This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft File: yZdBPtdKNxYei7P2FWJUHdKJBb4.mft (raw, json) Hash identifier: IurQ5EgNw6+SKHN83NmKgWQZAbm0yuxYo3yFu2dk4d4= Subject key identifier: 27:9B:45:34:6C:F9:40:0C:C0:C7:B6:8C:52:6B:77:D8:1B:CC:BA:BC Authority key identifier: C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE Certificate issuer: /CN=c997413ed74a37161e8bb3f61562541dd28905be Certificate serial: 019AF0F5E40F4A6C64FF5AA88B68583FF3EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft Manifest number: 0AF4 Signing time: Sat 06 Dec 2025 00:00:37 +0000 Manifest this update: Sat 06 Dec 2025 00:00:37 +0000 Manifest next update: Sun 07 Dec 2025 00:00:37 +0000 Files and hashes: 1: 9-Jf83x4olz8Hfew1s_UNi3V90k.roa (hash: IKeSXJFCHy882FUnOTCs1ATh13Yeq7epWPgTRQh0CZE=) 2: ECPnWkDMI2_nTmbCZhDYVWDmDx4.roa (hash: Lpl7m/eZhYRN7DnJNG4Sw0QJsO8hvbMn/hQYBg/ViaI=) 3: yZdBPtdKNxYei7P2FWJUHdKJBb4.crl (hash: pXkbslJ+jni4qyZtmRzKjfziEudEGA34Cu+FDjceK7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:e4:0f:4a:6c:64:ff:5a:a8:8b:68:58:3f:f3:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c997413ed74a37161e8bb3f61562541dd28905be Validity Not Before: Dec 6 00:00:37 2025 GMT Not After : Dec 7 00:00:37 2025 GMT Subject: CN=279b45346cf9400cc0c7b68c526b77d81bccbabc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:42:4a:35:fd:b9:da:4b:f1:54:04:d6:a2:19: a4:82:4b:f9:0e:1c:b9:30:72:a1:e9:57:1e:14:8a: 7f:97:38:58:6c:69:82:7a:f4:8d:a3:a7:97:74:ca: 88:21:cc:7b:ef:77:10:87:e4:01:6e:b7:5d:77:95: 5c:08:be:ef:9d:2a:98:19:5b:9f:69:fb:af:8c:c5: 8f:6f:a1:a1:77:df:4a:11:75:fc:46:0d:dd:a0:14: eb:85:14:35:a8:5f:c8:b8:0c:23:fa:c7:94:04:f2: 5f:10:18:aa:1c:23:23:35:6f:f8:e7:b8:bc:62:09: e2:92:51:8a:42:03:9e:ad:08:2b:fb:a8:b1:be:70: d4:2a:a4:53:f0:3f:4b:d9:34:69:01:74:25:46:c7: 3d:77:a2:25:cc:d7:87:8e:b8:ec:8a:6e:2e:ea:2b: c6:49:c4:8b:98:f3:f0:43:e5:3d:23:8f:57:cc:0c: c4:8b:7d:8f:dd:48:b1:8b:23:27:76:31:48:94:71: 38:f6:12:b7:ea:a3:71:4a:b3:8d:bd:20:f0:2d:96: 6a:f9:26:99:a3:e8:0d:ed:af:11:e1:08:17:22:81: 59:e8:e3:91:a8:70:91:ed:7c:61:c4:dd:46:78:8e: 47:f9:0f:33:bd:b4:b7:f9:2d:1d:94:11:7d:74:70: 03:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:9B:45:34:6C:F9:40:0C:C0:C7:B6:8C:52:6B:77:D8:1B:CC:BA:BC X509v3 Authority Key Identifier: keyid:C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b0:29:e0:ff:97:62:d9:e8:f0:a7:15:e4:95:6f:66:db:d9: 1a:e6:d2:7d:de:16:19:16:d2:0e:83:d2:1a:80:83:29:af:89: 25:79:fa:cb:6e:e1:2d:61:64:d1:01:e8:1a:c5:38:c1:9b:8f: 85:0c:0d:da:b0:43:c8:d3:fb:43:8e:fc:00:39:17:7a:d8:d5: 9a:21:42:1e:f6:c9:6b:7e:96:20:e5:0c:5c:70:cc:e6:56:0d: 3d:fb:cb:a5:6c:47:1d:f3:c9:b4:bf:b8:de:d7:65:e0:9e:48: 4a:0e:b2:47:b6:95:b5:fc:27:61:eb:31:1a:2e:e2:0f:da:43: f8:15:b7:46:26:34:c0:00:e2:1e:81:36:81:49:55:23:c4:08: 29:c7:19:0e:1a:b6:8c:9a:90:db:46:a4:6e:09:4d:9b:bb:b9: c0:76:9b:15:ba:c1:5f:75:f3:7d:85:97:67:86:93:92:02:d7: af:a2:95:0e:e4:ab:4c:ec:14:5f:ac:06:3b:6d:dd:1e:91:be: 42:3d:87:7d:cd:cf:88:17:a6:85:66:66:e3:91:3e:3a:18:40: c0:4d:1e:cb:f7:c8:79:9d:b9:14:a0:a2:a1:4b:72:6e:e3:81: bf:ca:17:55:46:46:24:07:d2:ff:28:6d:06:72:ad:55:6b:9f: 6a:81:e5:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9eQPSmxk/1qoi2hYP/PvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OTc0MTNlZDc0YTM3MTYxZThiYjNmNjE1NjI1NDFkZDI4 OTA1YmUwHhcNMjUxMjA2MDAwMDM3WhcNMjUxMjA3MDAwMDM3WjAzMTEwLwYDVQQD EygyNzliNDUzNDZjZjk0MDBjYzBjN2I2OGM1MjZiNzdkODFiY2NiYWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kJKNf252kvxVATWohmkgkv5Dhy5 MHKh6VceFIp/lzhYbGmCevSNo6eXdMqIIcx773cQh+QBbrddd5VcCL7vnSqYGVuf afuvjMWPb6Ghd99KEXX8Rg3doBTrhRQ1qF/IuAwj+seUBPJfEBiqHCMjNW/457i8 YgniklGKQgOerQgr+6ixvnDUKqRT8D9L2TRpAXQlRsc9d6IlzNeHjrjsim4u6ivG ScSLmPPwQ+U9I49XzAzEi32P3UixiyMndjFIlHE49hK36qNxSrONvSDwLZZq+SaZ o+gN7a8R4QgXIoFZ6OORqHCR7XxhxN1GeI5H+Q8zvbS3+S0dlBF9dHADywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCebRTRs+UAMwMe2jFJrd9gbzLq8MB8GA1UdIwQY MBaAFMmXQT7XSjcWHouz9hViVB3SiQW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVpkQlB0ZEtOeFllaTdQMkZXSlVIZEtKQmI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNDE2M2UtZGEwYS00MjA2LTkzNzgt ZTQ5ZDQ2MWMzMTU0LzEveVpkQlB0ZEtOeFllaTdQMkZXSlVIZEtKQmI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNDE2M2UtZGEwYS00MjA2LTkzNzgtZTQ5ZDQ2MWMzMTU0 LzEveVpkQlB0ZEtOeFllaTdQMkZXSlVIZEtKQmI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLAp4P+X Ytno8KcV5JVvZtvZGubSfd4WGRbSDoPSGoCDKa+JJXn6y27hLWFk0QHoGsU4wZuP hQwN2rBDyNP7Q478ADkXetjVmiFCHvbJa36WIOUMXHDM5lYNPfvLpWxHHfPJtL+4 3tdl4J5ISg6yR7aVtfwnYesxGi7iD9pD+BW3RiY0wADiHoE2gUlVI8QIKccZDhq2 jJqQ20akbglNm7u5wHabFbrBX3XzfYWXZ4aTkgLXr6KVDuSrTOwUX6wGO23dHpG+ Qj2Hfc3PiBemhWZm45E+OhhAwE0ey/fIeZ25FKCioUtybuOBv8oXVUZGJAfS/yht BnKtVWufaoHlaw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:59 2025 by rpki-client