This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft File: Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft (raw, json) Hash identifier: E4swRuPr7YzjZSqsOfpg17s9sZXBGX8RORjYLB9L4xs= Subject key identifier: EF:87:A5:DB:23:72:4F:D2:07:C5:42:B2:75:11:0D:A0:54:BE:84:7B Authority key identifier: 62:BD:6C:2B:DF:61:E2:3E:AF:E2:3D:DE:01:6D:B8:B3:E1:59:5F:76 Certificate issuer: /CN=62bd6c2bdf61e23eafe23dde016db8b3e1595f76 Certificate serial: 019AF2AD9D30A4E65059E89D1F9086596C65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft Manifest number: 0F2F Signing time: Sat 06 Dec 2025 08:00:55 +0000 Manifest this update: Sat 06 Dec 2025 08:00:55 +0000 Manifest next update: Sun 07 Dec 2025 08:00:55 +0000 Files and hashes: 1: GymugnGNz9hZBNfCgZiljFXWNI4.roa (hash: UzztjdFS5VrTYMjssd7r9V+uU0SvLYHrn/O32cjxd5g=) 2: Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl (hash: vJSa+GBSxLwsosUQ4dSPOuA0uqCmES/Rd/LYAqO48bc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:9d:30:a4:e6:50:59:e8:9d:1f:90:86:59:6c:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62bd6c2bdf61e23eafe23dde016db8b3e1595f76 Validity Not Before: Dec 6 08:00:55 2025 GMT Not After : Dec 7 08:00:55 2025 GMT Subject: CN=ef87a5db23724fd207c542b275110da054be847b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c0:1d:5f:22:ea:df:52:b5:4f:07:89:bd:b8: b8:1a:61:fc:77:34:28:db:34:ca:ae:7c:89:4c:7b: f0:8e:11:42:25:b9:06:71:cf:47:da:21:eb:ed:58: c7:87:c4:a0:60:7c:3d:bf:84:49:86:69:19:0e:8b: 81:78:db:2b:65:c3:72:76:a6:ca:56:d4:d7:28:ac: cc:f5:30:40:81:ae:21:db:8d:e2:51:98:a8:cf:45: ab:9c:cb:8f:9f:a3:a5:fc:23:bd:8e:8c:84:da:a4: d2:b8:28:19:76:16:fe:2c:a8:da:2e:b3:e3:db:04: 77:9c:2b:bd:4b:b4:af:fc:09:17:18:2c:46:fc:c0: da:cd:02:45:d3:ed:02:b0:94:20:0c:53:e5:b0:50: c0:9b:d2:89:37:e0:82:2d:5b:c7:87:b3:ac:e4:5b: 10:72:9f:dc:71:27:d3:fa:3c:14:66:ba:95:ab:27: 2f:27:0d:cb:d4:b3:19:38:fd:c4:71:64:87:de:4e: 45:cc:28:c9:2d:3f:33:4f:eb:2c:c9:4b:9b:22:93: a4:88:1b:d9:dd:7d:95:bf:ce:cb:07:77:9f:85:90: 5d:8f:60:f6:18:07:51:8b:22:06:7b:92:67:36:c2: 39:30:e8:47:c9:a1:b9:ef:15:d5:82:c6:61:61:32: 1b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:87:A5:DB:23:72:4F:D2:07:C5:42:B2:75:11:0D:A0:54:BE:84:7B X509v3 Authority Key Identifier: keyid:62:BD:6C:2B:DF:61:E2:3E:AF:E2:3D:DE:01:6D:B8:B3:E1:59:5F:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:17:a6:45:45:15:eb:4e:db:a4:de:5a:07:e6:8d:3d:73:f1: 80:42:b8:0c:63:d8:46:74:b1:7c:6d:51:a0:59:ab:9f:3f:59: 07:97:4f:fb:9f:61:7a:91:58:09:05:e1:21:67:79:b9:61:59: 99:75:2f:18:73:69:c7:34:ea:b7:31:a4:2f:79:51:4f:57:0c: cd:54:9e:33:bf:0e:60:b0:04:10:97:e2:76:79:b5:db:c2:e7: 99:9e:5e:e3:71:19:ae:b5:0d:a0:62:43:ed:21:b8:7c:ce:df: 0d:21:7d:f5:98:a1:10:bb:91:76:9e:76:74:e4:1d:a1:15:3a: b2:a2:11:7d:f4:28:ba:36:a3:14:02:9a:a0:02:47:f9:e0:85: 6f:0e:dd:ef:0e:72:5f:d0:bb:d3:f8:a6:e9:3d:61:e8:dd:da: 9b:76:07:f8:97:fb:c1:b8:0a:06:b8:aa:28:e7:86:01:e2:f0: 17:e0:13:18:0a:5f:3d:37:42:fc:91:3e:45:41:69:dd:bf:c3: f6:8b:90:ee:0a:4d:65:58:54:73:ef:13:2c:2a:be:2c:23:e2: ec:d9:a9:cd:65:b6:5a:e2:5e:67:c2:36:6d:bd:c8:9a:39:81: 5f:6c:4b:21:b6:5e:92:a4:34:9c:fd:03:7d:a3:58:6b:7c:94: 42:4e:a7:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZ0wpOZQWeidH5CGWWxlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYmQ2YzJiZGY2MWUyM2VhZmUyM2RkZTAxNmRiOGIzZTE1 OTVmNzYwHhcNMjUxMjA2MDgwMDU1WhcNMjUxMjA3MDgwMDU1WjAzMTEwLwYDVQQD EyhlZjg3YTVkYjIzNzI0ZmQyMDdjNTQyYjI3NTExMGRhMDU0YmU4NDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMAdXyLq31K1TweJvbi4GmH8dzQo 2zTKrnyJTHvwjhFCJbkGcc9H2iHr7VjHh8SgYHw9v4RJhmkZDouBeNsrZcNydqbK VtTXKKzM9TBAga4h243iUZioz0WrnMuPn6Ol/CO9joyE2qTSuCgZdhb+LKjaLrPj 2wR3nCu9S7Sv/AkXGCxG/MDazQJF0+0CsJQgDFPlsFDAm9KJN+CCLVvHh7Os5FsQ cp/ccSfT+jwUZrqVqycvJw3L1LMZOP3EcWSH3k5FzCjJLT8zT+ssyUubIpOkiBvZ 3X2Vv87LB3efhZBdj2D2GAdRiyIGe5JnNsI5MOhHyaG57xXVgsZhYTIbswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+Hpdsjck/SB8VCsnURDaBUvoR7MB8GA1UdIwQY MBaAFGK9bCvfYeI+r+I93gFtuLPhWV92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXIxc0s5OWg0ajZ2NGozZUFXMjRzLUZaWDNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80YzlkNzMtZjgwNS00ZDcyLThhMzct YjgyYjBlZDJkMzIzLzEvWXIxc0s5OWg0ajZ2NGozZUFXMjRzLUZaWDNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi80YzlkNzMtZjgwNS00ZDcyLThhMzctYjgyYjBlZDJkMzIz LzEvWXIxc0s5OWg0ajZ2NGozZUFXMjRzLUZaWDNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBemRUUV 607bpN5aB+aNPXPxgEK4DGPYRnSxfG1RoFmrnz9ZB5dP+59hepFYCQXhIWd5uWFZ mXUvGHNpxzTqtzGkL3lRT1cMzVSeM78OYLAEEJfidnm128LnmZ5e43EZrrUNoGJD 7SG4fM7fDSF99ZihELuRdp52dOQdoRU6sqIRffQoujajFAKaoAJH+eCFbw7d7w5y X9C70/im6T1h6N3am3YH+Jf7wbgKBriqKOeGAeLwF+ATGApfPTdC/JE+RUFp3b/D 9ouQ7gpNZVhUc+8TLCq+LCPi7NmpzWW2WuJeZ8I2bb3ImjmBX2xLIbZekqQ0nP0D faNYa3yUQk6n9w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:28 2025 by rpki-client