This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft File: yOkLFy-IviG7mdVz_XWyf1v3RcI.mft (raw, json) Hash identifier: 50p4P5EtVbcH99pMRjYSViRBWM7raoMVYOtfvDRj11E= Subject key identifier: 10:3D:53:43:4C:54:D4:3B:36:FC:FB:93:EF:0D:86:91:3B:53:53:F5 Authority key identifier: C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2 Certificate issuer: /CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2 Certificate serial: 019AF3BFE6091BE05FDC886C9A32D81515F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft Manifest number: 1397 Signing time: Sat 06 Dec 2025 13:00:30 +0000 Manifest this update: Sat 06 Dec 2025 13:00:30 +0000 Manifest next update: Sun 07 Dec 2025 13:00:30 +0000 Files and hashes: 1: DruMjLoGzTbfpdC-U-WNttTm1_E.roa (hash: SsRWSqMHnifAjAWueilvP4vmdjzH/KuaOCO7NOMeoV8=) 2: yOkLFy-IviG7mdVz_XWyf1v3RcI.crl (hash: 1oentRiGzLEO6AOhuo90eSL1gIlFW44MS5Vrn3ubKDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:bf:e6:09:1b:e0:5f:dc:88:6c:9a:32:d8:15:15:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2 Validity Not Before: Dec 6 13:00:30 2025 GMT Not After : Dec 7 13:00:30 2025 GMT Subject: CN=103d53434c54d43b36fcfb93ef0d86913b5353f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:af:c1:73:8b:1d:64:a2:af:d2:9d:22:7d:da: ef:87:61:60:3d:51:0f:1a:96:ea:53:db:78:bc:a2: 3a:13:7a:be:50:c9:b8:99:ad:8d:d4:58:7f:9b:9e: e8:9d:56:d8:91:22:d7:62:2f:a2:bd:80:51:48:d9: 03:dc:77:15:be:b1:c9:22:bb:03:5f:ff:0e:e8:d6: f5:e9:1c:6d:e3:f0:b2:1d:c7:af:8f:ed:35:82:e7: c7:ed:3b:63:25:5a:4a:00:ea:3e:e8:da:21:18:d0: 20:74:4a:68:3a:b2:67:74:65:01:bd:c7:4b:91:9e: 3f:da:c3:10:b4:31:e1:f4:7c:61:a8:42:9c:e9:2c: e9:2a:77:8f:ac:b7:76:09:a8:cf:29:c6:ef:3e:b0: e0:b5:4a:c3:40:de:1c:29:ea:05:6e:bc:45:98:e8: 4f:f1:5e:1a:21:aa:bf:4b:cc:e8:16:cb:8a:e0:71: e2:1c:8e:bd:95:ec:3e:aa:2c:d0:4e:55:cf:00:e2: 42:80:d1:0d:84:2f:73:3e:b8:d2:d6:39:43:a6:8b: b8:6b:33:77:60:23:e3:20:30:b5:5a:76:e2:f8:fa: 70:45:bc:25:21:1a:a9:8c:48:cc:bb:dd:d8:f2:58: 94:e3:aa:58:c6:27:84:f8:7e:f3:ac:28:76:da:4c: 84:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3D:53:43:4C:54:D4:3B:36:FC:FB:93:EF:0D:86:91:3B:53:53:F5 X509v3 Authority Key Identifier: keyid:C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:73:8d:28:39:46:53:1d:b7:54:10:96:3f:9c:a6:77:7a:32: 88:d4:f3:32:70:a0:f2:cd:26:38:5d:99:0c:6b:0e:76:e0:db: d2:73:36:e0:84:ed:23:37:ef:ce:76:7b:6b:16:85:c3:a6:a1: 5c:93:a8:71:f6:6c:2d:87:bd:d9:d3:12:ea:2d:07:2b:f8:8b: 38:09:9f:86:57:3b:dc:9b:09:0a:25:72:bd:53:98:36:81:00: ae:7d:74:5a:02:81:fe:ad:84:b9:f0:20:95:6b:47:23:6c:0c: 81:60:c8:39:26:1c:de:a5:b2:c4:bc:f5:49:9b:9e:63:5d:3b: 37:52:00:02:c5:81:6f:49:d5:98:bc:65:ae:2b:d4:5f:a2:5f: c5:37:11:dd:3b:4e:f4:68:b7:df:ef:a7:8e:c0:7d:a2:29:10: 53:9d:98:7b:ea:e3:f1:1c:b5:55:e3:f4:76:a9:fa:85:94:ec: 65:a3:37:81:7a:45:e0:0f:7f:20:74:bf:40:e6:d2:3e:2c:37: b9:58:24:06:e0:03:eb:1c:e8:76:c6:5d:40:ec:40:60:50:ac: d3:62:b5:3a:81:cc:60:aa:da:5e:43:35:64:13:5d:a7:6c:5b: 58:c7:04:8c:22:74:99:0b:0e:91:87:80:25:97:a3:d7:9e:71: f4:9d:2e:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzv+YJG+Bf3IhsmjLYFRX0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZTkwYjE3MmY4OGJlMjFiYjk5ZDU3M2ZkNzViMjdmNWJm NzQ1YzIwHhcNMjUxMjA2MTMwMDMwWhcNMjUxMjA3MTMwMDMwWjAzMTEwLwYDVQQD EygxMDNkNTM0MzRjNTRkNDNiMzZmY2ZiOTNlZjBkODY5MTNiNTM1M2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6/Bc4sdZKKv0p0ifdrvh2FgPVEP GpbqU9t4vKI6E3q+UMm4ma2N1Fh/m57onVbYkSLXYi+ivYBRSNkD3HcVvrHJIrsD X/8O6Nb16Rxt4/CyHcevj+01gufH7TtjJVpKAOo+6NohGNAgdEpoOrJndGUBvcdL kZ4/2sMQtDHh9HxhqEKc6SzpKnePrLd2CajPKcbvPrDgtUrDQN4cKeoFbrxFmOhP 8V4aIaq/S8zoFsuK4HHiHI69lew+qizQTlXPAOJCgNENhC9zPrjS1jlDpou4azN3 YCPjIDC1Wnbi+PpwRbwlIRqpjEjMu93Y8liU46pYxieE+H7zrCh22kyE7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBA9U0NMVNQ7Nvz7k+8NhpE7U1P1MB8GA1UdIwQY MBaAFMjpCxcviL4hu5nVc/11sn9b90XCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU9rTEZ5LUl2aUc3bWRWel9YV3lmMXYzUmNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wOGM0YTctNGQyYS00ZDFjLThiOGUt NTZjNWQ3NmRkY2Q4LzEveU9rTEZ5LUl2aUc3bWRWel9YV3lmMXYzUmNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wOGM0YTctNGQyYS00ZDFjLThiOGUtNTZjNWQ3NmRkY2Q4 LzEveU9rTEZ5LUl2aUc3bWRWel9YV3lmMXYzUmNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATnONKDlG Ux23VBCWP5ymd3oyiNTzMnCg8s0mOF2ZDGsOduDb0nM24ITtIzfvznZ7axaFw6ah XJOocfZsLYe92dMS6i0HK/iLOAmfhlc73JsJCiVyvVOYNoEArn10WgKB/q2EufAg lWtHI2wMgWDIOSYc3qWyxLz1SZueY107N1IAAsWBb0nVmLxlrivUX6JfxTcR3TtO 9Gi33++njsB9oikQU52Ye+rj8Ry1VeP0dqn6hZTsZaM3gXpF4A9/IHS/QObSPiw3 uVgkBuAD6xzodsZdQOxAYFCs02K1OoHMYKraXkM1ZBNdp2xbWMcEjCJ0mQsOkYeA JZej155x9J0utw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:35:39 2025 by rpki-client