This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft File: ycAtQjT0vE6HVV5BwDd51WIKUVU.mft (raw, json) Hash identifier: BrE2a0z6uZYTU74QcRTWrry0qFmWoKfm9z+wevSt4KA= Subject key identifier: 2B:8D:F8:6C:AB:44:30:96:3E:34:C1:C9:48:C3:3B:93:8B:91:6A:2D Authority key identifier: C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55 Certificate issuer: /CN=c9c02d4234f4bc4e87555e41c03779d5620a5155 Certificate serial: 019AF8E864A4C5210893EA061D59C363C6B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft Manifest number: 09EB Signing time: Sun 07 Dec 2025 13:02:50 +0000 Manifest this update: Sun 07 Dec 2025 13:02:50 +0000 Manifest next update: Mon 08 Dec 2025 13:02:50 +0000 Files and hashes: 1: KsdzajN30uY3uVW5kyMxHSnmmxU.roa (hash: zPl4WlZ128vZPWoXYgcZMpH4uHo4BsQGARRVppJ+QiM=) 2: astDnoUMy7KdbJvyyxpisdgmA6U.roa (hash: bNOHZXfFwYEoQ+krisGaY+9Oi+royBJVdqPCFFROjZw=) 3: mr1YbEvgdQuYhoAQxLq13pDG3Xk.roa (hash: w701bJj/u4XbtOJf+uHhePRlT4YH8B1JtsulPqw9bWk=) 4: ycAtQjT0vE6HVV5BwDd51WIKUVU.crl (hash: QF5CTSm7bpfDthISvAT1y6F2bxgKonmT9n1KeETKh2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:e8:64:a4:c5:21:08:93:ea:06:1d:59:c3:63:c6:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9c02d4234f4bc4e87555e41c03779d5620a5155 Validity Not Before: Dec 7 13:02:50 2025 GMT Not After : Dec 8 13:02:50 2025 GMT Subject: CN=2b8df86cab4430963e34c1c948c33b938b916a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:88:6b:14:29:ba:61:3d:ba:08:e7:48:36:5d: c7:b5:e1:4e:5a:87:d7:49:50:fe:8a:8c:32:79:23: 38:39:1b:2d:3f:80:99:cc:cb:d9:e2:97:16:2e:a7: fb:d4:db:d1:6c:2b:72:dd:7c:05:61:4f:4b:c9:3e: b2:aa:89:c3:e8:c3:8f:c8:dc:97:97:e6:9d:8a:45: 81:3a:00:1f:ed:35:f3:6d:45:6e:74:31:29:59:a1: 67:10:58:c4:9c:f6:1f:a8:bf:3c:a7:1f:c1:86:9d: b6:f2:dc:7d:14:b7:10:e6:ec:db:8b:1b:f4:ec:bc: 40:b0:4f:d7:a9:cf:47:09:d9:6f:c3:16:3c:9e:df: 21:c9:32:19:e1:81:3c:6c:a5:f4:30:9c:02:02:53: c0:8d:74:d6:70:af:7c:56:05:d2:0f:80:bf:4d:8e: ca:f4:53:aa:cc:27:9e:c3:34:cd:b7:5e:48:91:e6: ba:cd:67:21:31:5b:8c:72:c6:4e:6f:c2:15:ba:23: 1f:91:ca:a2:9e:f2:f3:82:4d:d1:4b:fd:98:d8:01: 0b:f2:60:71:fd:41:8c:0c:1f:6e:23:93:51:2d:27: 7b:cb:cc:13:8a:53:67:5a:a0:76:86:a5:c0:f2:be: e1:92:47:b4:65:c1:ec:02:99:0a:49:f8:1b:da:02: 14:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8D:F8:6C:AB:44:30:96:3E:34:C1:C9:48:C3:3B:93:8B:91:6A:2D X509v3 Authority Key Identifier: keyid:C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:a8:89:6e:02:66:87:0b:f8:a4:21:29:b9:54:4f:10:84:cf: e5:63:77:d6:a8:d4:0b:72:74:37:0c:36:27:ca:ff:c5:f5:a7: b7:1b:9f:d1:70:86:af:ea:5a:13:27:55:e3:d6:f5:d8:45:0c: 53:8e:84:fb:71:b9:3c:6c:d7:b6:35:f0:bf:04:29:8b:01:58: fe:72:d3:5f:8a:80:60:c6:00:fa:32:b4:f7:72:37:04:d4:0a: cd:83:16:17:04:04:25:d4:e6:c6:b3:97:de:0f:c9:01:2e:16: 0c:5b:0f:e1:6b:1c:d5:b0:f5:fc:83:6b:36:66:9c:7a:3c:a3: ce:31:17:0e:c0:13:bc:7b:46:69:09:96:67:1b:8c:a6:3a:95: f1:cf:fa:18:17:07:20:71:28:22:80:8c:1d:42:a6:73:32:0d: d3:7c:ab:07:ef:1c:de:78:61:ea:50:78:40:40:70:3e:1b:8c: 9a:49:d7:1f:7d:c6:e9:dc:6b:a5:c7:ad:95:a1:f4:f7:d6:10: 37:fa:c7:ce:4b:ec:3d:8f:5b:c7:28:e2:21:7c:8a:f1:50:c5: 6b:cb:78:c5:75:33:02:18:53:4e:2f:ad:5e:1a:7f:97:1c:5c: 01:27:a1:55:e8:17:6d:a8:df:62:2a:d8:34:16:e0:a0:ff:4f: bd:51:09:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr46GSkxSEIk+oGHVnDY8a0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YzAyZDQyMzRmNGJjNGU4NzU1NWU0MWMwMzc3OWQ1NjIw YTUxNTUwHhcNMjUxMjA3MTMwMjUwWhcNMjUxMjA4MTMwMjUwWjAzMTEwLwYDVQQD EygyYjhkZjg2Y2FiNDQzMDk2M2UzNGMxYzk0OGMzM2I5MzhiOTE2YTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04hrFCm6YT26COdINl3HteFOWofX SVD+iowyeSM4ORstP4CZzMvZ4pcWLqf71NvRbCty3XwFYU9LyT6yqonD6MOPyNyX l+adikWBOgAf7TXzbUVudDEpWaFnEFjEnPYfqL88px/Bhp228tx9FLcQ5uzbixv0 7LxAsE/Xqc9HCdlvwxY8nt8hyTIZ4YE8bKX0MJwCAlPAjXTWcK98VgXSD4C/TY7K 9FOqzCeewzTNt15Ikea6zWchMVuMcsZOb8IVuiMfkcqinvLzgk3RS/2Y2AEL8mBx /UGMDB9uI5NRLSd7y8wTilNnWqB2hqXA8r7hkke0ZcHsApkKSfgb2gIUhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuN+GyrRDCWPjTByUjDO5OLkWotMB8GA1UdIwQY MBaAFMnALUI09LxOh1VeQcA3edViClFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWNBdFFqVDB2RTZIVlY1QndEZDUxV0lLVVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82ODUyMzItZjVlOS00MWQ2LWI5NGUt MWE2Y2U1ZmFmOTE2LzEveWNBdFFqVDB2RTZIVlY1QndEZDUxV0lLVVZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS82ODUyMzItZjVlOS00MWQ2LWI5NGUtMWE2Y2U1ZmFmOTE2 LzEveWNBdFFqVDB2RTZIVlY1QndEZDUxV0lLVVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg6iJbgJm hwv4pCEpuVRPEITP5WN31qjUC3J0Nww2J8r/xfWntxuf0XCGr+paEydV49b12EUM U46E+3G5PGzXtjXwvwQpiwFY/nLTX4qAYMYA+jK093I3BNQKzYMWFwQEJdTmxrOX 3g/JAS4WDFsP4Wsc1bD1/INrNmacejyjzjEXDsATvHtGaQmWZxuMpjqV8c/6GBcH IHEoIoCMHUKmczIN03yrB+8c3nhh6lB4QEBwPhuMmknXH33G6dxrpcetlaH099YQ N/rHzkvsPY9bxyjiIXyK8VDFa8t4xXUzAhhTTi+tXhp/lxxcASehVegXbajfYirY NBbgoP9PvVEJ8Q== -----END CERTIFICATE-----Generated at Sun Dec 7 14:16:09 2025 by rpki-client