This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft File: yjevCVET2t1bxRveu_CtNNbu22Q.mft (raw, json) Hash identifier: 9VLKdpDBXHvxd28LfaATVuiLQVsV6yic76Y+fEhREa4= Subject key identifier: 0A:F7:BE:64:E4:7A:5D:FF:D3:D5:EB:47:76:78:D0:E1:E7:B6:45:FC Authority key identifier: CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64 Certificate issuer: /CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64 Certificate serial: 019AF12CCF64465CCC903FED537916305734 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft Manifest number: 1371 Signing time: Sat 06 Dec 2025 01:00:36 +0000 Manifest this update: Sat 06 Dec 2025 01:00:36 +0000 Manifest next update: Sun 07 Dec 2025 01:00:36 +0000 Files and hashes: 1: FMnMJSika8qzHn3rA1gugh6bskk.roa (hash: ifB+hpHW1Zidp1iRq+x5utdXKTTiyitHTNMMB+oocZw=) 2: yjevCVET2t1bxRveu_CtNNbu22Q.crl (hash: /jw0HJjNntezhAVIaE3E5x2BC7/JZMzB6q73/feB130=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:cf:64:46:5c:cc:90:3f:ed:53:79:16:30:57:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64 Validity Not Before: Dec 6 01:00:36 2025 GMT Not After : Dec 7 01:00:36 2025 GMT Subject: CN=0af7be64e47a5dffd3d5eb477678d0e1e7b645fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:84:4e:f1:34:55:c6:5d:d5:c7:83:29:5c:52: e8:a8:45:36:36:b2:9c:03:17:23:87:8d:ea:c0:80: 39:59:9a:78:6f:d1:f0:a1:18:d7:79:e7:9d:74:b1: 0c:fa:65:75:6f:58:b2:8a:07:c3:1b:b7:53:46:5a: 2c:0f:f2:9f:51:a5:a2:28:70:62:fd:66:63:56:9a: 86:39:f2:40:56:d7:58:75:70:87:f5:17:60:f7:54: f4:ab:cb:7d:a2:de:a4:7a:8d:5e:7a:2a:c9:33:2e: f6:76:00:1c:5b:0a:7d:d3:f3:3b:b6:79:fc:d9:60: bb:49:cd:4e:73:db:11:a0:29:21:32:3b:ee:23:c3: 5b:00:d4:66:d3:ea:5e:5c:51:3a:0f:d7:50:e9:71: 06:35:a8:0d:c8:93:b9:17:11:af:82:26:90:56:d1: 8a:cf:cd:4e:d0:f9:6d:d1:66:24:0b:f0:35:68:4a: 5b:15:9b:cb:50:7d:81:7d:05:ef:54:84:d2:75:f4: 4d:2b:e6:1a:5e:83:48:94:b6:12:16:5e:ea:25:bd: 9e:52:c8:50:82:3b:12:e9:ed:ea:91:f1:fb:5f:5e: a9:2c:69:eb:14:22:04:e3:bd:bf:4d:98:17:25:9d: 91:15:ea:a7:6f:af:e9:d9:3d:b4:be:e7:ea:b5:3b: 30:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F7:BE:64:E4:7A:5D:FF:D3:D5:EB:47:76:78:D0:E1:E7:B6:45:FC X509v3 Authority Key Identifier: keyid:CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:4a:3a:1c:3f:d2:69:87:fd:ff:54:a3:98:66:ee:d2:ec:29: 39:f7:fb:d7:6e:85:a3:1b:cd:c8:77:7a:49:ba:ac:c4:f0:ee: c1:40:e1:aa:09:19:22:45:28:c9:4a:71:1e:ae:b6:4e:51:d0: 10:e3:0c:a2:a2:b3:bd:06:ff:71:a4:ff:dd:e4:8f:01:27:54: 2d:56:54:77:60:af:e5:8a:cc:2d:60:40:66:b4:a7:62:4b:6b: fd:58:21:1e:e4:f3:3d:4e:7e:23:d5:f4:13:7a:39:6e:06:9b: 6a:53:76:2e:95:eb:ee:96:38:9c:65:98:72:32:ec:91:54:05: 1e:14:11:45:8b:d4:10:fc:b5:34:d8:54:8d:b9:5d:17:e9:69: 86:9b:41:73:86:19:ed:fd:0d:36:35:83:ac:39:d4:bd:35:ae: 2f:d0:af:89:2b:61:17:c7:98:30:67:92:b9:7a:fe:8d:5b:f4: d3:90:fd:df:9f:64:ed:20:15:d3:22:5f:03:cf:76:3f:e1:81: 67:29:d2:ce:fe:19:b0:f2:82:fe:c3:50:3d:42:83:4a:84:fe: 1c:0f:05:d5:81:46:84:db:0a:62:4e:08:eb:ff:2a:9b:93:b1: a8:4c:94:e1:65:cb:c0:38:5c:15:95:79:cc:b9:a8:5d:55:a4: 2b:a8:19:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLM9kRlzMkD/tU3kWMFc0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzdhZjA5NTExM2RhZGQ1YmM1MWJkZWJiZjBhZDM0ZDZl ZWRiNjQwHhcNMjUxMjA2MDEwMDM2WhcNMjUxMjA3MDEwMDM2WjAzMTEwLwYDVQQD EygwYWY3YmU2NGU0N2E1ZGZmZDNkNWViNDc3Njc4ZDBlMWU3YjY0NWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YRO8TRVxl3Vx4MpXFLoqEU2NrKc Axcjh43qwIA5WZp4b9HwoRjXeeeddLEM+mV1b1iyigfDG7dTRlosD/KfUaWiKHBi /WZjVpqGOfJAVtdYdXCH9Rdg91T0q8t9ot6keo1eeirJMy72dgAcWwp90/M7tnn8 2WC7Sc1Oc9sRoCkhMjvuI8NbANRm0+peXFE6D9dQ6XEGNagNyJO5FxGvgiaQVtGK z81O0Plt0WYkC/A1aEpbFZvLUH2BfQXvVITSdfRNK+YaXoNIlLYSFl7qJb2eUshQ gjsS6e3qkfH7X16pLGnrFCIE472/TZgXJZ2RFeqnb6/p2T20vufqtTsw5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAr3vmTkel3/09XrR3Z40OHntkX8MB8GA1UdIwQY MBaAFMo3rwlRE9rdW8Ub3rvwrTTW7ttkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hZDZjODMtZTVmZC00NDE3LWJmZjkt ZWI2OGVmYzQ3NDhiLzEveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9hZDZjODMtZTVmZC00NDE3LWJmZjktZWI2OGVmYzQ3NDhi LzEveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEo6HD/S aYf9/1SjmGbu0uwpOff7126FoxvNyHd6SbqsxPDuwUDhqgkZIkUoyUpxHq62TlHQ EOMMoqKzvQb/caT/3eSPASdULVZUd2Cv5YrMLWBAZrSnYktr/VghHuTzPU5+I9X0 E3o5bgabalN2LpXr7pY4nGWYcjLskVQFHhQRRYvUEPy1NNhUjbldF+lphptBc4YZ 7f0NNjWDrDnUvTWuL9CviSthF8eYMGeSuXr+jVv005D9359k7SAV0yJfA892P+GB ZynSzv4ZsPKC/sNQPUKDSoT+HA8F1YFGhNsKYk4I6/8qm5OxqEyU4WXLwDhcFZV5 zLmoXVWkK6gZtA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:15:37 2025 by rpki-client