This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft File: YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft (raw, json) Hash identifier: 5SOOWO7vn+ZKIVcCaPkgeISmvvPnrQGH6K83H464588= Subject key identifier: 11:BE:95:9A:77:91:3A:07:64:00:99:CA:4F:FA:65:24:FE:D2:25:60 Authority key identifier: 62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C Certificate issuer: /CN=6264318c1aaa7ca0603155a883d43926ef97e87c Certificate serial: 019AF31CC980CB183B68234AB24315B157F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft Manifest number: 1780 Signing time: Sat 06 Dec 2025 10:02:21 +0000 Manifest this update: Sat 06 Dec 2025 10:02:21 +0000 Manifest next update: Sun 07 Dec 2025 10:02:21 +0000 Files and hashes: 1: 3sMCPh_TSYY4GpOsXTf0kpJFJJE.roa (hash: REslMcuG9HXm7BovLzYOAaMUk36BGxFiDYcZuAUfor8=) 2: YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl (hash: yewIO6hKEE6al4seFpwY4OwEmddq/tAbqBDmIuWsKuw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:c9:80:cb:18:3b:68:23:4a:b2:43:15:b1:57:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6264318c1aaa7ca0603155a883d43926ef97e87c Validity Not Before: Dec 6 10:02:21 2025 GMT Not After : Dec 7 10:02:21 2025 GMT Subject: CN=11be959a77913a07640099ca4ffa6524fed22560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4c:25:3c:d3:4a:2a:d9:21:b4:de:5e:fd:77: 84:50:39:9a:48:f3:42:34:34:f6:73:ef:e9:22:c0: 8e:ea:9d:19:b9:ca:c9:dc:08:40:d5:c5:c7:98:3f: a5:01:4a:9d:19:e4:8f:30:29:f3:e6:fa:39:b7:db: 51:b6:63:ba:8f:1f:36:98:ef:a6:03:10:17:75:37: 1b:8c:8e:10:6c:ef:9a:c8:17:54:08:f6:ff:f9:21: bb:4d:c4:d1:8f:7f:15:f4:ff:16:25:e7:42:0c:91: 46:a4:6a:8c:3f:52:d1:c6:88:1a:28:e1:71:94:c1: 52:75:1b:55:78:ec:e1:74:44:cd:e1:58:a3:a3:49: df:d4:d4:02:8f:03:b7:ae:c5:19:ad:33:de:43:95: ea:c6:3b:88:91:ed:b9:4f:9f:2b:e0:5b:ed:c9:07: 06:f6:37:22:d7:f9:48:ad:61:87:43:61:5f:ef:86: ca:91:7b:0b:09:8f:97:fa:1e:9d:eb:a1:93:3f:a8: 87:05:aa:72:9b:f7:5c:ad:f7:d6:57:56:df:7c:fa: 96:20:81:45:1d:15:58:69:bc:2c:60:71:2f:89:4f: 1d:18:f1:28:da:5c:64:b8:8c:52:f7:0e:76:9f:fc: 6f:04:49:70:7d:dc:d9:72:56:52:06:db:ea:d1:6a: 64:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BE:95:9A:77:91:3A:07:64:00:99:CA:4F:FA:65:24:FE:D2:25:60 X509v3 Authority Key Identifier: keyid:62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:63:d2:88:fe:7b:80:ed:ec:4e:ac:d1:06:d9:b9:a3:d1:a6: 1d:45:0c:25:2a:4d:8f:32:43:92:57:ec:da:4b:a5:bd:7b:63: 9c:14:8e:55:60:9c:57:9e:1b:93:39:80:64:57:92:69:37:2b: 70:b8:a8:63:d0:bb:4d:4b:d8:d0:12:0b:b3:95:7d:67:37:de: 7e:fe:b6:e1:ce:a9:be:b3:f0:e5:00:0d:2b:52:2b:96:c9:dc: 05:1c:a0:78:e6:cf:50:dd:b3:38:0d:d4:c7:65:ef:88:2d:6d: 10:29:d6:1c:b2:0b:bc:6d:9a:ff:cf:71:3e:51:c8:0a:52:d5: 31:b3:f9:13:4d:e1:42:3b:d9:15:f6:3d:ae:44:34:cb:af:ba: 6e:9e:2f:41:18:ee:0d:69:43:38:ca:97:35:3d:95:40:76:f9: 1b:d2:d6:3d:93:46:b7:43:37:2d:de:91:47:44:b3:24:bb:ef: 9e:2b:ff:4e:f3:4a:d4:3c:f8:7b:e5:b5:0b:91:72:03:e3:de: e7:f7:cb:23:7b:82:12:95:71:9c:90:33:a2:99:50:20:58:a5: 97:c7:26:23:d3:0e:d6:bb:ec:33:b8:d9:c4:55:d5:9b:c4:79: dc:05:34:69:89:43:5b:37:7f:94:97:ee:fe:a3:57:7c:9f:70: 65:5f:43:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHMmAyxg7aCNKskMVsVf3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNjQzMThjMWFhYTdjYTA2MDMxNTVhODgzZDQzOTI2ZWY5 N2U4N2MwHhcNMjUxMjA2MTAwMjIxWhcNMjUxMjA3MTAwMjIxWjAzMTEwLwYDVQQD EygxMWJlOTU5YTc3OTEzYTA3NjQwMDk5Y2E0ZmZhNjUyNGZlZDIyNTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0wlPNNKKtkhtN5e/XeEUDmaSPNC NDT2c+/pIsCO6p0ZucrJ3AhA1cXHmD+lAUqdGeSPMCnz5vo5t9tRtmO6jx82mO+m AxAXdTcbjI4QbO+ayBdUCPb/+SG7TcTRj38V9P8WJedCDJFGpGqMP1LRxogaKOFx lMFSdRtVeOzhdETN4Vijo0nf1NQCjwO3rsUZrTPeQ5XqxjuIke25T58r4FvtyQcG 9jci1/lIrWGHQ2Ff74bKkXsLCY+X+h6d66GTP6iHBapym/dcrffWV1bffPqWIIFF HRVYabwsYHEviU8dGPEo2lxkuIxS9w52n/xvBElwfdzZclZSBtvq0WpkuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBG+lZp3kToHZACZyk/6ZST+0iVgMB8GA1UdIwQY MBaAFGJkMYwaqnygYDFVqIPUOSbvl+h8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1ReGpCcXFmS0JnTVZXb2c5UTVKdS1YNkh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9mNmI2NDItODcyYi00YjdkLWJkNmEt YjkxYTI3MDU1MjA0LzEvWW1ReGpCcXFmS0JnTVZXb2c5UTVKdS1YNkh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9mNmI2NDItODcyYi00YjdkLWJkNmEtYjkxYTI3MDU1MjA0 LzEvWW1ReGpCcXFmS0JnTVZXb2c5UTVKdS1YNkh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGPSiP57 gO3sTqzRBtm5o9GmHUUMJSpNjzJDklfs2kulvXtjnBSOVWCcV54bkzmAZFeSaTcr cLioY9C7TUvY0BILs5V9Zzfefv624c6pvrPw5QANK1IrlsncBRygeObPUN2zOA3U x2XviC1tECnWHLILvG2a/89xPlHIClLVMbP5E03hQjvZFfY9rkQ0y6+6bp4vQRju DWlDOMqXNT2VQHb5G9LWPZNGt0M3Ld6RR0SzJLvvniv/TvNK1Dz4e+W1C5FyA+Pe 5/fLI3uCEpVxnJAzoplQIFill8cmI9MO1rvsM7jZxFXVm8R53AU0aYlDWzd/lJfu /qNXfJ9wZV9DSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:35:34 2025 by rpki-client