This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft File: Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft (raw, json) Hash identifier: ERMKOeKPoP4C/f7J3HjxSeMeLB6b7n1yPMjDYTQXsy8= Subject key identifier: 32:6C:22:94:46:BE:BF:18:9F:96:00:43:B3:BC:A3:4C:12:B7:16:E6 Authority key identifier: 62:AF:1D:7F:36:B1:86:58:02:53:5E:49:A7:33:1E:03:5A:D0:10:08 Certificate issuer: /CN=62af1d7f36b1865802535e49a7331e035ad01008 Certificate serial: 019B5D544AAF430C4AA0575001E502BB5956 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft Manifest number: 0BFC Signing time: Sat 27 Dec 2025 01:02:43 +0000 Manifest this update: Sat 27 Dec 2025 01:02:43 +0000 Manifest next update: Sun 28 Dec 2025 01:02:43 +0000 Files and hashes: 1: Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl (hash: N6lnHv2iPgJYePHr6973dgYYFhThhoLaM9psFzLzZv8=) 2: y9JMR_ZxLXrYLvgRShORqLwJidY.roa (hash: Uw28deLkoDLLwc6/RTXYzT+/L0LSFoqfWT5M5xI68aM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:54:4a:af:43:0c:4a:a0:57:50:01:e5:02:bb:59:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62af1d7f36b1865802535e49a7331e035ad01008 Validity Not Before: Dec 27 01:02:43 2025 GMT Not After : Dec 28 01:02:43 2025 GMT Subject: CN=326c229446bebf189f960043b3bca34c12b716e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:06:61:38:be:a6:aa:41:34:27:60:6c:71:93: 80:b8:20:e4:a2:a5:a3:56:df:b3:98:d8:54:f2:12: 8e:57:c8:c7:23:af:f0:70:80:e6:96:3c:15:51:35: c2:36:e7:20:44:8a:c9:b3:7c:d8:28:37:74:e1:c3: 12:b5:84:44:12:2f:01:4e:57:5b:c1:dd:8a:20:10: 44:01:18:32:d3:26:c2:f0:e6:db:0c:56:cf:88:de: 0a:0b:fc:ac:3c:ca:de:71:84:5c:2e:42:97:28:24: 73:38:ce:28:3d:88:86:3d:e5:a4:fd:56:fb:c7:d5: 5a:5e:e3:21:57:f3:a1:49:4c:bd:cb:f8:c5:13:c7: 9f:1a:50:c6:ca:3c:28:65:38:37:cc:ee:57:a0:8b: 72:87:6c:d1:bb:21:a7:45:47:81:cc:3c:ec:09:88: 46:06:7c:19:19:91:b9:17:d9:b4:3f:5c:b0:a6:0a: 05:dc:93:50:93:86:4a:b0:5c:2c:e8:e8:a2:50:97: 56:f6:6e:82:f0:f7:57:5c:cc:b9:d1:5f:8b:eb:d9: ba:f5:f5:5d:9c:11:f9:b5:46:24:63:e4:db:1f:a2: 2c:a9:4e:cb:5d:39:1d:43:14:05:8b:8f:be:ab:c4: fe:7c:4f:75:92:68:0a:dd:7d:24:61:f6:8d:cd:53: 8b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6C:22:94:46:BE:BF:18:9F:96:00:43:B3:BC:A3:4C:12:B7:16:E6 X509v3 Authority Key Identifier: keyid:62:AF:1D:7F:36:B1:86:58:02:53:5E:49:A7:33:1E:03:5A:D0:10:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:19:4b:34:9e:05:13:d2:47:8a:52:65:b5:22:96:58:8e:b1: a7:27:65:7d:16:ae:24:de:1a:84:60:30:11:86:61:57:20:8b: 42:08:82:9b:5d:c0:ce:2c:d1:9a:ff:5a:48:5d:87:f6:5d:73: 8d:df:a0:60:b8:ce:66:67:41:d9:2f:0e:37:e0:a9:40:a6:36: 06:b3:cc:c8:05:63:cb:ca:68:67:ab:6b:4d:17:14:94:b8:be: 89:ae:a6:7a:e5:f3:15:5d:b2:c8:45:89:ee:ff:d0:d1:40:19: 7b:ee:73:21:e3:67:57:a6:6c:48:01:4b:27:0c:f0:1c:a0:40: 94:a5:14:93:ce:0c:96:b8:0b:75:5b:84:16:28:9f:7e:8c:c4: ca:61:05:d9:04:a4:a9:12:00:c8:07:6b:b2:a3:43:fe:ca:91: cd:7f:1b:c7:18:0c:c7:83:ae:a2:62:9e:35:3e:fb:14:f4:06: 56:01:01:53:29:b8:bd:4f:36:b5:5a:02:25:db:10:45:00:c2: f5:80:3f:24:6e:7b:1e:c2:a6:f4:32:15:33:a6:e1:55:53:96: ba:48:d2:49:2b:07:eb:05:6d:9a:1d:05:26:30:5b:91:20:02: cd:e4:56:12:ae:ee:87:12:01:aa:38:f3:2b:87:a1:d8:b6:9b: 2a:81:78:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdVEqvQwxKoFdQAeUCu1lWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYWYxZDdmMzZiMTg2NTgwMjUzNWU0OWE3MzMxZTAzNWFk MDEwMDgwHhcNMjUxMjI3MDEwMjQzWhcNMjUxMjI4MDEwMjQzWjAzMTEwLwYDVQQD EygzMjZjMjI5NDQ2YmViZjE4OWY5NjAwNDNiM2JjYTM0YzEyYjcxNmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngZhOL6mqkE0J2BscZOAuCDkoqWj Vt+zmNhU8hKOV8jHI6/wcIDmljwVUTXCNucgRIrJs3zYKDd04cMStYREEi8BTldb wd2KIBBEARgy0ybC8ObbDFbPiN4KC/ysPMrecYRcLkKXKCRzOM4oPYiGPeWk/Vb7 x9VaXuMhV/OhSUy9y/jFE8efGlDGyjwoZTg3zO5XoItyh2zRuyGnRUeBzDzsCYhG BnwZGZG5F9m0P1ywpgoF3JNQk4ZKsFws6OiiUJdW9m6C8PdXXMy50V+L69m69fVd nBH5tUYkY+TbH6IsqU7LXTkdQxQFi4++q8T+fE91kmgK3X0kYfaNzVOLwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJsIpRGvr8Yn5YAQ7O8o0wStxbmMB8GA1UdIwQY MBaAFGKvHX82sYZYAlNeSaczHgNa0BAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXE4ZGZ6YXhobGdDVTE1SnB6TWVBMXJRRUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lZDk2YzUtZDYzMy00MDJmLThlMDAt MmIxZDY3NDU5NWI3LzEvWXE4ZGZ6YXhobGdDVTE1SnB6TWVBMXJRRUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lZDk2YzUtZDYzMy00MDJmLThlMDAtMmIxZDY3NDU5NWI3 LzEvWXE4ZGZ6YXhobGdDVTE1SnB6TWVBMXJRRUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkRlLNJ4F E9JHilJltSKWWI6xpydlfRauJN4ahGAwEYZhVyCLQgiCm13AzizRmv9aSF2H9l1z jd+gYLjOZmdB2S8ON+CpQKY2BrPMyAVjy8poZ6trTRcUlLi+ia6meuXzFV2yyEWJ 7v/Q0UAZe+5zIeNnV6ZsSAFLJwzwHKBAlKUUk84MlrgLdVuEFiiffozEymEF2QSk qRIAyAdrsqND/sqRzX8bxxgMx4OuomKeNT77FPQGVgEBUym4vU82tVoCJdsQRQDC 9YA/JG57HsKm9DIVM6bhVVOWukjSSSsH6wVtmh0FJjBbkSACzeRWEq7uhxIBqjjz K4eh2LabKoF4wA== -----END CERTIFICATE-----Generated at Sat Dec 27 02:18:11 2025 by rpki-client