This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft File: yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft (raw, json) Hash identifier: 5a1C3w2PuaPbWndAGTEnVjAJ+rZSpuhnqqyOjwsAl+A= Subject key identifier: 1E:6F:7D:D7:7D:39:4C:FD:59:2F:00:7F:D6:F4:CC:0D:D9:F0:6A:DD Authority key identifier: CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64 Certificate issuer: /CN=cb36180ab4542d6eee66d9f99030df71236ce264 Certificate serial: 019AF465484D5AA07CF8F1D8F70AFA680173 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft Manifest number: 15A9 Signing time: Sat 06 Dec 2025 16:01:09 +0000 Manifest this update: Sat 06 Dec 2025 16:01:09 +0000 Manifest next update: Sun 07 Dec 2025 16:01:09 +0000 Files and hashes: 1: Iq8sBOoYl2FdEDuOs7ZjqubA0mo.roa (hash: cKH71Gw8ENbKfDC7hsHD0Ixm5ykhTLruun3w+xwHV3U=) 2: yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl (hash: q6rqjfSFmqjmcAzlrDOqPGQEXd4tVBpCb2V+9Qrecew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:48:4d:5a:a0:7c:f8:f1:d8:f7:0a:fa:68:01:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb36180ab4542d6eee66d9f99030df71236ce264 Validity Not Before: Dec 6 16:01:09 2025 GMT Not After : Dec 7 16:01:09 2025 GMT Subject: CN=1e6f7dd77d394cfd592f007fd6f4cc0dd9f06add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:44:19:64:93:c6:e9:2e:f6:13:62:d3:9f:5b: 72:3f:a3:32:bd:62:8e:fa:68:c0:d3:92:61:60:3f: d8:c7:cc:21:12:79:07:6e:50:2a:50:c1:b3:7c:02: 96:71:86:8a:6a:3d:47:32:16:fc:9b:9f:9a:d9:30: 2f:88:21:2a:8b:57:20:73:2e:1c:9d:53:3c:95:27: 91:3a:e8:5f:bc:9e:81:ae:58:db:e5:57:ad:53:db: 64:c0:fb:5b:0c:4d:c3:d8:76:f4:e6:51:36:a9:9c: f6:62:c4:c5:ba:ed:1d:c7:83:42:df:b0:00:9f:12: ee:05:32:c4:78:8e:5c:56:e9:cd:25:3d:c0:bf:0c: 24:57:38:ad:aa:08:7a:ff:1b:49:88:8d:50:21:c1: 9b:be:fd:cb:43:e5:52:2a:52:13:ac:c7:d2:fa:f2: 03:41:37:4b:d1:e8:25:05:6d:a1:00:08:f1:54:1f: 26:f0:ed:f8:4c:f4:29:10:45:61:4d:01:d1:4b:de: 28:d5:bd:02:91:d9:03:93:a4:37:fe:23:53:a0:95: b1:ee:14:14:14:a5:06:df:2a:f8:a9:bc:3c:21:d3: cb:29:28:7b:7a:07:57:97:58:49:eb:ba:9a:40:cf: c0:26:70:8b:29:d4:9c:c1:ea:66:87:41:3f:af:86: ac:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6F:7D:D7:7D:39:4C:FD:59:2F:00:7F:D6:F4:CC:0D:D9:F0:6A:DD X509v3 Authority Key Identifier: keyid:CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:07:62:96:2e:fd:6d:e5:ba:b5:e6:1d:36:fa:11:a8:77:83: d1:e0:d7:4e:82:0f:b5:51:cd:8c:8e:8e:49:1c:32:9c:7b:4e: a0:88:92:6c:97:f4:7e:23:e2:0a:09:07:5d:a8:67:b7:7b:50: 03:a5:23:8c:94:36:d0:12:ad:e0:92:09:25:f7:b7:e0:52:19: c0:97:39:9a:c6:0d:85:a6:e4:23:2c:65:09:9d:58:38:03:e2: 9e:e0:49:2a:8a:03:fa:24:a6:31:ba:03:49:a4:4a:dc:97:b0: d0:cb:ff:eb:c9:77:2a:95:87:c3:3d:4b:4c:1a:1e:6d:8d:0f: 1b:0f:4e:a0:d6:7d:00:12:34:8e:c5:c9:12:53:db:e8:b7:a0: 3d:59:e2:9d:75:91:63:10:1f:63:f2:20:ec:e0:d0:3d:71:0e: 98:15:58:d3:23:16:a3:56:c7:4f:56:67:20:07:f0:18:b5:4e: c6:eb:00:8b:00:6e:aa:f0:7d:47:36:c7:85:46:de:20:48:93: d3:b5:c6:6c:3b:2d:6d:e2:7c:58:5a:05:68:5b:3c:d0:17:b6: 80:d7:54:4a:30:72:7a:70:8d:b4:d6:a6:30:66:df:29:af:4b: 06:5f:c8:cb:5b:da:32:55:62:9f:f6:a3:1c:63:96:fa:eb:7b: bc:d9:fe:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZUhNWqB8+PHY9wr6aAFzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMzYxODBhYjQ1NDJkNmVlZTY2ZDlmOTkwMzBkZjcxMjM2 Y2UyNjQwHhcNMjUxMjA2MTYwMTA5WhcNMjUxMjA3MTYwMTA5WjAzMTEwLwYDVQQD EygxZTZmN2RkNzdkMzk0Y2ZkNTkyZjAwN2ZkNmY0Y2MwZGQ5ZjA2YWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+EQZZJPG6S72E2LTn1tyP6MyvWKO +mjA05JhYD/Yx8whEnkHblAqUMGzfAKWcYaKaj1HMhb8m5+a2TAviCEqi1cgcy4c nVM8lSeROuhfvJ6Brljb5VetU9tkwPtbDE3D2Hb05lE2qZz2YsTFuu0dx4NC37AA nxLuBTLEeI5cVunNJT3AvwwkVzitqgh6/xtJiI1QIcGbvv3LQ+VSKlITrMfS+vID QTdL0eglBW2hAAjxVB8m8O34TPQpEEVhTQHRS94o1b0CkdkDk6Q3/iNToJWx7hQU FKUG3yr4qbw8IdPLKSh7egdXl1hJ67qaQM/AJnCLKdScwepmh0E/r4aswwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5vfdd9OUz9WS8Af9b0zA3Z8GrdMB8GA1UdIwQY MBaAFMs2GAq0VC1u7mbZ+ZAw33EjbOJkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXpZWUNyUlVMVzd1WnRuNWtERGZjU05zNG1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wNzk3ZDQtOGIyYy00MGFjLTljYWIt NjY3ZGIxZGMxYjg2LzEveXpZWUNyUlVMVzd1WnRuNWtERGZjU05zNG1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8wNzk3ZDQtOGIyYy00MGFjLTljYWItNjY3ZGIxZGMxYjg2 LzEveXpZWUNyUlVMVzd1WnRuNWtERGZjU05zNG1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALAdili79 beW6teYdNvoRqHeD0eDXToIPtVHNjI6OSRwynHtOoIiSbJf0fiPiCgkHXahnt3tQ A6UjjJQ20BKt4JIJJfe34FIZwJc5msYNhabkIyxlCZ1YOAPinuBJKooD+iSmMboD SaRK3Jew0Mv/68l3KpWHwz1LTBoebY0PGw9OoNZ9ABI0jsXJElPb6LegPVninXWR YxAfY/Ig7ODQPXEOmBVY0yMWo1bHT1ZnIAfwGLVOxusAiwBuqvB9RzbHhUbeIEiT 07XGbDstbeJ8WFoFaFs80Be2gNdUSjByenCNtNamMGbfKa9LBl/Iy1vaMlVin/aj HGOW+ut7vNn+7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 21:43:01 2025 by rpki-client