This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft File: yQ7dEObZBiIVv9ZORbO_imuZY3k.mft (raw, json) Hash identifier: PCRL+42Cf9bSX16TsG9jtTF3UmZhQxq7ItTXnbewK3E= Subject key identifier: 4F:AB:D0:E1:8B:81:27:9A:E1:9D:D0:96:46:75:E3:54:6B:57:56:A1 Authority key identifier: C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79 Certificate issuer: /CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379 Certificate serial: 019AF42E42307E34687F935FADF1484B50FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft Manifest number: 05B6 Signing time: Sat 06 Dec 2025 15:01:03 +0000 Manifest this update: Sat 06 Dec 2025 15:01:03 +0000 Manifest next update: Sun 07 Dec 2025 15:01:03 +0000 Files and hashes: 1: wJZWkACD4z74xYl3Eh73b1e6c9o.roa (hash: EI0fca0IMjIZuHA6NlKScJkQo5wgsNdZcRbsaJt4IfY=) 2: yQ7dEObZBiIVv9ZORbO_imuZY3k.crl (hash: 0hmE4JNUXKamw6eLS9VqMCvqvp8PUNFDsFNIwuOTLWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:42:30:7e:34:68:7f:93:5f:ad:f1:48:4b:50:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379 Validity Not Before: Dec 6 15:01:03 2025 GMT Not After : Dec 7 15:01:03 2025 GMT Subject: CN=4fabd0e18b81279ae19dd0964675e3546b5756a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:01:d7:73:a7:1e:73:62:e1:c6:73:c1:c9:c4: f3:ce:a6:0d:17:ae:d5:df:42:79:ad:57:05:74:54: 97:48:66:40:32:e0:a7:ed:e2:18:3d:30:57:62:c2: e5:60:0a:b5:91:1a:92:e7:5d:23:c6:b8:cc:09:ff: b2:5e:47:3d:48:0d:94:0d:c3:4c:34:4c:a8:e4:ff: 4e:02:13:c1:63:7a:7d:87:e2:12:a1:1b:42:fe:3b: d6:f9:d0:90:df:8f:9b:b4:e5:9a:c8:a4:fb:87:f1: e7:5c:f7:d7:37:73:1a:9d:38:7b:58:d2:b6:55:e2: 34:88:8c:68:b6:0a:6a:90:9b:74:2b:c9:af:aa:bd: 26:06:4a:05:c7:d3:7f:ae:d9:67:bc:f9:ae:7f:38: 67:0f:d6:3d:1b:57:56:06:2a:9d:ba:92:d6:60:87: 63:c2:fb:93:28:ea:fb:8c:ff:55:c3:15:5c:73:35: fe:d6:89:3a:ab:99:35:85:fa:80:be:56:4f:72:f2: b3:4b:c4:07:11:d9:8b:a5:6e:5f:f9:57:f7:ac:e8: eb:9a:6a:1b:2f:82:6d:2f:12:e3:5a:6a:e3:c5:9a: 1e:a7:17:7d:8e:a1:49:be:1d:e3:f9:30:58:98:ff: 1f:ae:56:d6:13:20:1e:d5:da:ca:9b:bc:51:19:23: 7d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AB:D0:E1:8B:81:27:9A:E1:9D:D0:96:46:75:E3:54:6B:57:56:A1 X509v3 Authority Key Identifier: keyid:C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:50:66:92:04:35:f8:e1:07:36:4f:58:64:2b:98:20:6e:83: e7:13:4a:cd:58:ec:50:7b:e0:da:b1:94:dc:a6:37:55:a7:db: 15:25:23:c5:f3:b5:d2:43:33:61:13:ab:ab:93:86:3a:90:d8: b6:55:d0:c8:1f:6a:94:ef:88:78:90:b1:cb:7a:1e:40:3a:cc: 15:7c:bc:ca:80:f0:50:c5:3d:56:db:18:45:7a:18:b5:66:82: 9f:38:a3:b8:31:2e:dc:34:37:31:dd:20:42:5b:b1:47:c8:74: f4:eb:fc:5e:a1:4e:2f:11:06:ab:b6:17:c2:90:e3:19:3e:be: 8f:b7:fc:82:2c:6a:52:8b:f8:ee:ed:51:cf:0e:9f:fa:78:0c: 0c:86:ab:ec:ee:a9:92:7a:fa:f5:55:ba:97:57:a7:f2:ec:cd: bf:3e:34:07:74:d1:bf:c7:a1:85:9a:f8:89:a9:48:91:9e:20: 0f:91:1f:e4:c6:5b:27:28:fb:59:ea:88:dd:9d:69:61:c1:e2: d3:68:cc:1a:de:68:c6:78:12:6e:f7:b2:b4:60:68:ca:3e:ab: 40:a7:ad:9d:33:d9:9f:22:91:fc:48:b7:6b:21:d4:6f:04:3c: 6b:15:ea:22:a2:c8:5a:09:ea:f3:0b:94:66:a6:1d:aa:9c:3e: 67:f6:69:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LkIwfjRof5NfrfFIS1D6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MGVkZDEwZTZkOTA2MjIxNWJmZDY0ZTQ1YjNiZjhhNmI5 OTYzNzkwHhcNMjUxMjA2MTUwMTAzWhcNMjUxMjA3MTUwMTAzWjAzMTEwLwYDVQQD Eyg0ZmFiZDBlMThiODEyNzlhZTE5ZGQwOTY0Njc1ZTM1NDZiNTc1NmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAHXc6cec2LhxnPBycTzzqYNF67V 30J5rVcFdFSXSGZAMuCn7eIYPTBXYsLlYAq1kRqS510jxrjMCf+yXkc9SA2UDcNM NEyo5P9OAhPBY3p9h+ISoRtC/jvW+dCQ34+btOWayKT7h/HnXPfXN3ManTh7WNK2 VeI0iIxotgpqkJt0K8mvqr0mBkoFx9N/rtlnvPmufzhnD9Y9G1dWBiqdupLWYIdj wvuTKOr7jP9VwxVcczX+1ok6q5k1hfqAvlZPcvKzS8QHEdmLpW5f+Vf3rOjrmmob L4JtLxLjWmrjxZoepxd9jqFJvh3j+TBYmP8frlbWEyAe1drKm7xRGSN9owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+r0OGLgSea4Z3QlkZ141RrV1ahMB8GA1UdIwQY MBaAFMkO3RDm2QYiFb/WTkWzv4prmWN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVE3ZEVPYlpCaUlWdjlaT1JiT19pbXVaWTNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82NDgzYzItMzkyMS00YzZlLTkzNzMt MzFhNGRhNjFkNTc2LzEveVE3ZEVPYlpCaUlWdjlaT1JiT19pbXVaWTNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82NDgzYzItMzkyMS00YzZlLTkzNzMtMzFhNGRhNjFkNTc2 LzEveVE3ZEVPYlpCaUlWdjlaT1JiT19pbXVaWTNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADlBmkgQ1 +OEHNk9YZCuYIG6D5xNKzVjsUHvg2rGU3KY3VafbFSUjxfO10kMzYROrq5OGOpDY tlXQyB9qlO+IeJCxy3oeQDrMFXy8yoDwUMU9VtsYRXoYtWaCnzijuDEu3DQ3Md0g QluxR8h09Ov8XqFOLxEGq7YXwpDjGT6+j7f8gixqUov47u1Rzw6f+ngMDIar7O6p knr69VW6l1en8uzNvz40B3TRv8ehhZr4ialIkZ4gD5Ef5MZbJyj7WeqI3Z1pYcHi 02jMGt5oxngSbveytGBoyj6rQKetnTPZnyKR/Ei3ayHUbwQ8axXqIqLIWgnq8wuU ZqYdqpw+Z/ZpRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:39:27 2025 by rpki-client