This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft File: yL68_oKyYn6o3oFhy5J7JFsFjmk.mft (raw, json) Hash identifier: Wv7V3BRWa2Hr1iNAO7U/0fuBa+vY6U1EBNZtyT2Cm4A= Subject key identifier: E5:E0:54:01:47:24:65:25:E5:54:57:F1:06:66:7F:47:DA:07:FD:B8 Authority key identifier: C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69 Certificate issuer: /CN=c8bebcfe82b2627ea8de8161cb927b245b058e69 Certificate serial: 019AF464C05ED62B18FE10C19AC69762ACB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft Manifest number: 1324 Signing time: Sat 06 Dec 2025 16:00:34 +0000 Manifest this update: Sat 06 Dec 2025 16:00:34 +0000 Manifest next update: Sun 07 Dec 2025 16:00:34 +0000 Files and hashes: 1: Dfh76wqLJFFyVrWGvNQ86Cd1ugg.roa (hash: cQ3NC144NOW+txHpDNWV4+CIEXIR87Btz3V4GE61yOA=) 2: yL68_oKyYn6o3oFhy5J7JFsFjmk.crl (hash: QWHq9lFbtQUUAep+FOgiYzYz/6vdoOrv6rQ/I/m7SjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:c0:5e:d6:2b:18:fe:10:c1:9a:c6:97:62:ac:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8bebcfe82b2627ea8de8161cb927b245b058e69 Validity Not Before: Dec 6 16:00:34 2025 GMT Not After : Dec 7 16:00:34 2025 GMT Subject: CN=e5e0540147246525e55457f106667f47da07fdb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b1:17:6f:df:92:61:20:36:e3:3f:9c:25:b3: 1a:69:9c:10:54:b2:c1:72:99:f8:7d:3e:60:ea:19: 8b:f2:d8:d5:7c:ad:af:70:b1:c6:34:62:7a:bc:02: 69:0f:e3:99:9c:59:bc:18:da:f0:6b:71:dc:c9:8e: c2:bc:a7:fc:d0:6f:c1:65:b0:84:58:86:5d:74:18: ff:57:44:e1:de:f5:01:05:00:30:35:53:08:2a:2a: e3:64:9e:87:3c:9e:9a:73:f2:f1:81:b1:ac:f7:62: d9:86:a0:6d:05:4d:dd:d8:8b:9a:b3:6f:c3:a1:8b: 4e:4a:af:1f:6b:f1:7b:25:a3:6b:ea:dc:0a:13:cf: 77:0c:30:71:b6:47:8b:14:1b:3a:3e:7c:52:6c:f6: b0:fd:85:81:39:fe:d1:cd:e2:6a:8c:f8:b2:96:90: 05:a8:1f:5c:c4:24:ad:43:9b:22:25:52:2f:15:ed: 66:de:38:b2:c4:94:7a:85:4a:84:80:04:2c:3a:38: 6b:9f:8e:b9:25:e4:eb:4e:7b:46:97:cd:53:b3:a2: 80:d5:20:b8:bc:7d:4d:93:56:19:71:cd:ab:b9:dd: 17:46:6e:cc:59:c8:2b:85:82:5c:fd:59:00:54:3b: 4f:40:39:c2:31:e6:0e:44:de:59:2c:ea:7d:e8:47: 7a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E0:54:01:47:24:65:25:E5:54:57:F1:06:66:7F:47:DA:07:FD:B8 X509v3 Authority Key Identifier: keyid:C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:b4:3e:f3:81:e7:53:8b:1b:53:4f:8b:d8:29:21:8c:89:35: 5e:01:44:61:f2:98:6a:26:35:38:e5:64:8a:5d:7d:54:8e:7e: 17:6c:18:a7:40:e6:6d:86:52:d6:e4:0e:ba:2a:a1:8c:79:19: 1c:1d:af:6c:ee:21:c5:d7:01:53:6e:0d:a5:ce:04:69:6c:db: 8e:da:c9:33:8a:f0:57:24:85:4b:86:a0:b6:15:3f:91:8a:7c: 18:4e:af:11:25:ac:50:6b:57:3d:06:01:d3:df:87:af:6d:80: 8e:2e:85:6d:95:e2:7e:d6:aa:43:08:f4:cf:f2:d0:04:bf:52: 98:e7:fe:6a:1d:67:9e:22:f1:ca:ed:dd:11:f6:ac:aa:6a:9f: c6:9f:f4:0b:ec:0e:79:99:7d:b8:69:4c:f7:7d:9d:35:51:c9: 00:30:88:3f:b7:4e:4e:87:c1:31:c7:72:e5:28:e6:6b:f3:d8: 88:a0:98:df:29:3b:a4:f7:8c:0f:cf:47:61:ae:ba:32:e9:bf: c6:dd:2d:06:68:1c:d1:c3:3f:ed:fe:92:3d:69:80:39:eb:7c: c9:60:f2:79:a1:30:aa:38:ef:a5:14:75:b4:00:fb:ca:de:d5: ba:e1:89:16:8d:29:7e:89:dd:88:f2:29:ca:57:61:3f:53:cf: b9:7c:61:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZMBe1isY/hDBmsaXYqy0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4YmViY2ZlODJiMjYyN2VhOGRlODE2MWNiOTI3YjI0NWIw NThlNjkwHhcNMjUxMjA2MTYwMDM0WhcNMjUxMjA3MTYwMDM0WjAzMTEwLwYDVQQD EyhlNWUwNTQwMTQ3MjQ2NTI1ZTU1NDU3ZjEwNjY2N2Y0N2RhMDdmZGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLEXb9+SYSA24z+cJbMaaZwQVLLB cpn4fT5g6hmL8tjVfK2vcLHGNGJ6vAJpD+OZnFm8GNrwa3HcyY7CvKf80G/BZbCE WIZddBj/V0Th3vUBBQAwNVMIKirjZJ6HPJ6ac/LxgbGs92LZhqBtBU3d2Iuas2/D oYtOSq8fa/F7JaNr6twKE893DDBxtkeLFBs6PnxSbPaw/YWBOf7RzeJqjPiylpAF qB9cxCStQ5siJVIvFe1m3jiyxJR6hUqEgAQsOjhrn465JeTrTntGl81Ts6KA1SC4 vH1Nk1YZcc2rud0XRm7MWcgrhYJc/VkAVDtPQDnCMeYORN5ZLOp96Ed6AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXgVAFHJGUl5VRX8QZmf0faB/24MB8GA1UdIwQY MBaAFMi+vP6CsmJ+qN6BYcuSeyRbBY5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUw2OF9vS3lZbjZvM29GaHk1SjdKRnNGam1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYTE3YjMtZDU0ZS00Mjc5LWFkOTgt ZGVlZjdmMTUxZThlLzEveUw2OF9vS3lZbjZvM29GaHk1SjdKRnNGam1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9lYTE3YjMtZDU0ZS00Mjc5LWFkOTgtZGVlZjdmMTUxZThl LzEveUw2OF9vS3lZbjZvM29GaHk1SjdKRnNGam1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAULQ+84Hn U4sbU0+L2CkhjIk1XgFEYfKYaiY1OOVkil19VI5+F2wYp0DmbYZS1uQOuiqhjHkZ HB2vbO4hxdcBU24Npc4EaWzbjtrJM4rwVySFS4agthU/kYp8GE6vESWsUGtXPQYB 09+Hr22Aji6FbZXiftaqQwj0z/LQBL9SmOf+ah1nniLxyu3dEfasqmqfxp/0C+wO eZl9uGlM932dNVHJADCIP7dOTofBMcdy5Sjma/PYiKCY3yk7pPeMD89HYa66Mum/ xt0tBmgc0cM/7f6SPWmAOet8yWDyeaEwqjjvpRR1tAD7yt7VuuGJFo0pfondiPIp yldhP1PPuXxhqw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:02:46 2025 by rpki-client