This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft File: YYhVY15HlPWHjjuYX-2JNa4GxaE.mft (raw, json) Hash identifier: fZzIYcUy6pS3fExpDe5aRijB8lhixjJZFHOf+0aaipc= Subject key identifier: 9A:E3:A5:E4:CB:3E:6C:89:F3:CE:C9:90:3B:DC:A7:2D:53:C0:F1:46 Authority key identifier: 61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1 Certificate issuer: /CN=618855635e4794f5878e3b985fed8935ae06c5a1 Certificate serial: 019AF208EAAA736265A855A2BEEE09724FBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 05:01:01 +0000 Manifest this update: Sat 06 Dec 2025 05:01:01 +0000 Manifest next update: Sun 07 Dec 2025 05:01:01 +0000 Files and hashes: 1: 4G6PC7r1jLJaKqLvKiHJfqhR1e4.roa (hash: qfv1dvU9Pa4JA9Wl519haLOz9gG/Vfn4EhOnWCbqEOg=) 2: YYhVY15HlPWHjjuYX-2JNa4GxaE.crl (hash: q7eTBI1E+kMIwMrScPCwIvQbDuzBq89NOtUQ0uUE+Uk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ea:aa:73:62:65:a8:55:a2:be:ee:09:72:4f:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618855635e4794f5878e3b985fed8935ae06c5a1 Validity Not Before: Dec 6 05:01:01 2025 GMT Not After : Dec 7 05:01:01 2025 GMT Subject: CN=9ae3a5e4cb3e6c89f3cec9903bdca72d53c0f146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:76:7f:33:11:ac:31:4b:33:96:55:f4:cb:15: 1b:2d:00:f6:70:10:11:8a:22:b9:fc:1c:8a:0a:37: bd:a3:a1:aa:8b:9f:cb:07:df:23:b2:fd:e9:62:ed: 78:e4:2b:4a:03:36:90:22:9f:79:b8:53:ef:97:04: 6b:4b:ac:bf:2f:4d:21:4b:03:a4:15:ca:57:64:70: bb:86:5c:6b:b3:48:a6:cc:30:87:b1:89:15:e7:98: e3:b7:c5:2a:e2:d9:bc:9d:cb:1e:da:26:84:3d:56: 1b:33:75:b0:6a:e7:db:09:d7:58:46:a4:68:25:98: d7:5a:70:78:78:a0:13:80:63:13:ce:8c:c0:94:52: f5:bf:39:ba:92:ea:c2:b4:45:05:e2:65:7e:ab:bd: 08:74:37:02:b6:05:67:e8:8a:12:ee:1f:ea:05:0c: 80:c3:33:92:71:7e:fb:bc:b5:21:20:0b:eb:0d:75: b0:6f:53:77:9d:c8:c0:18:b1:79:b1:db:3f:11:b6: 58:89:63:3d:50:0a:db:b0:d2:fc:1e:d5:84:e9:64: 70:dd:a7:a7:1e:f7:eb:9b:cf:0b:f9:63:93:f3:ff: 30:b2:32:7c:39:0f:62:40:af:d6:bd:a8:8c:a4:48: 3e:17:0d:a0:d8:19:84:ad:53:c8:1c:ba:60:f7:9c: d1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E3:A5:E4:CB:3E:6C:89:F3:CE:C9:90:3B:DC:A7:2D:53:C0:F1:46 X509v3 Authority Key Identifier: keyid:61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:0a:80:c2:93:c5:04:71:f6:11:c4:ec:7d:fe:f4:b0:b4:c2: d0:a9:fb:b1:94:54:5d:33:42:f4:c2:2c:9c:a5:cf:0d:a0:55: 3e:9c:8e:15:a6:c3:f9:b8:03:06:0f:21:36:29:79:0e:24:78: 19:df:b3:a1:c9:9e:6d:1b:7f:44:f3:96:af:f2:f5:e0:03:72: 32:f3:e8:00:d1:f5:eb:35:96:7d:8a:19:c1:55:60:55:69:f2: 90:8a:19:4f:87:8e:4f:bb:0f:26:3e:55:f4:ff:d8:15:d1:24: 80:4e:fb:1c:6b:31:c6:b2:f0:9f:7f:94:38:0e:44:40:5b:22: 23:c2:92:c7:48:d9:e5:0c:9f:bd:d9:54:ef:e6:4d:76:6f:a5: c3:82:c9:e5:12:1e:e8:45:d2:86:7b:9a:09:ab:c0:ac:23:e8: c0:c1:4c:30:b5:5e:36:14:5b:61:dc:2d:1b:e3:66:e4:64:a7: 8b:02:b3:69:a7:5d:43:a3:47:a9:93:56:83:a3:f4:7e:40:29: 65:ae:5e:78:b3:33:92:c5:c0:79:4a:43:70:5f:46:c9:5a:5c: ca:15:8b:c6:d8:63:3e:cd:7f:1d:8a:10:c2:95:76:5e:6e:8d: a2:e8:d6:b9:54:26:7b:41:d7:5f:87:b4:bc:86:6a:00:95:2a: e9:8e:40:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOqqc2JlqFWivu4Jck+9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODg1NTYzNWU0Nzk0ZjU4NzhlM2I5ODVmZWQ4OTM1YWUw NmM1YTEwHhcNMjUxMjA2MDUwMTAxWhcNMjUxMjA3MDUwMTAxWjAzMTEwLwYDVQQD Eyg5YWUzYTVlNGNiM2U2Yzg5ZjNjZWM5OTAzYmRjYTcyZDUzYzBmMTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9nZ/MxGsMUszllX0yxUbLQD2cBAR iiK5/ByKCje9o6Gqi5/LB98jsv3pYu145CtKAzaQIp95uFPvlwRrS6y/L00hSwOk FcpXZHC7hlxrs0imzDCHsYkV55jjt8Uq4tm8ncse2iaEPVYbM3WwaufbCddYRqRo JZjXWnB4eKATgGMTzozAlFL1vzm6kurCtEUF4mV+q70IdDcCtgVn6IoS7h/qBQyA wzOScX77vLUhIAvrDXWwb1N3ncjAGLF5sds/EbZYiWM9UArbsNL8HtWE6WRw3aen Hvfrm88L+WOT8/8wsjJ8OQ9iQK/WvaiMpEg+Fw2g2BmErVPIHLpg95zRkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrjpeTLPmyJ887JkDvcpy1TwPFGMB8GA1UdIwQY MBaAFGGIVWNeR5T1h447mF/tiTWuBsWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVloVlkxNUhsUFdIamp1WVgtMkpOYTRHeGFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iZjhiY2EtYzRhMC00MjlkLTlmNGQt MGViNmJiZjY1YjFmLzEvWVloVlkxNUhsUFdIamp1WVgtMkpOYTRHeGFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9iZjhiY2EtYzRhMC00MjlkLTlmNGQtMGViNmJiZjY1YjFm LzEvWVloVlkxNUhsUFdIamp1WVgtMkpOYTRHeGFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgqAwpPF BHH2EcTsff70sLTC0Kn7sZRUXTNC9MIsnKXPDaBVPpyOFabD+bgDBg8hNil5DiR4 Gd+zocmebRt/RPOWr/L14ANyMvPoANH16zWWfYoZwVVgVWnykIoZT4eOT7sPJj5V 9P/YFdEkgE77HGsxxrLwn3+UOA5EQFsiI8KSx0jZ5QyfvdlU7+ZNdm+lw4LJ5RIe 6EXShnuaCavArCPowMFMMLVeNhRbYdwtG+Nm5GSniwKzaaddQ6NHqZNWg6P0fkAp Za5eeLMzksXAeUpDcF9GyVpcyhWLxthjPs1/HYoQwpV2Xm6NoujWuVQme0HXX4e0 vIZqAJUq6Y5Avg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:04:38 2025 by rpki-client