This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft File: yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft (raw, json) Hash identifier: RZGAZ+ESmVI+1Krpw5RZ4lNXcmiu/yk65URAJKUj3VE= Subject key identifier: 94:DC:B6:1D:3E:7D:98:B0:BB:07:D0:C4:94:6F:FC:9E:F2:30:78:1E Authority key identifier: C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77 Certificate issuer: /CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277 Certificate serial: 019AF3F75F974802B33DDC099EC92E0D87F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft Manifest number: 13E7 Signing time: Sat 06 Dec 2025 14:01:06 +0000 Manifest this update: Sat 06 Dec 2025 14:01:06 +0000 Manifest next update: Sun 07 Dec 2025 14:01:06 +0000 Files and hashes: 1: 1-VGMXMMV2Cqy03R1ZIzIT8zjSHs.roa (hash: odkCOMHYYSyyI06jcNtcsAr7ZqbIzMS4uoFJAxDHurk=) 2: yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl (hash: rhSV7b+cbSClbyQNbOy0ivPgsQFuHtcBvwqRQZ44VXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:5f:97:48:02:b3:3d:dc:09:9e:c9:2e:0d:87:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277 Validity Not Before: Dec 6 14:01:06 2025 GMT Not After : Dec 7 14:01:06 2025 GMT Subject: CN=94dcb61d3e7d98b0bb07d0c4946ffc9ef230781e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8c:06:35:59:e5:c1:f0:50:8a:7d:ad:98:05: b0:42:3a:f9:56:6b:a8:59:94:c8:89:b2:02:58:5e: 5a:54:3e:10:9b:60:02:9d:7d:3c:ec:39:a5:04:c8: c5:7c:dd:b2:58:bd:ac:df:3f:dd:15:1b:95:c6:20: 47:0b:7e:ec:22:fc:8e:1a:c5:9c:5c:db:e1:6d:3c: a1:e5:e1:82:c1:a1:0b:af:dc:91:23:f6:82:37:a0: af:08:ea:68:ed:49:c5:f9:39:3d:3a:df:64:72:0f: 3b:75:6c:29:e9:a5:39:9e:e4:88:33:e8:9d:b3:23: 07:c7:ca:bd:cb:b6:07:e9:4a:ee:ac:7d:34:22:47: 65:55:c6:ed:a7:bf:e0:fb:e7:cb:f5:a6:a0:5f:6e: 75:a6:d6:16:89:c6:f9:81:82:db:a2:d6:44:24:95: 18:56:b2:67:90:2b:5a:56:00:b9:59:b7:d3:88:58: ed:0e:0b:7b:1e:0c:13:40:ee:6f:bb:09:78:85:59: 63:d8:10:8b:73:bc:11:6c:9a:7b:a6:64:89:46:87: 8f:0f:d8:54:cb:13:f1:e7:09:1d:d2:e5:55:0e:f9: 6a:80:08:27:84:ca:48:f7:40:c8:65:a0:63:46:1b: 58:c6:c1:87:0f:80:66:4c:45:b6:06:ca:21:19:eb: af:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DC:B6:1D:3E:7D:98:B0:BB:07:D0:C4:94:6F:FC:9E:F2:30:78:1E X509v3 Authority Key Identifier: keyid:C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:8e:83:95:3f:c6:c5:0c:0a:a0:a1:24:70:82:64:33:e4:17: ef:70:01:1e:9e:6b:4e:83:d3:e6:24:2c:bd:45:e8:22:9a:52: e4:23:8b:fd:dd:63:df:31:9a:98:a7:56:de:67:b9:24:da:86: b2:e9:87:f6:08:50:f6:cf:0b:f7:6d:5d:88:fa:23:d3:cc:20: bb:cb:b0:f4:50:13:e5:95:b9:3e:ca:f7:68:0d:7c:26:ce:fb: 50:9f:cf:e3:88:d8:d9:4c:d0:92:08:65:8f:db:6f:80:55:15: 5b:af:75:8d:91:cb:2f:3c:54:22:c6:71:ed:a1:a7:e2:f7:cd: ac:b1:ed:bd:04:13:3c:68:3a:bf:33:57:aa:40:9a:0d:23:6e: b3:44:4f:ab:8a:c5:9d:53:51:03:26:97:4a:af:2c:39:1c:6e: cf:8e:64:7c:9d:3b:d2:78:21:2f:e4:66:8d:04:97:af:93:8a: cd:65:3d:e8:3c:80:9c:eb:19:7c:87:53:75:61:e6:ae:75:db: be:41:83:01:a4:c4:3f:4e:74:c2:98:42:8c:9b:e8:a6:e7:30: a5:c8:8d:a1:17:58:93:bc:c2:27:7d:e1:92:b6:62:63:e4:2b: c4:ac:60:01:fe:16:76:27:8a:2a:7b:35:13:b2:b2:65:44:2f: 62:2f:04:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz91+XSAKzPdwJnskuDYfwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4Mjg5NTM1ZTdlNGQyM2U2M2UxNzhlM2ZiNWJmMDU2ZmU4 YWUyNzcwHhcNMjUxMjA2MTQwMTA2WhcNMjUxMjA3MTQwMTA2WjAzMTEwLwYDVQQD Eyg5NGRjYjYxZDNlN2Q5OGIwYmIwN2QwYzQ5NDZmZmM5ZWYyMzA3ODFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4wGNVnlwfBQin2tmAWwQjr5Vmuo WZTIibICWF5aVD4Qm2ACnX087DmlBMjFfN2yWL2s3z/dFRuVxiBHC37sIvyOGsWc XNvhbTyh5eGCwaELr9yRI/aCN6CvCOpo7UnF+Tk9Ot9kcg87dWwp6aU5nuSIM+id syMHx8q9y7YH6UrurH00IkdlVcbtp7/g++fL9aagX251ptYWicb5gYLbotZEJJUY VrJnkCtaVgC5WbfTiFjtDgt7HgwTQO5vuwl4hVlj2BCLc7wRbJp7pmSJRoePD9hU yxPx5wkd0uVVDvlqgAgnhMpI90DIZaBjRhtYxsGHD4BmTEW2BsohGeuvjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTcth0+fZiwuwfQxJRv/J7yMHgeMB8GA1UdIwQY MBaAFMgolTXn5NI+Y+F44/tb8Fb+iuJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUNpVk5lZmswajVqNFhqai0xdndWdjZLNG5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82ZGNlZGItY2EwYi00ODNhLWE2NjQt NjZhNWVjYzg0NjE2LzEveUNpVk5lZmswajVqNFhqai0xdndWdjZLNG5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82ZGNlZGItY2EwYi00ODNhLWE2NjQtNjZhNWVjYzg0NjE2 LzEveUNpVk5lZmswajVqNFhqai0xdndWdjZLNG5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADI6DlT/G xQwKoKEkcIJkM+QX73ABHp5rToPT5iQsvUXoIppS5COL/d1j3zGamKdW3me5JNqG sumH9ghQ9s8L921diPoj08wgu8uw9FAT5ZW5Psr3aA18Js77UJ/P44jY2UzQkghl j9tvgFUVW691jZHLLzxUIsZx7aGn4vfNrLHtvQQTPGg6vzNXqkCaDSNus0RPq4rF nVNRAyaXSq8sORxuz45kfJ070nghL+RmjQSXr5OKzWU96DyAnOsZfIdTdWHmrnXb vkGDAaTEP050wphCjJvopucwpciNoRdYk7zCJ33hkrZiY+QrxKxgAf4WdieKKns1 E7KyZUQvYi8EPA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:56:41 2025 by rpki-client