This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft File: yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft (raw, json) Hash identifier: Bum7WJ7Fa1FQhyx+uMDJwHbxc8ggYL7cF6MKZBLcnEA= Subject key identifier: AD:DE:45:6D:A7:D1:83:5F:0D:78:F0:A1:6B:3C:6A:0C:C1:D9:FD:1B Authority key identifier: C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64 Certificate issuer: /CN=c86406264e49cf6f89ca5d2c6af750b36e156564 Certificate serial: 019AF2092A696EF52D08254410AC2AA05750 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft Manifest number: 0597 Signing time: Sat 06 Dec 2025 05:01:18 +0000 Manifest this update: Sat 06 Dec 2025 05:01:18 +0000 Manifest next update: Sun 07 Dec 2025 05:01:18 +0000 Files and hashes: 1: de76rG8nL4tZzOssRD1ykxkBwJQ.roa (hash: PZ6Gs/7Ric8QzvgdkQxDNgPGEbYADwXFDmxjygY8QME=) 2: yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl (hash: BZh5bZaJpMEe/BhQi6hhCcnnKGZugnJfyFLW3SZfT+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:2a:69:6e:f5:2d:08:25:44:10:ac:2a:a0:57:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c86406264e49cf6f89ca5d2c6af750b36e156564 Validity Not Before: Dec 6 05:01:18 2025 GMT Not After : Dec 7 05:01:18 2025 GMT Subject: CN=adde456da7d1835f0d78f0a16b3c6a0cc1d9fd1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:aa:a5:c7:fe:e0:ac:10:66:f1:7b:9a:44:23: 1e:e9:fd:e2:f0:7b:66:e2:f4:6c:b7:50:ec:c0:85: ec:ce:13:8d:5d:66:d7:bf:58:9d:4f:e1:bf:71:3d: 37:a1:2f:92:d0:dd:ca:d1:ef:94:6d:b9:0c:a5:2c: e3:19:0f:41:38:49:2f:4f:8d:a0:85:0e:ab:de:d2: 60:37:50:6f:37:93:6b:9a:6f:32:a8:4e:66:2e:6c: c4:66:b6:f5:52:9b:66:5a:b4:6d:4a:0e:60:90:98: 6a:32:40:cb:53:96:ce:1a:01:ba:f3:d5:56:0d:8b: 9e:e2:e4:cf:82:e0:b5:03:6e:5d:08:d3:e9:51:4f: f8:ca:a0:fd:97:d3:87:9f:ee:7d:1d:cd:8d:b1:2a: 22:5c:b4:c7:14:df:3b:5d:30:34:a7:d0:a3:a6:f8: 15:be:52:a7:92:30:16:51:dc:d4:60:71:24:d1:55: 35:68:a9:9a:07:e4:1e:22:1f:48:6a:f2:18:22:d8: 71:7d:cc:1f:e8:ad:b9:dd:b5:43:61:f0:8a:b0:83: b1:85:01:88:60:d2:86:9c:d5:20:78:98:24:5a:57: 8c:aa:e4:4f:d8:30:74:18:41:9f:5c:aa:4f:06:e8: 16:b4:5a:04:d9:94:38:f5:6f:82:f3:17:01:85:42: 72:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:DE:45:6D:A7:D1:83:5F:0D:78:F0:A1:6B:3C:6A:0C:C1:D9:FD:1B X509v3 Authority Key Identifier: keyid:C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:19:a5:be:32:1e:b5:bb:92:00:7b:02:4c:c0:ae:1f:fa:2a: 94:64:3b:c9:a9:ff:24:ac:9b:04:a6:75:d6:5b:9f:18:8b:8b: 31:e8:74:1a:7f:f8:28:7b:41:7c:cc:9d:bc:11:fe:fa:72:5c: ae:d8:46:fb:50:b6:82:a1:c7:0c:23:29:00:23:c3:eb:a2:a9: 5c:1e:fd:02:c3:b4:76:02:69:3d:ad:7d:c0:53:81:0a:f1:99: 9b:e2:b1:51:30:1c:d2:88:09:42:bb:01:89:96:d8:c2:a5:3e: 77:c2:c8:57:c9:c1:59:a8:da:da:d5:ce:4a:a2:17:19:a7:aa: 32:ad:1b:11:d2:9b:fc:12:00:95:5b:c8:6a:36:65:b3:5e:d6: 6e:8a:1f:38:fa:00:2b:d9:b2:b3:6c:1b:f7:7d:68:7b:38:5e: bb:4c:12:5d:38:5d:89:87:b0:47:f9:69:36:d8:4b:5b:7d:e1: 95:86:4e:c4:dd:4b:eb:3d:2b:89:33:76:11:ee:f6:29:c3:4a: a8:a3:59:14:28:c9:ca:44:e4:1c:b2:c8:1b:d0:83:8c:29:ce: 6b:84:89:13:a4:bd:25:f9:ca:38:fc:6e:14:bb:c9:18:40:ef: 95:21:22:5e:8b:1d:cd:23:47:9a:6f:ea:14:d0:e0:d5:04:f1: 5e:c9:b6:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSppbvUtCCVEEKwqoFdQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NjQwNjI2NGU0OWNmNmY4OWNhNWQyYzZhZjc1MGIzNmUx NTY1NjQwHhcNMjUxMjA2MDUwMTE4WhcNMjUxMjA3MDUwMTE4WjAzMTEwLwYDVQQD EyhhZGRlNDU2ZGE3ZDE4MzVmMGQ3OGYwYTE2YjNjNmEwY2MxZDlmZDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaqlx/7grBBm8XuaRCMe6f3i8Htm 4vRst1DswIXszhONXWbXv1idT+G/cT03oS+S0N3K0e+UbbkMpSzjGQ9BOEkvT42g hQ6r3tJgN1BvN5Nrmm8yqE5mLmzEZrb1UptmWrRtSg5gkJhqMkDLU5bOGgG689VW DYue4uTPguC1A25dCNPpUU/4yqD9l9OHn+59Hc2NsSoiXLTHFN87XTA0p9CjpvgV vlKnkjAWUdzUYHEk0VU1aKmaB+QeIh9IavIYIthxfcwf6K253bVDYfCKsIOxhQGI YNKGnNUgeJgkWleMquRP2DB0GEGfXKpPBugWtFoE2ZQ49W+C8xcBhUJylwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3eRW2n0YNfDXjwoWs8agzB2f0bMB8GA1UdIwQY MBaAFMhkBiZOSc9vicpdLGr3ULNuFWVkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUdRR0prNUp6Mi1KeWwwc2F2ZFFzMjRWWldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC84NzRiM2ItNjdkZS00OWVmLThmYzEt NjJkZDZlY2ZlNzI1LzEveUdRR0prNUp6Mi1KeWwwc2F2ZFFzMjRWWldRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC84NzRiM2ItNjdkZS00OWVmLThmYzEtNjJkZDZlY2ZlNzI1 LzEveUdRR0prNUp6Mi1KeWwwc2F2ZFFzMjRWWldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRmlvjIe tbuSAHsCTMCuH/oqlGQ7yan/JKybBKZ11lufGIuLMeh0Gn/4KHtBfMydvBH++nJc rthG+1C2gqHHDCMpACPD66KpXB79AsO0dgJpPa19wFOBCvGZm+KxUTAc0ogJQrsB iZbYwqU+d8LIV8nBWaja2tXOSqIXGaeqMq0bEdKb/BIAlVvIajZls17WboofOPoA K9mys2wb931oezheu0wSXThdiYewR/lpNthLW33hlYZOxN1L6z0riTN2Ee72KcNK qKNZFCjJykTkHLLIG9CDjCnOa4SJE6S9JfnKOPxuFLvJGEDvlSEiXosdzSNHmm/q FNDg1QTxXsm2/w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:13:47 2025 by rpki-client