This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
File: YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft (raw, json)
Hash identifier: WJD8U9hJRl2muW9MOqimPTSNK64zmfM3j/poVlgoQ+8=
Subject key identifier: CA:0B:52:A8:CC:BF:C0:51:46:25:D7:1F:24:F5:BB:B4:B1:89:A6:BF
Authority key identifier: 62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
Certificate issuer: /CN=62927b36b138f086358938e3acfda4638e56a792
Certificate serial: 019AF1D248073080B545C2307C4CE8D81D79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
Manifest number: 14A2
Signing time: Sat 06 Dec 2025 04:01:21 +0000
Manifest this update: Sat 06 Dec 2025 04:01:21 +0000
Manifest next update: Sun 07 Dec 2025 04:01:21 +0000
Files and hashes: 1: 4shZBDKZZPGnSQMfuQiOImBHql8.roa (hash: Jfoq3n1s/kyNKvCWlVGyWbHUx4CSO8/9+CCCYgnc/Us=)
2: FA2h5OHRpegZzdAFMMwkYVBg-BM.roa (hash: 9GzazJbnHKp6+I1Ph8x2q38kHV8Nlnih0rihfAr5aBo=)
3: YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl (hash: XRoJN81opZyso+3mrBQwl1j3Wx6ljeYisftBRBE+e1k=)
4: ZEOW67E73LjGkhRbjT8p8HAuQ7g.roa (hash: 3byQhC85THLNsX/WfVA4T3mVllKuuMpO1Ynx6g/Ksak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d2:48:07:30:80:b5:45:c2:30:7c:4c:e8:d8:1d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62927b36b138f086358938e3acfda4638e56a792
Validity
Not Before: Dec 6 04:01:21 2025 GMT
Not After : Dec 7 04:01:21 2025 GMT
Subject: CN=ca0b52a8ccbfc0514625d71f24f5bbb4b189a6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ad:87:18:aa:51:bd:80:31:04:a7:0f:bf:5e:
91:2d:d3:57:b7:0e:8b:a8:28:64:11:13:aa:dd:5f:
d2:84:ac:b2:24:c3:37:00:98:96:07:fc:ab:7d:52:
f2:15:51:29:20:41:e5:41:7e:99:60:d0:33:f8:a1:
c1:c9:7c:67:b0:4d:d0:e6:db:61:45:d3:16:06:aa:
ef:3b:29:30:57:91:49:67:f6:14:ca:ab:38:89:c3:
e1:61:5e:7e:26:f8:96:d0:13:18:1f:77:1f:bf:e3:
f6:64:a4:7c:ae:f0:d8:e7:72:33:65:b2:f0:87:1e:
33:9b:a7:3c:25:68:b7:8e:2b:e1:17:6b:f8:13:91:
cf:a8:8b:cc:3b:6f:db:dc:df:0e:83:a0:21:81:5d:
70:cd:07:cc:4a:cb:d4:6b:8a:76:66:a8:10:64:82:
35:f6:9a:71:7d:44:70:7b:69:2f:5d:be:67:62:a6:
ef:23:47:21:a0:39:d3:bb:ee:0e:c2:e4:37:c6:cd:
b9:60:32:80:3f:87:b2:03:96:2d:16:61:81:3d:75:
e3:65:44:b1:29:db:ee:c5:60:b1:d8:0a:cd:3d:b5:
19:8b:10:ef:55:82:e7:ef:96:39:04:05:ca:35:94:
0f:6c:d6:da:b2:1c:48:50:1c:9e:f0:c7:a8:b4:fe:
72:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0B:52:A8:CC:BF:C0:51:46:25:D7:1F:24:F5:BB:B4:B1:89:A6:BF
X509v3 Authority Key Identifier:
keyid:62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:66:ee:ae:26:84:39:8e:9c:35:58:42:50:7f:14:01:5a:88:
27:62:4b:63:7a:ae:c6:4e:3f:7a:56:32:0e:87:cb:fa:f0:04:
21:5a:4f:60:b3:cd:18:4d:f2:11:9f:e9:0a:13:27:5b:46:9c:
88:98:a4:b6:fd:46:2c:c4:1e:8b:58:b1:99:9a:35:84:fa:4e:
68:71:73:c1:a1:19:f1:07:20:07:51:1b:5c:74:c6:3b:71:bd:
f7:00:46:10:a7:ab:4c:12:ab:d0:c2:47:47:29:35:61:da:7a:
d7:d4:0c:15:86:e6:54:4b:0a:06:f5:21:34:5a:6c:bb:fd:a1:
8f:1f:fc:b5:09:a0:0c:85:db:48:f6:73:0e:29:d4:1b:b5:bf:
3d:41:48:bd:da:13:9c:ab:94:16:7a:57:85:d8:46:ad:26:c2:
e2:45:31:f3:30:02:c2:7f:57:3f:78:e1:fa:83:3e:75:a2:6d:
7e:e1:77:ea:c7:7f:26:fe:c6:1e:c7:cd:08:d9:bd:08:3c:62:
4a:a6:5f:68:0f:f2:55:8d:18:88:4b:3e:6f:de:45:6f:57:52:
98:e8:a5:33:ba:d4:f5:de:7f:5e:62:00:1d:66:ac:b4:f3:04:
7d:a1:8a:e0:bb:e3:31:f6:7a:79:c0:e4:a0:a0:c2:28:5b:d2:
ab:27:ae:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:59:55 2025 by rpki-client