This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft File: yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft (raw, json) Hash identifier: qeUTRdH1z6Ma8I6Qu8Nt6sNLEV9FnOqFzH8yJEPU8bE= Subject key identifier: 9B:2A:26:C5:4E:EF:45:A5:D7:C1:E7:BF:14:8B:60:D5:1A:50:CB:59 Authority key identifier: CB:22:4E:A3:85:72:EA:0D:A0:2F:49:CF:4D:67:A3:CB:B7:C6:E1:40 Certificate issuer: /CN=cb224ea38572ea0da02f49cf4d67a3cbb7c6e140 Certificate serial: 019AF19B1BB8B13FCB483B70E81E1B4F1768 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft Manifest number: 16E1 Signing time: Sat 06 Dec 2025 03:01:05 +0000 Manifest this update: Sat 06 Dec 2025 03:01:05 +0000 Manifest next update: Sun 07 Dec 2025 03:01:05 +0000 Files and hashes: 1: 1-uz2QLGD_Zd1L5FYfBI3cC6XHM8.roa (hash: t1w40I15hLlr7dv8d0uJE/Dz2j4qqNVpP8R3SOXwVvk=) 2: yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl (hash: n9ikM+tarh2ePmwy/ytt0KQu1ljZtTofLuzBEGj6xUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:1b:b8:b1:3f:cb:48:3b:70:e8:1e:1b:4f:17:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb224ea38572ea0da02f49cf4d67a3cbb7c6e140 Validity Not Before: Dec 6 03:01:05 2025 GMT Not After : Dec 7 03:01:05 2025 GMT Subject: CN=9b2a26c54eef45a5d7c1e7bf148b60d51a50cb59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1c:c1:8c:1a:2b:2c:93:76:c8:eb:b0:dd:3c: 62:fe:32:34:dc:68:e7:4d:48:55:4a:45:e2:02:c5: 7a:c9:fa:72:e9:bc:16:5a:9f:88:81:c3:3c:f0:cf: 94:5c:e6:81:75:ea:31:7d:a4:2a:b0:29:5e:e0:b8: 79:31:fc:36:b5:f8:8c:eb:b8:2e:c5:26:ff:dd:70: 7d:bc:98:93:50:fb:57:1b:63:6b:91:67:5c:bb:46: 24:50:50:36:dc:7a:b0:d7:ca:0e:04:37:1a:ff:f5: 20:71:b8:54:84:da:d2:3d:28:3f:22:7b:06:02:7f: be:6b:18:80:dc:ad:3a:25:82:a3:07:bf:9a:13:79: 97:4c:71:fd:7e:44:1e:e5:4e:39:6d:8f:64:91:30: b3:1f:29:10:0f:34:a2:83:77:23:e4:1d:bc:65:2a: 32:cc:38:52:16:41:85:54:1f:be:f3:05:3f:2d:3e: 90:58:5b:bc:e1:50:48:39:9a:b7:7a:fb:8c:8d:5c: fd:8f:da:de:1f:c9:2b:4a:ac:96:59:ab:93:8c:4c: 3a:4c:43:b9:c4:ea:2b:e1:aa:85:eb:93:04:80:b1: 4d:78:34:b7:6c:3e:8a:87:be:13:91:76:fc:13:19: 17:85:b0:4d:d6:94:7f:74:8c:0b:34:a7:42:c3:0d: 52:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2A:26:C5:4E:EF:45:A5:D7:C1:E7:BF:14:8B:60:D5:1A:50:CB:59 X509v3 Authority Key Identifier: keyid:CB:22:4E:A3:85:72:EA:0D:A0:2F:49:CF:4D:67:A3:CB:B7:C6:E1:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:79:fe:1a:46:0b:ab:03:a7:40:a3:90:8a:50:69:18:fb:20: f7:c4:a2:c2:40:51:71:92:f0:2e:7c:ca:7c:f2:e3:df:e7:6f: 1b:58:26:26:9e:71:ef:0f:60:ee:50:b5:04:5e:cd:c4:49:cb: 9a:a1:c0:b8:67:2b:66:0b:ef:a1:b4:d2:7f:02:78:02:2c:34: d6:aa:d9:66:05:c6:3b:32:55:23:0d:f8:b5:bf:35:48:00:84: 6d:93:89:98:14:61:d1:51:01:d2:b5:83:28:e2:a5:51:ed:f5: 59:c0:61:7b:8b:24:ee:b8:48:09:01:b5:aa:18:f9:06:c7:6c: bb:f7:d3:28:43:16:56:31:72:f6:33:e7:80:77:4b:31:ca:ac: 81:6f:39:d0:90:9c:63:33:df:46:e0:20:84:41:3f:dc:4a:c0: 85:63:cb:27:27:1c:09:4e:27:e2:f8:95:ae:db:ee:b6:41:49: e2:e5:90:2d:d4:02:b0:76:88:0b:da:c6:92:f9:51:8e:16:84: f6:90:3f:4b:eb:97:56:83:fb:00:f5:75:c6:0f:8a:3d:1d:cb: e5:74:ad:16:db:a9:0e:24:37:9e:08:9a:df:7d:d0:6a:7c:6f: 8b:71:5d:13:64:24:6f:70:cc:d7:a3:7a:2e:d1:93:06:6b:92: 49:6f:a3:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxu4sT/LSDtw6B4bTxdoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMjI0ZWEzODU3MmVhMGRhMDJmNDljZjRkNjdhM2NiYjdj NmUxNDAwHhcNMjUxMjA2MDMwMTA1WhcNMjUxMjA3MDMwMTA1WjAzMTEwLwYDVQQD Eyg5YjJhMjZjNTRlZWY0NWE1ZDdjMWU3YmYxNDhiNjBkNTFhNTBjYjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBzBjBorLJN2yOuw3Txi/jI03Gjn TUhVSkXiAsV6yfpy6bwWWp+IgcM88M+UXOaBdeoxfaQqsCle4Lh5Mfw2tfiM67gu xSb/3XB9vJiTUPtXG2NrkWdcu0YkUFA23Hqw18oOBDca//UgcbhUhNrSPSg/InsG An++axiA3K06JYKjB7+aE3mXTHH9fkQe5U45bY9kkTCzHykQDzSig3cj5B28ZSoy zDhSFkGFVB++8wU/LT6QWFu84VBIOZq3evuMjVz9j9reH8krSqyWWauTjEw6TEO5 xOor4aqF65MEgLFNeDS3bD6Kh74TkXb8ExkXhbBN1pR/dIwLNKdCww1SsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsqJsVO70Wl18HnvxSLYNUaUMtZMB8GA1UdIwQY MBaAFMsiTqOFcuoNoC9Jz01no8u3xuFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXlKT280Vnk2ZzJnTDBuUFRXZWp5N2ZHNFVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zNTAzZWUtNWI4Mi00MjMxLWI1N2Et MWZkMjliMTA4YTIxLzEveXlKT280Vnk2ZzJnTDBuUFRXZWp5N2ZHNFVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8zNTAzZWUtNWI4Mi00MjMxLWI1N2EtMWZkMjliMTA4YTIx LzEveXlKT280Vnk2ZzJnTDBuUFRXZWp5N2ZHNFVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHn+GkYL qwOnQKOQilBpGPsg98SiwkBRcZLwLnzKfPLj3+dvG1gmJp5x7w9g7lC1BF7NxEnL mqHAuGcrZgvvobTSfwJ4Aiw01qrZZgXGOzJVIw34tb81SACEbZOJmBRh0VEB0rWD KOKlUe31WcBhe4sk7rhICQG1qhj5Bsdsu/fTKEMWVjFy9jPngHdLMcqsgW850JCc YzPfRuAghEE/3ErAhWPLJyccCU4n4viVrtvutkFJ4uWQLdQCsHaIC9rGkvlRjhaE 9pA/S+uXVoP7APV1xg+KPR3L5XStFtupDiQ3ngia333Qanxvi3FdE2Qkb3DM16N6 LtGTBmuSSW+jPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:17:25 2025 by rpki-client