This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft File: pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft (raw, json) Hash identifier: qRSdOtRjLriyKkOVDMIgvsnGBLYEjdzcPZ48u7NfiDo= Subject key identifier: 5B:C6:8B:0D:51:96:BF:8F:9C:32:4F:E2:79:29:59:F4:B2:A6:91:72 Authority key identifier: A5:85:E5:E1:5A:A3:42:87:CA:E4:36:8C:B5:8E:72:27:FD:87:EC:BA Certificate issuer: /CN=a585e5e15aa34287cae4368cb58e7227fd87ecba Certificate serial: 019AF31C75055D7C836F54AC2DFABDA80B14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:01:59 +0000 Manifest this update: Sat 06 Dec 2025 10:01:59 +0000 Manifest next update: Sun 07 Dec 2025 10:01:59 +0000 Files and hashes: 1: BfRloUJHji-lEUaufwMc19LxiqE.roa (hash: 94Vq30eYX4ShhMgHZx9s+4a5DKBY3zN9CTPT6BVaH44=) 2: pYXl4VqjQofK5DaMtY5yJ_2H7Lo.crl (hash: Ia0wJOlqItEz8JNpLj1fUNDLyO0/HmIPZXwumPzcu+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft rsync://rpki.ripe.net/repository/DEFAULT/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:75:05:5d:7c:83:6f:54:ac:2d:fa:bd:a8:0b:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a585e5e15aa34287cae4368cb58e7227fd87ecba Validity Not Before: Dec 6 10:01:59 2025 GMT Not After : Dec 7 10:01:59 2025 GMT Subject: CN=5bc68b0d5196bf8f9c324fe2792959f4b2a69172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:e6:2d:3a:05:81:8d:dd:92:64:5d:bd:c7:1f: 60:b5:cd:54:7c:c2:21:3a:de:a4:2c:f4:69:48:5e: 15:05:27:ce:08:be:00:ec:4d:78:45:d6:23:5c:6b: 5b:a4:e9:17:52:ae:fb:40:e3:78:b1:64:bb:54:bf: b6:d7:13:12:06:a9:03:49:a9:2a:78:f9:44:ad:cc: 91:c5:76:4f:3a:4a:a1:5d:23:d1:78:98:5c:c0:ea: 1e:6b:3f:4e:f8:5d:70:56:7c:0b:5f:1f:f8:d6:42: a6:a6:44:fd:81:ae:b5:6b:bb:a0:52:7e:76:e3:1a: dc:39:c9:25:04:14:63:36:ea:c6:b0:c5:21:64:47: b5:b1:a4:eb:94:98:07:d0:7f:af:5d:30:d5:5f:ca: 40:8d:26:de:e6:81:92:6d:40:62:bf:32:7a:b1:1d: 68:89:70:a7:3a:a2:d0:18:59:ac:92:4d:99:27:2b: e7:4a:25:b7:85:ad:41:65:bc:66:e0:fb:61:7d:e2: c9:6a:e8:ea:75:0b:f6:1b:71:53:90:d8:f2:1f:b9: 2a:fd:7a:a3:76:44:0d:f3:e6:12:94:50:73:b7:39: 15:f9:4a:7d:07:97:b1:51:1d:58:0a:f0:62:3f:6f: c0:b5:60:53:c0:55:12:4e:e4:99:2c:17:a8:c7:ef: 1a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C6:8B:0D:51:96:BF:8F:9C:32:4F:E2:79:29:59:F4:B2:A6:91:72 X509v3 Authority Key Identifier: keyid:A5:85:E5:E1:5A:A3:42:87:CA:E4:36:8C:B5:8E:72:27:FD:87:EC:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:b7:56:ef:73:1f:50:3a:29:f5:5b:73:53:24:67:2e:67:b0: dd:73:98:98:8e:8d:b3:a6:76:4b:72:ff:6f:c3:a7:cd:02:25: 17:4f:67:29:83:70:79:4a:72:f5:ea:9b:6f:1b:21:0d:8c:e6: 54:f1:ce:68:1c:48:43:61:7c:6c:bb:3b:57:2f:0d:e7:d0:6d: 8e:2c:d0:c6:ae:54:54:e6:f9:01:38:45:01:da:70:bc:46:66: c9:14:fe:6b:44:63:59:c1:21:72:09:94:ea:fd:24:81:ca:af: 6c:0a:9f:c6:b4:cf:e0:bd:38:16:c2:bb:02:9e:9f:ff:b5:9b: 4a:32:d0:7b:34:a2:c5:f8:be:76:95:df:b4:3d:dd:81:f0:20: d4:cb:01:da:71:bf:90:9a:a6:aa:fa:b8:a4:90:7a:22:05:e2: 7b:1c:ae:60:0f:a2:d5:9f:a4:0e:bb:c5:f8:bb:bb:34:b2:9b: 28:d0:15:b5:d4:04:7b:82:33:06:3c:da:ba:03:24:49:88:6c: 1e:93:34:73:b6:c1:7d:d0:f5:40:a2:6f:29:eb:30:76:a9:e8: 9b:77:8e:5c:39:d4:bd:4f:ab:15:3a:56:50:4c:37:68:94:d5: af:cd:4b:d0:c9:e4:ac:17:32:27:51:13:e5:ee:9a:99:21:c6: b8:07:5e:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHHUFXXyDb1SsLfq9qAsUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ODVlNWUxNWFhMzQyODdjYWU0MzY4Y2I1OGU3MjI3ZmQ4 N2VjYmEwHhcNMjUxMjA2MTAwMTU5WhcNMjUxMjA3MTAwMTU5WjAzMTEwLwYDVQQD Eyg1YmM2OGIwZDUxOTZiZjhmOWMzMjRmZTI3OTI5NTlmNGIyYTY5MTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8uYtOgWBjd2SZF29xx9gtc1UfMIh Ot6kLPRpSF4VBSfOCL4A7E14RdYjXGtbpOkXUq77QON4sWS7VL+21xMSBqkDSakq ePlErcyRxXZPOkqhXSPReJhcwOoeaz9O+F1wVnwLXx/41kKmpkT9ga61a7ugUn52 4xrcOcklBBRjNurGsMUhZEe1saTrlJgH0H+vXTDVX8pAjSbe5oGSbUBivzJ6sR1o iXCnOqLQGFmskk2ZJyvnSiW3ha1BZbxm4PthfeLJaujqdQv2G3FTkNjyH7kq/Xqj dkQN8+YSlFBztzkV+Up9B5exUR1YCvBiP2/AtWBTwFUSTuSZLBeox+8aUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvGiw1Rlr+PnDJP4nkpWfSyppFyMB8GA1UdIwQY MBaAFKWF5eFao0KHyuQ2jLWOcif9h+y6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFlYbDRWcWpRb2ZLNURhTXRZNXlKXzJIN0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wNjY1MDktN2E5MS00NWY5LTllMTgt YTllN2IzNDNiYzY2LzEvcFlYbDRWcWpRb2ZLNURhTXRZNXlKXzJIN0xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8wNjY1MDktN2E5MS00NWY5LTllMTgtYTllN2IzNDNiYzY2 LzEvcFlYbDRWcWpRb2ZLNURhTXRZNXlKXzJIN0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEbdW73Mf UDop9VtzUyRnLmew3XOYmI6Ns6Z2S3L/b8OnzQIlF09nKYNweUpy9eqbbxshDYzm VPHOaBxIQ2F8bLs7Vy8N59BtjizQxq5UVOb5AThFAdpwvEZmyRT+a0RjWcEhcgmU 6v0kgcqvbAqfxrTP4L04FsK7Ap6f/7WbSjLQezSixfi+dpXftD3dgfAg1MsB2nG/ kJqmqvq4pJB6IgXiexyuYA+i1Z+kDrvF+Lu7NLKbKNAVtdQEe4IzBjzaugMkSYhs HpM0c7bBfdD1QKJvKeswdqnom3eOXDnUvU+rFTpWUEw3aJTVr81L0MnkrBcyJ1ET 5e6amSHGuAdegA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:51:28 2025 by rpki-client