This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft File: ypJvljURiT-k2fvV5k4PikODfkA.mft (raw, json) Hash identifier: yhxaB0/cprvi4zSfs2mHE2XrY+YgjWFCRQjRkLPebSU= Subject key identifier: 5D:42:E4:10:61:D2:D2:8F:C7:31:9A:9B:E4:0C:BD:84:8F:BC:15:A0 Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40 Certificate issuer: /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40 Certificate serial: 019AACF08E428748D4F9291ADFE926959F60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft Manifest number: 173B Signing time: Sat 22 Nov 2025 19:00:37 +0000 Manifest this update: Sat 22 Nov 2025 19:00:37 +0000 Manifest next update: Sun 23 Nov 2025 19:00:37 +0000 Files and hashes: 1: GUCAqvQ0tMU-bensdtba-Wc3xJ0.roa (hash: WEDF5d5E+5ca0KR+0265vV9lQ4jW9zrbyE6qVfdzth4=) 2: hZOD7Y_mupZOHap9fLf6vk7q8ec.roa (hash: S7Xh16GME3MVdYv3MI3CqwSYnk2TD7axisWzIQZKMnA=) 3: kkgbITx0NnDqrc6NrPVjFVrJ5sk.roa (hash: 8TkKYybnSajtPi7S+EAIdOJJM4TQV3tglJHQvRJJM1E=) 4: ypJvljURiT-k2fvV5k4PikODfkA.crl (hash: YU/r3xjZ7p3y1lHMTwowb5tcczMcgcwy7769P0NCu+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:f0:8e:42:87:48:d4:f9:29:1a:df:e9:26:95:9f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40 Validity Not Before: Nov 22 19:00:37 2025 GMT Not After : Nov 23 19:00:37 2025 GMT Subject: CN=5d42e41061d2d28fc7319a9be40cbd848fbc15a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d1:97:64:b0:ef:24:27:b5:5c:7c:0f:01:2c: 1f:76:72:e6:a2:cd:d2:13:cd:a7:7c:ca:d7:1e:33: 2f:13:3e:33:7b:77:d2:1e:83:50:ce:84:41:4f:98: 1e:d9:39:28:0c:44:d1:72:0e:70:5c:34:80:7f:f7: 3b:3f:cf:b7:8f:fb:03:74:74:dc:25:d3:93:50:b1: 92:7a:d1:e1:70:72:7d:bd:f7:a6:fc:81:d5:50:9d: d0:72:9f:9e:50:ae:36:c3:32:5c:bb:06:a9:68:ab: a4:50:5a:ec:56:c4:1d:48:e3:60:22:d8:06:49:c1: b6:24:3c:f3:31:79:79:9f:a9:f9:cc:1b:d1:aa:33: 0d:0d:21:fe:d9:75:9f:d2:62:14:6d:93:12:dd:ab: ac:5b:e9:7d:a1:92:bb:c6:38:49:0f:cf:79:70:ac: 4a:ad:76:18:c6:f8:87:5b:76:14:da:07:52:53:9b: e9:50:39:b6:d6:2e:af:2a:af:65:9d:8f:e3:50:2a: 6b:e5:00:46:cf:ed:d8:da:90:d5:f0:e0:27:e6:44: 0c:df:6f:a8:82:35:a1:60:5e:0c:7e:88:d2:7d:b4: 0b:9d:52:2b:d5:44:c3:03:1d:b6:d2:f0:41:cc:b7: ed:ad:c2:8f:a7:62:89:49:05:1a:02:09:55:1d:7c: 60:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:42:E4:10:61:D2:D2:8F:C7:31:9A:9B:E4:0C:BD:84:8F:BC:15:A0 X509v3 Authority Key Identifier: keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:f7:fc:2e:a5:eb:0e:a0:3a:18:26:19:7c:0f:5c:bf:e8:b6: d8:bd:9c:87:27:56:66:a7:ae:d0:e6:94:4e:ec:b5:71:7f:0d: 73:50:1b:95:4f:09:32:33:cd:27:9d:fc:4c:da:6c:29:1f:a7: 29:e6:fb:e1:10:cf:dc:01:73:24:df:4d:95:5c:23:5e:a7:03: 26:de:c1:ff:18:e8:c1:70:c7:3d:8a:ad:6d:8e:3d:b6:3c:6a: 65:1e:a6:1b:57:36:50:18:86:78:65:cd:66:df:ad:46:c3:8d: 7a:4a:71:ff:93:74:12:1e:e1:0b:d1:59:a4:28:fb:0f:cf:d4: 53:be:74:d4:c3:7c:32:b8:a6:bf:89:a8:e5:3f:81:53:9d:64: 8a:bc:c5:01:ab:d1:3a:8c:5f:57:e0:89:32:ef:29:54:f1:19: 75:01:0d:e5:49:f4:f2:c5:f2:ee:ea:a9:d5:6f:2f:d0:17:aa: 3f:d3:16:62:f8:c8:a2:ce:fc:fa:1b:07:8e:eb:14:86:8e:35: df:06:31:3a:1a:5d:2b:d4:fc:84:69:16:03:73:53:3c:c6:0e: 86:59:f1:90:cc:ed:c6:35:73:2c:c7:a7:64:28:86:60:a2:8a: 47:0e:7c:85:7e:28:16:4d:1f:bd:6a:6b:14:35:76:1d:c7:c9: 8f:a6:df:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqs8I5Ch0jU+Ska3+kmlZ9gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhOTI2Zjk2MzUxMTg5M2ZhNGQ5ZmJkNWU2NGUwZjhhNDM4 MzdlNDAwHhcNMjUxMTIyMTkwMDM3WhcNMjUxMTIzMTkwMDM3WjAzMTEwLwYDVQQD Eyg1ZDQyZTQxMDYxZDJkMjhmYzczMTlhOWJlNDBjYmQ4NDhmYmMxNWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NGXZLDvJCe1XHwPASwfdnLmos3S E82nfMrXHjMvEz4ze3fSHoNQzoRBT5ge2TkoDETRcg5wXDSAf/c7P8+3j/sDdHTc JdOTULGSetHhcHJ9vfem/IHVUJ3Qcp+eUK42wzJcuwapaKukUFrsVsQdSONgItgG ScG2JDzzMXl5n6n5zBvRqjMNDSH+2XWf0mIUbZMS3ausW+l9oZK7xjhJD895cKxK rXYYxviHW3YU2gdSU5vpUDm21i6vKq9lnY/jUCpr5QBGz+3Y2pDV8OAn5kQM32+o gjWhYF4MfojSfbQLnVIr1UTDAx220vBBzLftrcKPp2KJSQUaAglVHXxgBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1C5BBh0tKPxzGam+QMvYSPvBWgMB8GA1UdIwQY MBaAFMqSb5Y1EYk/pNn71eZOD4pDg35AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXBKdmxqVVJpVC1rMmZ2VjVrNFBpa09EZmtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80NGI3YmItMjYwNS00MjViLWIzNDEt MTQ2MDVkYjU0M2QwLzEveXBKdmxqVVJpVC1rMmZ2VjVrNFBpa09EZmtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy80NGI3YmItMjYwNS00MjViLWIzNDEtMTQ2MDVkYjU0M2Qw LzEveXBKdmxqVVJpVC1rMmZ2VjVrNFBpa09EZmtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/f8LqXr DqA6GCYZfA9cv+i22L2chydWZqeu0OaUTuy1cX8Nc1AblU8JMjPNJ538TNpsKR+n Keb74RDP3AFzJN9NlVwjXqcDJt7B/xjowXDHPYqtbY49tjxqZR6mG1c2UBiGeGXN Zt+tRsONekpx/5N0Eh7hC9FZpCj7D8/UU7501MN8Mrimv4mo5T+BU51kirzFAavR OoxfV+CJMu8pVPEZdQEN5Un08sXy7uqp1W8v0BeqP9MWYvjIos78+hsHjusUho41 3wYxOhpdK9T8hGkWA3NTPMYOhlnxkMztxjVzLMenZCiGYKKKRw58hX4oFk0fvWpr FDV2HcfJj6bfuQ== -----END CERTIFICATE-----Generated at Sat Nov 22 21:35:26 2025 by rpki-client