This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft File: YoO20dhhAunt8qvdqnyTR6rHF8c.mft (raw, json) Hash identifier: KZa2gXWhv2gxIC+ZCoewk4pYV07YtLdMJfF7uL9grxo= Subject key identifier: 4A:48:E6:53:E4:DB:8B:7B:8D:04:15:B4:BD:1F:15:B9:81:F3:67:EC Authority key identifier: 62:83:B6:D1:D8:61:02:E9:ED:F2:AB:DD:AA:7C:93:47:AA:C7:17:C7 Certificate issuer: /CN=6283b6d1d86102e9edf2abddaa7c9347aac717c7 Certificate serial: 019AF3F743BD7BEE56B4FE747A8C6A1A97BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 14:00:59 +0000 Manifest this update: Sat 06 Dec 2025 14:00:59 +0000 Manifest next update: Sun 07 Dec 2025 14:00:59 +0000 Files and hashes: 1: FKwES05QXgv7GDIVYOX1rJUnQN0.roa (hash: q8y+Z4GqNRIr+efHEWQCbzvWoFlZ2bwXtIGJIqiojdY=) 2: IqcwUeOGcAnS-tBgjkUM-XNO3is.roa (hash: wn0T7F5N0/+0KEuMUe6YilItigsuYUK7JvlaTh+yZLw=) 3: YoO20dhhAunt8qvdqnyTR6rHF8c.crl (hash: d45f2N0+Eh2p3YTE5ItEf6eKmPwP3O74iIS/8cGwp14=) 4: h-kICo84mpPHXctcS-vW02QdJxQ.roa (hash: YChUhS+6HZvQd+Isg9GWQNzRMqXToTsR0vsksCA2uaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:43:bd:7b:ee:56:b4:fe:74:7a:8c:6a:1a:97:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6283b6d1d86102e9edf2abddaa7c9347aac717c7 Validity Not Before: Dec 6 14:00:59 2025 GMT Not After : Dec 7 14:00:59 2025 GMT Subject: CN=4a48e653e4db8b7b8d0415b4bd1f15b981f367ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:05:93:cf:c4:48:7c:10:20:0b:cb:ad:2e:a6: 2e:05:76:b9:0f:5b:fe:09:29:90:cf:06:fd:d3:6e: d8:0c:77:ec:fe:54:37:ec:cd:33:7e:21:f7:cb:2b: 83:e1:65:08:fc:74:49:f7:32:07:41:f5:ec:a1:4e: 61:b2:10:4b:8e:7a:c3:22:15:9e:bd:19:46:ef:38: fe:9c:e5:48:c5:9e:f7:8b:fc:2b:53:1d:92:fe:a4: 7e:be:26:ea:eb:92:9a:7d:64:11:a7:b2:c9:98:97: 2d:60:de:86:2c:fc:1a:4e:6e:a2:64:76:48:c9:97: 73:c5:83:ff:22:a5:6d:23:cd:b2:09:a3:50:56:2c: 6c:3e:2a:57:f5:2c:18:27:95:fc:48:ee:79:a6:e8: 19:17:ef:45:19:25:30:90:ff:77:d7:b9:51:cd:20: 2a:59:40:cc:18:a8:83:f4:01:1e:2c:2b:9e:f8:e4: 79:c1:6a:92:7a:23:49:e0:68:36:cc:e4:f8:be:90: c3:56:f7:e0:e5:72:61:10:5b:4a:85:f2:62:a8:b9: f3:dd:94:c9:0f:da:41:f6:fa:ca:1e:82:0e:74:f2: 89:77:ce:3f:a9:42:24:17:32:f0:80:96:ef:dc:07: b4:27:6b:3e:c7:ce:1c:c1:d1:5d:b2:57:fb:c0:d3: 9a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:48:E6:53:E4:DB:8B:7B:8D:04:15:B4:BD:1F:15:B9:81:F3:67:EC X509v3 Authority Key Identifier: keyid:62:83:B6:D1:D8:61:02:E9:ED:F2:AB:DD:AA:7C:93:47:AA:C7:17:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:3d:6b:b5:71:3a:88:0d:cd:ab:4e:d0:c7:06:19:50:0e:ee: 2b:3f:ba:98:59:69:0d:fa:5f:14:4f:bc:e3:44:86:07:b2:4d: f8:a9:a3:be:f4:a5:ed:42:fc:85:9d:79:f5:f9:bc:4c:12:9c: 5f:23:7f:0d:bb:27:5a:5c:8a:40:a0:ae:10:98:34:17:1f:04: 95:76:42:c9:2f:c7:3c:5a:1c:70:1b:17:7c:a9:12:f5:e9:2a: 2a:d7:77:1d:1f:0d:85:c9:16:e0:bc:a9:63:02:b8:ac:0e:cb: cc:97:68:8f:8e:c4:47:c0:49:cc:68:9f:db:49:50:ae:65:24: 96:93:ac:50:a4:fd:5a:99:8b:db:cd:3a:ff:7d:4e:72:3e:64: 4b:55:c4:01:05:90:a3:14:87:ea:29:d2:9a:cf:17:5e:46:c6: 74:fd:0f:47:45:40:19:d3:8d:36:92:a8:38:6c:c6:fb:e4:08: 8f:ea:e3:66:93:ae:84:f8:2e:f1:d1:75:ab:41:b9:1a:80:bd: 72:ae:48:c2:0d:0e:b7:cc:fa:2b:ee:a0:9a:56:b4:a1:12:22: ff:01:6f:b7:ef:a3:8d:0e:d3:52:61:5d:7e:df:7f:f9:dc:12: 79:39:e5:ab:10:dd:68:f3:b8:2a:c8:04:13:96:06:c7:8a:f6: 40:61:7b:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz90O9e+5WtP50eoxqGpe7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyODNiNmQxZDg2MTAyZTllZGYyYWJkZGFhN2M5MzQ3YWFj NzE3YzcwHhcNMjUxMjA2MTQwMDU5WhcNMjUxMjA3MTQwMDU5WjAzMTEwLwYDVQQD Eyg0YTQ4ZTY1M2U0ZGI4YjdiOGQwNDE1YjRiZDFmMTViOTgxZjM2N2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQWTz8RIfBAgC8utLqYuBXa5D1v+ CSmQzwb9027YDHfs/lQ37M0zfiH3yyuD4WUI/HRJ9zIHQfXsoU5hshBLjnrDIhWe vRlG7zj+nOVIxZ73i/wrUx2S/qR+vibq65KafWQRp7LJmJctYN6GLPwaTm6iZHZI yZdzxYP/IqVtI82yCaNQVixsPipX9SwYJ5X8SO55pugZF+9FGSUwkP9317lRzSAq WUDMGKiD9AEeLCue+OR5wWqSeiNJ4Gg2zOT4vpDDVvfg5XJhEFtKhfJiqLnz3ZTJ D9pB9vrKHoIOdPKJd84/qUIkFzLwgJbv3Ae0J2s+x84cwdFdslf7wNOa2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpI5lPk24t7jQQVtL0fFbmB82fsMB8GA1UdIwQY MBaAFGKDttHYYQLp7fKr3ap8k0eqxxfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW9PMjBkaGhBdW50OHF2ZHFueVRSNnJIRjhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iZDQzMTctYjllZi00YjIzLTgwYWQt OTE0ZTQ4ODFlZWE4LzEvWW9PMjBkaGhBdW50OHF2ZHFueVRSNnJIRjhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9iZDQzMTctYjllZi00YjIzLTgwYWQtOTE0ZTQ4ODFlZWE4 LzEvWW9PMjBkaGhBdW50OHF2ZHFueVRSNnJIRjhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMT1rtXE6 iA3Nq07QxwYZUA7uKz+6mFlpDfpfFE+840SGB7JN+KmjvvSl7UL8hZ159fm8TBKc XyN/DbsnWlyKQKCuEJg0Fx8ElXZCyS/HPFoccBsXfKkS9ekqKtd3HR8NhckW4Lyp YwK4rA7LzJdoj47ER8BJzGif20lQrmUklpOsUKT9WpmL2806/31Ocj5kS1XEAQWQ oxSH6inSms8XXkbGdP0PR0VAGdONNpKoOGzG++QIj+rjZpOuhPgu8dF1q0G5GoC9 cq5Iwg0Ot8z6K+6gmla0oRIi/wFvt++jjQ7TUmFdft9/+dwSeTnlqxDdaPO4KsgE E5YGx4r2QGF7Cg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:26:50 2025 by rpki-client