This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft File: YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft (raw, json) Hash identifier: p8Z5Esyl0U/3p7Bmn/7Sd3nlmofpKwy/S13u6reowZY= Subject key identifier: 68:B6:E3:34:55:14:98:61:66:3A:56:1F:33:96:21:B9:32:6A:BB:99 Authority key identifier: 62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58 Certificate issuer: /CN=626752d870c6696f012b2f465d549f4000fe1858 Certificate serial: 019AF19BADDBEE7E23832EABAFEE7C5B9AB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft Manifest number: 034C Signing time: Sat 06 Dec 2025 03:01:42 +0000 Manifest this update: Sat 06 Dec 2025 03:01:42 +0000 Manifest next update: Sun 07 Dec 2025 03:01:42 +0000 Files and hashes: 1: YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl (hash: BkJATy73CKMQzWtm0FybWylOgVDJpr5tmgRteNsNYwI=) 2: qn60XTUhVIHXIbT-HvehrrpwogU.roa (hash: qJSoQQbXyMZY80sZe+6a8U7g7EqUHMfReU7Wd4AfetU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:ad:db:ee:7e:23:83:2e:ab:af:ee:7c:5b:9a:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=626752d870c6696f012b2f465d549f4000fe1858 Validity Not Before: Dec 6 03:01:42 2025 GMT Not After : Dec 7 03:01:42 2025 GMT Subject: CN=68b6e33455149861663a561f339621b9326abb99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5f:44:1f:71:82:9b:17:0c:0c:10:c0:78:15: ca:18:44:a8:aa:7c:e2:08:55:f3:8a:ac:05:43:30: 5b:72:f3:8f:f9:f4:f3:31:83:9d:a1:93:c6:17:fe: 88:22:cf:1a:76:48:6c:11:6a:4c:3a:2d:14:48:d4: d6:ea:a5:c2:cf:ce:39:5e:17:95:23:bd:6c:7c:60: 5d:5f:ed:6e:50:68:0b:09:bb:c6:33:5d:71:7d:04: d7:f7:e1:ae:1b:87:ef:de:22:2c:4a:8d:43:ec:0e: bb:d8:b1:1c:16:67:c9:70:d4:e0:65:07:3b:84:71: 76:d1:d2:4e:ee:2c:56:56:d6:ce:b0:98:3f:34:9f: 28:61:b6:0d:fb:35:98:3a:10:8d:16:72:b0:26:e2: 80:cd:19:76:a0:7b:05:e6:31:d9:80:ba:3e:98:bd: 25:d6:ef:6c:9f:89:28:ff:1c:ea:8e:67:d8:97:b9: df:e0:36:ff:b4:4b:32:b8:1e:b9:ce:3f:90:5d:db: 3b:82:38:28:59:0d:89:bf:cb:bf:95:3f:c1:c9:4b: a3:ce:4e:a0:a9:7b:e2:97:b8:93:03:08:62:33:1c: 31:9b:7f:da:89:29:ec:87:20:24:b1:78:ac:cf:12: d6:4e:bf:57:06:5e:f5:a2:b6:dc:96:eb:28:c0:cf: cb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B6:E3:34:55:14:98:61:66:3A:56:1F:33:96:21:B9:32:6A:BB:99 X509v3 Authority Key Identifier: keyid:62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:8f:9a:05:b9:1e:fd:a9:8e:dd:24:cd:d4:30:9c:f5:16:08: 4b:0c:c4:b3:bf:41:c4:9b:3e:30:2b:4b:ee:f0:5d:e3:d5:12: c6:c0:7b:1e:e2:cc:4a:51:f0:71:bb:69:b1:f0:b3:b9:66:f3: f3:30:64:9c:a9:c0:ce:6a:f0:7d:f6:f5:97:f4:84:5f:66:a2: 49:04:99:00:7d:be:d1:51:0a:c1:31:f6:91:4d:03:d3:af:f6: 07:71:c8:41:c1:c6:88:56:4f:52:44:1b:2d:1d:71:de:19:8c: 31:78:cc:41:b9:45:16:6d:26:b4:81:5e:c1:e9:77:c3:3e:9b: 45:67:ca:69:ff:eb:cc:2a:3b:79:c1:6a:87:79:3d:bb:66:15: f3:25:eb:bd:f2:32:cd:56:f1:c4:8c:a3:83:a3:da:e8:ae:8a: bb:16:56:c3:2b:7b:c9:d5:48:c2:e7:65:dd:93:fe:35:59:99: 69:a1:14:cd:0a:39:34:f4:ee:e5:7c:7e:27:da:13:9e:a8:2e: 6f:e7:7e:37:d4:3d:c5:51:19:d9:d7:18:ab:5b:a0:6c:3a:c4: 31:c6:79:4a:1a:d5:19:ce:f7:5c:1b:e4:79:56:f5:ce:be:ca: c2:7f:5e:48:c5:d6:cc:a7:69:2d:f6:25:32:e8:75:b5:ec:6f: 3d:3e:33:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm63b7n4jgy6rr+58W5qzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNjc1MmQ4NzBjNjY5NmYwMTJiMmY0NjVkNTQ5ZjQwMDBm ZTE4NTgwHhcNMjUxMjA2MDMwMTQyWhcNMjUxMjA3MDMwMTQyWjAzMTEwLwYDVQQD Eyg2OGI2ZTMzNDU1MTQ5ODYxNjYzYTU2MWYzMzk2MjFiOTMyNmFiYjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF9EH3GCmxcMDBDAeBXKGESoqnzi CFXziqwFQzBbcvOP+fTzMYOdoZPGF/6IIs8adkhsEWpMOi0USNTW6qXCz845XheV I71sfGBdX+1uUGgLCbvGM11xfQTX9+GuG4fv3iIsSo1D7A672LEcFmfJcNTgZQc7 hHF20dJO7ixWVtbOsJg/NJ8oYbYN+zWYOhCNFnKwJuKAzRl2oHsF5jHZgLo+mL0l 1u9sn4ko/xzqjmfYl7nf4Db/tEsyuB65zj+QXds7gjgoWQ2Jv8u/lT/ByUujzk6g qXvil7iTAwhiMxwxm3/aiSnshyAksXiszxLWTr9XBl71orbclusowM/LtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGi24zRVFJhhZjpWHzOWIbkyaruZMB8GA1UdIwQY MBaAFGJnUthwxmlvASsvRl1Un0AA/hhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1kUzJIREdhVzhCS3k5R1hWU2ZRQUQtR0ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9iZmJiMmYtYjY3MS00ODE0LTg2Mjct YmEyNjQ4ZjE1MWQzLzEvWW1kUzJIREdhVzhCS3k5R1hWU2ZRQUQtR0ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9iZmJiMmYtYjY3MS00ODE0LTg2MjctYmEyNjQ4ZjE1MWQz LzEvWW1kUzJIREdhVzhCS3k5R1hWU2ZRQUQtR0ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQI+aBbke /amO3STN1DCc9RYISwzEs79BxJs+MCtL7vBd49USxsB7HuLMSlHwcbtpsfCzuWbz 8zBknKnAzmrwffb1l/SEX2aiSQSZAH2+0VEKwTH2kU0D06/2B3HIQcHGiFZPUkQb LR1x3hmMMXjMQblFFm0mtIFewel3wz6bRWfKaf/rzCo7ecFqh3k9u2YV8yXrvfIy zVbxxIyjg6Pa6K6KuxZWwyt7ydVIwudl3ZP+NVmZaaEUzQo5NPTu5Xx+J9oTnqgu b+d+N9Q9xVEZ2dcYq1ugbDrEMcZ5ShrVGc73XBvkeVb1zr7Kwn9eSMXWzKdpLfYl Muh1texvPT4z5A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:43:08 2025 by rpki-client