This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft File: yYoYbo7rhxTtylsNcW5R1mwWjOE.mft (raw, json) Hash identifier: TRG0k+FuYWt0IGWPD6nSBMqE71vyY5dSDijwtqHK/tw= Subject key identifier: 1F:84:91:2E:06:42:AA:BA:31:76:72:17:CD:6D:B3:B3:91:E7:3C:A4 Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1 Certificate issuer: /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1 Certificate serial: 019AF464C7E625FA60792CFDB48F84991BC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 16:00:36 +0000 Manifest this update: Sat 06 Dec 2025 16:00:36 +0000 Manifest next update: Sun 07 Dec 2025 16:00:36 +0000 Files and hashes: 1: Y9vHd81ibfUetGxJah-LnbSDV5g.roa (hash: 4fkHfBFVcEfZDutW6y6I1HuGuOEE4ACtS7MPP484LwM=) 2: yYoYbo7rhxTtylsNcW5R1mwWjOE.crl (hash: vOyt6JuslM7DTZiUg7uP0GpsJTpOh38cd5KD45HkGxk=) 3: zBGnHPAUEWWCm_u3jtGTRqp9xHs.roa (hash: WhdGn2fRgjfQdOUl3EYSHsYRvd0466eSDsxZA6Pu8m8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:c7:e6:25:fa:60:79:2c:fd:b4:8f:84:99:1b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1 Validity Not Before: Dec 6 16:00:36 2025 GMT Not After : Dec 7 16:00:36 2025 GMT Subject: CN=1f84912e0642aaba31767217cd6db3b391e73ca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:16:79:2f:92:fc:d9:12:d4:00:25:33:08:7d: 03:3e:62:2f:62:dc:78:09:3a:e1:3d:b1:a5:4d:09: 30:e9:a4:89:bd:fc:b2:b7:b9:23:0f:b6:63:0f:21: 56:ab:15:52:dd:dc:65:17:7d:2a:e3:d0:db:4f:51: 5d:09:d6:7d:41:e8:b6:93:b7:b7:31:06:4f:d7:a9: ea:8d:e8:97:c1:5b:50:a8:4c:24:26:a6:c4:f6:17: 44:e6:e9:08:aa:f1:a4:e2:7f:78:e1:1d:d5:cf:9a: 06:9b:6f:92:c5:d1:c9:04:24:ca:a4:15:3a:19:63: 01:53:11:53:01:3a:76:7d:c5:ac:1f:1e:47:ab:f1: 19:27:a3:79:47:dd:3d:33:c2:a8:b6:38:7e:2c:7e: 14:2b:2b:72:f3:9d:c7:13:15:a7:36:00:e5:7c:ba: a9:c4:5e:a6:82:39:29:e1:ae:9f:74:7a:cc:61:ab: 9e:40:54:dc:37:0f:8c:88:1d:b4:6b:a6:49:26:3a: c6:be:14:44:9a:41:a1:bd:c4:81:1e:78:1e:f7:79: 6e:87:37:bc:7b:74:57:6e:79:1a:e9:b3:67:6d:7c: a7:5e:f9:80:27:82:54:71:1d:82:b5:64:a6:48:ca: 24:23:d1:ec:a8:45:b3:83:25:44:80:15:06:aa:b9: b0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:84:91:2E:06:42:AA:BA:31:76:72:17:CD:6D:B3:B3:91:E7:3C:A4 X509v3 Authority Key Identifier: keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:ab:35:e2:81:22:61:fc:bb:a7:5b:3e:e1:fe:a1:ed:5f:bc: de:b5:a5:a0:1d:02:38:7d:d7:b1:70:4b:94:ea:83:b4:1b:e7: 66:ba:7e:76:ea:fa:32:83:49:fa:cd:58:ea:eb:85:00:c3:c3: f5:b7:c1:e4:a3:a4:c9:bd:bf:b2:45:8f:7b:af:6d:ed:21:1d: bf:26:37:f3:e5:71:46:4a:38:65:5d:7f:81:69:86:86:2e:02: 8b:f8:b7:29:79:71:92:44:06:8b:01:17:1a:4d:08:d2:ae:4f: 4c:90:4b:20:ab:bf:54:7b:f2:99:dd:77:4c:ee:f1:74:99:d7: c0:22:60:e9:60:03:50:60:a6:8c:a6:07:55:86:2c:5e:75:59: f5:31:3f:0a:86:90:f9:7a:e6:68:ec:df:ea:90:ba:75:c2:1a: 5f:8a:a9:93:3f:fc:92:6d:4b:52:5b:d0:7f:d0:b2:60:a8:1b: 36:1a:c4:06:25:f2:c0:bf:a5:c2:ba:05:c8:f2:62:85:b7:ee: 22:77:88:c0:14:f1:ea:75:88:d5:c0:6e:61:30:ca:81:15:d8: 28:32:68:43:20:fc:c5:0b:82:f1:f9:c1:59:4e:d9:fd:c1:4f: 43:2b:2b:57:f4:e4:aa:b3:d9:5d:af:5a:11:29:0a:7a:3f:e8: dc:28:47:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZMfmJfpgeSz9tI+EmRvDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OGExODZlOGVlYjg3MTRlZGNhNWIwZDcxNmU1MWQ2NmMx NjhjZTEwHhcNMjUxMjA2MTYwMDM2WhcNMjUxMjA3MTYwMDM2WjAzMTEwLwYDVQQD EygxZjg0OTEyZTA2NDJhYWJhMzE3NjcyMTdjZDZkYjNiMzkxZTczY2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRZ5L5L82RLUACUzCH0DPmIvYtx4 CTrhPbGlTQkw6aSJvfyyt7kjD7ZjDyFWqxVS3dxlF30q49DbT1FdCdZ9Qei2k7e3 MQZP16nqjeiXwVtQqEwkJqbE9hdE5ukIqvGk4n944R3Vz5oGm2+SxdHJBCTKpBU6 GWMBUxFTATp2fcWsHx5Hq/EZJ6N5R909M8Kotjh+LH4UKyty853HExWnNgDlfLqp xF6mgjkp4a6fdHrMYaueQFTcNw+MiB20a6ZJJjrGvhREmkGhvcSBHnge93luhze8 e3RXbnka6bNnbXynXvmAJ4JUcR2CtWSmSMokI9HsqEWzgyVEgBUGqrmwHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+EkS4GQqq6MXZyF81ts7OR5zykMB8GA1UdIwQY MBaAFMmKGG6O64cU7cpbDXFuUdZsFozhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVlvWWJvN3JoeFR0eWxzTmNXNVIxbXdXak9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iYTcyMTQtNTU2OC00YTQyLWE5OTkt N2E1YThkMDk2N2M4LzEveVlvWWJvN3JoeFR0eWxzTmNXNVIxbXdXak9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iYTcyMTQtNTU2OC00YTQyLWE5OTktN2E1YThkMDk2N2M4 LzEveVlvWWJvN3JoeFR0eWxzTmNXNVIxbXdXak9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGKs14oEi Yfy7p1s+4f6h7V+83rWloB0COH3XsXBLlOqDtBvnZrp+dur6MoNJ+s1Y6uuFAMPD 9bfB5KOkyb2/skWPe69t7SEdvyY38+VxRko4ZV1/gWmGhi4Ci/i3KXlxkkQGiwEX Gk0I0q5PTJBLIKu/VHvymd13TO7xdJnXwCJg6WADUGCmjKYHVYYsXnVZ9TE/CoaQ +XrmaOzf6pC6dcIaX4qpkz/8km1LUlvQf9CyYKgbNhrEBiXywL+lwroFyPJihbfu IneIwBTx6nWI1cBuYTDKgRXYKDJoQyD8xQuC8fnBWU7Z/cFPQysrV/TkqrPZXa9a ESkKej/o3ChHLg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:28:21 2025 by rpki-client