This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft File: ytx04QgwQh1O7qmCRM_RtBGQN_8.mft (raw, json) Hash identifier: qug1A2hAiy5cXVdBOBo41PMaAdIBJjOh48lW/8Oq/VE= Subject key identifier: 97:B0:3C:2A:12:73:FB:6D:36:20:88:C5:67:4F:9B:5F:3F:D9:2E:3E Authority key identifier: CA:DC:74:E1:08:30:42:1D:4E:EE:A9:82:44:CF:D1:B4:11:90:37:FF Certificate issuer: /CN=cadc74e10830421d4eeea98244cfd1b4119037ff Certificate serial: 019AF23F7F6AE830D6864261F2BA99D8BE80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 06:00:38 +0000 Manifest this update: Sat 06 Dec 2025 06:00:38 +0000 Manifest next update: Sun 07 Dec 2025 06:00:38 +0000 Files and hashes: 1: 2ba1m8Gy_1XOQ9HVKpmmzSbnedQ.roa (hash: nQyh0Ol7+Fw/xV4Vz5V2aR6KWFx7hjc+pCgRAL93L9k=) 2: ytx04QgwQh1O7qmCRM_RtBGQN_8.crl (hash: eNgTWhl2Vi+ZQCCt3VJhYDBvV3sdkQHuC6J50cYv6nc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:7f:6a:e8:30:d6:86:42:61:f2:ba:99:d8:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cadc74e10830421d4eeea98244cfd1b4119037ff Validity Not Before: Dec 6 06:00:38 2025 GMT Not After : Dec 7 06:00:38 2025 GMT Subject: CN=97b03c2a1273fb6d362088c5674f9b5f3fd92e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:97:59:eb:62:b6:b9:3b:ed:21:84:6c:40:e0: 31:81:12:be:e7:59:d2:be:0d:c1:f7:82:de:57:90: 11:46:81:ee:35:69:87:13:c6:99:1c:cc:06:95:8e: 95:87:09:e3:5b:d1:c9:05:d0:c6:ad:f4:fb:c1:17: 05:df:92:14:28:2c:96:a0:7f:5a:b8:5d:48:97:54: c6:56:85:c2:cc:53:26:ef:7b:32:7c:5c:c1:69:1e: 66:20:2e:ba:9c:1a:12:9b:79:c3:21:a0:4f:0c:47: 57:45:a1:bb:dd:a2:48:42:0f:06:fa:f9:85:3e:d3: 0c:2a:73:48:3a:fe:18:34:16:10:9f:de:b5:09:78: 8c:28:70:f3:bd:b9:1f:77:82:81:d0:ef:37:47:42: 91:15:c0:14:3f:71:a6:31:71:69:33:c5:22:66:b7: a4:74:50:31:3a:83:12:10:44:22:57:4f:0a:4c:f1: 8f:72:a2:27:7e:0b:83:b9:48:68:96:6a:12:8f:cf: d1:5d:c9:78:ce:5c:a8:94:68:32:c6:62:d4:0f:58: 26:cc:e1:74:38:bb:79:05:99:ad:53:40:4e:91:4e: b1:2a:ca:4e:f4:fd:04:3a:15:20:c1:9f:72:f1:6d: 99:c7:e4:fd:06:b0:06:b6:aa:bb:46:43:b3:bf:b1: 74:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B0:3C:2A:12:73:FB:6D:36:20:88:C5:67:4F:9B:5F:3F:D9:2E:3E X509v3 Authority Key Identifier: keyid:CA:DC:74:E1:08:30:42:1D:4E:EE:A9:82:44:CF:D1:B4:11:90:37:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b8:a5:82:c3:fe:6c:59:bd:2a:6a:d2:e4:6f:21:0f:80:6b: 67:a2:81:16:f8:ff:ec:af:0a:b0:3a:db:cd:38:8f:4f:e5:da: 05:6c:e3:7c:db:ea:a1:d4:a2:32:d9:1b:d7:cb:7e:bf:36:45: 09:d0:19:6a:a0:84:e9:ea:c5:23:62:3d:e6:c5:86:24:1c:4a: 81:23:4f:d5:07:27:58:1f:07:67:31:75:b8:85:60:43:d3:03: ce:25:c1:c5:83:63:41:b6:08:f8:2a:24:e4:73:03:08:ce:75: 72:92:b0:a4:17:d3:ec:81:89:f0:70:dc:33:1f:a4:5d:72:46: b0:99:85:32:ac:ce:52:c3:98:3d:6d:8e:40:c7:c7:ed:3d:90: a0:9a:ee:ea:db:44:8a:be:27:72:6a:ff:0d:35:a8:6d:76:d2: 50:c0:d9:42:71:6a:63:af:99:8c:34:7c:c8:b1:98:24:a9:61: 98:0c:5f:7a:71:67:12:b7:f3:f4:69:09:2c:b5:d3:8a:c2:83: a1:3c:b4:48:6a:f2:45:16:e5:6a:28:db:4f:d9:d7:c4:4d:de: c5:9a:3a:d5:68:79:22:bd:1d:a2:dd:4e:49:b1:74:d3:09:d1: 29:6c:a2:c4:65:00:aa:f2:71:f5:92:39:46:1f:6b:85:9d:43: 17:69:11:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP39q6DDWhkJh8rqZ2L6AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZGM3NGUxMDgzMDQyMWQ0ZWVlYTk4MjQ0Y2ZkMWI0MTE5 MDM3ZmYwHhcNMjUxMjA2MDYwMDM4WhcNMjUxMjA3MDYwMDM4WjAzMTEwLwYDVQQD Eyg5N2IwM2MyYTEyNzNmYjZkMzYyMDg4YzU2NzRmOWI1ZjNmZDkyZTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZdZ62K2uTvtIYRsQOAxgRK+51nS vg3B94LeV5ARRoHuNWmHE8aZHMwGlY6VhwnjW9HJBdDGrfT7wRcF35IUKCyWoH9a uF1Il1TGVoXCzFMm73syfFzBaR5mIC66nBoSm3nDIaBPDEdXRaG73aJIQg8G+vmF PtMMKnNIOv4YNBYQn961CXiMKHDzvbkfd4KB0O83R0KRFcAUP3GmMXFpM8UiZrek dFAxOoMSEEQiV08KTPGPcqInfguDuUholmoSj8/RXcl4zlyolGgyxmLUD1gmzOF0 OLt5BZmtU0BOkU6xKspO9P0EOhUgwZ9y8W2Zx+T9BrAGtqq7RkOzv7F0vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJewPCoSc/ttNiCIxWdPm18/2S4+MB8GA1UdIwQY MBaAFMrcdOEIMEIdTu6pgkTP0bQRkDf/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXR4MDRRZ3dRaDFPN3FtQ1JNX1J0QkdRTl84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84YmZmNzItNWMxNi00NDg0LWFjYzIt N2ViNGMwODg1OTBmLzEveXR4MDRRZ3dRaDFPN3FtQ1JNX1J0QkdRTl84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC84YmZmNzItNWMxNi00NDg0LWFjYzItN2ViNGMwODg1OTBm LzEveXR4MDRRZ3dRaDFPN3FtQ1JNX1J0QkdRTl84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbilgsP+ bFm9KmrS5G8hD4BrZ6KBFvj/7K8KsDrbzTiPT+XaBWzjfNvqodSiMtkb18t+vzZF CdAZaqCE6erFI2I95sWGJBxKgSNP1QcnWB8HZzF1uIVgQ9MDziXBxYNjQbYI+Cok 5HMDCM51cpKwpBfT7IGJ8HDcMx+kXXJGsJmFMqzOUsOYPW2OQMfH7T2QoJru6ttE ir4ncmr/DTWobXbSUMDZQnFqY6+ZjDR8yLGYJKlhmAxfenFnErfz9GkJLLXTisKD oTy0SGryRRblaijbT9nXxE3exZo61Wh5Ir0dot1OSbF00wnRKWyixGUAqvJx9ZI5 Rh9rhZ1DF2kReg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:28:02 2025 by rpki-client