This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft File: yzgoFbJRYTZakWEMva1x9mKG94E.mft (raw, json) Hash identifier: zP87lfGqQ3cIodxbAqG/a9mBPQnYx57t7oJe7MxW/EI= Subject key identifier: D4:DA:F0:CF:8F:98:14:13:E0:F7:E5:73:AA:14:57:11:C3:60:B6:20 Authority key identifier: CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81 Certificate issuer: /CN=cb382815b25161365a91610cbdad71f66286f781 Certificate serial: 019AF276F6CC90B84F7E547CD03F7DBE2393 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft Manifest number: 0B4F Signing time: Sat 06 Dec 2025 07:01:13 +0000 Manifest this update: Sat 06 Dec 2025 07:01:13 +0000 Manifest next update: Sun 07 Dec 2025 07:01:13 +0000 Files and hashes: 1: Mo_PTp1RnKkJnXxtlC7OWx0YSxQ.roa (hash: YFv4cH8jBfWT6Q+LN0D+DWnRT7DQ1QH3WQI1NP0LJho=) 2: yzgoFbJRYTZakWEMva1x9mKG94E.crl (hash: eANROT/JAEOPvQEiPIj/6nWKzMCp/z23YVlexkh8AT8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f6:cc:90:b8:4f:7e:54:7c:d0:3f:7d:be:23:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb382815b25161365a91610cbdad71f66286f781 Validity Not Before: Dec 6 07:01:13 2025 GMT Not After : Dec 7 07:01:13 2025 GMT Subject: CN=d4daf0cf8f981413e0f7e573aa145711c360b620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:61:79:e6:8c:a3:46:bf:4f:dc:8a:dd:7d:1c: 08:be:4d:5a:0f:b0:6b:3b:f3:55:b0:18:8f:09:45: 09:19:da:14:4a:b5:35:6a:5d:eb:49:a5:25:ad:87: 45:b9:8c:db:9e:3e:d6:b2:7a:f8:d5:cc:63:b1:2f: 35:28:59:6a:36:2d:f7:93:e8:47:a6:81:58:63:c4: cf:ac:84:0f:7d:ab:60:be:e9:33:b4:74:33:df:79: ed:2d:7e:a8:bc:11:80:fa:9e:0e:a6:ce:30:49:a4: 24:33:59:6f:d0:4f:0e:1d:92:69:21:0b:46:97:09: ab:cb:6d:7d:a8:2a:e9:c9:95:60:66:34:70:d0:fd: dc:20:ce:7c:1e:18:fc:1f:b9:9c:33:fa:20:d7:0d: b3:b0:24:c8:1f:76:4a:da:b7:87:6e:b3:9e:08:17: 7d:c5:cc:96:25:aa:30:cd:8a:c5:6c:c8:c5:88:77: 5b:9a:16:fb:be:4c:3e:bd:55:0d:72:66:9e:22:29: c4:61:23:bc:30:8f:eb:46:1b:c9:56:3e:48:94:7d: f2:22:6f:d1:c4:f0:c2:c5:84:73:08:17:37:5b:be: e9:36:c8:92:4e:50:45:97:24:dc:6e:a0:dc:0f:cc: 9d:8c:9a:53:28:ed:9d:a4:00:fe:60:ef:1f:e6:d3: 7c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DA:F0:CF:8F:98:14:13:E0:F7:E5:73:AA:14:57:11:C3:60:B6:20 X509v3 Authority Key Identifier: keyid:CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:d2:4e:56:d4:58:e7:b7:e6:3a:c4:10:67:f0:86:ee:64:15: 89:4f:c0:0f:c5:ce:20:d5:f3:48:ff:b0:12:f6:e0:90:f1:2a: f1:b1:51:b8:f6:5e:3d:59:c0:d6:7f:7f:2d:7d:ba:8a:3e:38: 2b:fd:ae:d3:62:a7:2e:ef:b4:9d:1e:28:c2:b9:f2:44:d7:fa: 72:f8:fc:f4:aa:95:45:3b:30:6a:06:2a:0f:8e:57:86:25:3c: 20:43:06:d3:38:e1:a7:ec:bd:77:9b:f5:84:48:47:35:a0:6f: 0d:57:94:af:eb:0c:13:d0:54:44:59:87:dd:01:e3:73:a9:30: cb:7e:92:fd:f4:ff:af:8a:50:93:8f:59:9a:a7:04:2c:32:cd: 56:8a:58:bb:bc:af:dd:a2:32:19:d1:ff:37:1d:43:82:d9:60: 84:68:35:73:9a:66:8b:3c:d0:6a:62:2e:eb:62:64:93:44:c0: b2:50:b0:95:25:b1:4b:82:f5:6d:23:a7:85:74:f9:ee:81:58: 51:e2:3d:bb:7b:2c:de:e9:ab:67:40:47:f5:ca:75:89:3a:29: a9:72:68:31:74:20:c9:aa:41:bd:cb:50:1e:dc:a4:60:1c:26: d0:cc:1f:08:1b:88:90:47:30:61:51:58:dc:0a:c5:a3:44:42: 3c:35:11:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvbMkLhPflR80D99viOTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMzgyODE1YjI1MTYxMzY1YTkxNjEwY2JkYWQ3MWY2NjI4 NmY3ODEwHhcNMjUxMjA2MDcwMTEzWhcNMjUxMjA3MDcwMTEzWjAzMTEwLwYDVQQD EyhkNGRhZjBjZjhmOTgxNDEzZTBmN2U1NzNhYTE0NTcxMWMzNjBiNjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWF55oyjRr9P3IrdfRwIvk1aD7Br O/NVsBiPCUUJGdoUSrU1al3rSaUlrYdFuYzbnj7Wsnr41cxjsS81KFlqNi33k+hH poFYY8TPrIQPfatgvukztHQz33ntLX6ovBGA+p4Ops4wSaQkM1lv0E8OHZJpIQtG lwmry219qCrpyZVgZjRw0P3cIM58Hhj8H7mcM/og1w2zsCTIH3ZK2reHbrOeCBd9 xcyWJaowzYrFbMjFiHdbmhb7vkw+vVUNcmaeIinEYSO8MI/rRhvJVj5IlH3yIm/R xPDCxYRzCBc3W77pNsiSTlBFlyTcbqDcD8ydjJpTKO2dpAD+YO8f5tN8DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTa8M+PmBQT4Pflc6oUVxHDYLYgMB8GA1UdIwQY MBaAFMs4KBWyUWE2WpFhDL2tcfZihveBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXpnb0ZiSlJZVFpha1dFTXZhMXg5bUtHOTRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lZjcwZjEtNTJhMS00ZTdhLWIzYzYt NDE0MjM4YzViYmMyLzEveXpnb0ZiSlJZVFpha1dFTXZhMXg5bUtHOTRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9lZjcwZjEtNTJhMS00ZTdhLWIzYzYtNDE0MjM4YzViYmMy LzEveXpnb0ZiSlJZVFpha1dFTXZhMXg5bUtHOTRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONJOVtRY 57fmOsQQZ/CG7mQViU/AD8XOINXzSP+wEvbgkPEq8bFRuPZePVnA1n9/LX26ij44 K/2u02KnLu+0nR4owrnyRNf6cvj89KqVRTswagYqD45XhiU8IEMG0zjhp+y9d5v1 hEhHNaBvDVeUr+sME9BURFmH3QHjc6kwy36S/fT/r4pQk49ZmqcELDLNVopYu7yv 3aIyGdH/Nx1DgtlghGg1c5pmizzQamIu62Jkk0TAslCwlSWxS4L1bSOnhXT57oFY UeI9u3ss3umrZ0BH9cp1iTopqXJoMXQgyapBvctQHtykYBwm0MwfCBuIkEcwYVFY 3ArFo0RCPDURdw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:26:56 2025 by rpki-client