This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft File: YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft (raw, json) Hash identifier: JFhXFPNwP1dbD+w8PR0IcfkqKClNu/ELQirWvL3NYb4= Subject key identifier: 66:E6:75:F6:38:23:86:88:06:31:87:3A:40:03:F6:71:EC:5A:E9:CD Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2 Certificate issuer: /CN=63082d6d3a1dc501795737537ca74d27a80265a2 Certificate serial: 019AF2094CE6A0B7DC0D668262BBFBC8861D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft Manifest number: 07C8 Signing time: Sat 06 Dec 2025 05:01:27 +0000 Manifest this update: Sat 06 Dec 2025 05:01:27 +0000 Manifest next update: Sun 07 Dec 2025 05:01:27 +0000 Files and hashes: 1: A5EznUVEP4Si0TCm7JP0g-fJ2zA.roa (hash: P87warA/sxgPpSILGT3rzWqyvJsB40eA4IbxWKqMVaU=) 2: YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl (hash: p3z+KyhIjHza9IBsZDqF6j66YsWVQ66py6vGBnEs5xM=) 3: fPNzH31qX0DZ8V4rij7Xo2sRGO8.roa (hash: fPCz6t8saFe/YCV6Ne6vHfZKosVB2msyYYqQELy/A2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:4c:e6:a0:b7:dc:0d:66:82:62:bb:fb:c8:86:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2 Validity Not Before: Dec 6 05:01:27 2025 GMT Not After : Dec 7 05:01:27 2025 GMT Subject: CN=66e675f6382386880631873a4003f671ec5ae9cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:09:34:a1:a9:a9:66:bb:64:da:c2:b2:7e:c4: f6:f9:fd:9e:0f:c2:4b:0c:c4:a4:81:51:ac:2c:54: 03:10:f4:2e:66:fe:ff:43:21:bd:89:5a:13:31:a6: ae:5f:56:bf:a2:ec:b9:a2:99:68:a5:5e:8f:d6:e0: 54:85:8c:82:48:fb:33:f0:83:53:ef:4f:ab:99:7e: 77:23:7f:1d:25:05:c3:5f:af:18:10:0f:6e:51:d6: 61:0a:4d:d9:8a:eb:c7:92:92:a2:8f:85:6a:04:7a: 2b:66:f4:be:63:cc:65:a7:51:d1:05:ac:47:c1:9b: a2:67:c6:8a:56:99:11:00:ac:eb:6c:1c:09:8b:eb: 7e:ce:a7:38:6c:90:de:c9:24:a7:a8:d1:ec:4b:01: ef:9b:92:14:e1:1b:8f:85:48:b5:24:ec:fd:46:7d: 03:8c:ec:e4:7f:3f:a4:5c:03:41:f1:a4:2a:2b:b3: ea:ca:ca:59:30:66:ad:2b:d2:2d:11:d1:fe:72:7f: da:88:fb:dc:bb:e9:de:ea:c5:49:5b:50:ab:b7:6b: 92:da:66:2d:b7:97:21:b7:44:17:ea:18:67:f0:40: 2e:2a:d4:f1:c5:1a:bf:c5:a8:88:4c:bd:0a:1f:ba: 8b:27:85:13:4c:56:6f:ca:a8:2a:41:50:c5:56:a2: 72:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E6:75:F6:38:23:86:88:06:31:87:3A:40:03:F6:71:EC:5A:E9:CD X509v3 Authority Key Identifier: keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:47:ae:36:d3:c5:de:c0:9a:4f:ac:31:e9:bc:39:7b:eb:6b: cc:50:26:7a:ba:44:9a:79:94:7d:ee:ef:2b:17:66:e9:da:da: 9b:63:17:fc:a9:b5:10:b3:c3:15:3d:fb:f8:39:af:0e:2b:22: 57:0b:47:ad:f3:52:4d:97:a8:a9:e6:ee:9e:89:8b:93:98:aa: 4a:44:3d:3a:4b:e4:52:30:7e:0d:a4:3d:e8:65:85:8c:eb:33: 0d:ce:5e:68:f2:72:0b:87:1c:3c:51:84:a8:b4:81:b8:95:5e: 1a:0b:71:72:85:b2:11:f2:e7:c5:52:bc:2a:be:f1:20:61:fe: 10:b8:67:a6:8d:71:36:10:3c:bb:f9:d4:b2:6d:9e:2e:d9:55: fd:d3:b6:9b:ed:bb:5f:6f:60:83:d0:bf:91:b2:82:bd:5a:3d: b3:21:64:56:da:6a:9d:bc:f0:95:ac:c7:c2:1b:8a:59:18:32: be:af:5e:be:8e:53:51:c9:0e:2e:6a:20:44:f3:98:be:34:2b: ab:e7:aa:b8:26:b6:8c:06:e3:92:c6:eb:70:68:25:9b:ed:48: 27:35:e9:d8:17:6e:bd:c9:d0:f7:38:54:40:2f:ee:19:8c:02: 6f:d5:49:f4:af:de:9b:c4:51:a0:d5:5b:79:49:eb:62:15:b7: 31:77:13:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUzmoLfcDWaCYrv7yIYdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMDgyZDZkM2ExZGM1MDE3OTU3Mzc1MzdjYTc0ZDI3YTgw MjY1YTIwHhcNMjUxMjA2MDUwMTI3WhcNMjUxMjA3MDUwMTI3WjAzMTEwLwYDVQQD Eyg2NmU2NzVmNjM4MjM4Njg4MDYzMTg3M2E0MDAzZjY3MWVjNWFlOWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgk0oampZrtk2sKyfsT2+f2eD8JL DMSkgVGsLFQDEPQuZv7/QyG9iVoTMaauX1a/ouy5oplopV6P1uBUhYyCSPsz8INT 70+rmX53I38dJQXDX68YEA9uUdZhCk3ZiuvHkpKij4VqBHorZvS+Y8xlp1HRBaxH wZuiZ8aKVpkRAKzrbBwJi+t+zqc4bJDeySSnqNHsSwHvm5IU4RuPhUi1JOz9Rn0D jOzkfz+kXANB8aQqK7PqyspZMGatK9ItEdH+cn/aiPvcu+ne6sVJW1Crt2uS2mYt t5cht0QX6hhn8EAuKtTxxRq/xaiITL0KH7qLJ4UTTFZvyqgqQVDFVqJyswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGbmdfY4I4aIBjGHOkAD9nHsWunNMB8GA1UdIwQY MBaAFGMILW06HcUBeVc3U3ynTSeoAmWiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85N2UxZTItNTY3Zi00MTRlLTliMDMt YzE4YWQzNmE3YjMwLzEvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85N2UxZTItNTY3Zi00MTRlLTliMDMtYzE4YWQzNmE3YjMw LzEvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkeuNtPF 3sCaT6wx6bw5e+trzFAmerpEmnmUfe7vKxdm6dram2MX/Km1ELPDFT37+DmvDisi VwtHrfNSTZeoqebunomLk5iqSkQ9OkvkUjB+DaQ96GWFjOszDc5eaPJyC4ccPFGE qLSBuJVeGgtxcoWyEfLnxVK8Kr7xIGH+ELhnpo1xNhA8u/nUsm2eLtlV/dO2m+27 X29gg9C/kbKCvVo9syFkVtpqnbzwlazHwhuKWRgyvq9evo5TUckOLmogRPOYvjQr q+equCa2jAbjksbrcGglm+1IJzXp2BduvcnQ9zhUQC/uGYwCb9VJ9K/em8RRoNVb eUnrYhW3MXcTIQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:15 2025 by rpki-client