This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
File: yl4-xakGI8y5d4TTzvJCEqMcuvE.mft (raw, json)
Hash identifier: ksjcv8hS9yTmB1LR6cnI1xPQVF4/VG8LueMeNtSI96I=
Subject key identifier: 06:CC:F0:FB:93:8A:E1:89:4B:C2:0F:B9:9E:BD:B5:B5:B7:20:EB:B5
Authority key identifier: CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
Certificate issuer: /CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Certificate serial: 019AF0BF6F5BCAA64577D00AED400135BEA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
Manifest number: 175F
Signing time: Fri 05 Dec 2025 23:01:08 +0000
Manifest this update: Fri 05 Dec 2025 23:01:08 +0000
Manifest next update: Sat 06 Dec 2025 23:01:08 +0000
Files and hashes: 1: J9IdjUhrnmdPlVz9AGQjjVXnZY4.roa (hash: /POjVrGUKaeCRXBaJsPW90/VSUb2DNJJX57AghjcdVQ=)
2: WufKLm_VUBSOVUjA2N7mSbnC5yo.roa (hash: ZMQ2JSceB3qiiNWG8Og7oPp2n6BUB8rjHDG+QHM/0fA=)
3: yl4-xakGI8y5d4TTzvJCEqMcuvE.crl (hash: H/GDzzv4rUAWa7AXxzwn+tK2cBKO51aIF4bWFdGrREI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 23:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f0:bf:6f:5b:ca:a6:45:77:d0:0a:ed:40:01:35:be:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Validity
Not Before: Dec 5 23:01:08 2025 GMT
Not After : Dec 6 23:01:08 2025 GMT
Subject: CN=06ccf0fb938ae1894bc20fb99ebdb5b5b720ebb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8d:07:e4:6a:05:bb:cb:6f:3f:bf:28:f1:d0:
a7:a4:2a:12:6c:c9:fd:89:6e:ce:fc:ff:6e:52:ca:
0c:65:86:66:0d:49:6e:b0:ff:cf:fd:1d:e1:16:23:
78:6f:0a:3f:d0:d1:b1:e6:21:88:82:8e:fb:14:ac:
df:c2:11:cd:a6:a4:8c:1d:05:c3:c1:b1:e6:ac:36:
97:17:e1:0c:dd:84:c8:8e:a2:1b:65:e8:e1:59:96:
e0:61:41:25:96:5a:9c:0b:58:2f:7a:e5:b4:83:39:
87:6f:37:af:7e:d5:47:bf:67:f6:ce:09:cb:49:12:
06:08:25:aa:b3:23:87:4a:b7:38:ba:98:02:61:d5:
c3:e7:d4:76:1c:fc:5d:fd:a3:3a:b4:6d:53:c4:8e:
b7:53:79:58:b7:b6:c5:08:ee:2f:a9:3d:cc:1d:7b:
f7:5c:21:b6:61:dd:5f:73:87:c0:b3:0d:2b:9f:d8:
67:1b:24:9a:3d:1a:bc:21:4c:d1:4c:c5:b1:96:0e:
30:73:0d:c6:8e:cc:23:44:f4:38:17:6a:41:d6:35:
67:60:51:43:e9:89:d4:1f:e6:7c:2b:32:ab:6b:b2:
5c:cc:68:16:f5:00:19:4f:8a:18:57:d2:91:da:fb:
6b:62:a1:64:c2:04:32:e4:ac:c2:64:4c:d3:02:f8:
7c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CC:F0:FB:93:8A:E1:89:4B:C2:0F:B9:9E:BD:B5:B5:B7:20:EB:B5
X509v3 Authority Key Identifier:
keyid:CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7c:f1:7e:23:b8:ca:ab:36:87:88:06:72:01:6c:3e:7e:f3:
ff:f3:95:7c:16:b4:a7:51:16:7d:86:c6:e9:76:b3:fa:d8:5c:
55:68:e4:e5:59:06:7c:29:6c:e9:36:86:8f:b2:57:63:ea:db:
5b:4b:0a:50:5d:6a:35:5e:1a:ba:6d:fd:63:35:32:19:d0:3a:
c7:29:02:88:52:01:8f:94:85:89:80:f0:64:19:12:9d:77:3e:
e8:8b:3c:15:c7:07:00:30:97:cf:6b:0b:95:9b:69:54:c4:32:
9e:b8:ec:ac:c1:66:2c:16:de:c1:9a:43:2f:e8:e7:6b:3e:74:
2f:75:9e:74:b7:bd:21:db:fe:1e:da:89:ca:40:3e:c3:3f:b8:
d8:ce:46:7c:72:cd:f6:cd:54:19:8b:52:89:6e:42:96:fb:5c:
fc:b6:8f:c8:a7:6a:49:fe:88:69:85:1c:df:c3:67:19:36:f5:
5b:2a:2b:80:17:c1:8b:ba:5b:f1:c9:19:6d:a7:b1:1c:8d:35:
ca:bb:65:c4:5c:95:89:f5:31:53:80:38:f8:65:cf:ff:7b:eb:
22:cb:3a:f1:3a:66:88:3d:e8:fb:66:3b:1a:89:9d:42:72:54:
2c:f4:8c:42:eb:c4:17:4d:79:3f:83:55:8a:c1:13:89:e9:e2:
1d:40:d9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:49:10 2025 by rpki-client