This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft File: yq7leeATIY9XE4ZBPixbK8JFqDY.mft (raw, json) Hash identifier: 1KXttgmSAZbNtY/yQcp/eQuxDpPLgTjvCrT0xcrUU2A= Subject key identifier: A1:30:14:7E:89:B2:56:B0:9B:0E:1A:C9:1F:D4:CA:65:9E:69:21:91 Authority key identifier: CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36 Certificate issuer: /CN=caaee579e013218f571386413e2c5b2bc245a836 Certificate serial: 019AF49BCB2C32DA29EC81B6FF8347695478 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft Manifest number: 14AA Signing time: Sat 06 Dec 2025 17:00:41 +0000 Manifest this update: Sat 06 Dec 2025 17:00:41 +0000 Manifest next update: Sun 07 Dec 2025 17:00:41 +0000 Files and hashes: 1: GEnuOQleBBUDKJ-4Y-M3IyBH42g.roa (hash: OrN9ZjjDEjR1Mar15xKYXAUpkqA7O1AMRBJLOwwo76o=) 2: yq7leeATIY9XE4ZBPixbK8JFqDY.crl (hash: ZQKI5bIwxigiVUn4GVjDNaqwratr1pdbxlzGMHeZoBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:cb:2c:32:da:29:ec:81:b6:ff:83:47:69:54:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caaee579e013218f571386413e2c5b2bc245a836 Validity Not Before: Dec 6 17:00:41 2025 GMT Not After : Dec 7 17:00:41 2025 GMT Subject: CN=a130147e89b256b09b0e1ac91fd4ca659e692191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:49:40:be:67:48:0d:c9:92:6f:01:46:95:5f: 13:e1:0e:1b:d3:58:29:c5:9f:9c:6c:7d:63:d7:e9: bb:19:3e:24:c1:94:84:c5:c5:ee:71:15:c8:a4:85: 1a:25:97:9f:d0:e6:ce:50:6c:38:6d:c3:96:2d:44: 3b:69:5c:6b:58:15:01:7e:da:ca:6e:93:b5:ad:e4: 9c:2e:4a:da:20:92:13:5f:fb:e1:51:67:59:3d:19: 0f:a9:5f:b3:49:2a:23:ab:e0:15:39:35:8e:a2:8c: eb:60:86:21:06:8f:15:82:1a:88:3b:07:67:f1:08: ba:36:ec:58:87:32:84:8f:c2:46:cc:39:45:91:40: fa:5d:13:53:64:8b:5c:8c:79:9c:c6:12:8b:08:bd: 3c:a9:99:d7:00:9d:43:8b:8a:be:04:3c:ff:4e:07: de:92:30:f8:f5:a6:93:f9:4f:ab:02:38:44:a6:33: e5:65:a8:63:c4:58:87:dd:0e:24:33:94:43:e2:68: 99:5e:84:6a:c2:20:d5:f3:86:d2:6c:e5:59:3a:ed: c2:bf:84:4d:1e:00:79:29:5f:10:bb:fe:a7:fb:8c: bb:f0:a3:3a:06:71:12:fb:07:53:ab:ba:15:af:1a: f6:af:88:5b:3f:d8:03:01:16:ab:66:0d:fc:1b:ed: d9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:30:14:7E:89:B2:56:B0:9B:0E:1A:C9:1F:D4:CA:65:9E:69:21:91 X509v3 Authority Key Identifier: keyid:CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:00:93:b1:64:ec:02:44:bf:4a:06:1f:52:dc:78:4a:d9:04: 77:9c:4e:3f:fe:d5:fa:78:b5:29:85:35:93:44:26:51:dc:0a: cb:bd:4f:75:e7:a7:79:63:a2:7f:ee:60:e6:43:87:dd:38:29: 34:e0:8b:0d:bf:b0:3b:78:11:22:73:b1:c5:0d:35:8c:8f:56: 02:04:e5:e5:35:3e:ad:a7:26:21:a5:92:89:9e:11:30:1c:91: 07:88:a8:88:42:44:f5:4b:2b:d7:ee:e4:56:5f:0d:fe:8d:ba: 75:8a:d3:e6:3c:d2:dc:02:9c:33:95:58:03:0b:6c:20:08:9c: 7b:e9:f2:0b:b0:0e:41:9a:c2:e6:98:f7:fc:1c:f8:7b:63:03: c3:04:da:a3:0c:9e:48:bc:e3:5b:96:05:a6:35:e4:8b:5a:d4: f7:f8:db:f2:ca:e7:fb:e5:9c:3d:bb:6f:ac:6b:bc:87:ab:ec: 45:b7:14:26:65:d3:82:10:d8:19:d8:76:e2:28:40:c2:bf:de: b0:1f:56:f9:38:a5:42:b0:43:dd:16:b0:39:ca:e0:39:46:2b: 66:a2:d4:da:5b:f4:d9:ad:96:da:e8:7f:fe:32:eb:b3:bf:98: eb:69:cf:9c:cf:c3:71:65:96:8c:67:30:52:3f:c2:26:2f:ac: 13:04:8b:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m8ssMtop7IG2/4NHaVR4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYWVlNTc5ZTAxMzIxOGY1NzEzODY0MTNlMmM1YjJiYzI0 NWE4MzYwHhcNMjUxMjA2MTcwMDQxWhcNMjUxMjA3MTcwMDQxWjAzMTEwLwYDVQQD EyhhMTMwMTQ3ZTg5YjI1NmIwOWIwZTFhYzkxZmQ0Y2E2NTllNjkyMTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0lAvmdIDcmSbwFGlV8T4Q4b01gp xZ+cbH1j1+m7GT4kwZSExcXucRXIpIUaJZef0ObOUGw4bcOWLUQ7aVxrWBUBftrK bpO1reScLkraIJITX/vhUWdZPRkPqV+zSSojq+AVOTWOoozrYIYhBo8VghqIOwdn 8Qi6NuxYhzKEj8JGzDlFkUD6XRNTZItcjHmcxhKLCL08qZnXAJ1Di4q+BDz/Tgfe kjD49aaT+U+rAjhEpjPlZahjxFiH3Q4kM5RD4miZXoRqwiDV84bSbOVZOu3Cv4RN HgB5KV8Qu/6n+4y78KM6BnES+wdTq7oVrxr2r4hbP9gDARarZg38G+3ZJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEwFH6Jslawmw4ayR/UymWeaSGRMB8GA1UdIwQY MBaAFMqu5XngEyGPVxOGQT4sWyvCRag2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXE3bGVlQVRJWTlYRTRaQlBpeGJLOEpGcURZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83NTk4NzQtZTdmMi00NWZkLTgxOWQt YTVkMTE0OGYyNWJkLzEveXE3bGVlQVRJWTlYRTRaQlBpeGJLOEpGcURZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC83NTk4NzQtZTdmMi00NWZkLTgxOWQtYTVkMTE0OGYyNWJk LzEveXE3bGVlQVRJWTlYRTRaQlBpeGJLOEpGcURZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhACTsWTs AkS/SgYfUtx4StkEd5xOP/7V+ni1KYU1k0QmUdwKy71PdeeneWOif+5g5kOH3Tgp NOCLDb+wO3gRInOxxQ01jI9WAgTl5TU+racmIaWSiZ4RMByRB4ioiEJE9Usr1+7k Vl8N/o26dYrT5jzS3AKcM5VYAwtsIAice+nyC7AOQZrC5pj3/Bz4e2MDwwTaowye SLzjW5YFpjXki1rU9/jb8srn++WcPbtvrGu8h6vsRbcUJmXTghDYGdh24ihAwr/e sB9W+TilQrBD3RawOcrgOUYrZqLU2lv02a2W2uh//jLrs7+Y62nPnM/DcWWWjGcw Uj/CJi+sEwSLMg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:28:43 2025 by rpki-client