This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft File: YYzEbXHnhIl4SIlh17UauhVB88Q.mft (raw, json) Hash identifier: dtoimQzabK9GCsWaHRey9CUWyADogQPQ2r44Jhz9ekI= Subject key identifier: 70:8B:23:04:10:10:08:94:DF:AF:F4:22:DE:D4:D0:38:BE:84:AB:03 Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4 Certificate issuer: /CN=618cc46d71e7848978488961d7b51aba1541f3c4 Certificate serial: 019AF19B68F859C27F48F6D950C0A85F1788 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft Manifest number: 066A Signing time: Sat 06 Dec 2025 03:01:25 +0000 Manifest this update: Sat 06 Dec 2025 03:01:25 +0000 Manifest next update: Sun 07 Dec 2025 03:01:25 +0000 Files and hashes: 1: 5B2v-t9G6c4XLHchTlmKyr_cKIc.roa (hash: TNnzqom3GkwHYObP+jkKUQTCGEpJ+jMjRi9PWCmkNiY=) 2: YYzEbXHnhIl4SIlh17UauhVB88Q.crl (hash: QJuP4vGTy2I/rX3SRvLDzw6CbsS3g2jq1di+t3JHs4Q=) 3: ZVHsY6ZkuvPvVgJnwVYAlKRfxu4.roa (hash: 5El1EqcO/tfZoHxTGK3Q7453jTBDE3FBJF97kpTWkjY=) 4: zEzHWCJriZKeuyYdBpl4VovFYcI.roa (hash: EKtQ2jHsCQ+lmT20oOt4vBuFgcYh84fbdOE/3vv/6ds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:68:f8:59:c2:7f:48:f6:d9:50:c0:a8:5f:17:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4 Validity Not Before: Dec 6 03:01:25 2025 GMT Not After : Dec 7 03:01:25 2025 GMT Subject: CN=708b230410100894dfaff422ded4d038be84ab03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ab:35:0b:44:cf:d0:2c:a2:29:47:af:a8:09: 54:aa:30:78:05:96:8d:cf:86:9a:a8:52:5f:14:fe: 24:2e:4f:3d:68:d6:8d:e2:f5:0f:8e:de:2c:36:86: 29:f6:5e:d7:d1:96:ff:62:47:77:7d:77:c5:9b:f9: 81:9a:f9:c0:31:be:1f:62:ba:e9:5b:be:50:6b:ed: 05:94:71:51:35:cf:c0:d0:73:9a:2e:32:13:04:67: 3f:00:c9:d2:69:3e:be:3b:6b:00:89:4c:c7:78:3d: 81:c4:ff:0c:48:bf:47:f3:a8:cf:c2:b8:e3:94:1c: 4b:01:bf:6a:2e:03:59:09:ca:9b:58:1e:59:cd:01: 99:08:81:90:56:23:f9:54:64:50:6e:c9:1f:0e:69: c9:80:66:ef:19:3a:4f:0b:8f:78:06:aa:1f:8d:2c: e8:3c:80:83:cf:91:da:68:c7:13:18:35:33:6d:08: 0a:a3:01:25:26:00:24:ce:9d:74:e8:99:5d:b3:45: 22:96:af:56:2d:72:0d:65:e2:ac:e6:cb:ca:73:2a: e1:cf:bc:e5:52:55:5a:1e:f7:44:17:ee:b6:53:3d: d7:44:0f:af:d7:6f:40:5e:82:58:92:e3:84:c9:3a: 66:e2:e8:c7:f2:6e:b6:a2:e2:14:2f:05:3c:4a:b1: 0b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8B:23:04:10:10:08:94:DF:AF:F4:22:DE:D4:D0:38:BE:84:AB:03 X509v3 Authority Key Identifier: keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c0:b0:1d:6f:78:a8:91:33:06:e8:37:0a:41:06:a9:c7:e6: 06:98:3e:cd:cc:ce:51:b6:92:f3:c3:8c:67:54:ac:f2:08:d4: e5:00:a4:cc:b4:3c:f8:ce:14:ad:e9:c0:e4:9e:4e:2c:a6:66: 7c:51:a6:09:a9:ed:c9:17:f4:95:bd:db:0c:19:8a:1e:06:d3: a1:92:86:22:f2:1c:cf:be:69:2d:d7:62:35:8f:a4:a2:f7:31: 93:90:2b:cc:f3:81:a8:bc:af:28:17:1d:64:07:ef:fa:28:7e: 3b:d6:81:e8:d1:12:fd:ee:e6:0d:d8:c8:d8:02:60:c8:64:db: 7c:ba:62:67:9d:ab:e4:e0:a2:c5:92:64:8a:2b:f7:39:e0:f3: 40:85:a7:17:0c:ef:c6:58:55:49:9a:b5:47:de:93:74:07:cc: d0:7f:70:46:f5:a7:d7:14:15:fd:fb:d3:4b:78:fa:e8:ac:af: 42:8e:db:c7:e5:6f:ce:3a:ce:3c:b3:7d:b7:cd:40:5e:51:b2: b5:f7:fd:e3:ab:2f:4e:54:d1:de:e9:75:73:7c:97:6a:6f:a4: aa:d8:1a:fe:ea:92:ec:7e:73:88:52:87:29:29:e6:7d:6e:5c: 10:ac:90:ff:04:42:13:b5:d7:c5:e3:ce:1e:03:74:69:ca:93: 01:1c:41:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2j4WcJ/SPbZUMCoXxeIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxOGNjNDZkNzFlNzg0ODk3ODQ4ODk2MWQ3YjUxYWJhMTU0 MWYzYzQwHhcNMjUxMjA2MDMwMTI1WhcNMjUxMjA3MDMwMTI1WjAzMTEwLwYDVQQD Eyg3MDhiMjMwNDEwMTAwODk0ZGZhZmY0MjJkZWQ0ZDAzOGJlODRhYjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qs1C0TP0CyiKUevqAlUqjB4BZaN z4aaqFJfFP4kLk89aNaN4vUPjt4sNoYp9l7X0Zb/Ykd3fXfFm/mBmvnAMb4fYrrp W75Qa+0FlHFRNc/A0HOaLjITBGc/AMnSaT6+O2sAiUzHeD2BxP8MSL9H86jPwrjj lBxLAb9qLgNZCcqbWB5ZzQGZCIGQViP5VGRQbskfDmnJgGbvGTpPC494BqofjSzo PICDz5HaaMcTGDUzbQgKowElJgAkzp106Jlds0Uilq9WLXINZeKs5svKcyrhz7zl UlVaHvdEF+62Uz3XRA+v129AXoJYkuOEyTpm4ujH8m62ouIULwU8SrELZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCLIwQQEAiU36/0It7U0Di+hKsDMB8GA1UdIwQY MBaAFGGMxG1x54SJeEiJYde1GroVQfPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVl6RWJYSG5oSWw0U0lsaDE3VWF1aFZCODhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xMjc0MzAtZDRlOC00ZGEzLWJlYTIt NGVmMTljY2M1N2QwLzEvWVl6RWJYSG5oSWw0U0lsaDE3VWF1aFZCODhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8xMjc0MzAtZDRlOC00ZGEzLWJlYTItNGVmMTljY2M1N2Qw LzEvWVl6RWJYSG5oSWw0U0lsaDE3VWF1aFZCODhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMCwHW94 qJEzBug3CkEGqcfmBpg+zczOUbaS88OMZ1Ss8gjU5QCkzLQ8+M4UrenA5J5OLKZm fFGmCantyRf0lb3bDBmKHgbToZKGIvIcz75pLddiNY+kovcxk5ArzPOBqLyvKBcd ZAfv+ih+O9aB6NES/e7mDdjI2AJgyGTbfLpiZ52r5OCixZJkiiv3OeDzQIWnFwzv xlhVSZq1R96TdAfM0H9wRvWn1xQV/fvTS3j66KyvQo7bx+VvzjrOPLN9t81AXlGy tff946svTlTR3ul1c3yXam+kqtga/uqS7H5ziFKHKSnmfW5cEKyQ/wRCE7XXxePO HgN0acqTARxB9g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:59:16 2025 by rpki-client