This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft File: yeDkyay_cB-TAUmzJc4ELPn5Klk.mft (raw, json) Hash identifier: TJ1GMcguur9EFtVFOWoKmkLMz3r1DFFvC7Vrj+v9UyE= Subject key identifier: F8:6E:78:DD:DE:14:16:6E:4F:BA:FE:DC:EB:0D:D6:31:40:AA:12:AD Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59 Certificate issuer: /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59 Certificate serial: 019AF12E7CDF583398B7A63667D337E141DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft Manifest number: 100F Signing time: Sat 06 Dec 2025 01:02:26 +0000 Manifest this update: Sat 06 Dec 2025 01:02:26 +0000 Manifest next update: Sun 07 Dec 2025 01:02:26 +0000 Files and hashes: 1: 9hbofTa8wmBhXG-prhgMHzrh8LQ.roa (hash: oj+TVOa3IXAijydn5VPy/DSH3tXPUY065JYAspyYspE=) 2: yeDkyay_cB-TAUmzJc4ELPn5Klk.crl (hash: VP0uZwte7ZLIDQev0wckYT+5Cf6ybifViSJ+5dlIZ2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:7c:df:58:33:98:b7:a6:36:67:d3:37:e1:41:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59 Validity Not Before: Dec 6 01:02:26 2025 GMT Not After : Dec 7 01:02:26 2025 GMT Subject: CN=f86e78ddde14166e4fbafedceb0dd63140aa12ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f2:76:85:d1:dd:45:49:99:ce:98:36:95:69: 84:74:a4:57:b4:56:74:80:a0:c7:d3:44:b6:b6:49: 88:36:b4:70:61:fe:9c:14:e9:ab:58:b9:1c:33:5f: 55:49:1c:d2:6e:d6:8f:50:b1:21:39:78:62:11:46: 19:8a:dc:0b:f4:da:2c:51:3b:c5:84:81:a1:a2:ae: d3:e1:c2:a0:94:96:e4:14:ec:34:16:42:01:eb:ea: b2:95:da:63:67:c6:cb:53:2c:36:a6:60:ba:cd:56: 98:1b:8a:d1:9e:72:1e:15:23:44:e8:a7:ad:6e:8e: b9:0a:11:4b:c1:87:5e:4b:ba:d7:10:6a:ee:47:db: c8:42:78:23:bd:48:a1:d9:44:e4:7b:00:8d:7b:e1: 5c:d5:e5:e3:95:ce:1c:a8:91:0b:79:1f:93:4f:d7: b6:c9:65:b5:8c:99:d7:1f:1c:14:5f:14:aa:a7:44: d0:44:dc:74:87:12:00:b3:63:b1:b6:32:86:53:5c: bd:8c:37:37:33:9c:a8:78:e9:7e:f7:3b:2e:eb:9a: e7:38:dc:4c:7a:9c:30:fb:b0:b4:69:30:c2:8c:63: 40:b3:4f:36:eb:99:64:60:d8:0e:57:6b:8a:f1:bf: 44:a3:3e:b2:59:5c:0a:f9:9f:47:ed:62:34:9f:9d: 94:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6E:78:DD:DE:14:16:6E:4F:BA:FE:DC:EB:0D:D6:31:40:AA:12:AD X509v3 Authority Key Identifier: keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:cf:e5:fe:84:18:61:09:86:3b:c1:bf:6f:70:47:9d:67:dc: 53:89:bd:f6:3b:15:c6:22:c0:60:fd:92:cc:39:3e:a7:ea:d6: 9e:6a:c3:49:4f:30:7b:4f:96:5e:8d:37:09:fe:37:b0:a7:e1: e0:be:9e:f4:56:92:0c:80:5a:7e:5b:6c:ac:ee:e1:3b:b6:26: 98:1f:d0:6f:d2:01:06:70:84:87:a3:7a:e4:47:96:2e:29:fd: 70:5b:f2:ea:c6:8b:c3:cb:9d:8c:8c:a2:78:b8:55:31:78:bd: 21:70:ba:13:8a:fb:c9:04:e1:36:ca:96:99:8b:40:8c:ea:97: 9f:1e:39:d8:47:e9:02:f8:0c:17:1a:68:d6:3a:f6:aa:55:c4: 6d:28:84:8d:e0:64:72:41:18:36:f2:06:05:1a:7d:25:e6:7a: c5:0b:06:35:cb:fb:eb:ff:f8:69:93:b5:ee:62:09:17:e2:72: 02:ec:6c:f9:35:62:dd:d0:3f:08:17:67:67:ae:e5:76:66:36: 35:54:85:5f:de:5c:48:64:4a:63:91:ea:35:5e:71:59:96:7a: 57:55:cf:2d:c0:0f:01:73:fa:ba:8c:e0:4b:9f:3c:ab:64:29: af:ca:bc:7e:cb:d6:ed:2c:b0:92:85:83:1c:df:20:fb:ac:b9: 4e:b1:65:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnzfWDOYt6Y2Z9M34UHeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZTBlNGM5YWNiZjcwMWY5MzAxNDliMzI1Y2UwNDJjZjlm OTJhNTkwHhcNMjUxMjA2MDEwMjI2WhcNMjUxMjA3MDEwMjI2WjAzMTEwLwYDVQQD EyhmODZlNzhkZGRlMTQxNjZlNGZiYWZlZGNlYjBkZDYzMTQwYWExMmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PJ2hdHdRUmZzpg2lWmEdKRXtFZ0 gKDH00S2tkmINrRwYf6cFOmrWLkcM19VSRzSbtaPULEhOXhiEUYZitwL9NosUTvF hIGhoq7T4cKglJbkFOw0FkIB6+qyldpjZ8bLUyw2pmC6zVaYG4rRnnIeFSNE6Ket bo65ChFLwYdeS7rXEGruR9vIQngjvUih2UTkewCNe+Fc1eXjlc4cqJELeR+TT9e2 yWW1jJnXHxwUXxSqp0TQRNx0hxIAs2OxtjKGU1y9jDc3M5yoeOl+9zsu65rnONxM epww+7C0aTDCjGNAs08265lkYNgOV2uK8b9Eoz6yWVwK+Z9H7WI0n52UvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhueN3eFBZuT7r+3OsN1jFAqhKtMB8GA1UdIwQY MBaAFMng5Mmsv3AfkwFJsyXOBCz5+SpZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWVEa3lheV9jQi1UQVVtekpjNEVMUG41S2xrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mZGI2NDEtZDFhMy00ZGRhLWJmOTEt YmU3YzgyOGMzNjkzLzEveWVEa3lheV9jQi1UQVVtekpjNEVMUG41S2xrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mZGI2NDEtZDFhMy00ZGRhLWJmOTEtYmU3YzgyOGMzNjkz LzEveWVEa3lheV9jQi1UQVVtekpjNEVMUG41S2xrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjM/l/oQY YQmGO8G/b3BHnWfcU4m99jsVxiLAYP2SzDk+p+rWnmrDSU8we0+WXo03Cf43sKfh 4L6e9FaSDIBafltsrO7hO7YmmB/Qb9IBBnCEh6N65EeWLin9cFvy6saLw8udjIyi eLhVMXi9IXC6E4r7yQThNsqWmYtAjOqXnx452EfpAvgMFxpo1jr2qlXEbSiEjeBk ckEYNvIGBRp9JeZ6xQsGNcv76//4aZO17mIJF+JyAuxs+TVi3dA/CBdnZ67ldmY2 NVSFX95cSGRKY5HqNV5xWZZ6V1XPLcAPAXP6uozgS588q2Qpr8q8fsvW7SywkoWD HN8g+6y5TrFlKw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:15 2025 by rpki-client