This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft File: ydSf722tJmGevuBl0fIxwaJ2198.mft (raw, json) Hash identifier: HWmjY3NJUAn6Rc/nBKsHwIkOgu9UagRu429vyqAo828= Subject key identifier: 8B:4E:EF:B4:E6:3C:7C:DF:CD:15:92:C3:6C:30:CE:BF:39:C6:FE:3E Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF Certificate issuer: /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df Certificate serial: 019AF42DCA75BACB8D86BFDD55FF8ACB72CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft Manifest number: 0684 Signing time: Sat 06 Dec 2025 15:00:32 +0000 Manifest this update: Sat 06 Dec 2025 15:00:32 +0000 Manifest next update: Sun 07 Dec 2025 15:00:32 +0000 Files and hashes: 1: Rxg5b8TVQSPFdWFOKvBN85kybDA.roa (hash: UtF92U/9meAF41tjwSEGw6eGscll7EeWN/zVkMTCT2M=) 2: UZjE-GQgoU3nRLnq0ZWQAXM992o.roa (hash: Ph8txzTNR1zk2KVvrV6FeKKiPwZkYzUc7t042+8KNcY=) 3: ydSf722tJmGevuBl0fIxwaJ2198.crl (hash: uncsNWG5PPkYXOy5/whwA2T6n2aglMRfIZvt1jjlJKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:ca:75:ba:cb:8d:86:bf:dd:55:ff:8a:cb:72:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df Validity Not Before: Dec 6 15:00:32 2025 GMT Not After : Dec 7 15:00:32 2025 GMT Subject: CN=8b4eefb4e63c7cdfcd1592c36c30cebf39c6fe3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1c:56:c1:2f:77:0d:08:b9:d9:64:bb:8d:6e: cd:66:f1:30:41:08:f3:f1:35:46:32:07:01:79:32: b7:bb:9b:08:b3:01:17:b2:10:b2:c0:76:90:d9:35: d7:a8:bd:f0:5d:27:d3:4c:9d:6c:20:ab:d3:91:f0: ea:e3:06:21:f9:d9:c7:48:65:61:82:f6:78:7f:8b: 41:57:89:07:ba:8e:d2:dc:47:40:26:4c:1b:4d:74: e8:a6:07:27:a8:c3:d1:cd:e3:ab:85:5e:1a:15:a5: 80:39:9c:09:ad:92:99:e7:92:07:c6:52:1b:04:cb: ab:33:22:6d:07:67:f9:be:34:3c:d1:48:dc:89:d6: 80:2b:ec:eb:58:12:cb:89:a7:17:97:d8:02:72:0a: 63:29:45:32:fb:a8:e3:5f:2f:f6:c6:3a:5c:ef:52: 8a:81:44:63:6c:07:6c:08:33:72:d0:4a:38:b0:56: 75:41:02:97:e0:3c:12:ff:02:5b:88:d7:38:3d:35: bb:b2:ca:08:5e:d3:12:cb:14:17:f2:8d:66:a5:02: 97:bf:b9:6a:77:c0:b3:32:e3:cd:68:36:aa:d9:e0: c5:68:27:96:67:27:49:c0:d8:f9:73:ae:68:60:1a: d6:25:10:76:a9:8a:23:45:66:f8:22:00:a0:34:fd: d3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:4E:EF:B4:E6:3C:7C:DF:CD:15:92:C3:6C:30:CE:BF:39:C6:FE:3E X509v3 Authority Key Identifier: keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:a8:68:54:54:9e:26:14:90:c6:b3:9f:be:25:fc:31:32:81: 94:c3:51:e8:e5:09:d4:6d:34:ee:cd:b0:6a:40:93:fe:95:dd: 16:7b:5a:9d:ff:2d:0c:54:7c:41:d4:29:65:aa:d7:44:a9:94: 3a:14:5d:eb:e1:7f:42:f2:b6:f6:14:c2:58:86:53:02:a7:81: 66:56:ed:7b:a2:97:e4:d5:91:cc:d3:43:33:76:b9:4b:0f:e2: 48:9e:45:be:c6:92:01:d3:df:29:76:9b:0b:1e:32:66:e1:10: c0:58:5c:dc:e1:82:30:f6:bd:81:a5:e1:d8:b5:0b:96:95:61: 5d:f6:db:b9:8f:a4:1d:9f:e9:89:81:c9:16:24:a6:1a:ea:ad: 1d:04:da:3a:28:62:4c:f3:29:ef:49:e3:34:7a:d7:de:95:c2: 2e:04:e7:5e:49:2c:ab:6b:0d:90:89:e0:5d:3a:a0:f0:40:6c: cd:06:dc:e3:cf:d5:5a:7e:4b:1f:38:62:f8:74:5e:9d:a6:8d: 24:b5:82:f9:be:e5:e6:a5:21:2c:7e:df:b2:24:4f:76:06:c5: d8:26:64:7f:2a:3e:2e:fb:08:8b:78:70:8c:f1:28:6d:1a:34: 71:0e:42:c8:a5:ad:71:31:32:73:b0:59:8a:ef:b0:a1:8a:55: cb:e8:cd:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lcp1usuNhr/dVf+Ky3LNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDQ5ZmVmNmRhZDI2NjE5ZWJlZTA2NWQxZjIzMWMxYTI3 NmQ3ZGYwHhcNMjUxMjA2MTUwMDMyWhcNMjUxMjA3MTUwMDMyWjAzMTEwLwYDVQQD Eyg4YjRlZWZiNGU2M2M3Y2RmY2QxNTkyYzM2YzMwY2ViZjM5YzZmZTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxxWwS93DQi52WS7jW7NZvEwQQjz 8TVGMgcBeTK3u5sIswEXshCywHaQ2TXXqL3wXSfTTJ1sIKvTkfDq4wYh+dnHSGVh gvZ4f4tBV4kHuo7S3EdAJkwbTXTopgcnqMPRzeOrhV4aFaWAOZwJrZKZ55IHxlIb BMurMyJtB2f5vjQ80UjcidaAK+zrWBLLiacXl9gCcgpjKUUy+6jjXy/2xjpc71KK gURjbAdsCDNy0Eo4sFZ1QQKX4DwS/wJbiNc4PTW7ssoIXtMSyxQX8o1mpQKXv7lq d8CzMuPNaDaq2eDFaCeWZydJwNj5c65oYBrWJRB2qYojRWb4IgCgNP3TmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItO77TmPHzfzRWSw2wwzr85xv4+MB8GA1UdIwQY MBaAFMnUn+9trSZhnr7gZdHyMcGidtffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRTZjcyMnRKbUdldnVCbDBmSXh3YUoyMTk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yNzkyNjktZjRmMy00MjE0LTkxMzAt MGQ0ZjQwYmMzZmFhLzEveWRTZjcyMnRKbUdldnVCbDBmSXh3YUoyMTk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8yNzkyNjktZjRmMy00MjE0LTkxMzAtMGQ0ZjQwYmMzZmFh LzEveWRTZjcyMnRKbUdldnVCbDBmSXh3YUoyMTk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcqhoVFSe JhSQxrOfviX8MTKBlMNR6OUJ1G007s2wakCT/pXdFntanf8tDFR8QdQpZarXRKmU OhRd6+F/QvK29hTCWIZTAqeBZlbte6KX5NWRzNNDM3a5Sw/iSJ5FvsaSAdPfKXab Cx4yZuEQwFhc3OGCMPa9gaXh2LULlpVhXfbbuY+kHZ/piYHJFiSmGuqtHQTaOihi TPMp70njNHrX3pXCLgTnXkksq2sNkIngXTqg8EBszQbc48/VWn5LHzhi+HRenaaN JLWC+b7l5qUhLH7fsiRPdgbF2CZkfyo+LvsIi3hwjPEobRo0cQ5CyKWtcTEyc7BZ iu+woYpVy+jNuA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:49:47 2025 by rpki-client