This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft File: yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft (raw, json) Hash identifier: 32mYIj0tobrIzc6gqq83lUf6vHGVkLNlIaErhzF9KH4= Subject key identifier: 71:24:53:9F:6F:2A:E1:24:C0:4B:0C:1B:82:67:0B:64:C0:6D:45:62 Authority key identifier: CA:AC:C4:FE:BB:48:79:96:D4:EE:01:D5:3B:11:F8:42:03:CA:83:67 Certificate issuer: /CN=caacc4febb487996d4ee01d53b11f84203ca8367 Certificate serial: 019B6166297EEE694D2BB21169B13CC06F88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft Manifest number: 02F8 Signing time: Sat 27 Dec 2025 20:00:43 +0000 Manifest this update: Sat 27 Dec 2025 20:00:43 +0000 Manifest next update: Sun 28 Dec 2025 20:00:43 +0000 Files and hashes: 1: Dribm7v4eJGFRaCGtu-42niad5g.roa (hash: COADFM31Atbne40gqBHSktN8SaWdLigZF/t1VPBNlag=) 2: yqzE_rtIeZbU7gHVOxH4QgPKg2c.crl (hash: XuwYLYLDhoNEe6bmzqDXwk+pWD27Hdp3xNIYXR8gtiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:66:29:7e:ee:69:4d:2b:b2:11:69:b1:3c:c0:6f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caacc4febb487996d4ee01d53b11f84203ca8367 Validity Not Before: Dec 27 20:00:43 2025 GMT Not After : Dec 28 20:00:43 2025 GMT Subject: CN=7124539f6f2ae124c04b0c1b82670b64c06d4562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d9:1c:d7:45:7d:e9:a0:c3:56:f4:c4:8e:4e: 82:7f:d9:8e:a2:bf:e6:f6:15:dd:a6:8d:b1:47:d8: 95:9e:d8:49:2c:e4:92:87:cf:c6:05:ce:b8:d2:1b: 26:22:ea:db:9e:1a:6e:b8:97:4c:6c:74:72:b4:27: 39:81:06:1b:9b:1d:d9:db:dd:27:fb:7b:ff:88:86: e1:b8:c7:9a:50:14:a7:e1:74:d6:63:28:1c:dd:ed: f9:47:73:ae:7d:1e:51:4e:c8:2a:fd:ec:49:e5:28: 14:db:57:a2:b8:97:f0:c0:05:47:2a:3f:21:70:80: a3:d6:a7:cf:b3:f8:08:1b:e2:de:a8:1c:7b:e5:f8: 29:1e:a7:73:c5:55:72:10:72:de:a2:07:e0:2a:c1: 79:7e:a7:f9:ca:f5:6b:ce:35:37:ec:aa:be:be:5f: d2:ae:d7:52:6a:88:a6:1d:6e:1f:b4:d7:bb:39:ef: 05:86:0a:eb:83:34:f9:a0:48:cc:4c:e3:a9:87:a4: c6:a8:18:25:ec:95:82:4e:35:b2:a6:2d:f4:ed:2f: 4d:ff:8a:09:2f:54:f3:da:f8:99:20:08:43:db:a0: 35:10:2e:f9:96:b7:66:db:6e:e4:7f:2e:45:3f:47: e3:a9:fb:0d:c3:23:8f:25:a9:b8:1e:6e:3a:ff:b3: 28:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:24:53:9F:6F:2A:E1:24:C0:4B:0C:1B:82:67:0B:64:C0:6D:45:62 X509v3 Authority Key Identifier: keyid:CA:AC:C4:FE:BB:48:79:96:D4:EE:01:D5:3B:11:F8:42:03:CA:83:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:40:be:c0:4a:a3:b6:d2:14:2a:ff:23:2a:d7:59:2a:e4:6a: 4e:0b:db:70:32:ee:d0:81:2a:18:b2:9c:67:06:41:b2:83:b4: 2c:22:9e:42:39:39:42:15:54:e3:7d:88:9e:e9:d5:22:4c:ef: f5:ce:3d:61:3f:8d:2f:0e:9c:e8:01:79:a9:a4:3c:3b:cc:be: bd:b8:51:1f:d3:41:38:d0:33:09:d5:43:7f:01:74:c4:4b:4b: 83:27:bb:f2:d8:e1:ff:4f:2e:7a:40:3f:5f:96:d2:7f:1a:de: 77:b8:7e:f8:58:86:d0:b3:63:99:db:3a:63:eb:cf:ea:48:52: a6:3f:06:1e:87:e2:97:a2:c9:2c:b7:08:f0:f4:37:75:fa:0a: cb:c2:4b:ce:11:dc:d6:04:b2:37:2c:cd:ef:48:9f:06:c5:cf: 66:74:b5:07:bd:0a:99:03:c3:8a:dc:49:5c:5a:c4:04:eb:d3: 36:57:dc:10:4c:db:1e:48:65:59:62:c9:ec:29:a5:3e:da:e0: 11:fe:e9:1e:15:bb:e2:37:db:25:21:70:70:a3:e9:76:02:75: f1:09:23:c5:b1:80:79:eb:aa:21:24:6d:9b:04:31:4c:89:f0: e5:4f:2b:7f:bf:ef:b0:a5:02:99:57:1e:63:2e:96:61:21:8c: ab:8f:f6:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthZil+7mlNK7IRabE8wG+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYWNjNGZlYmI0ODc5OTZkNGVlMDFkNTNiMTFmODQyMDNj YTgzNjcwHhcNMjUxMjI3MjAwMDQzWhcNMjUxMjI4MjAwMDQzWjAzMTEwLwYDVQQD Eyg3MTI0NTM5ZjZmMmFlMTI0YzA0YjBjMWI4MjY3MGI2NGMwNmQ0NTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tkc10V96aDDVvTEjk6Cf9mOor/m 9hXdpo2xR9iVnthJLOSSh8/GBc640hsmIurbnhpuuJdMbHRytCc5gQYbmx3Z290n +3v/iIbhuMeaUBSn4XTWYygc3e35R3OufR5RTsgq/exJ5SgU21eiuJfwwAVHKj8h cICj1qfPs/gIG+LeqBx75fgpHqdzxVVyEHLeogfgKsF5fqf5yvVrzjU37Kq+vl/S rtdSaoimHW4ftNe7Oe8FhgrrgzT5oEjMTOOph6TGqBgl7JWCTjWypi307S9N/4oJ L1Tz2viZIAhD26A1EC75lrdm227kfy5FP0fjqfsNwyOPJam4Hm46/7MovQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEkU59vKuEkwEsMG4JnC2TAbUViMB8GA1UdIwQY MBaAFMqsxP67SHmW1O4B1TsR+EIDyoNnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXF6RV9ydEllWmJVN2dIVk94SDRRZ1BLZzJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi83MWIyYWItMTU3ZS00ODIwLWE1OGIt YTdlZGM0Yzk5OTQ3LzEveXF6RV9ydEllWmJVN2dIVk94SDRRZ1BLZzJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi83MWIyYWItMTU3ZS00ODIwLWE1OGItYTdlZGM0Yzk5OTQ3 LzEveXF6RV9ydEllWmJVN2dIVk94SDRRZ1BLZzJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALEC+wEqj ttIUKv8jKtdZKuRqTgvbcDLu0IEqGLKcZwZBsoO0LCKeQjk5QhVU432InunVIkzv 9c49YT+NLw6c6AF5qaQ8O8y+vbhRH9NBONAzCdVDfwF0xEtLgye78tjh/08uekA/ X5bSfxred7h++FiG0LNjmds6Y+vP6khSpj8GHofil6LJLLcI8PQ3dfoKy8JLzhHc 1gSyNyzN70ifBsXPZnS1B70KmQPDitxJXFrEBOvTNlfcEEzbHkhlWWLJ7CmlPtrg Ef7pHhW74jfbJSFwcKPpdgJ18QkjxbGAeeuqISRtmwQxTInw5U8rf7/vsKUCmVce Yy6WYSGMq4/2sg== -----END CERTIFICATE-----Generated at Sun Dec 28 03:18:43 2025 by rpki-client