This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft File: YhGQEidXeAf0toyLjyX76pxyB2I.mft (raw, json) Hash identifier: XQpLgozUzcc852gi7R2T+E+0hibLtQWe7WI9czOEvHM= Subject key identifier: 79:6C:59:1B:E1:BA:BE:52:03:14:15:B6:6C:B4:68:7D:6B:E4:1E:7D Authority key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62 Certificate issuer: /CN=6211901227577807f4b68c8b8f25fbea9c720762 Certificate serial: 019AF61C40463170C4C6F7A483B6B8C961E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft Manifest number: 1227 Signing time: Sun 07 Dec 2025 00:00:37 +0000 Manifest this update: Sun 07 Dec 2025 00:00:37 +0000 Manifest next update: Mon 08 Dec 2025 00:00:37 +0000 Files and hashes: 1: YhGQEidXeAf0toyLjyX76pxyB2I.crl (hash: lEpNVJwEgtzU7ym+A9Q7kn3G1OB/+bjSiOGmpc9Babg=) 2: y7v-mWbLIi-YEJOLFYZrPZdamNM.roa (hash: fFSatUERbg8P2zLQbPAXLJNzdwJ2j7jhYqM1W6Xx4mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:40:46:31:70:c4:c6:f7:a4:83:b6:b8:c9:61:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6211901227577807f4b68c8b8f25fbea9c720762 Validity Not Before: Dec 7 00:00:37 2025 GMT Not After : Dec 8 00:00:37 2025 GMT Subject: CN=796c591be1babe52031415b66cb4687d6be41e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b3:85:9d:4f:10:1e:e1:fd:6f:e0:4c:da:77: 1f:bb:0c:ce:a1:53:c0:4a:e5:ee:ba:33:5a:4b:f9: 68:cc:bc:70:8e:c4:45:25:0b:c8:81:0f:ef:6a:37: 18:20:7f:56:28:b0:ba:9b:0f:61:a4:94:38:ca:5b: b9:12:fc:f9:5f:ef:15:9d:59:2e:22:f3:4c:c3:e8: 1e:d5:84:c6:35:46:4f:64:37:30:08:f4:47:83:41: 44:b0:f5:a6:54:c7:fc:ea:fa:c4:0e:14:b6:cc:a5: 2c:45:a7:63:6a:39:28:f5:d2:88:01:80:60:b6:95: ca:47:4d:81:8e:ce:27:d9:33:07:31:5b:58:aa:ab: c4:16:de:be:f2:9e:b5:83:92:d1:27:80:11:8b:68: 48:01:80:61:89:43:34:c1:1b:18:0c:b7:4b:5d:cb: 43:fe:a6:b5:3b:b0:eb:7b:9d:21:b2:2e:58:d6:98: c2:3e:71:2e:06:f4:5a:80:42:96:67:73:b0:9d:d8: 1c:df:a4:df:04:a2:ab:af:e3:9e:55:d3:5d:5d:bd: 93:37:3e:0e:05:1f:c8:a6:eb:29:80:37:92:72:e0: d1:b0:fb:df:90:76:df:b1:ca:3a:33:96:a1:5a:37: c9:28:5b:92:5a:2b:00:d7:58:72:00:d4:ef:b2:6c: 8c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6C:59:1B:E1:BA:BE:52:03:14:15:B6:6C:B4:68:7D:6B:E4:1E:7D X509v3 Authority Key Identifier: keyid:62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:46:56:aa:fc:7c:2d:96:44:a6:b6:d8:48:89:a2:3b:de:cf: 72:e9:30:ca:4b:e0:da:15:48:e4:19:a6:3b:d2:d7:16:0f:04: 66:15:61:cd:56:cb:d0:c8:88:6a:69:53:47:dc:40:7b:bf:e4: a0:31:04:11:2d:64:33:96:db:08:2e:11:c9:b6:b7:20:3c:5d: 46:fa:a9:8c:0f:76:2e:7b:f6:76:90:5f:be:f0:c6:ae:09:fb: e8:58:86:fd:ae:fe:27:7c:c0:4b:2f:2f:34:09:a0:d5:cd:85: c3:f2:47:37:b0:a0:75:28:8a:7b:ac:2d:a9:30:91:5b:8f:e1: 39:45:42:3d:de:92:12:5e:a8:f3:98:52:3d:45:e0:81:7e:25: 9c:1c:94:f2:74:3b:99:a2:25:e4:a4:e4:5d:9c:45:18:6d:68: 16:83:8a:b7:b0:00:c7:df:3d:3e:a4:19:ba:1a:ce:73:6f:84: 2b:0f:94:8c:e3:e6:e2:11:f3:af:c5:c2:69:46:5d:70:f3:81: c2:b9:48:dc:ed:97:f9:08:8a:6e:a4:b8:69:9e:0b:f5:b9:04: 0f:34:c4:05:ae:77:86:09:1a:f0:d3:a5:46:9c:29:86:9b:aa: 2a:92:af:5c:b4:fd:34:d8:af:ed:fb:9d:60:22:90:fe:a1:c4: 3b:05:4a:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HEBGMXDExvekg7a4yWHpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMTE5MDEyMjc1Nzc4MDdmNGI2OGM4YjhmMjVmYmVhOWM3 MjA3NjIwHhcNMjUxMjA3MDAwMDM3WhcNMjUxMjA4MDAwMDM3WjAzMTEwLwYDVQQD Eyg3OTZjNTkxYmUxYmFiZTUyMDMxNDE1YjY2Y2I0Njg3ZDZiZTQxZTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrOFnU8QHuH9b+BM2ncfuwzOoVPA SuXuujNaS/lozLxwjsRFJQvIgQ/vajcYIH9WKLC6mw9hpJQ4ylu5Evz5X+8VnVku IvNMw+ge1YTGNUZPZDcwCPRHg0FEsPWmVMf86vrEDhS2zKUsRadjajko9dKIAYBg tpXKR02Bjs4n2TMHMVtYqqvEFt6+8p61g5LRJ4ARi2hIAYBhiUM0wRsYDLdLXctD /qa1O7Dre50hsi5Y1pjCPnEuBvRagEKWZ3Owndgc36TfBKKrr+OeVdNdXb2TNz4O BR/IpuspgDeScuDRsPvfkHbfsco6M5ahWjfJKFuSWisA11hyANTvsmyMJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlsWRvhur5SAxQVtmy0aH1r5B59MB8GA1UdIwQY MBaAFGIRkBInV3gH9LaMi48l++qccgdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWhHUUVpZFhlQWYwdG95TGp5WDc2cHh5QjJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iMjEwZjYtN2NhMS00N2IxLTlhNWYt N2NmZGQ4NGY3MzRkLzEvWWhHUUVpZFhlQWYwdG95TGp5WDc2cHh5QjJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iMjEwZjYtN2NhMS00N2IxLTlhNWYtN2NmZGQ4NGY3MzRk LzEvWWhHUUVpZFhlQWYwdG95TGp5WDc2cHh5QjJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb0ZWqvx8 LZZEprbYSImiO97Pcukwykvg2hVI5BmmO9LXFg8EZhVhzVbL0MiIamlTR9xAe7/k oDEEES1kM5bbCC4Ryba3IDxdRvqpjA92Lnv2dpBfvvDGrgn76FiG/a7+J3zASy8v NAmg1c2Fw/JHN7CgdSiKe6wtqTCRW4/hOUVCPd6SEl6o85hSPUXggX4lnByU8nQ7 maIl5KTkXZxFGG1oFoOKt7AAx989PqQZuhrOc2+EKw+UjOPm4hHzr8XCaUZdcPOB wrlI3O2X+QiKbqS4aZ4L9bkEDzTEBa53hgka8NOlRpwphpuqKpKvXLT9NNiv7fud YCKQ/qHEOwVK3g== -----END CERTIFICATE-----Generated at Sun Dec 7 02:54:14 2025 by rpki-client