This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft File: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft (raw, json) Hash identifier: I+70kJhBC+cSWv9+seqO2DZNbOrGFIqDBm6mjE3xy6o= Subject key identifier: 8C:23:E5:6C:9F:85:6F:78:F3:A2:E0:AF:F3:4E:C5:4A:DE:F4:1C:1C Authority key identifier: 61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31 Certificate issuer: /CN=61041121ccc6e65d933961fd572d59e261f21a31 Certificate serial: 019AF38A1CBADB2D19167371E2513D7026FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 12:01:46 +0000 Manifest this update: Sat 06 Dec 2025 12:01:46 +0000 Manifest next update: Sun 07 Dec 2025 12:01:46 +0000 Files and hashes: 1: EwMUoWYW4dc0tRkkx15ciptmQak.roa (hash: IxyoruIJ2PWmvP6nW1K1qsmgYgo96Vwp6Gm5YCkQlWE=) 2: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl (hash: qhsbOXpIfCa/0riDjbaD50Fv9ANgExJ0C2LAx6SFShU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:1c:ba:db:2d:19:16:73:71:e2:51:3d:70:26:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61041121ccc6e65d933961fd572d59e261f21a31 Validity Not Before: Dec 6 12:01:46 2025 GMT Not After : Dec 7 12:01:46 2025 GMT Subject: CN=8c23e56c9f856f78f3a2e0aff34ec54adef41c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fe:bd:06:28:f6:ef:f5:5c:a4:16:58:8f:b0: 31:ca:f8:ae:b0:bd:96:a4:75:07:cf:88:da:18:ed: c1:2c:89:6d:9d:fc:ef:54:04:6c:8a:6c:a0:5c:b0: 70:d1:f1:8d:e0:95:9e:ad:84:bb:2f:3d:54:bc:74: 63:d3:1e:70:59:be:2c:0a:d4:80:0a:c7:99:e1:b5: 1c:d8:d0:17:26:2b:df:9c:b8:34:74:a6:43:99:7b: 51:90:9d:02:a7:42:be:e5:b6:2a:bc:f9:48:d7:11: 94:63:da:43:5a:74:21:d0:5f:72:e7:79:50:10:1a: 3b:08:29:97:36:80:6d:49:6a:e3:b8:29:17:cc:31: 7d:8f:63:3a:61:76:7a:b8:2d:af:61:2c:c3:32:11: 6b:fc:de:83:ed:07:e5:ff:66:0f:38:91:ba:3e:cb: 04:be:9b:94:ee:19:6c:01:ef:09:04:cb:34:47:ce: 66:a4:51:5b:3f:ee:ad:70:39:82:1a:0c:5a:8f:2f: 62:9c:f8:2d:b3:84:52:37:7d:9c:fa:27:12:fa:ba: 65:8e:87:39:9c:13:fd:f9:04:b9:ff:07:ad:3a:48: 1f:01:e9:62:df:14:9a:a5:d9:e1:0e:f8:8b:44:d1: 50:e6:bd:e6:b9:7f:e8:fb:fc:e2:70:fa:84:94:11: 80:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:23:E5:6C:9F:85:6F:78:F3:A2:E0:AF:F3:4E:C5:4A:DE:F4:1C:1C X509v3 Authority Key Identifier: keyid:61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:3c:10:a0:2a:37:ae:6d:40:fc:bf:13:1e:40:29:5b:0c:e6: 58:45:31:43:02:3c:5d:f9:c0:48:f0:a4:82:b2:9d:ba:e3:7d: e6:fc:e5:b0:be:e5:3a:0a:15:f9:b1:63:a4:a9:78:06:55:55: 7a:ac:b2:d8:ec:fa:cb:07:6f:41:40:7a:0a:92:26:bb:4c:b9: 59:16:fe:f7:a4:6d:1c:d3:24:7e:6c:70:f2:b2:8d:92:06:50: 19:b7:d4:79:a5:31:f9:c4:f1:79:13:65:0d:ff:92:ad:86:2f: e1:44:83:81:1e:f8:32:60:05:88:e0:a9:1e:da:46:a8:9a:3b: da:8c:e8:45:3c:2f:68:d3:f6:f7:4b:d8:9e:07:d1:7c:27:b9: 6f:d5:f3:ec:13:d0:8d:2a:05:f2:02:6d:a3:79:5d:e9:c1:42: 55:73:d0:b1:11:61:ba:24:28:83:5c:69:24:d4:8e:d5:e4:17: 71:be:29:19:47:32:24:5c:a6:41:b3:2c:5f:87:cc:d8:36:ce: b4:24:c7:2c:f3:18:53:e5:aa:cc:d5:f5:ae:0d:6e:32:49:26: a2:9d:00:04:b8:2c:60:80:fc:9c:19:cc:ee:e1:d8:d8:f8:0e: ab:3c:be:3f:73:65:0f:f2:29:21:15:ad:9d:b4:76:eb:6b:31: bf:79:00:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzihy62y0ZFnNx4lE9cCb/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMDQxMTIxY2NjNmU2NWQ5MzM5NjFmZDU3MmQ1OWUyNjFm MjFhMzEwHhcNMjUxMjA2MTIwMTQ2WhcNMjUxMjA3MTIwMTQ2WjAzMTEwLwYDVQQD Eyg4YzIzZTU2YzlmODU2Zjc4ZjNhMmUwYWZmMzRlYzU0YWRlZjQxYzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP69Bij27/VcpBZYj7AxyviusL2W pHUHz4jaGO3BLIltnfzvVARsimygXLBw0fGN4JWerYS7Lz1UvHRj0x5wWb4sCtSA CseZ4bUc2NAXJivfnLg0dKZDmXtRkJ0Cp0K+5bYqvPlI1xGUY9pDWnQh0F9y53lQ EBo7CCmXNoBtSWrjuCkXzDF9j2M6YXZ6uC2vYSzDMhFr/N6D7Qfl/2YPOJG6PssE vpuU7hlsAe8JBMs0R85mpFFbP+6tcDmCGgxajy9inPgts4RSN32c+icS+rpljoc5 nBP9+QS5/wetOkgfAeli3xSapdnhDviLRNFQ5r3muX/o+/zicPqElBGA7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIwj5WyfhW9486Lgr/NOxUre9BwcMB8GA1UdIwQY MBaAFGEEESHMxuZdkzlh/VctWeJh8hoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVFRUkljekc1bDJUT1dIOVZ5MVo0bUh5R2pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zODNiZTYtN2MzMS00ZGNhLWIzYzEt ZGJhNmQ3NTk0YzE5LzEvWVFRUkljekc1bDJUT1dIOVZ5MVo0bUh5R2pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zODNiZTYtN2MzMS00ZGNhLWIzYzEtZGJhNmQ3NTk0YzE5 LzEvWVFRUkljekc1bDJUT1dIOVZ5MVo0bUh5R2pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2DwQoCo3 rm1A/L8THkApWwzmWEUxQwI8XfnASPCkgrKduuN95vzlsL7lOgoV+bFjpKl4BlVV eqyy2Oz6ywdvQUB6CpImu0y5WRb+96RtHNMkfmxw8rKNkgZQGbfUeaUx+cTxeRNl Df+SrYYv4USDgR74MmAFiOCpHtpGqJo72ozoRTwvaNP290vYngfRfCe5b9Xz7BPQ jSoF8gJto3ld6cFCVXPQsRFhuiQog1xpJNSO1eQXcb4pGUcyJFymQbMsX4fM2DbO tCTHLPMYU+WqzNX1rg1uMkkmop0ABLgsYID8nBnM7uHY2PgOqzy+P3NlD/IpIRWt nbR262sxv3kAyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:56:58 2025 by rpki-client