This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft File: YZz5qeC2RhrYM4dawRaPiSP9VQs.mft (raw, json) Hash identifier: Q/Kidd1PAcyIByv/LcO3gjPRYw2fZsM7hreiJZaDoJE= Subject key identifier: 78:0E:B6:A2:88:4E:DB:A1:18:0D:15:FF:B1:D9:28:F2:67:AD:74:C2 Authority key identifier: 61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B Certificate issuer: /CN=619cf9a9e0b6461ad833875ac1168f8923fd550b Certificate serial: 019AF208D4B5776DCF67B1E6E4305C913923 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft Manifest number: 03E2 Signing time: Sat 06 Dec 2025 05:00:56 +0000 Manifest this update: Sat 06 Dec 2025 05:00:56 +0000 Manifest next update: Sun 07 Dec 2025 05:00:56 +0000 Files and hashes: 1: YZz5qeC2RhrYM4dawRaPiSP9VQs.crl (hash: AfUfNqRYizUJruDw4/pgiEEO5EI6f6ISazus/9UucDs=) 2: huRseKKMZ6MrEbEtnTidADNp1Qk.roa (hash: 2Cpw72DhJ+0Co4QK9K/ptsbGLArKbkMx0RKaT4rzilY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d4:b5:77:6d:cf:67:b1:e6:e4:30:5c:91:39:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=619cf9a9e0b6461ad833875ac1168f8923fd550b Validity Not Before: Dec 6 05:00:56 2025 GMT Not After : Dec 7 05:00:56 2025 GMT Subject: CN=780eb6a2884edba1180d15ffb1d928f267ad74c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6e:dc:a5:be:32:c6:ba:b7:1e:8e:f6:34:c8: 4f:c0:61:40:15:47:43:32:55:f3:cb:d1:4b:af:8e: 64:bd:12:9a:cd:41:8a:ba:73:df:b7:60:0b:f8:6d: ca:71:39:28:d4:ec:75:21:8e:8d:6e:c7:d3:a0:53: ad:e6:18:86:01:62:89:b6:e6:5f:31:b7:76:0d:dc: 81:47:8e:07:70:74:34:01:c1:c8:0a:ce:6a:43:c9: e4:69:4a:93:fb:da:52:3d:36:b9:78:bc:3d:71:c9: cf:78:8c:3b:85:7a:4b:71:97:09:dd:a4:f4:b3:3e: b7:e0:52:ec:af:d9:88:a0:c5:52:be:59:6e:d4:0c: 14:53:63:f3:7e:92:e5:eb:65:ba:36:b4:c0:01:e1: b0:a9:37:ee:88:84:40:a0:03:d4:d6:f1:1c:19:00: 40:4a:71:98:ce:69:85:4b:6f:e4:22:d4:c2:88:b3: f8:2e:c2:81:68:19:2e:d2:f0:d2:ab:e8:b2:31:f6: d3:a1:5f:6d:c6:3a:5c:7c:41:a3:7a:a7:a4:f4:c7: b9:14:7f:3d:e0:5e:87:b8:62:47:67:57:f2:8f:69: 68:ec:3c:51:0c:b4:53:3a:6c:42:d7:b3:65:1d:b2: 69:aa:e4:03:e0:ee:04:51:ce:65:52:8e:8a:a1:35: bc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0E:B6:A2:88:4E:DB:A1:18:0D:15:FF:B1:D9:28:F2:67:AD:74:C2 X509v3 Authority Key Identifier: keyid:61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:94:48:d3:a1:17:56:db:25:e6:c6:72:06:be:3e:65:3f:92: 10:82:9c:90:13:13:0c:74:fb:5f:47:43:b6:9c:f5:99:7e:d8: 6f:30:3b:ab:12:bd:b4:c2:db:92:ef:1f:22:af:c3:9a:0a:2d: f1:66:e4:45:18:f2:43:bb:d9:b4:58:73:02:d0:55:8a:69:64: b8:cf:19:77:86:d6:2f:d9:c2:e8:e0:d7:38:5a:fb:bf:4d:52: e8:3b:62:9e:86:06:e7:94:c0:5e:05:70:d1:3d:b6:1d:2c:60: 10:f7:62:45:18:04:cf:b4:11:64:19:4b:c3:a7:44:4d:19:e8: 2f:a3:3d:b4:0a:df:a5:30:ec:54:8a:c9:a1:52:79:9a:d7:5d: 55:67:a1:bc:de:ba:2b:b6:d3:60:ea:1e:6d:23:06:43:f9:fa: 88:29:3a:b4:c0:b9:84:38:dc:75:c6:0b:f3:8b:e9:65:c9:44: 27:f6:a4:9c:1a:42:dc:00:bd:c2:ca:f7:94:87:0d:e8:09:c3: 97:e9:5e:5d:53:23:37:41:61:51:38:78:8b:7f:de:d7:9d:09: 97:2f:9c:a0:db:6d:20:0e:30:4f:d6:2b:c9:15:6f:d1:b5:0b: f1:39:55:b4:e3:36:09:61:90:65:fb:ee:b1:d8:93:8c:2e:70: 59:ab:a4:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNS1d23PZ7Hm5DBckTkjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxOWNmOWE5ZTBiNjQ2MWFkODMzODc1YWMxMTY4Zjg5MjNm ZDU1MGIwHhcNMjUxMjA2MDUwMDU2WhcNMjUxMjA3MDUwMDU2WjAzMTEwLwYDVQQD Eyg3ODBlYjZhMjg4NGVkYmExMTgwZDE1ZmZiMWQ5MjhmMjY3YWQ3NGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW7cpb4yxrq3Ho72NMhPwGFAFUdD MlXzy9FLr45kvRKazUGKunPft2AL+G3KcTko1Ox1IY6NbsfToFOt5hiGAWKJtuZf Mbd2DdyBR44HcHQ0AcHICs5qQ8nkaUqT+9pSPTa5eLw9ccnPeIw7hXpLcZcJ3aT0 sz634FLsr9mIoMVSvllu1AwUU2PzfpLl62W6NrTAAeGwqTfuiIRAoAPU1vEcGQBA SnGYzmmFS2/kItTCiLP4LsKBaBku0vDSq+iyMfbToV9txjpcfEGjeqek9Me5FH89 4F6HuGJHZ1fyj2lo7DxRDLRTOmxC17NlHbJpquQD4O4EUc5lUo6KoTW8+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgOtqKITtuhGA0V/7HZKPJnrXTCMB8GA1UdIwQY MBaAFGGc+angtkYa2DOHWsEWj4kj/VULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVp6NXFlQzJSaHJZTTRkYXdSYVBpU1A5VlFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kNmJmYWItZWFjNi00YTQyLTg4NzIt MTRhZmFlOTEzMzZkLzEvWVp6NXFlQzJSaHJZTTRkYXdSYVBpU1A5VlFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9kNmJmYWItZWFjNi00YTQyLTg4NzItMTRhZmFlOTEzMzZk LzEvWVp6NXFlQzJSaHJZTTRkYXdSYVBpU1A5VlFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJRI06EX Vtsl5sZyBr4+ZT+SEIKckBMTDHT7X0dDtpz1mX7YbzA7qxK9tMLbku8fIq/Dmgot 8WbkRRjyQ7vZtFhzAtBVimlkuM8Zd4bWL9nC6ODXOFr7v01S6DtinoYG55TAXgVw 0T22HSxgEPdiRRgEz7QRZBlLw6dETRnoL6M9tArfpTDsVIrJoVJ5mtddVWehvN66 K7bTYOoebSMGQ/n6iCk6tMC5hDjcdcYL84vpZclEJ/aknBpC3AC9wsr3lIcN6AnD l+leXVMjN0FhUTh4i3/e150Jly+coNttIA4wT9YryRVv0bUL8TlVtOM2CWGQZfvu sdiTjC5wWaukKg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:33:16 2025 by rpki-client