This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft File: Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft (raw, json) Hash identifier: yqcqvkCb11kk0gKM/7cTvBh/ouxFr51IcFL9KFEs6B8= Subject key identifier: 6B:2C:11:A9:79:31:AB:80:C3:C4:51:DC:51:C9:D1:1A:F0:50:CA:7B Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED Certificate issuer: /CN=632e3d037bf0507571b2a068cb90308374ce53ed Certificate serial: 019AF2090B225EB0AF61B2473A05F195513E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft Manifest number: 098F Signing time: Sat 06 Dec 2025 05:01:10 +0000 Manifest this update: Sat 06 Dec 2025 05:01:10 +0000 Manifest next update: Sun 07 Dec 2025 05:01:10 +0000 Files and hashes: 1: L3qEBBzeJh8D6UqzEEk-9tnLcMA.roa (hash: shN2h6IdPkthKGJ1t7rh4Tc86Qf0XZxCIaY0/EgLJfA=) 2: U47KHWtk8fl1zeBfptx2dxwuW-0.roa (hash: MCpZ0AwLfoDIQ9+ASI13wQUEawZmPsd+gtRUPbEtBbI=) 3: Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl (hash: 6Dl97AuH3eF5x+lUOM5oKjzQtedni5spxFA47vPDbdo=) 4: yMbSdUOBKCqn_NswdvutijlK684.roa (hash: K0IjYQFHztO8K2x6H3KgphHn4JSijnZlB4Ox3bR44Pk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:0b:22:5e:b0:af:61:b2:47:3a:05:f1:95:51:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed Validity Not Before: Dec 6 05:01:10 2025 GMT Not After : Dec 7 05:01:10 2025 GMT Subject: CN=6b2c11a97931ab80c3c451dc51c9d11af050ca7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bd:b8:69:db:a6:9f:f3:6b:1c:3b:87:8b:e3: b9:36:1e:5c:b0:fa:27:8e:68:ab:62:81:9b:29:f3: 42:32:10:03:2e:1a:11:9a:24:1d:cb:82:9f:43:db: 74:ac:50:94:fa:01:f3:1f:98:46:57:61:0b:01:72: 7d:2e:3e:a8:57:f1:65:a5:fe:88:5d:fa:9a:1e:63: 91:df:8c:e9:39:46:63:a3:07:1e:fa:7b:39:ec:3c: 9e:6e:f9:9a:8e:9c:3b:0a:45:27:7f:f2:77:51:c6: 40:b9:2f:59:90:95:77:1a:06:65:06:ac:e1:ad:99: ae:1d:7c:be:ee:97:09:6c:d8:c9:f4:29:8b:95:97: 91:81:5b:4a:59:8c:9c:89:e0:89:fd:8e:3c:e8:4f: c4:61:72:dc:9b:c6:07:0c:bb:dc:3a:71:a0:01:9b: 07:a9:72:f4:e9:43:a8:1f:08:08:18:7c:1e:21:07: 25:e6:b7:17:f1:46:47:79:56:30:ec:41:16:54:dc: a9:6b:ee:c5:67:30:eb:21:f3:51:79:44:cf:4d:3e: 3c:4b:1a:d8:9f:ce:05:ac:2a:f9:37:7b:42:6f:64: b9:84:17:03:94:c2:38:e1:c2:93:0e:23:ff:66:ef: 40:98:33:ce:61:99:c8:e8:b2:23:1f:da:73:07:8f: 73:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2C:11:A9:79:31:AB:80:C3:C4:51:DC:51:C9:D1:1A:F0:50:CA:7B X509v3 Authority Key Identifier: keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:15:3e:97:64:21:5d:53:dc:50:8d:d9:66:ce:ea:f0:87:03: d4:d0:36:e7:63:1d:26:41:f5:9a:45:11:08:ee:83:07:a1:0b: 81:54:46:19:12:38:6c:52:20:ad:bf:87:59:95:dd:73:eb:44: 02:ef:4d:7c:4d:67:f4:8d:01:9e:f2:20:af:bd:88:80:aa:96: 41:74:14:78:3f:49:e8:da:35:52:2e:8e:7f:bf:d7:e5:f9:b2: 3c:a5:82:fe:7a:8b:f0:77:92:30:73:cd:10:68:0b:e8:bf:00: 97:37:b0:c4:a2:a1:ba:e2:65:6c:4a:b9:3b:9d:8f:03:43:58: cc:a9:42:28:65:35:10:00:22:4a:d6:18:94:56:27:cb:7a:2b: 74:fb:66:d0:80:b5:73:cb:06:75:0a:68:52:95:c8:df:fc:46: 34:5f:eb:88:50:a0:fc:fb:ae:db:d4:1d:bd:a1:66:fd:7a:2d: b1:44:8c:69:9a:30:35:dd:50:8d:4e:59:4d:70:05:fb:48:86: eb:21:cc:68:ec:f0:83:54:58:ed:59:dd:f6:56:32:3f:ef:cb: 5b:3b:92:68:03:be:0d:5b:22:c4:50:eb:1b:24:31:3d:57:1f: 52:c1:ee:1e:94:96:af:70:8d:de:4d:82:07:af:f0:3e:74:b8: 20:9f:38:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQsiXrCvYbJHOgXxlVE+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMmUzZDAzN2JmMDUwNzU3MWIyYTA2OGNiOTAzMDgzNzRj ZTUzZWQwHhcNMjUxMjA2MDUwMTEwWhcNMjUxMjA3MDUwMTEwWjAzMTEwLwYDVQQD Eyg2YjJjMTFhOTc5MzFhYjgwYzNjNDUxZGM1MWM5ZDExYWYwNTBjYTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzr24adumn/NrHDuHi+O5Nh5csPon jmirYoGbKfNCMhADLhoRmiQdy4KfQ9t0rFCU+gHzH5hGV2ELAXJ9Lj6oV/Flpf6I XfqaHmOR34zpOUZjowce+ns57Dyebvmajpw7CkUnf/J3UcZAuS9ZkJV3GgZlBqzh rZmuHXy+7pcJbNjJ9CmLlZeRgVtKWYycieCJ/Y486E/EYXLcm8YHDLvcOnGgAZsH qXL06UOoHwgIGHweIQcl5rcX8UZHeVYw7EEWVNypa+7FZzDrIfNReUTPTT48SxrY n84FrCr5N3tCb2S5hBcDlMI44cKTDiP/Zu9AmDPOYZnI6LIjH9pzB49zxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGssEal5MauAw8RR3FHJ0RrwUMp7MB8GA1UdIwQY MBaAFGMuPQN78FB1cbKgaMuQMIN0zlPtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXk0OUEzdndVSFZ4c3FCb3k1QXdnM1RPVS0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9mOWY0YTktYTBjZC00MTA3LWFhNDEt ZDUyYTE4OTg1OTk5LzEvWXk0OUEzdndVSFZ4c3FCb3k1QXdnM1RPVS0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9mOWY0YTktYTBjZC00MTA3LWFhNDEtZDUyYTE4OTg1OTk5 LzEvWXk0OUEzdndVSFZ4c3FCb3k1QXdnM1RPVS0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiRU+l2Qh XVPcUI3ZZs7q8IcD1NA252MdJkH1mkURCO6DB6ELgVRGGRI4bFIgrb+HWZXdc+tE Au9NfE1n9I0BnvIgr72IgKqWQXQUeD9J6No1Ui6Of7/X5fmyPKWC/nqL8HeSMHPN EGgL6L8AlzewxKKhuuJlbEq5O52PA0NYzKlCKGU1EAAiStYYlFYny3ordPtm0IC1 c8sGdQpoUpXI3/xGNF/riFCg/Puu29QdvaFm/XotsUSMaZowNd1QjU5ZTXAF+0iG 6yHMaOzwg1RY7Vnd9lYyP+/LWzuSaAO+DVsixFDrGyQxPVcfUsHuHpSWr3CN3k2C B6/wPnS4IJ84Eg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:25 2025 by rpki-client