This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft File: Ya6c-i1ltBVC037v8dHGw4eqobU.mft (raw, json) Hash identifier: 4FPZC6CFb3ylCHMufzL/6n3LDHdaVM6FwkbOo9VqULc= Subject key identifier: D0:D0:0F:4D:92:BF:9D:02:A5:DC:B0:B3:F5:DB:74:6E:95:2D:23:0E Authority key identifier: 61:AE:9C:FA:2D:65:B4:15:42:D3:7E:EF:F1:D1:C6:C3:87:AA:A1:B5 Certificate issuer: /CN=61ae9cfa2d65b41542d37eeff1d1c6c387aaa1b5 Certificate serial: 019AF31C715AC6557E65E308E5BC91761E29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft Manifest number: 01FF Signing time: Sat 06 Dec 2025 10:01:58 +0000 Manifest this update: Sat 06 Dec 2025 10:01:58 +0000 Manifest next update: Sun 07 Dec 2025 10:01:58 +0000 Files and hashes: 1: 3OrX-Bx_5Y7rOdWC35EMVBiLsiM.roa (hash: Hcg3Yc6y08nDt8RGm5cjhZE+4ENH1m8OZY89OLwGe7s=) 2: Ya6c-i1ltBVC037v8dHGw4eqobU.crl (hash: glUgyYDzK/3ZEhiGfGKpnxi+NqHX+EoZcdNp/x70eLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:71:5a:c6:55:7e:65:e3:08:e5:bc:91:76:1e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61ae9cfa2d65b41542d37eeff1d1c6c387aaa1b5 Validity Not Before: Dec 6 10:01:58 2025 GMT Not After : Dec 7 10:01:58 2025 GMT Subject: CN=d0d00f4d92bf9d02a5dcb0b3f5db746e952d230e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:58:ab:a2:2b:97:b3:d6:1b:88:04:80:2e:3f: a7:7b:14:eb:ba:bf:f1:3d:37:0e:80:4c:80:3c:67: ec:bc:dd:ce:6d:e6:97:64:aa:21:36:c7:b2:87:0e: c1:3d:95:31:86:95:8f:9f:d6:e6:1a:94:4e:dc:94: b3:04:0c:89:61:01:bd:2c:09:2e:f7:84:8a:ba:3c: 4c:26:b9:30:bd:08:d5:b9:78:97:01:0a:e3:53:d2: d7:69:62:6f:b0:5d:e6:f6:21:08:04:83:43:aa:9a: 88:3c:ec:da:e8:b8:fe:5c:d3:70:7d:cd:61:fc:fb: bb:e7:f0:3a:fb:13:2a:9f:c1:25:e9:cd:f5:b9:85: 56:3f:67:a0:8b:f7:26:a8:c6:66:d4:d0:e6:f4:1a: da:ce:7e:8e:f2:30:b3:bf:15:c4:67:b3:8f:b1:93: 13:a1:df:f9:b4:f0:ba:3e:bb:07:4d:0d:03:94:ac: 3d:c3:a9:d3:06:3c:81:91:31:1d:46:6b:05:31:f1: a4:84:b0:57:e3:0c:5c:51:4b:44:a0:e3:79:8f:37: 2f:b6:bb:5d:ce:a5:1e:32:95:17:92:54:60:cc:76: 85:7c:87:a5:7e:56:dc:ba:89:a5:97:a2:80:23:11: 7c:4e:a4:6b:9e:9b:7f:93:f8:96:24:fa:b7:6b:36: 87:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D0:0F:4D:92:BF:9D:02:A5:DC:B0:B3:F5:DB:74:6E:95:2D:23:0E X509v3 Authority Key Identifier: keyid:61:AE:9C:FA:2D:65:B4:15:42:D3:7E:EF:F1:D1:C6:C3:87:AA:A1:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:43:99:a7:d6:16:2f:b3:dd:6c:b4:86:28:ed:58:c3:81:99: d8:17:d8:d1:b6:0b:0a:e0:d1:06:a9:66:e5:58:29:71:9a:33: 27:75:83:90:0f:8b:fb:a2:f6:72:1f:f5:49:ea:ad:ab:47:3f: bb:6c:d1:1b:43:f0:48:a5:55:a3:b7:4f:81:ba:f8:61:83:c0: 38:02:00:4d:25:7a:5e:a3:df:a7:dc:92:5a:88:13:4e:40:c1: 00:d6:2b:91:71:fb:5f:9c:fd:63:5f:3d:48:90:fd:dc:7e:c2: f1:05:7d:c2:3e:57:a5:f1:71:71:67:a9:c2:49:cd:e1:b9:ac: 8f:5b:56:7c:dd:bf:3c:eb:e7:c8:d8:27:e3:4f:4a:77:2a:f8: f2:c3:08:3b:c3:9c:df:69:86:4c:3b:eb:c2:8c:16:c6:94:da: 5b:79:af:98:05:54:d9:44:e4:16:c3:6a:32:c7:b8:9a:50:8a: fe:d9:00:e0:86:c0:75:59:3a:a4:94:3b:5a:12:a8:d2:ef:24: 6e:f9:16:f2:8a:82:1e:de:8f:d9:58:dd:cc:c0:5a:ed:95:63: 0b:d7:97:de:3a:a6:1d:51:38:b4:75:e3:bc:be:8a:11:13:43: 24:49:91:7e:d5:00:8c:73:ce:bf:13:9c:c0:0f:22:cb:3d:11: 2a:12:ed:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHHFaxlV+ZeMI5byRdh4pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYWU5Y2ZhMmQ2NWI0MTU0MmQzN2VlZmYxZDFjNmMzODdh YWExYjUwHhcNMjUxMjA2MTAwMTU4WhcNMjUxMjA3MTAwMTU4WjAzMTEwLwYDVQQD EyhkMGQwMGY0ZDkyYmY5ZDAyYTVkY2IwYjNmNWRiNzQ2ZTk1MmQyMzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2liroiuXs9YbiASALj+nexTrur/x PTcOgEyAPGfsvN3ObeaXZKohNseyhw7BPZUxhpWPn9bmGpRO3JSzBAyJYQG9LAku 94SKujxMJrkwvQjVuXiXAQrjU9LXaWJvsF3m9iEIBINDqpqIPOza6Lj+XNNwfc1h /Pu75/A6+xMqn8El6c31uYVWP2egi/cmqMZm1NDm9Brazn6O8jCzvxXEZ7OPsZMT od/5tPC6PrsHTQ0DlKw9w6nTBjyBkTEdRmsFMfGkhLBX4wxcUUtEoON5jzcvtrtd zqUeMpUXklRgzHaFfIelflbcuomll6KAIxF8TqRrnpt/k/iWJPq3azaHAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNDQD02Sv50Cpdyws/XbdG6VLSMOMB8GA1UdIwQY MBaAFGGunPotZbQVQtN+7/HRxsOHqqG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWE2Yy1pMWx0QlZDMDM3djhkSEd3NGVxb2JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yNTU1NzYtMjQ4Yi00YjAxLWEwZWEt ZTkyOGVmNjQwZGY4LzEvWWE2Yy1pMWx0QlZDMDM3djhkSEd3NGVxb2JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yNTU1NzYtMjQ4Yi00YjAxLWEwZWEtZTkyOGVmNjQwZGY4 LzEvWWE2Yy1pMWx0QlZDMDM3djhkSEd3NGVxb2JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0OZp9YW L7PdbLSGKO1Yw4GZ2BfY0bYLCuDRBqlm5VgpcZozJ3WDkA+L+6L2ch/1Seqtq0c/ u2zRG0PwSKVVo7dPgbr4YYPAOAIATSV6XqPfp9ySWogTTkDBANYrkXH7X5z9Y189 SJD93H7C8QV9wj5XpfFxcWepwknN4bmsj1tWfN2/POvnyNgn409Kdyr48sMIO8Oc 32mGTDvrwowWxpTaW3mvmAVU2UTkFsNqMse4mlCK/tkA4IbAdVk6pJQ7WhKo0u8k bvkW8oqCHt6P2VjdzMBa7ZVjC9eX3jqmHVE4tHXjvL6KERNDJEmRftUAjHPOvxOc wA8iyz0RKhLt1A== -----END CERTIFICATE-----Generated at Sat Dec 6 13:36:27 2025 by rpki-client