This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft File: Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft (raw, json) Hash identifier: bW/khZIDESEvbKsoxkoq3h6qm/nmOt1kCMaPmQlvs/4= Subject key identifier: A2:5F:3F:60:37:AA:22:50:DB:8A:66:EF:E1:50:82:92:63:52:67:01 Authority key identifier: 61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8 Certificate issuer: /CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8 Certificate serial: 019AF42E00E04F6D7F2F51AA653281F8D65C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft Manifest number: 0BF3 Signing time: Sat 06 Dec 2025 15:00:46 +0000 Manifest this update: Sat 06 Dec 2025 15:00:46 +0000 Manifest next update: Sun 07 Dec 2025 15:00:46 +0000 Files and hashes: 1: Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl (hash: iQ+VqC7JFtYJs+nZqzHOjlL/prA126QqtehlkKjHRyI=) 2: vzcqP3LvlK_sQg8vPWTBe97Nav0.roa (hash: 3HGCRFI+BCpq9Cd0n6gj7Tnh3DZvLgpQucs3TlDSYJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:00:e0:4f:6d:7f:2f:51:aa:65:32:81:f8:d6:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8 Validity Not Before: Dec 6 15:00:46 2025 GMT Not After : Dec 7 15:00:46 2025 GMT Subject: CN=a25f3f6037aa2250db8a66efe150829263526701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:af:ff:90:63:93:21:a7:f1:38:53:29:da:08: 2a:3c:9f:c3:ef:66:e2:9d:32:8c:7d:48:6d:08:ad: 98:d9:eb:ba:8e:40:ca:0f:b5:44:7d:d4:bf:0f:70: 03:8b:98:24:9d:48:ab:75:42:cf:54:5a:e7:b7:86: 43:05:b5:43:b6:a3:05:1f:bd:da:44:11:b0:06:c1: 92:5e:20:b1:ac:9f:ff:6f:c2:db:cd:4d:ca:3a:54: ce:a1:41:44:a8:00:8a:03:94:73:16:2e:ae:84:04: ee:d7:46:33:d0:dc:1c:cf:76:3f:bf:4f:10:ee:27: 31:89:7f:6f:d6:82:5c:23:c9:57:7c:36:47:8b:ea: ca:01:c2:e4:87:a2:31:94:1a:bd:16:03:38:eb:20: c0:60:e6:7d:f9:33:f7:e9:0a:0d:c5:5c:5b:d0:05: 6d:f5:c6:ca:d0:ca:00:f5:30:2a:b2:c5:3e:09:2d: 75:52:a2:5d:84:5a:2a:74:25:57:ea:e9:6c:7c:ef: c5:b1:bb:94:4e:02:55:7a:36:de:e3:53:0e:ab:b3: 27:8a:c0:13:a8:0d:97:67:1f:03:ec:d9:c4:7c:73: 43:03:4a:5f:cb:49:de:d7:8e:78:94:47:6b:f0:55: a5:e0:62:ff:e7:5d:ea:27:83:57:e6:66:fe:6d:de: ad:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5F:3F:60:37:AA:22:50:DB:8A:66:EF:E1:50:82:92:63:52:67:01 X509v3 Authority Key Identifier: keyid:61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:84:b9:a0:af:e1:29:6c:8f:9c:3f:01:bf:88:ac:72:f2:1e: e8:65:58:5c:9b:6b:d7:c5:84:cb:c9:39:f7:1e:4b:fd:6d:f5: 69:96:69:d8:fd:22:d3:74:56:61:21:7e:2d:ed:c0:1c:67:2e: c8:50:ec:0b:88:6d:51:a0:a4:bc:31:47:c6:12:9b:fb:fc:92: 1c:f5:73:f3:8c:b3:fb:49:b7:24:fc:c8:e4:6c:74:89:41:51: fd:3f:a1:43:be:2a:65:04:4a:1f:68:c2:2c:d7:5d:e8:b8:42: 62:3f:f8:4a:c2:aa:21:ef:4f:e5:b2:97:7b:4a:21:b2:e1:09: 2d:f0:59:5d:05:25:38:8e:cd:0a:1e:0e:0d:3a:7c:8e:1d:b0: 70:2b:64:2f:82:d3:67:a6:f8:7b:11:5f:74:13:d7:33:ba:a5: 06:79:f6:be:4e:73:90:c3:b4:c9:9c:54:fd:4e:48:e3:1e:09: de:5d:0a:db:9e:68:2e:47:8b:6a:dc:e3:d2:3c:53:41:ce:70: 02:98:92:ab:16:8d:3e:db:7f:21:99:81:6a:23:01:12:46:76: a0:69:c1:c1:85:0c:51:e9:9b:aa:10:5e:41:48:fe:38:a9:03: 07:df:23:01:7c:00:7a:07:58:73:bd:27:f9:d5:b4:8d:d8:5b: 36:20:6b:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LgDgT21/L1GqZTKB+NZcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxZWRmZTdhNGZjNjRkZTUyOWQxNjJkZjJmZWQwNzgwYzZl NWUxYTgwHhcNMjUxMjA2MTUwMDQ2WhcNMjUxMjA3MTUwMDQ2WjAzMTEwLwYDVQQD EyhhMjVmM2Y2MDM3YWEyMjUwZGI4YTY2ZWZlMTUwODI5MjYzNTI2NzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6//kGOTIafxOFMp2ggqPJ/D72bi nTKMfUhtCK2Y2eu6jkDKD7VEfdS/D3ADi5gknUirdULPVFrnt4ZDBbVDtqMFH73a RBGwBsGSXiCxrJ//b8LbzU3KOlTOoUFEqACKA5RzFi6uhATu10Yz0Nwcz3Y/v08Q 7icxiX9v1oJcI8lXfDZHi+rKAcLkh6IxlBq9FgM46yDAYOZ9+TP36QoNxVxb0AVt 9cbK0MoA9TAqssU+CS11UqJdhFoqdCVX6ulsfO/FsbuUTgJVejbe41MOq7MnisAT qA2XZx8D7NnEfHNDA0pfy0ne1454lEdr8FWl4GL/513qJ4NX5mb+bd6tAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJfP2A3qiJQ24pm7+FQgpJjUmcBMB8GA1UdIwQY MBaAFGHt/npPxk3lKdFi3y/tB4DG5eGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWUzLWVrX0dUZVVwMFdMZkwtMEhnTWJsNGFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iODFkMDgtNjZjOS00YmU5LWEyMjEt YWZmODcxYjViNWY3LzEvWWUzLWVrX0dUZVVwMFdMZkwtMEhnTWJsNGFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9iODFkMDgtNjZjOS00YmU5LWEyMjEtYWZmODcxYjViNWY3 LzEvWWUzLWVrX0dUZVVwMFdMZkwtMEhnTWJsNGFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYS5oK/h KWyPnD8Bv4iscvIe6GVYXJtr18WEy8k59x5L/W31aZZp2P0i03RWYSF+Le3AHGcu yFDsC4htUaCkvDFHxhKb+/ySHPVz84yz+0m3JPzI5Gx0iUFR/T+hQ74qZQRKH2jC LNdd6LhCYj/4SsKqIe9P5bKXe0ohsuEJLfBZXQUlOI7NCh4ODTp8jh2wcCtkL4LT Z6b4exFfdBPXM7qlBnn2vk5zkMO0yZxU/U5I4x4J3l0K255oLkeLatzj0jxTQc5w ApiSqxaNPtt/IZmBaiMBEkZ2oGnBwYUMUembqhBeQUj+OKkDB98jAXwAegdYc70n +dW0jdhbNiBriw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:54:22 2025 by rpki-client