This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json) Hash identifier: aIPzBhFLexugSilwHsRm76yAgSOjDuly6Lznf+bN3BM= Subject key identifier: DA:DB:0B:00:F1:EA:D2:D9:47:1A:6A:8C:39:A3:31:24:94:9B:BB:D2 Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b Certificate serial: 019AF23FB501D90AC671299AAEACA494B640 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft Manifest number: 0F95 Signing time: Sat 06 Dec 2025 06:00:52 +0000 Manifest this update: Sat 06 Dec 2025 06:00:52 +0000 Manifest next update: Sun 07 Dec 2025 06:00:52 +0000 Files and hashes: 1: JNo1MUvO7s8A9kHBAkmvoAiPGvM.roa (hash: R/jVb2Ae9Mk2lsjcWf8tfEbhkiCQiMp10JSlkK4oRdc=) 2: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: mzI4Fxp/VSdRvsdhTPLxnRG6l6h0KVrjISULvK4EYtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b5:01:d9:0a:c6:71:29:9a:ae:ac:a4:94:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b Validity Not Before: Dec 6 06:00:52 2025 GMT Not After : Dec 7 06:00:52 2025 GMT Subject: CN=dadb0b00f1ead2d9471a6a8c39a33124949bbbd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1d:21:67:f1:68:ed:8e:ae:16:3a:c4:da:5d: 96:82:c2:26:92:3a:cf:ef:93:21:f7:5e:eb:f6:89: 24:b5:47:72:ac:19:01:73:06:db:e5:67:d1:97:82: 65:82:cf:0a:74:77:9a:42:dc:94:b4:c4:b1:53:6d: 1c:0d:77:68:25:17:1e:f8:a7:bd:33:d9:d6:df:05: 1c:2b:d7:30:0f:44:2d:f0:72:97:b4:f0:ed:2b:9b: ee:32:98:11:7d:7c:fc:f3:2e:79:2e:79:a9:f6:ec: ec:f3:1d:02:9a:10:88:8c:b3:3f:ea:cc:f2:86:ff: a9:86:a1:99:3f:5d:23:ec:37:d8:d0:b0:8c:5e:fa: 92:d1:6c:80:6c:b8:c3:a1:65:ad:69:1f:05:d7:cc: 28:bb:bd:d9:30:20:86:9a:0b:34:eb:de:76:fe:6a: 2f:63:bb:3e:d0:3c:18:ec:c6:3d:28:63:1d:c8:06: 66:7c:be:24:20:c1:b9:99:d4:4b:4c:df:b2:61:41: 92:03:16:fd:ec:19:5d:fb:98:84:b5:52:d5:69:46: dc:49:47:b2:93:23:ed:fb:49:24:e6:61:9d:ef:ce: bf:b4:cd:7c:06:d3:4c:f7:3c:e9:ff:78:d0:0a:cc: ca:c2:aa:f1:2b:f4:a2:a6:90:15:a1:1b:8c:27:3d: 2d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DB:0B:00:F1:EA:D2:D9:47:1A:6A:8C:39:A3:31:24:94:9B:BB:D2 X509v3 Authority Key Identifier: keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f9:da:6a:7a:09:e9:df:9b:1c:24:8d:f7:fc:e4:78:69:65: 7c:92:4a:f0:da:74:b8:ba:09:6d:1e:5c:96:ab:76:54:a1:e5: dd:ed:bf:c3:f7:3f:cd:e3:c0:f6:59:73:3c:c3:3c:a9:19:8f: a4:60:07:37:27:06:89:28:16:4a:7d:cf:2a:34:29:56:44:4e: d4:f1:25:6a:f9:d3:4e:67:ec:1b:c5:c8:7e:bc:32:c2:bb:2c: 17:62:2e:10:aa:78:3c:1c:4f:9c:e9:62:23:88:9b:47:3b:0d: 78:a1:cf:2d:ae:82:27:dc:7c:19:c3:16:3f:1b:43:dd:11:a2: e7:da:fa:9a:a1:6b:8b:e4:e2:9e:f3:48:42:13:51:8a:5e:f8: e9:5f:01:02:a0:28:41:ea:1f:19:c7:72:5a:4f:47:9f:5d:87: 91:a1:ae:d6:bf:34:cf:8b:ec:1d:14:1b:92:84:b9:0f:d1:8c: 72:c1:76:02:60:c7:89:1e:0a:34:1c:0c:e9:8f:b6:17:31:0f: 94:4c:da:86:17:2e:3f:b0:1d:0e:fb:60:a3:7e:c1:72:36:b9: af:0a:0a:dd:d6:87:35:d6:eb:4f:0a:11:dd:bf:0c:43:b5:99: 48:32:a9:6d:7c:7e:fb:ca:c9:52:95:8f:ca:02:15:81:88:4b: 22:13:aa:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7UB2QrGcSmarqyklLZAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZmM5ODQyOGMyNDUxYzFhZWRmOGFmZmMwNzJhOTU4Njhl Y2VlOGIwHhcNMjUxMjA2MDYwMDUyWhcNMjUxMjA3MDYwMDUyWjAzMTEwLwYDVQQD EyhkYWRiMGIwMGYxZWFkMmQ5NDcxYTZhOGMzOWEzMzEyNDk0OWJiYmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4h0hZ/Fo7Y6uFjrE2l2WgsImkjrP 75Mh917r9okktUdyrBkBcwbb5WfRl4Jlgs8KdHeaQtyUtMSxU20cDXdoJRce+Ke9 M9nW3wUcK9cwD0Qt8HKXtPDtK5vuMpgRfXz88y55Lnmp9uzs8x0CmhCIjLM/6szy hv+phqGZP10j7DfY0LCMXvqS0WyAbLjDoWWtaR8F18wou73ZMCCGmgs06952/mov Y7s+0DwY7MY9KGMdyAZmfL4kIMG5mdRLTN+yYUGSAxb97Bld+5iEtVLVaUbcSUey kyPt+0kk5mGd786/tM18BtNM9zzp/3jQCszKwqrxK/SippAVoRuMJz0tpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrbCwDx6tLZRxpqjDmjMSSUm7vSMB8GA1UdIwQY MBaAFJ/8mEKMJFHBrt+K/8ByqVho7O6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83MjQzMjgtMDlkMy00OTY0LWFjYzQt Yjk2ZDJmYmVmZWJkLzEvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS83MjQzMjgtMDlkMy00OTY0LWFjYzQtYjk2ZDJmYmVmZWJk LzEvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPnaanoJ 6d+bHCSN9/zkeGllfJJK8Np0uLoJbR5clqt2VKHl3e2/w/c/zePA9llzPMM8qRmP pGAHNycGiSgWSn3PKjQpVkRO1PElavnTTmfsG8XIfrwywrssF2IuEKp4PBxPnOli I4ibRzsNeKHPLa6CJ9x8GcMWPxtD3RGi59r6mqFri+TinvNIQhNRil746V8BAqAo QeofGcdyWk9Hn12HkaGu1r80z4vsHRQbkoS5D9GMcsF2AmDHiR4KNBwM6Y+2FzEP lEzahhcuP7AdDvtgo37Bcja5rwoK3daHNdbrTwoR3b8MQ7WZSDKpbXx++8rJUpWP ygIVgYhLIhOq9A== -----END CERTIFICATE-----Generated at Sat Dec 6 16:09:56 2025 by rpki-client