:11:ed:be:0f:6d:c2:ac:c7:61:a7:49: 16:4f:e5:4b:6a:10:36:fa:72:5e:c8:78:47:55:44: bc:bb:4e:63:d7:50:27:42:9a:ef:0d:62:9b:c5:57: d1:48:6c:77:fb:eb:31:fe:b1:83:6c:6a:42:17:26: 87:c2:5e:2b:bb:b8:70:cf:13:19:86:d6:66:88:c5: 20:78:cf:4d:e2:ba:8e:96:56:9e:6a:de:0a:fc:7c: 08:01:09:42:10:90:56:44:e2:8c:ba:dd:f5:41:a4: c2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:6D:85:D8:E9:DB:B8:CC:F6:E9:ED:B4:0B:6B:23:CD:C7:90:78:25 X509v3 Authority Key Identifier: keyid:CB:2C:C7:CE:42:E7:9C:35:1A:C7:D2:8F:64:5D:E7:F5:93:8A:CC:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:9d:f7:0e:96:0e:fd:86:eb:d9:1f:e7:b7:17:ef:31:3c:9a: b7:8b:7a:81:b4:05:6f:50:7d:c5:30:9e:16:94:68:2e:10:d6: ef:6b:17:37:63:ef:2e:7a:ce:67:19:82:f6:e9:9d:5a:c6:15: 75:fb:e2:ca:c5:28:fa:0f:2f:13:f8:0b:87:03:16:2f:6d:a8: 25:e5:a2:f4:19:eb:38:45:78:a7:c0:85:7b:6c:71:66:42:e0: 4f:de:70:44:5c:e3:ec:53:ce:0a:bf:72:55:ab:31:92:0b:43: 5a:b3:c9:3a:b9:36:18:d3:8b:76:11:c7:8e:e9:fe:55:a5:7b: 12:8e:c7:7e:7c:c9:10:9c:64:3a:4e:47:12:79:8d:77:61:e7: 51:07:17:13:2e:ba:88:29:33:6c:7e:73:15:34:f1:05:43:5d: fb:b4:06:2e:2e:87:ab:13:d2:f1:bb:6e:86:1d:a2:d3:3d:a2: d0:26:94:d0:39:64:70:ec:ce:cd:3c:a6:cb:0a:d3:ed:62:4c: de:d1:bb:1a:de:87:26:2d:3f:4c:28:32:3d:a4:ca:1e:84:19: 6e:d8:08:7d:0b:78:ae:cb:b6:93:05:22:79:f8:99:01:de:c7: 6f:8c:bb:af:4f:74:6c:d7:28:3f:1c:a5:3f:4b:c7:87:e6:70: 76:98:d6:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwDYx9Eiy+G4h99VQoOkwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMmNjN2NlNDJlNzljMzUxYWM3ZDI4ZjY0NWRlN2Y1OTM4 YWNjOWMwHhcNMjUxMjA2MTMwMDUxWhcNMjUxMjA3MTMwMDUxWjAzMTEwLwYDVQQD Eyg2ODZkODVkOGU5ZGJiOGNjZjZlOWVkYjQwYjZiMjNjZGM3OTA3ODI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunPJ6XQvjB/dO17epXfRJv/GMHGt E/yNUHNR6iHCTmCm2FtBfi0YrRHMKjx0CbIx4K3i8lJOGHULKBRGftJwdBKEkWQy zLDcf2U0uyJodKsCp35dlNwUEN1eopyVljBCkzMq/xM/d7SfGrrpTZzkB+Ji1FEP d/8XefZUGY4FuZrBdNNPrrMoQSWkJADj6cx9+K0GOIRP3HVeEe2+D23CrMdhp0kW T+VLahA2+nJeyHhHVUS8u05j11AnQprvDWKbxVfRSGx3++sx/rGDbGpCFyaHwl4r u7hwzxMZhtZmiMUgeM9N4rqOllaeat4K/HwIAQlCEJBWROKMut31QaTCLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhthdjp27jM9unttAtrI83HkHglMB8GA1UdIwQY MBaAFMssx85C55w1GsfSj2Rd5/WTisycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXl6SHprTG5uRFVheDlLUFpGM245Wk9Lekp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC85MGM0MDMtZTZlOS00MWUwLWIxNTct NzgxZDhmYjFkMmZiLzEveXl6SHprTG5uRFVheDlLUFpGM245Wk9Lekp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC85MGM0MDMtZTZlOS00MWUwLWIxNTctNzgxZDhmYjFkMmZi LzEveXl6SHprTG5uRFVheDlLUFpGM245Wk9Lekp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs533DpYO /Ybr2R/ntxfvMTyat4t6gbQFb1B9xTCeFpRoLhDW72sXN2PvLnrOZxmC9umdWsYV dfviysUo+g8vE/gLhwMWL22oJeWi9BnrOEV4p8CFe2xxZkLgT95wRFzj7FPOCr9y VasxkgtDWrPJOrk2GNOLdhHHjun+VaV7Eo7HfnzJEJxkOk5HEnmNd2HnUQcXEy66 iCkzbH5zFTTxBUNd+7QGLi6HqxPS8btuhh2i0z2i0CaU0DlkcOzOzTymywrT7WJM 3tG7Gt6HJi0/TCgyPaTKHoQZbtgIfQt4rsu2kwUiefiZAd7Hb4y7r090bNcoPxyl P0vHh+ZwdpjWtw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:31:08 2025 by rpki-client