This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft File: yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft (raw, json) Hash identifier: buL4/k1E2i5ILvO+MjSmOvWKL6zT4O2m5+ETfVw5sp8= Subject key identifier: 2E:38:90:2B:A6:B4:24:9A:D0:96:21:53:36:D0:B0:79:40:6D:0C:03 Authority key identifier: C8:47:58:05:3A:0C:4C:6D:5E:00:3F:3C:86:9A:89:E4:F2:A9:E1:77 Certificate issuer: /CN=c84758053a0c4c6d5e003f3c869a89e4f2a9e177 Certificate serial: 019AF2AD89DD64317814F4B224C5155787D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft Manifest number: 0DEE Signing time: Sat 06 Dec 2025 08:00:50 +0000 Manifest this update: Sat 06 Dec 2025 08:00:50 +0000 Manifest next update: Sun 07 Dec 2025 08:00:50 +0000 Files and hashes: 1: _Z27vdbVNx1AkVs4_tUBUqOLYnE.roa (hash: GcXnOCS0CtBJVhbx+3s+RdmGrB9WpH4rUku+ZZjo1A8=) 2: yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl (hash: 2O4H+P05X6fjyMePxDFr1Hlnhmnfilp0L1aoq1Cje00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:89:dd:64:31:78:14:f4:b2:24:c5:15:57:87:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84758053a0c4c6d5e003f3c869a89e4f2a9e177 Validity Not Before: Dec 6 08:00:50 2025 GMT Not After : Dec 7 08:00:50 2025 GMT Subject: CN=2e38902ba6b4249ad096215336d0b079406d0c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c6:d2:e8:fc:d6:53:8c:98:66:ba:3d:ec:96: cd:7f:d0:d7:f3:f7:db:1b:33:91:3a:9a:37:c0:eb: 5a:ea:8d:57:55:a1:79:ca:b9:13:87:7a:4d:61:b7: 6f:31:a4:dc:a3:22:bc:75:58:cc:6f:3d:b0:5c:16: 8a:51:04:f3:90:a7:09:5a:ed:2d:6d:a5:9c:16:e4: 94:78:a2:44:9f:72:1a:fe:59:76:de:22:1e:53:d3: 66:f1:a8:65:7e:0c:3f:4a:05:b1:b0:74:7e:93:fd: 5b:4e:6c:a9:8c:e5:3a:77:55:7f:7c:e2:5e:28:b1: c5:76:2f:eb:04:e0:93:3c:5c:40:5a:59:e0:4f:59: d8:26:13:6d:e2:a2:d1:d9:b3:4f:e1:57:be:64:91: 1c:39:d1:49:0e:40:e6:53:27:08:92:01:95:b6:85: 92:d5:44:ec:bb:62:44:16:a0:8f:f0:82:5c:33:01: 64:87:8a:1a:5a:d3:a3:ca:44:df:b7:27:9b:1d:d9: 44:2f:80:40:47:82:67:bc:be:87:5f:a4:3b:fa:90: 80:8e:c8:fd:a7:62:05:e9:82:da:9a:2c:81:99:5a: 1a:3f:85:8d:d9:0f:50:bb:13:90:25:c0:06:94:1a: 00:fd:ae:27:9f:f7:f0:eb:b9:ae:fd:7a:6f:da:60: 97:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:38:90:2B:A6:B4:24:9A:D0:96:21:53:36:D0:B0:79:40:6D:0C:03 X509v3 Authority Key Identifier: keyid:C8:47:58:05:3A:0C:4C:6D:5E:00:3F:3C:86:9A:89:E4:F2:A9:E1:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:67:7b:c8:a3:51:27:21:c6:97:11:4d:e1:84:14:34:4e:12: 9a:e3:4a:b0:77:82:d8:45:5a:ef:f1:41:a0:99:b5:47:b2:33: 72:52:31:9e:07:b9:58:ce:75:e8:75:13:fc:5f:73:eb:45:6d: 09:2c:7a:57:80:50:5f:c4:a6:33:cc:01:b0:20:cd:7a:46:ef: a0:9f:84:3c:f7:87:0e:46:e8:14:62:52:c8:c7:ee:f4:ff:c7: d1:ff:25:9d:41:fe:90:26:b4:be:ee:a9:73:9d:37:98:12:25: 5d:63:fa:c9:ee:74:19:8d:12:43:0e:22:95:fd:66:80:6d:4a: e7:2c:c2:9f:16:f0:d6:7b:9f:62:44:53:8a:07:7e:0a:9d:e6: 05:33:68:26:75:7b:36:10:04:ff:a8:d9:2d:b1:b1:24:f0:34: 8d:d9:37:fc:bd:a6:af:2d:b7:8b:57:bd:2c:da:34:4a:94:74: 22:71:8f:e8:59:10:7b:8d:a5:5e:c3:a8:b1:15:ce:57:8c:7a: 68:46:b9:48:56:05:a5:83:46:bd:2b:cb:35:05:a7:93:f8:29: b0:8f:af:2d:37:d3:53:5a:60:2b:87:a2:54:55:45:68:bc:b6: 17:e5:41:bc:5d:4d:24:71:0a:ce:21:02:e1:e6:28:9a:3c:bf: 22:4b:96:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrYndZDF4FPSyJMUVV4fZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NDc1ODA1M2EwYzRjNmQ1ZTAwM2YzYzg2OWE4OWU0ZjJh OWUxNzcwHhcNMjUxMjA2MDgwMDUwWhcNMjUxMjA3MDgwMDUwWjAzMTEwLwYDVQQD EygyZTM4OTAyYmE2YjQyNDlhZDA5NjIxNTMzNmQwYjA3OTQwNmQwYzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8bS6PzWU4yYZro97JbNf9DX8/fb GzOROpo3wOta6o1XVaF5yrkTh3pNYbdvMaTcoyK8dVjMbz2wXBaKUQTzkKcJWu0t baWcFuSUeKJEn3Ia/ll23iIeU9Nm8ahlfgw/SgWxsHR+k/1bTmypjOU6d1V/fOJe KLHFdi/rBOCTPFxAWlngT1nYJhNt4qLR2bNP4Ve+ZJEcOdFJDkDmUycIkgGVtoWS 1UTsu2JEFqCP8IJcMwFkh4oaWtOjykTftyebHdlEL4BAR4JnvL6HX6Q7+pCAjsj9 p2IF6YLamiyBmVoaP4WN2Q9QuxOQJcAGlBoA/a4nn/fw67mu/Xpv2mCX7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC44kCumtCSa0JYhUzbQsHlAbQwDMB8GA1UdIwQY MBaAFMhHWAU6DExtXgA/PIaaieTyqeF3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUVkWUJUb01URzFlQUQ4OGhwcUo1UEtwNFhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMDhkOWMtNWNhOS00ZTUzLTk3ZTMt OWFmMmNiNWRjY2YzLzEveUVkWUJUb01URzFlQUQ4OGhwcUo1UEtwNFhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9mMDhkOWMtNWNhOS00ZTUzLTk3ZTMtOWFmMmNiNWRjY2Yz LzEveUVkWUJUb01URzFlQUQ4OGhwcUo1UEtwNFhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmd7yKNR JyHGlxFN4YQUNE4SmuNKsHeC2EVa7/FBoJm1R7IzclIxnge5WM516HUT/F9z60Vt CSx6V4BQX8SmM8wBsCDNekbvoJ+EPPeHDkboFGJSyMfu9P/H0f8lnUH+kCa0vu6p c503mBIlXWP6ye50GY0SQw4ilf1mgG1K5yzCnxbw1nufYkRTigd+Cp3mBTNoJnV7 NhAE/6jZLbGxJPA0jdk3/L2mry23i1e9LNo0SpR0InGP6FkQe42lXsOosRXOV4x6 aEa5SFYFpYNGvSvLNQWnk/gpsI+vLTfTU1pgK4eiVFVFaLy2F+VBvF1NJHEKziEC 4eYomjy/IkuWpw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:18 2025 by rpki-client