This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft File: ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft (raw, json) Hash identifier: +70F5hAv2deApDQfux2qfJo8/3fi7NFK42OSkCtoD8s= Subject key identifier: 29:5F:08:E4:7C:3D:05:D1:4C:65:50:EF:01:E3:3C:82:AF:CA:76:7C Authority key identifier: CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5 Certificate issuer: /CN=cac9804e227eaac9ac09b0821fc07ee2817777b5 Certificate serial: 019AF31D166540196DEDEF81DEAD70309B38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft Manifest number: 10CB Signing time: Sat 06 Dec 2025 10:02:40 +0000 Manifest this update: Sat 06 Dec 2025 10:02:40 +0000 Manifest next update: Sun 07 Dec 2025 10:02:40 +0000 Files and hashes: 1: 1bT_z3QhDrRtR0bAMfMHm2giTF4.roa (hash: UdAyHLTajp0O5fgzTOphNRIpwXVUSlhxrrLMkoKDUAw=) 2: C1FyQJSK2-uv7URyciZXxMvVb6c.roa (hash: CAmInxyQhyb9MZHRVwkcOEX1WeCGUI9sXRoPqIH4UiI=) 3: IELJH6M7c-qGa_xF_N_rVAXGjYc.roa (hash: QPFfU1BkEUCanKp/XJb5ENTQ74R8UjYATL4PwXWDHyg=) 4: ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl (hash: OT+ifll1dKbupu8rrZxD+Fu6jYS2eEuLPldPyZEaqK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:16:65:40:19:6d:ed:ef:81:de:ad:70:30:9b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cac9804e227eaac9ac09b0821fc07ee2817777b5 Validity Not Before: Dec 6 10:02:40 2025 GMT Not After : Dec 7 10:02:40 2025 GMT Subject: CN=295f08e47c3d05d14c6550ef01e33c82afca767c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a0:84:d8:0a:9f:8e:ad:02:09:77:d6:1d:55: b8:7f:de:7f:5b:26:d6:3b:6f:99:92:39:6c:95:b9: 07:35:d3:6e:74:76:87:4c:57:4d:de:24:bd:11:46: 4d:dc:78:54:48:67:7f:05:45:1a:70:0c:50:c6:e0: 29:88:7f:2b:db:e9:8d:36:9c:4c:47:30:47:e9:9f: d8:c5:ff:ed:2c:70:b5:70:db:fe:6e:81:d1:a1:c8: cb:42:71:b6:80:9d:fe:e6:ef:f7:61:5f:39:c5:f9: ac:a0:0c:e7:a3:e5:39:a5:d1:60:3e:3f:60:d6:85: 4d:f5:af:f9:d1:16:21:75:f3:76:9f:0e:98:c5:18: a6:e3:00:28:d3:98:8b:b3:e1:fc:dc:b9:73:94:23: 6e:12:2f:35:10:d0:6e:26:1b:81:19:78:44:89:d3: 27:c7:f1:05:26:00:68:70:98:c9:b3:fb:a1:f6:3a: fe:42:a2:f6:76:9d:27:99:7d:6f:2e:13:83:f5:6a: 45:fa:06:4d:fe:32:59:13:cb:7b:9b:bd:ae:27:8e: 50:30:ef:39:82:79:51:09:bc:24:4c:6e:dc:28:e4: 7a:21:a4:3e:05:3e:2f:fb:79:ab:1c:cf:d4:07:da: f5:7d:a8:27:3b:68:da:f9:51:5e:ad:91:6b:52:b9: ad:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5F:08:E4:7C:3D:05:D1:4C:65:50:EF:01:E3:3C:82:AF:CA:76:7C X509v3 Authority Key Identifier: keyid:CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:6a:5b:ff:27:50:52:f1:85:ce:c0:a2:f9:d3:f1:26:96:22: 06:1e:2c:4a:3c:fb:d1:73:5e:0b:b5:70:2f:c3:71:ea:5d:2f: f2:5d:4e:5e:66:0c:46:35:7a:c5:01:37:6f:3b:88:9f:d7:17: 41:b5:38:8b:72:39:0d:c7:4b:c3:76:93:b0:f5:2e:b9:de:84: b9:05:a3:49:d5:05:f2:e4:78:f2:bd:98:73:6b:ea:fd:d7:98: 17:0c:1a:7c:ef:72:15:00:c6:b7:c1:8e:07:43:11:e9:a4:bd: 52:5b:09:22:82:3e:14:43:d7:00:9b:41:98:5a:c4:2e:0e:f2: 1f:ad:c3:83:6a:da:a0:3f:ce:80:97:59:02:3f:09:57:07:f1: 85:44:c3:5f:5e:09:25:15:26:99:df:b3:5c:a8:a0:ae:25:bb: e1:73:e8:b5:b6:f2:64:34:b0:77:da:1a:21:8c:e3:75:dc:c5: f4:1f:e5:ed:0d:f9:a8:87:93:a2:cb:6a:ae:b9:c4:db:0a:11: d9:16:37:bb:d7:66:de:ad:da:b6:58:f0:60:54:23:11:c2:cd: 34:e7:8e:2f:76:a4:16:8e:27:52:09:cd:51:5b:fe:f7:db:cd: 23:f3:1d:11:05:e0:f6:d4:86:c3:43:fe:4d:0d:f0:42:31:b9: 9c:5e:07:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHRZlQBlt7e+B3q1wMJs4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYzk4MDRlMjI3ZWFhYzlhYzA5YjA4MjFmYzA3ZWUyODE3 Nzc3YjUwHhcNMjUxMjA2MTAwMjQwWhcNMjUxMjA3MTAwMjQwWjAzMTEwLwYDVQQD EygyOTVmMDhlNDdjM2QwNWQxNGM2NTUwZWYwMWUzM2M4MmFmY2E3NjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6CE2Aqfjq0CCXfWHVW4f95/WybW O2+ZkjlslbkHNdNudHaHTFdN3iS9EUZN3HhUSGd/BUUacAxQxuApiH8r2+mNNpxM RzBH6Z/Yxf/tLHC1cNv+boHRocjLQnG2gJ3+5u/3YV85xfmsoAzno+U5pdFgPj9g 1oVN9a/50RYhdfN2nw6YxRim4wAo05iLs+H83LlzlCNuEi81ENBuJhuBGXhEidMn x/EFJgBocJjJs/uh9jr+QqL2dp0nmX1vLhOD9WpF+gZN/jJZE8t7m72uJ45QMO85 gnlRCbwkTG7cKOR6IaQ+BT4v+3mrHM/UB9r1fagnO2ja+VFerZFrUrmtRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClfCOR8PQXRTGVQ7wHjPIKvynZ8MB8GA1UdIwQY MBaAFMrJgE4ifqrJrAmwgh/AfuKBd3e1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXNtQVRpSi1xc21zQ2JDQ0g4Qi00b0YzZDdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9iY2VhNWQtNTE0ZS00ZjUyLWI0OWEt OTBmYjU3ZDQwY2E3LzEveXNtQVRpSi1xc21zQ2JDQ0g4Qi00b0YzZDdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9iY2VhNWQtNTE0ZS00ZjUyLWI0OWEtOTBmYjU3ZDQwY2E3 LzEveXNtQVRpSi1xc21zQ2JDQ0g4Qi00b0YzZDdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGpb/ydQ UvGFzsCi+dPxJpYiBh4sSjz70XNeC7VwL8Nx6l0v8l1OXmYMRjV6xQE3bzuIn9cX QbU4i3I5DcdLw3aTsPUuud6EuQWjSdUF8uR48r2Yc2vq/deYFwwafO9yFQDGt8GO B0MR6aS9UlsJIoI+FEPXAJtBmFrELg7yH63Dg2raoD/OgJdZAj8JVwfxhUTDX14J JRUmmd+zXKigriW74XPotbbyZDSwd9oaIYzjddzF9B/l7Q35qIeTostqrrnE2woR 2RY3u9dm3q3atljwYFQjEcLNNOeOL3akFo4nUgnNUVv+99vNI/MdEQXg9tSGw0P+ TQ3wQjG5nF4HLg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:02:39 2025 by rpki-client