This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft File: yniqfjFrIfhDz7lYEMaAzdv6bm8.mft (raw, json) Hash identifier: 0tr5MqLyjyOsY440a9CdPQjk/bPezUKbWG8aH6Hnkyc= Subject key identifier: 11:CA:9B:84:C2:2A:28:16:14:B7:69:6F:5A:6C:7A:C6:8C:96:FB:70 Authority key identifier: CA:78:AA:7E:31:6B:21:F8:43:CF:B9:58:10:C6:80:CD:DB:FA:6E:6F Certificate issuer: /CN=ca78aa7e316b21f843cfb95810c680cddbfa6e6f Certificate serial: 019AF19A92612511955D289AACC15CE3BEAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft Manifest number: 04B2 Signing time: Sat 06 Dec 2025 03:00:30 +0000 Manifest this update: Sat 06 Dec 2025 03:00:30 +0000 Manifest next update: Sun 07 Dec 2025 03:00:30 +0000 Files and hashes: 1: KmT0zBeAxHbx64CqcJ4Kw-HSMGw.roa (hash: g294VQOsqRVKkLhlE8NKqam6KvGQ9H8e4fukJsFTk1Y=) 2: yniqfjFrIfhDz7lYEMaAzdv6bm8.crl (hash: E2CI4Cwrzxd/0y/5Gmc0VGA6dHaIbGRYxPCUMbIhmhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:92:61:25:11:95:5d:28:9a:ac:c1:5c:e3:be:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca78aa7e316b21f843cfb95810c680cddbfa6e6f Validity Not Before: Dec 6 03:00:30 2025 GMT Not After : Dec 7 03:00:30 2025 GMT Subject: CN=11ca9b84c22a281614b7696f5a6c7ac68c96fb70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ef:69:f0:57:44:a8:d8:bf:1a:e0:f0:62:4f: 2d:42:80:86:97:14:96:4b:7d:ed:e4:5c:05:59:ee: 00:86:13:de:1d:a3:ad:6d:35:f8:21:5a:03:6b:e5: ea:20:ee:d1:1f:23:e8:49:da:86:4d:74:33:f6:a7: 73:8d:0e:41:af:d0:29:65:ec:dd:36:7f:53:93:da: c6:0b:c3:33:c2:a5:ca:b9:53:71:11:6e:c5:99:74: 3a:d1:14:7e:69:66:fd:70:ee:1f:7a:f1:7f:43:ff: 4c:05:67:16:e5:b9:45:21:2e:c6:1d:40:cb:54:2d: a4:ce:6b:21:33:eb:11:89:58:e8:7b:17:88:88:ea: b6:31:d4:19:34:71:f2:9d:64:fb:80:3c:54:45:3f: 60:34:bf:5b:cf:0d:bf:c7:0c:4f:c5:5e:43:f1:ed: 73:c6:f1:c9:6f:c5:37:7f:b6:f9:3b:c2:26:cf:61: e2:c9:66:fc:70:ee:fa:99:97:9a:13:97:c1:2e:c6: 5e:91:1c:44:7b:ed:8b:47:1c:29:b8:ba:61:37:0a: 4b:7a:bf:b0:c6:49:74:0a:49:15:82:1f:aa:76:b9: 51:cd:bc:e0:1f:4f:ba:e4:e3:ab:3f:b7:82:cb:4e: 4b:e2:b9:19:32:01:b3:ab:93:cf:e4:7b:ae:d0:55: 5e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CA:9B:84:C2:2A:28:16:14:B7:69:6F:5A:6C:7A:C6:8C:96:FB:70 X509v3 Authority Key Identifier: keyid:CA:78:AA:7E:31:6B:21:F8:43:CF:B9:58:10:C6:80:CD:DB:FA:6E:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:74:a9:1c:e9:76:a4:f4:a9:fe:3f:7e:29:d0:6f:f2:fa:f7: bf:49:a2:d6:ad:7a:08:70:4f:ae:1d:4d:1e:49:44:28:2e:48: 49:64:26:61:d2:98:66:9b:15:c2:f3:ed:b1:cb:4b:9f:f9:bb: 02:2e:75:87:16:14:76:67:c6:cb:c6:64:b0:6b:b0:c4:e9:78: 32:24:5c:7d:2d:5a:86:dc:af:f2:b7:92:c7:ad:f1:7c:67:99: 87:36:fe:00:be:1f:bd:ff:e5:be:a3:b4:8d:55:58:9a:2e:c2: 07:4b:0a:52:50:46:81:4e:48:0c:af:a7:a7:ce:ba:9a:4f:6a: ad:70:ae:68:44:6c:2d:d1:34:6c:4d:26:f6:2e:a4:20:b9:f4: f1:72:ab:8d:f1:49:1a:d7:b7:c2:53:73:9a:b6:96:eb:ff:10: c3:4f:4c:4c:1b:77:53:19:7b:e0:8f:fd:60:cf:eb:ae:8d:ea: 5e:56:d3:af:62:b7:0a:c3:5e:1c:41:0f:7d:da:4c:a8:7e:30: 17:cd:30:32:07:93:d5:87:ee:ba:ab:47:dc:15:a3:81:3c:8f: c7:63:c1:9c:c4:33:b9:7f:56:be:8a:4d:ba:b0:f4:ca:5c:9a: 70:a1:ff:a6:0c:a6:fa:72:0f:00:d3:f8:64:fd:23:55:08:01: 28:6c:ed:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpJhJRGVXSiarMFc476sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNzhhYTdlMzE2YjIxZjg0M2NmYjk1ODEwYzY4MGNkZGJm YTZlNmYwHhcNMjUxMjA2MDMwMDMwWhcNMjUxMjA3MDMwMDMwWjAzMTEwLwYDVQQD EygxMWNhOWI4NGMyMmEyODE2MTRiNzY5NmY1YTZjN2FjNjhjOTZmYjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte9p8FdEqNi/GuDwYk8tQoCGlxSW S33t5FwFWe4AhhPeHaOtbTX4IVoDa+XqIO7RHyPoSdqGTXQz9qdzjQ5Br9ApZezd Nn9Tk9rGC8MzwqXKuVNxEW7FmXQ60RR+aWb9cO4fevF/Q/9MBWcW5blFIS7GHUDL VC2kzmshM+sRiVjoexeIiOq2MdQZNHHynWT7gDxURT9gNL9bzw2/xwxPxV5D8e1z xvHJb8U3f7b5O8Imz2HiyWb8cO76mZeaE5fBLsZekRxEe+2LRxwpuLphNwpLer+w xkl0CkkVgh+qdrlRzbzgH0+65OOrP7eCy05L4rkZMgGzq5PP5Huu0FVekwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHKm4TCKigWFLdpb1psesaMlvtwMB8GA1UdIwQY MBaAFMp4qn4xayH4Q8+5WBDGgM3b+m5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW5pcWZqRnJJZmhEejdsWUVNYUF6ZHY2Ym04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy83ZGEzNGMtMzk4NC00NDQyLWI2NDYt ZTMxMzhmZjFlODk5LzEveW5pcWZqRnJJZmhEejdsWUVNYUF6ZHY2Ym04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy83ZGEzNGMtMzk4NC00NDQyLWI2NDYtZTMxMzhmZjFlODk5 LzEveW5pcWZqRnJJZmhEejdsWUVNYUF6ZHY2Ym04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3SpHOl2 pPSp/j9+KdBv8vr3v0mi1q16CHBPrh1NHklEKC5ISWQmYdKYZpsVwvPtsctLn/m7 Ai51hxYUdmfGy8ZksGuwxOl4MiRcfS1ahtyv8reSx63xfGeZhzb+AL4fvf/lvqO0 jVVYmi7CB0sKUlBGgU5IDK+np866mk9qrXCuaERsLdE0bE0m9i6kILn08XKrjfFJ Gte3wlNzmraW6/8Qw09MTBt3Uxl74I/9YM/rro3qXlbTr2K3CsNeHEEPfdpMqH4w F80wMgeT1YfuuqtH3BWjgTyPx2PBnMQzuX9WvopNurD0ylyacKH/pgym+nIPANP4 ZP0jVQgBKGzt5w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:50:37 2025 by rpki-client