This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft File: yZE15YfLs4vh63tt6cSAKdBF0nM.mft (raw, json) Hash identifier: 1lFXNml4lr0k5q2RDSO2Mzmo0c4R+sJPyOqe1suLSB4= Subject key identifier: 5F:D7:E2:E9:51:70:09:AF:FF:4A:07:EA:44:BA:7E:99:53:AB:68:81 Authority key identifier: C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73 Certificate issuer: /CN=c99135e587cbb38be1eb7b6de9c48029d045d273 Certificate serial: 019AF9F929BF315485E11BA2D84F4ABA0CE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft Manifest number: 04B9 Signing time: Sun 07 Dec 2025 18:00:47 +0000 Manifest this update: Sun 07 Dec 2025 18:00:47 +0000 Manifest next update: Mon 08 Dec 2025 18:00:47 +0000 Files and hashes: 1: DRY2u3TUS-wJQ8xa8rjRSpoapeo.roa (hash: wBdx6PRDwqiRs1k8IOdYm4GWe7EZE4vtyKYESIsAUKo=) 2: ItPmNdTjNgHqBxANMhUVH1DC5UU.roa (hash: QPQB5rA9kwVStlIhdq0li1+Di1amgsoq6BbyBsFXRrc=) 3: xKKq4SF6-ObtvfC7jpcnypKexwg.roa (hash: qw4y1FHQavkl3C0h/hnsN3/lIOTC2hyOIzm3AanVe3c=) 4: yZE15YfLs4vh63tt6cSAKdBF0nM.crl (hash: MKmRozm+SJdx5G1EpGKBZw793KGWMCEbXMOcIpEFcXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:f9:29:bf:31:54:85:e1:1b:a2:d8:4f:4a:ba:0c:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c99135e587cbb38be1eb7b6de9c48029d045d273 Validity Not Before: Dec 7 18:00:47 2025 GMT Not After : Dec 8 18:00:47 2025 GMT Subject: CN=5fd7e2e9517009afff4a07ea44ba7e9953ab6881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1f:ab:53:7e:9d:50:93:94:27:b7:84:2c:b9: 3d:a7:ed:58:32:ba:60:ab:d8:8d:88:8c:1c:23:2c: 3c:99:57:38:40:80:a3:2b:5c:32:d4:8f:c4:11:61: 3e:f1:b7:d8:65:88:74:54:4e:a7:89:23:da:8f:64: 6f:4f:88:cb:b6:bf:4b:90:af:6d:3c:96:e9:df:50: 78:f9:03:55:ab:a0:4d:95:3f:1e:1f:81:6e:85:10: ab:d2:15:99:89:c3:e5:de:c8:8f:11:b0:eb:8a:3d: 37:f9:c4:42:9a:e0:4a:ec:41:23:76:fc:9e:b3:eb: c2:ed:b6:8c:3d:40:31:ab:a8:bd:21:7a:36:7a:f4: b5:9c:12:8a:7a:28:be:52:a0:a3:db:f2:f9:92:b9: ec:79:36:a7:d2:2d:b4:53:4d:e1:01:02:89:17:ba: 7f:ce:2e:98:81:f8:b1:cf:39:2d:26:d1:4a:08:81: 3a:38:8c:50:b0:81:46:52:bb:32:61:44:83:76:c1: 1a:7b:81:2d:55:70:3f:17:8f:67:52:ac:a0:a0:07: 9d:bd:34:ad:09:83:5f:5a:26:6d:14:0c:e1:28:0c: ef:79:a5:f1:51:ff:02:83:20:71:24:51:b0:ed:da: 57:5b:17:9c:a0:33:eb:e8:8e:4f:09:26:db:90:8d: d0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D7:E2:E9:51:70:09:AF:FF:4A:07:EA:44:BA:7E:99:53:AB:68:81 X509v3 Authority Key Identifier: keyid:C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:04:53:a1:04:3c:30:d4:9b:c0:48:b2:66:01:ae:f9:fd:7c: fd:0b:09:0e:2c:0f:a2:ca:35:38:d7:f4:42:d6:25:78:c5:19: d5:7a:1d:2c:7c:cf:e5:83:43:11:f8:f0:bf:cf:38:3d:ed:47: 87:88:f4:67:66:6f:3b:f5:87:e8:ac:10:11:5f:e1:34:ec:27: 9e:0d:06:28:3c:3d:1a:e5:a8:5c:9c:3a:ba:32:42:a5:d5:a0: 2d:53:6e:72:81:75:2a:03:ca:8a:f2:ac:13:a6:a3:c2:d9:17: 3e:64:f6:73:a8:3a:2c:96:34:ad:d1:b7:59:a4:36:c3:48:be: e2:3d:6f:77:85:0a:3c:d2:c8:d1:10:5f:fe:4e:61:9b:1c:bb: 99:64:28:42:79:67:4b:d5:5d:81:b0:ba:71:07:1c:10:bb:25: a0:71:f4:75:cf:67:5a:8d:f8:15:f4:88:db:f6:df:f2:c9:13: a2:4a:a5:9b:d4:af:9f:52:56:27:90:14:a1:cc:85:3f:0a:b1: 5d:36:c6:4e:7d:70:54:52:eb:ef:8a:a1:85:ec:dd:02:2a:47: 80:f7:ee:13:d4:dc:80:34:7b:8f:6c:8d:f9:73:7e:74:aa:90: f0:fc:30:27:10:fd:59:fa:fe:46:19:d4:80:4b:cd:5a:c9:af: 26:d6:bb:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5+Sm/MVSF4Rui2E9KugzpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OTEzNWU1ODdjYmIzOGJlMWViN2I2ZGU5YzQ4MDI5ZDA0 NWQyNzMwHhcNMjUxMjA3MTgwMDQ3WhcNMjUxMjA4MTgwMDQ3WjAzMTEwLwYDVQQD Eyg1ZmQ3ZTJlOTUxNzAwOWFmZmY0YTA3ZWE0NGJhN2U5OTUzYWI2ODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR+rU36dUJOUJ7eELLk9p+1YMrpg q9iNiIwcIyw8mVc4QICjK1wy1I/EEWE+8bfYZYh0VE6niSPaj2RvT4jLtr9LkK9t PJbp31B4+QNVq6BNlT8eH4FuhRCr0hWZicPl3siPEbDrij03+cRCmuBK7EEjdvye s+vC7baMPUAxq6i9IXo2evS1nBKKeii+UqCj2/L5krnseTan0i20U03hAQKJF7p/ zi6YgfixzzktJtFKCIE6OIxQsIFGUrsyYUSDdsEae4EtVXA/F49nUqygoAedvTSt CYNfWiZtFAzhKAzveaXxUf8CgyBxJFGw7dpXWxecoDPr6I5PCSbbkI3QBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/X4ulRcAmv/0oH6kS6fplTq2iBMB8GA1UdIwQY MBaAFMmRNeWHy7OL4et7benEgCnQRdJzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVpFMTVZZkxzNHZoNjN0dDZjU0FLZEJGMG5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zMDk1MWUtYTMwOS00NWMzLWJhMTYt MTM0ZDk1M2NhMDkzLzEveVpFMTVZZkxzNHZoNjN0dDZjU0FLZEJGMG5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8zMDk1MWUtYTMwOS00NWMzLWJhMTYtMTM0ZDk1M2NhMDkz LzEveVpFMTVZZkxzNHZoNjN0dDZjU0FLZEJGMG5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgRToQQ8 MNSbwEiyZgGu+f18/QsJDiwPoso1ONf0QtYleMUZ1XodLHzP5YNDEfjwv884Pe1H h4j0Z2ZvO/WH6KwQEV/hNOwnng0GKDw9GuWoXJw6ujJCpdWgLVNucoF1KgPKivKs E6ajwtkXPmT2c6g6LJY0rdG3WaQ2w0i+4j1vd4UKPNLI0RBf/k5hmxy7mWQoQnln S9VdgbC6cQccELsloHH0dc9nWo34FfSI2/bf8skTokqlm9Svn1JWJ5AUocyFPwqx XTbGTn1wVFLr74qhhezdAipHgPfuE9TcgDR7j2yN+XN+dKqQ8PwwJxD9Wfr+RhnU gEvNWsmvJta7qA== -----END CERTIFICATE-----Generated at Sun Dec 7 22:11:52 2025 by rpki-client