This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft File: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json) Hash identifier: Rs1A3k+CADq8vjrIhi8byqvzJNxwQXCICtoKCA5jzZA= Subject key identifier: AE:31:23:B9:37:F8:08:64:05:7D:62:52:DF:91:E1:A4:F2:D5:0B:3E Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33 Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33 Certificate serial: 019AF23F8BA160D731033FED37EB4406CB7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 06:00:41 +0000 Manifest this update: Sat 06 Dec 2025 06:00:41 +0000 Manifest next update: Sun 07 Dec 2025 06:00:41 +0000 Files and hashes: 1: DfudKWBsua2Qw82vhg_Oro_4T98.roa (hash: XG4PsPIlXqIkgFnmlSjnQQmXXe49OoS+FFltYc4QbS8=) 2: ddzuJKDdfBfD05pd5AAViQoA2Pc.roa (hash: 2lQWzIDIqMXuR/qxqLFrOSTAaFdBjF2vdhRCL0julW4=) 3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: iH6Mz5S66ltEMmdC+k9WCGY/uxZVdt+ZtJ9JGOCZf38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:8b:a1:60:d7:31:03:3f:ed:37:eb:44:06:cb:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33 Validity Not Before: Dec 6 06:00:41 2025 GMT Not After : Dec 7 06:00:41 2025 GMT Subject: CN=ae3123b937f80864057d6252df91e1a4f2d50b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:50:13:05:24:bd:96:0b:4b:e8:8d:ea:0a:9d: 30:94:94:3a:b2:88:3c:ef:79:03:cc:26:0b:c7:0e: cb:33:bd:94:55:c1:eb:29:4c:f9:18:96:41:b2:cd: 97:eb:fd:bc:9f:39:f9:bc:fd:26:7d:46:db:16:04: 27:e9:42:b0:73:da:e4:a5:63:20:3c:33:48:18:bf: 31:19:fe:1c:ab:7f:17:9f:4b:98:94:3d:ff:bf:0f: 77:ba:c8:09:f4:69:ab:ea:fc:ac:4e:36:f4:a5:b4: c4:a1:09:07:f1:53:e5:f5:ed:ed:33:49:a7:47:cd: 1b:41:99:33:cf:78:76:2a:42:f0:57:34:25:70:ac: 36:37:2c:5f:b9:5f:d7:b2:fb:fd:83:ba:f6:77:03: 79:99:59:57:1b:0a:9a:a3:35:53:e5:4a:c8:6e:54: 9b:1d:93:02:80:ce:27:df:04:3e:2a:89:aa:b1:9c: 82:ff:da:5a:b9:6e:46:6f:9f:fd:8d:83:61:92:cf: 53:2c:0c:19:a8:7b:16:dc:47:8e:41:84:70:5f:58: ad:3b:9c:2f:ff:bd:08:f2:ac:7a:53:fa:c2:90:6e: 33:af:06:69:f3:d5:9c:0d:f7:fc:83:c3:d2:8d:6b: 44:4c:5d:50:bc:3d:fb:b1:81:a6:cd:7d:38:0b:87: d3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:31:23:B9:37:F8:08:64:05:7D:62:52:DF:91:E1:A4:F2:D5:0B:3E X509v3 Authority Key Identifier: keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:9a:19:d1:de:39:90:2b:e8:81:cc:5f:61:a1:19:ea:e5:ea: 96:66:37:89:65:69:80:55:e0:50:12:38:30:02:9a:7c:83:f0: 26:c9:ba:dc:a9:64:9e:fc:eb:40:b2:7e:02:22:ff:7b:19:a5: a2:47:e3:57:f6:30:dc:71:56:17:8d:51:19:be:31:c5:45:4f: e3:0c:41:66:bd:90:ba:02:c8:1c:9b:7f:28:60:de:02:86:31: d0:ac:35:21:4d:a5:92:ce:ca:0c:dd:7e:a1:ec:98:d7:9f:1e: 68:f4:c9:e2:98:74:a7:be:c7:69:51:3c:02:ea:91:d3:ef:d8: ae:5a:ad:04:56:f4:69:4e:10:53:0b:21:5b:53:41:6c:24:75: 74:fc:3f:d2:c9:82:0b:92:b4:b5:9e:12:18:60:08:b0:fb:7f: 89:d9:46:db:c7:e1:68:94:02:53:41:2d:1e:f2:d9:cc:91:fc: f7:b6:93:56:15:b0:33:9e:59:82:18:b5:4f:dd:f8:e3:92:18: 47:51:58:66:fb:8f:a9:3c:a0:2e:a2:40:4c:fd:ad:02:54:8b: 4e:b3:54:d3:de:f2:7d:6c:f5:cc:83:7b:be:7e:cf:96:f4:37: bc:aa:9f:60:3c:bd:e8:8e:c2:ca:0c:3e:18:01:7f:49:01:ec: 2f:bf:42:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4uhYNcxAz/tN+tEBst7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZWQ2NGM5M2RkZmRmMmY0OWI3ZWExYzIzZWFhZDA4NzAy NDlhMzMwHhcNMjUxMjA2MDYwMDQxWhcNMjUxMjA3MDYwMDQxWjAzMTEwLwYDVQQD EyhhZTMxMjNiOTM3ZjgwODY0MDU3ZDYyNTJkZjkxZTFhNGYyZDUwYjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lATBSS9lgtL6I3qCp0wlJQ6sog8 73kDzCYLxw7LM72UVcHrKUz5GJZBss2X6/28nzn5vP0mfUbbFgQn6UKwc9rkpWMg PDNIGL8xGf4cq38Xn0uYlD3/vw93usgJ9Gmr6vysTjb0pbTEoQkH8VPl9e3tM0mn R80bQZkzz3h2KkLwVzQlcKw2NyxfuV/Xsvv9g7r2dwN5mVlXGwqaozVT5UrIblSb HZMCgM4n3wQ+KomqsZyC/9pauW5Gb5/9jYNhks9TLAwZqHsW3EeOQYRwX1itO5wv /70I8qx6U/rCkG4zrwZp89WcDff8g8PSjWtETF1QvD37sYGmzX04C4fTAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4xI7k3+AhkBX1iUt+R4aTy1Qs+MB8GA1UdIwQY MBaAFMntZMk9398vSbfqHCPqrQhwJJozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yYTJhYjItMzA5OC00YTBmLTgwOWMt MzVlZDViNTNkYTA1LzEveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8yYTJhYjItMzA5OC00YTBmLTgwOWMtMzVlZDViNTNkYTA1 LzEveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJoZ0d45 kCvogcxfYaEZ6uXqlmY3iWVpgFXgUBI4MAKafIPwJsm63KlknvzrQLJ+AiL/exml okfjV/Yw3HFWF41RGb4xxUVP4wxBZr2QugLIHJt/KGDeAoYx0Kw1IU2lks7KDN1+ oeyY158eaPTJ4ph0p77HaVE8AuqR0+/YrlqtBFb0aU4QUwshW1NBbCR1dPw/0smC C5K0tZ4SGGAIsPt/idlG28fhaJQCU0EtHvLZzJH897aTVhWwM55Zghi1T93445IY R1FYZvuPqTygLqJATP2tAlSLTrNU097yfWz1zIN7vn7PlvQ3vKqfYDy96I7Cygw+ GAF/SQHsL79C/g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:44 2025 by rpki-client