This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft File: yQ7dEObZBiIVv9ZORbO_imuZY3k.mft (raw, json) Hash identifier: o5+y01WpZY0zLb8qCcW1DeRRTzk7QNj4n3k/rVvU5/E= Subject key identifier: 06:7F:57:0B:91:FA:9A:53:14:9E:48:E7:0D:5A:E0:F6:BA:FE:FF:EC Authority key identifier: C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79 Certificate issuer: /CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379 Certificate serial: 019B454A19D4B64B7F60BBA13190C8BC3DBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft Manifest number: 05E0 Signing time: Mon 22 Dec 2025 09:00:42 +0000 Manifest this update: Mon 22 Dec 2025 09:00:42 +0000 Manifest next update: Tue 23 Dec 2025 09:00:42 +0000 Files and hashes: 1: wJZWkACD4z74xYl3Eh73b1e6c9o.roa (hash: EI0fca0IMjIZuHA6NlKScJkQo5wgsNdZcRbsaJt4IfY=) 2: yQ7dEObZBiIVv9ZORbO_imuZY3k.crl (hash: I0f3ifQ6WeTePTLBK+vJOywOXh8kdp2vrBI7QRI0SLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:19:d4:b6:4b:7f:60:bb:a1:31:90:c8:bc:3d:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379 Validity Not Before: Dec 22 09:00:42 2025 GMT Not After : Dec 23 09:00:42 2025 GMT Subject: CN=067f570b91fa9a53149e48e70d5ae0f6bafeffec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ca:dd:0e:04:77:5b:34:c3:5c:1b:cf:db:f7: 7c:b4:4c:03:51:94:37:0c:de:67:a9:9b:40:99:a5: 89:73:11:da:9f:55:ad:74:ab:e4:e0:b2:71:f7:4e: 3f:8c:ce:d2:fa:5c:f5:2c:ca:63:ec:96:e8:0e:28: 14:9d:2a:b3:6d:ec:7d:d1:8f:f3:89:e1:26:26:ed: 5b:1f:79:f1:f5:c7:4c:fc:0d:c7:56:07:db:c0:3e: 03:09:7a:5f:fd:b5:66:e3:e4:a6:db:1f:d0:49:2c: 3e:86:3b:76:e4:12:11:14:02:36:c6:78:e0:7e:42: bd:f4:c1:4d:6e:24:a1:cf:88:48:fa:5a:89:d1:9f: 6d:46:a3:20:92:ba:91:91:e3:89:fb:3d:32:ee:d8: cf:48:d8:0b:0e:9d:26:83:58:0b:1f:f3:1e:0f:f4: 82:0a:3a:d2:64:f5:d5:9f:05:db:25:65:ed:7e:64: bc:91:fa:05:96:2a:a3:04:2a:bf:0b:64:6a:cd:4c: dc:80:fc:82:76:25:6f:be:e0:01:5d:94:cc:df:e4: 73:cb:00:ff:1f:ee:15:96:08:cd:4a:07:f8:46:61: 73:63:5a:36:88:b6:0a:ae:78:67:1e:b9:42:65:5e: df:77:1f:a8:bb:d6:66:58:a3:bc:71:df:34:61:0b: e7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7F:57:0B:91:FA:9A:53:14:9E:48:E7:0D:5A:E0:F6:BA:FE:FF:EC X509v3 Authority Key Identifier: keyid:C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:2d:05:c2:85:fe:d5:c8:59:ed:3d:96:a5:b2:8c:4c:38:78: 03:d5:e4:85:ef:87:3d:6b:fa:95:32:df:32:1f:38:f6:e7:db: 57:c9:fd:8e:06:3b:eb:f7:d9:5f:82:d3:93:f5:4a:de:26:bb: ab:30:86:c0:6e:6c:88:85:c8:f9:20:85:0d:db:84:ee:e4:78: 3e:a7:17:68:c4:92:f7:e7:d1:17:69:24:fb:ff:9b:8d:96:dd: 52:32:49:ce:7e:73:05:ae:23:e8:89:4a:9b:ff:e7:a6:37:5b: e9:ea:ea:86:c1:64:2b:67:b2:05:da:9b:c4:86:31:be:c5:ce: 04:ab:12:82:07:30:6b:fe:aa:c9:7e:a6:78:33:8f:b7:6a:ec: 7d:96:30:69:9a:42:2d:fa:e9:6a:cf:6a:f9:38:0e:cb:21:d9: 04:67:ca:ac:3e:ae:fe:83:fa:b5:46:87:b7:c8:f2:28:ec:64: bc:bf:7a:8e:e9:91:ff:50:fa:64:19:74:bc:b8:3f:ca:54:17: b2:f9:39:08:8d:da:b0:24:96:e3:e2:f4:d2:b9:63:4d:9e:34: 0b:11:70:1d:a5:ec:90:b4:9a:67:68:95:76:da:fb:72:f5:9e: a4:de:6f:b6:23:0d:5d:a3:be:2d:b3:d2:8a:1f:a8:fe:5f:13: 2c:fa:10:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFShnUtkt/YLuhMZDIvD27MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MGVkZDEwZTZkOTA2MjIxNWJmZDY0ZTQ1YjNiZjhhNmI5 OTYzNzkwHhcNMjUxMjIyMDkwMDQyWhcNMjUxMjIzMDkwMDQyWjAzMTEwLwYDVQQD EygwNjdmNTcwYjkxZmE5YTUzMTQ5ZTQ4ZTcwZDVhZTBmNmJhZmVmZmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MrdDgR3WzTDXBvP2/d8tEwDUZQ3 DN5nqZtAmaWJcxHan1WtdKvk4LJx904/jM7S+lz1LMpj7JboDigUnSqzbex90Y/z ieEmJu1bH3nx9cdM/A3HVgfbwD4DCXpf/bVm4+Sm2x/QSSw+hjt25BIRFAI2xnjg fkK99MFNbiShz4hI+lqJ0Z9tRqMgkrqRkeOJ+z0y7tjPSNgLDp0mg1gLH/MeD/SC CjrSZPXVnwXbJWXtfmS8kfoFliqjBCq/C2RqzUzcgPyCdiVvvuABXZTM3+RzywD/ H+4VlgjNSgf4RmFzY1o2iLYKrnhnHrlCZV7fdx+ou9ZmWKO8cd80YQvndQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZ/VwuR+ppTFJ5I5w1a4Pa6/v/sMB8GA1UdIwQY MBaAFMkO3RDm2QYiFb/WTkWzv4prmWN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVE3ZEVPYlpCaUlWdjlaT1JiT19pbXVaWTNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82NDgzYzItMzkyMS00YzZlLTkzNzMt MzFhNGRhNjFkNTc2LzEveVE3ZEVPYlpCaUlWdjlaT1JiT19pbXVaWTNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82NDgzYzItMzkyMS00YzZlLTkzNzMtMzFhNGRhNjFkNTc2 LzEveVE3ZEVPYlpCaUlWdjlaT1JiT19pbXVaWTNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeS0FwoX+ 1chZ7T2WpbKMTDh4A9Xkhe+HPWv6lTLfMh849ufbV8n9jgY76/fZX4LTk/VK3ia7 qzCGwG5siIXI+SCFDduE7uR4PqcXaMSS9+fRF2kk+/+bjZbdUjJJzn5zBa4j6IlK m//npjdb6erqhsFkK2eyBdqbxIYxvsXOBKsSggcwa/6qyX6meDOPt2rsfZYwaZpC Lfrpas9q+TgOyyHZBGfKrD6u/oP6tUaHt8jyKOxkvL96jumR/1D6ZBl0vLg/ylQX svk5CI3asCSW4+L00rljTZ40CxFwHaXskLSaZ2iVdtr7cvWepN5vtiMNXaO+LbPS ih+o/l8TLPoQvA== -----END CERTIFICATE-----Generated at Mon Dec 22 15:59:51 2025 by rpki-client