This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft File: yOx8SlcVXOjexbHNYv-oQBexb1g.mft (raw, json) Hash identifier: KvphFIr2eKSbH1c1ldykBsEfeKI7uSpRo3AkPJ8uvBU= Subject key identifier: 36:85:FD:AC:D8:05:84:2D:63:6E:45:9C:D3:89:2A:F4:68:AC:DD:3E Authority key identifier: C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58 Certificate issuer: /CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58 Certificate serial: 019AF12ED517E55DF09287E63C6DA0833170 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft Manifest number: 0684 Signing time: Sat 06 Dec 2025 01:02:49 +0000 Manifest this update: Sat 06 Dec 2025 01:02:49 +0000 Manifest next update: Sun 07 Dec 2025 01:02:49 +0000 Files and hashes: 1: PkfIS5G435_5emRi_COnc1WyLBs.roa (hash: IOA4UWzzxA3Jqfg26gD/3jtgnYFnAYPzln5ueD/sEOk=) 2: yOx8SlcVXOjexbHNYv-oQBexb1g.crl (hash: ABInZnwItkTo/Iwb30IOBAWf30382GJSXMwcICZUnQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:d5:17:e5:5d:f0:92:87:e6:3c:6d:a0:83:31:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58 Validity Not Before: Dec 6 01:02:49 2025 GMT Not After : Dec 7 01:02:49 2025 GMT Subject: CN=3685fdacd805842d636e459cd3892af468acdd3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:03:8a:60:b2:8e:91:22:ea:22:db:45:99:bc: d1:1a:8b:fa:37:79:56:32:3c:34:76:d6:4e:6f:d9: bc:b8:5a:eb:0d:a5:eb:eb:77:45:ca:86:7d:83:89: 04:a5:34:b5:e2:ca:50:11:58:c5:27:ae:49:97:6b: b1:8d:97:07:08:a4:a8:4f:44:cc:d1:f2:91:95:6c: d1:8f:de:cc:97:bd:29:14:b5:7d:e7:f0:33:7d:cc: 11:5b:a3:49:59:50:af:b8:e1:66:90:41:49:8e:50: f8:ad:9e:c7:6b:8f:79:f4:9b:71:2e:4c:98:4e:0e: ce:92:ae:c5:bb:10:ef:aa:ba:69:63:55:84:cc:f3: 4c:cd:43:47:f1:98:8e:e8:da:42:17:71:84:7e:05: 57:31:f1:bc:4d:b4:a1:22:7b:e4:77:fd:05:a8:d5: ba:b1:3f:e7:1f:08:5a:0f:99:f6:b3:aa:0e:14:7c: 67:dd:e3:fc:89:55:28:6a:34:2d:61:fc:48:86:c7: 69:41:74:93:66:e5:7e:b5:6b:bb:15:35:57:94:05: 81:25:81:45:73:37:d9:50:67:04:c3:99:b3:b7:29: 6c:2e:cc:6f:f6:ae:f2:47:f4:4f:6e:a4:83:25:8b: b7:c5:5f:db:6d:85:d1:a2:79:51:8d:ed:f9:be:18: 29:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:85:FD:AC:D8:05:84:2D:63:6E:45:9C:D3:89:2A:F4:68:AC:DD:3E X509v3 Authority Key Identifier: keyid:C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:7d:d4:c2:fc:4e:19:07:0f:7e:d3:f5:0f:c6:9a:88:f4:2e: cf:be:39:2c:ff:3a:dc:55:40:07:72:84:5e:fc:ae:0a:63:39: 82:3e:38:34:64:8a:34:77:1c:b3:75:29:21:d4:be:ae:7b:b2: 22:08:d6:ee:5d:6a:03:ae:1f:3b:1b:59:52:f3:f9:6c:bc:42: 0b:88:b2:95:8f:a5:cd:d5:2b:16:7d:b9:88:1b:7d:7f:3a:6d: 4d:6e:46:2d:69:48:f6:5a:65:fa:a1:cb:17:70:79:2f:b3:fd: 07:d9:e2:17:c3:ff:10:ca:4f:33:5e:0c:71:ff:72:a0:6b:48: df:b4:eb:88:5a:78:66:0c:21:30:be:33:48:3d:df:73:19:36: e2:a6:f3:b8:6e:50:94:50:69:5f:fa:9c:5d:9e:90:dc:88:af: c1:ce:68:2d:48:0b:08:6a:63:5c:ee:51:99:82:b5:d5:bd:83: ba:c4:82:63:92:5f:30:5a:70:91:80:25:18:a1:20:ba:b0:84: 28:48:af:f4:9c:09:9d:9f:3b:d5:a2:83:92:6d:c2:87:77:ec: 45:d9:c8:1e:4a:f8:7b:dd:ed:c6:f4:1b:5c:9c:f8:2e:a3:a7: e5:2e:ea:78:1e:6e:fd:d6:60:88:90:37:c5:5c:a0:83:ca:e2: 42:b5:1c:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLtUX5V3wkofmPG2ggzFwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZWM3YzRhNTcxNTVjZThkZWM1YjFjZDYyZmZhODQwMTdi MTZmNTgwHhcNMjUxMjA2MDEwMjQ5WhcNMjUxMjA3MDEwMjQ5WjAzMTEwLwYDVQQD EygzNjg1ZmRhY2Q4MDU4NDJkNjM2ZTQ1OWNkMzg5MmFmNDY4YWNkZDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQOKYLKOkSLqIttFmbzRGov6N3lW Mjw0dtZOb9m8uFrrDaXr63dFyoZ9g4kEpTS14spQEVjFJ65Jl2uxjZcHCKSoT0TM 0fKRlWzRj97Ml70pFLV95/AzfcwRW6NJWVCvuOFmkEFJjlD4rZ7Ha4959JtxLkyY Tg7Okq7FuxDvqrppY1WEzPNMzUNH8ZiO6NpCF3GEfgVXMfG8TbShInvkd/0FqNW6 sT/nHwhaD5n2s6oOFHxn3eP8iVUoajQtYfxIhsdpQXSTZuV+tWu7FTVXlAWBJYFF czfZUGcEw5mztylsLsxv9q7yR/RPbqSDJYu3xV/bbYXRonlRje35vhgpUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDaF/azYBYQtY25FnNOJKvRorN0+MB8GA1UdIwQY MBaAFMjsfEpXFVzo3sWxzWL/qEAXsW9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU94OFNsY1ZYT2pleGJITll2LW9RQmV4YjFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yZDk1ZTctYmExNy00NzdmLTg5Yjct ZGE1ZjZhNjU4ZjhiLzEveU94OFNsY1ZYT2pleGJITll2LW9RQmV4YjFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8yZDk1ZTctYmExNy00NzdmLTg5YjctZGE1ZjZhNjU4Zjhi LzEveU94OFNsY1ZYT2pleGJITll2LW9RQmV4YjFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGX3UwvxO GQcPftP1D8aaiPQuz745LP863FVAB3KEXvyuCmM5gj44NGSKNHccs3UpIdS+rnuy IgjW7l1qA64fOxtZUvP5bLxCC4iylY+lzdUrFn25iBt9fzptTW5GLWlI9lpl+qHL F3B5L7P9B9niF8P/EMpPM14Mcf9yoGtI37TriFp4ZgwhML4zSD3fcxk24qbzuG5Q lFBpX/qcXZ6Q3Iivwc5oLUgLCGpjXO5RmYK11b2DusSCY5JfMFpwkYAlGKEgurCE KEiv9JwJnZ871aKDkm3Ch3fsRdnIHkr4e93txvQbXJz4LqOn5S7qeB5u/dZgiJA3 xVygg8riQrUcJw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:16 2025 by rpki-client