This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft File: yq46VN0DiVaD7tvDedHg27Brm9s.mft (raw, json) Hash identifier: NnZ+4HnF10BK2iAOzYHuitt5IF7ll/42DS6IN0b7un4= Subject key identifier: 93:C4:72:B1:D3:3C:8A:0F:C7:AA:8E:09:9E:6D:37:10:70:3E:5A:E4 Authority key identifier: CA:AE:3A:54:DD:03:89:56:83:EE:DB:C3:79:D1:E0:DB:B0:6B:9B:DB Certificate issuer: /CN=caae3a54dd03895683eedbc379d1e0dbb06b9bdb Certificate serial: 019AF164253CAA14DF27CC76B574E2FB4C00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft Manifest number: 01EE Signing time: Sat 06 Dec 2025 02:01:03 +0000 Manifest this update: Sat 06 Dec 2025 02:01:03 +0000 Manifest next update: Sun 07 Dec 2025 02:01:03 +0000 Files and hashes: 1: IqlpwJ2xW0fAs8ZGPBfSTtIDhwE.roa (hash: qbO1Ww6u5GvjQ0O8Z6mDFqL7l1gHc63dxnum3Lg38lg=) 2: yq46VN0DiVaD7tvDedHg27Brm9s.crl (hash: ytQnIUbkhmSUGpQy3DVFT15/8NIcXXEfyfTYuKFD5fY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:25:3c:aa:14:df:27:cc:76:b5:74:e2:fb:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caae3a54dd03895683eedbc379d1e0dbb06b9bdb Validity Not Before: Dec 6 02:01:03 2025 GMT Not After : Dec 7 02:01:03 2025 GMT Subject: CN=93c472b1d33c8a0fc7aa8e099e6d3710703e5ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:83:90:0f:a2:25:49:a1:97:eb:f4:68:ed:c1: a2:ec:d9:64:d2:5c:64:e8:d9:0d:02:2e:53:2a:bd: ab:9e:19:04:f0:cf:92:e4:e0:ba:cb:7b:f0:1f:b8: c0:ed:f4:69:c1:0f:4f:a5:1d:da:80:2e:47:75:b1: 51:02:f8:b9:d6:26:29:63:7c:89:99:6f:d9:64:4f: 04:e3:f3:0b:2a:19:e9:d8:97:89:84:56:b9:b3:2a: db:87:ec:fb:02:23:a4:e0:31:ff:6c:25:5c:a4:75: 5f:fb:6a:7d:af:94:1c:a2:77:2b:f7:83:2f:bd:61: 21:96:36:20:d6:53:bf:bb:3b:d5:31:fd:93:32:e6: 7f:ab:0f:73:e2:fa:52:4e:9f:0a:fd:fb:af:63:1b: c3:70:36:2a:ed:53:56:e6:6d:10:1d:e9:10:12:b7: 32:6a:cf:b2:f0:b7:c3:50:f2:61:3d:d0:ca:f2:8b: b4:8f:12:08:3d:da:c0:75:c8:0a:6f:cb:d3:94:e1: 95:24:1d:d6:b9:69:5b:15:b4:24:bb:b6:b4:d2:1f: b3:6b:cb:ff:43:31:0f:05:21:e0:3f:02:bc:51:e6: 0f:ba:ca:6e:2a:3f:c3:56:f3:a6:9a:0b:93:1c:02: 74:8a:95:5a:28:d4:c8:b9:d6:8f:97:8a:69:3b:eb: c4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C4:72:B1:D3:3C:8A:0F:C7:AA:8E:09:9E:6D:37:10:70:3E:5A:E4 X509v3 Authority Key Identifier: keyid:CA:AE:3A:54:DD:03:89:56:83:EE:DB:C3:79:D1:E0:DB:B0:6B:9B:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:bf:f2:5c:0a:f6:de:14:ba:bf:16:2f:cb:a2:3b:de:70:22: c8:50:0e:c2:c9:e9:13:71:c3:40:3b:46:4b:db:ea:3f:08:f9: 93:72:3e:11:d9:38:6b:3d:74:94:5e:5d:69:59:d3:f8:60:d1: 47:1a:c6:ff:f0:f5:5e:ad:89:97:3f:78:46:b3:f2:75:fd:2d: f9:d8:b0:90:55:0b:0f:e1:e4:92:f7:dc:f2:5d:6d:22:65:22: 60:84:3f:c1:9b:76:08:d4:c0:46:8f:8b:9e:eb:cd:dd:bb:ea: 2b:18:66:a2:fd:3c:3f:78:b5:55:27:af:49:55:24:c0:98:97: c7:b9:5f:c0:2f:90:1e:c1:4f:d8:eb:f1:20:f9:1e:c6:12:fe: 7b:eb:d0:e1:d8:9b:8c:1d:12:2d:20:fd:71:52:a1:2c:ac:d1: 15:4b:74:c9:40:d9:90:91:56:96:5c:a9:06:74:70:48:4f:58: e0:96:97:8c:b5:07:c8:e8:61:79:70:37:f7:c2:df:9e:97:29: e6:ee:bf:7b:49:3a:d7:46:6d:a8:20:85:ca:56:13:ad:9f:5f: 5a:54:ec:c1:b7:e2:ee:6c:cf:fe:bb:94:26:53:47:e9:a1:b1: 46:f0:cb:cb:7e:43:14:79:6d:b1:d3:13:18:13:32:a9:ac:30: 6c:7a:2b:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCU8qhTfJ8x2tXTi+0wAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYWUzYTU0ZGQwMzg5NTY4M2VlZGJjMzc5ZDFlMGRiYjA2 YjliZGIwHhcNMjUxMjA2MDIwMTAzWhcNMjUxMjA3MDIwMTAzWjAzMTEwLwYDVQQD Eyg5M2M0NzJiMWQzM2M4YTBmYzdhYThlMDk5ZTZkMzcxMDcwM2U1YWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYOQD6IlSaGX6/Ro7cGi7Nlk0lxk 6NkNAi5TKr2rnhkE8M+S5OC6y3vwH7jA7fRpwQ9PpR3agC5HdbFRAvi51iYpY3yJ mW/ZZE8E4/MLKhnp2JeJhFa5syrbh+z7AiOk4DH/bCVcpHVf+2p9r5Qconcr94Mv vWEhljYg1lO/uzvVMf2TMuZ/qw9z4vpSTp8K/fuvYxvDcDYq7VNW5m0QHekQErcy as+y8LfDUPJhPdDK8ou0jxIIPdrAdcgKb8vTlOGVJB3WuWlbFbQku7a00h+za8v/ QzEPBSHgPwK8UeYPuspuKj/DVvOmmguTHAJ0ipVaKNTIudaPl4ppO+vE/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPEcrHTPIoPx6qOCZ5tNxBwPlrkMB8GA1UdIwQY MBaAFMquOlTdA4lWg+7bw3nR4Nuwa5vbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXE0NlZOMERpVmFEN3R2RGVkSGcyN0JybTlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jODNkY2UtMjk1NS00OGU2LWJkN2Mt NWJlYWZjODY2NTFiLzEveXE0NlZOMERpVmFEN3R2RGVkSGcyN0JybTlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jODNkY2UtMjk1NS00OGU2LWJkN2MtNWJlYWZjODY2NTFi LzEveXE0NlZOMERpVmFEN3R2RGVkSGcyN0JybTlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKr/yXAr2 3hS6vxYvy6I73nAiyFAOwsnpE3HDQDtGS9vqPwj5k3I+Edk4az10lF5daVnT+GDR RxrG//D1Xq2Jlz94RrPydf0t+diwkFULD+Hkkvfc8l1tImUiYIQ/wZt2CNTARo+L nuvN3bvqKxhmov08P3i1VSevSVUkwJiXx7lfwC+QHsFP2OvxIPkexhL+e+vQ4dib jB0SLSD9cVKhLKzRFUt0yUDZkJFWllypBnRwSE9Y4JaXjLUHyOhheXA398Lfnpcp 5u6/e0k610ZtqCCFylYTrZ9fWlTswbfi7mzP/ruUJlNH6aGxRvDLy35DFHltsdMT GBMyqawwbHoryQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:34 2025 by rpki-client