This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft File: ydSf722tJmGevuBl0fIxwaJ2198.mft (raw, json) Hash identifier: RFezLbkiVQNl6A8SisEhMNu1ucePSNcTA+JTcMzK9oA= Subject key identifier: 65:50:2A:3F:17:B1:37:97:E7:95:6C:12:1E:3E:AB:B5:26:B8:D6:D6 Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF Certificate issuer: /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df Certificate serial: 019AF23FC79C4F4E2031CD827F20F317D0CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft Manifest number: 0683 Signing time: Sat 06 Dec 2025 06:00:57 +0000 Manifest this update: Sat 06 Dec 2025 06:00:57 +0000 Manifest next update: Sun 07 Dec 2025 06:00:57 +0000 Files and hashes: 1: Rxg5b8TVQSPFdWFOKvBN85kybDA.roa (hash: UtF92U/9meAF41tjwSEGw6eGscll7EeWN/zVkMTCT2M=) 2: UZjE-GQgoU3nRLnq0ZWQAXM992o.roa (hash: Ph8txzTNR1zk2KVvrV6FeKKiPwZkYzUc7t042+8KNcY=) 3: ydSf722tJmGevuBl0fIxwaJ2198.crl (hash: OXMhi3RBwE1fe9fDOavogwT8Du9aa2ItfQjN1j3ZjJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:c7:9c:4f:4e:20:31:cd:82:7f:20:f3:17:d0:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df Validity Not Before: Dec 6 06:00:57 2025 GMT Not After : Dec 7 06:00:57 2025 GMT Subject: CN=65502a3f17b13797e7956c121e3eabb526b8d6d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:aa:4e:59:df:39:fc:bc:82:4e:b8:15:6b:10: 48:da:85:de:7d:cf:59:08:20:11:fd:fc:66:77:3a: 78:91:ca:7d:50:ed:f7:22:82:62:f8:a9:6e:d2:af: 19:29:f0:b0:e1:35:49:a7:7a:64:1d:fa:43:fc:31: ea:ab:c7:17:83:73:c4:90:f9:e8:2f:c0:22:67:a4: 03:49:9c:6d:4a:2f:21:e5:bf:b9:21:0d:d3:48:39: 71:a2:72:9f:c7:42:21:57:34:89:20:d6:2e:2a:16: be:4a:4a:eb:4c:b0:e1:ed:68:c5:d9:e1:df:5d:ab: e6:07:02:99:b5:e3:57:4d:76:fd:63:84:3b:7e:d5: 57:52:15:6e:52:ee:14:a3:a8:48:8d:a1:ab:ca:78: d2:ef:83:d0:c4:40:4c:9f:0d:d1:fa:84:87:18:71: 41:f1:aa:2a:8e:32:0d:7b:ee:7d:98:f5:90:bf:de: fa:04:48:cb:b2:3a:04:15:92:55:0f:9f:65:3a:71: c7:96:da:10:cd:47:69:47:63:1e:75:f8:fc:8d:67: 91:c5:08:98:72:e4:89:c7:5c:07:92:84:e6:30:ac: 16:86:81:6a:fb:a8:14:65:04:63:22:ef:7d:95:a4: 11:87:52:ad:40:fe:72:b1:89:4a:6d:c5:6d:15:88: 59:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:50:2A:3F:17:B1:37:97:E7:95:6C:12:1E:3E:AB:B5:26:B8:D6:D6 X509v3 Authority Key Identifier: keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:a9:ce:8c:bf:f4:4f:9d:c7:3d:f5:db:66:4c:86:b7:10:fb: 1f:c0:50:66:d9:a0:4e:27:66:31:9f:68:85:ab:6e:81:eb:1b: db:c2:c1:9e:e2:47:41:6e:e8:a3:6b:33:c8:af:7d:63:b1:03: 09:69:d2:ed:6c:35:18:e3:d5:20:a5:e8:5d:01:8e:8e:05:be: ba:9b:8b:bc:83:0d:99:d9:8a:fa:de:b9:d6:06:82:00:5b:ed: 3b:2b:09:00:fe:82:d9:d8:8a:32:af:ff:34:3a:4d:22:0d:f2: 9b:3f:7d:5b:82:2f:41:a9:b3:58:e4:24:c1:31:a7:8e:7b:5c: e2:eb:13:56:b0:66:88:02:ca:2d:55:82:ad:6f:59:51:11:6c: 2b:35:56:80:d0:f5:66:9b:65:7b:5f:99:c6:55:59:19:e9:4c: c2:0f:5a:7b:93:45:32:b1:ab:1b:a2:b1:bb:82:9c:af:c6:46: ba:1f:fd:c8:dc:d9:d4:ae:59:51:f4:38:5e:9d:15:a2:46:80: 06:7e:8a:40:77:8b:e0:2d:e4:29:a7:2e:45:03:7e:ff:a1:d1: 0f:a2:00:65:4f:36:96:41:d6:db:c7:54:71:d9:e6:d5:94:71: b6:d1:12:5b:c1:03:df:a7:9f:cf:e8:9a:16:94:89:dd:51:d4: b3:a2:3e:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8ecT04gMc2CfyDzF9DPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDQ5ZmVmNmRhZDI2NjE5ZWJlZTA2NWQxZjIzMWMxYTI3 NmQ3ZGYwHhcNMjUxMjA2MDYwMDU3WhcNMjUxMjA3MDYwMDU3WjAzMTEwLwYDVQQD Eyg2NTUwMmEzZjE3YjEzNzk3ZTc5NTZjMTIxZTNlYWJiNTI2YjhkNmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3apOWd85/LyCTrgVaxBI2oXefc9Z CCAR/fxmdzp4kcp9UO33IoJi+Klu0q8ZKfCw4TVJp3pkHfpD/DHqq8cXg3PEkPno L8AiZ6QDSZxtSi8h5b+5IQ3TSDlxonKfx0IhVzSJINYuKha+SkrrTLDh7WjF2eHf XavmBwKZteNXTXb9Y4Q7ftVXUhVuUu4Uo6hIjaGrynjS74PQxEBMnw3R+oSHGHFB 8aoqjjINe+59mPWQv976BEjLsjoEFZJVD59lOnHHltoQzUdpR2Medfj8jWeRxQiY cuSJx1wHkoTmMKwWhoFq+6gUZQRjIu99laQRh1KtQP5ysYlKbcVtFYhZ1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVQKj8XsTeX55VsEh4+q7UmuNbWMB8GA1UdIwQY MBaAFMnUn+9trSZhnr7gZdHyMcGidtffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRTZjcyMnRKbUdldnVCbDBmSXh3YUoyMTk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yNzkyNjktZjRmMy00MjE0LTkxMzAt MGQ0ZjQwYmMzZmFhLzEveWRTZjcyMnRKbUdldnVCbDBmSXh3YUoyMTk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8yNzkyNjktZjRmMy00MjE0LTkxMzAtMGQ0ZjQwYmMzZmFh LzEveWRTZjcyMnRKbUdldnVCbDBmSXh3YUoyMTk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoanOjL/0 T53HPfXbZkyGtxD7H8BQZtmgTidmMZ9ohatugesb28LBnuJHQW7oo2szyK99Y7ED CWnS7Ww1GOPVIKXoXQGOjgW+upuLvIMNmdmK+t651gaCAFvtOysJAP6C2diKMq// NDpNIg3ymz99W4IvQamzWOQkwTGnjntc4usTVrBmiALKLVWCrW9ZURFsKzVWgND1 Zptle1+ZxlVZGelMwg9ae5NFMrGrG6Kxu4Kcr8ZGuh/9yNzZ1K5ZUfQ4Xp0VokaA Bn6KQHeL4C3kKacuRQN+/6HRD6IAZU82lkHW28dUcdnm1ZRxttESW8ED36efz+ia FpSJ3VHUs6I+gw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:40:06 2025 by rpki-client