This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft File: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft (raw, json) Hash identifier: cdvtRboWPmuTBY9PYbg++ZszKA4fXCbgmjfaNRgAJ6A= Subject key identifier: FE:B0:45:1F:C9:56:56:38:3C:CD:B2:57:CA:21:6F:53:D0:3E:4C:3B Authority key identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15 Certificate issuer: /CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715 Certificate serial: 019B26D1F003597ECCDDDBA078B9FFAA3A67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft Manifest number: 05CC Signing time: Tue 16 Dec 2025 11:00:51 +0000 Manifest this update: Tue 16 Dec 2025 11:00:51 +0000 Manifest next update: Wed 17 Dec 2025 11:00:51 +0000 Files and hashes: 1: qzWk5-tX1dtfAmhnDDRvZojGxVg.roa (hash: YU+z/z5QXW9h6ddAKutU3rUI45hV42wPHKYxAfH9OjY=) 2: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl (hash: cXolbAypdCplM5LAknDG2GvRfOdVJFwexrl10FQFhsA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:d1:f0:03:59:7e:cc:dd:db:a0:78:b9:ff:aa:3a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715 Validity Not Before: Dec 16 11:00:51 2025 GMT Not After : Dec 17 11:00:51 2025 GMT Subject: CN=feb0451fc95656383ccdb257ca216f53d03e4c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:50:36:3d:ad:33:bd:3d:ae:10:ef:cf:9e:66: b8:ac:60:59:a3:77:79:31:16:28:85:86:94:03:f3: 3d:6c:88:a3:e4:8d:a9:3d:dc:ae:46:ab:23:f5:81: ef:3e:7b:02:51:ef:d8:2e:e9:e1:89:cb:1f:80:75: 42:b6:47:48:d7:a0:fa:e2:c1:b8:ec:5b:5a:c8:07: 73:2c:40:d5:f4:86:ab:94:bc:81:b4:a2:07:9c:74: 13:b6:8a:ee:2c:00:67:d7:a5:d3:2d:79:6f:80:41: 13:0b:72:a0:e9:c1:55:8c:9c:12:36:78:90:45:01: bc:f0:24:3e:29:03:83:47:0f:2b:0c:02:6c:d4:c8: e5:33:58:37:36:f0:86:b1:eb:72:3f:49:b6:b5:fd: 24:31:fe:98:b5:e8:d7:dc:b5:43:e3:ff:d0:a0:99: 68:6c:51:1d:12:59:cc:cd:04:63:b0:33:10:3f:ce: 99:7a:a4:78:38:69:12:a7:04:f8:4e:a4:59:80:f6: 3d:c5:44:fa:c9:87:2c:2c:66:1e:3c:28:89:54:ed: d2:f4:2c:8b:de:7e:ba:08:e7:e1:93:8b:98:9d:0e: 98:ec:19:b6:96:b5:9f:4a:57:22:8f:22:fc:4c:09: 51:ba:db:5a:19:02:26:68:8f:82:30:8a:6d:7e:d6: 5f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B0:45:1F:C9:56:56:38:3C:CD:B2:57:CA:21:6F:53:D0:3E:4C:3B X509v3 Authority Key Identifier: keyid:CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:ee:f9:c0:78:bb:df:b1:a5:c3:42:57:22:30:eb:33:7a:36: 51:24:41:5a:11:b5:3a:89:64:3d:a6:88:bb:6b:56:5c:b0:c6: e9:b2:7c:19:fc:0a:c2:67:37:a3:86:37:31:db:ff:3b:38:a8: f5:7c:f0:c8:55:f3:4f:05:3b:5b:07:13:93:96:12:8f:23:99: 22:1b:ab:78:38:16:3d:89:b7:89:b9:47:ec:7b:21:0f:e8:1a: ef:91:ce:23:1b:94:ff:c8:9d:5a:6b:41:2f:7a:7d:fb:b3:0d: 6b:64:cc:1a:b1:d8:d8:bd:19:54:16:74:95:97:3d:dd:61:a3: 7a:48:ca:04:26:c0:36:93:e2:f4:a1:4c:eb:9c:5d:92:63:fb: ba:04:21:0b:c0:50:79:e2:1d:fa:26:d7:aa:73:fe:2b:f5:cf: f2:39:2a:fb:64:53:71:4d:a1:e7:5f:b2:7b:20:22:2a:aa:df: 89:a6:5a:58:af:56:e0:93:2d:0d:a5:67:50:a9:82:85:03:b9: 7c:31:99:0f:6e:98:d8:79:c1:db:14:36:bd:c2:de:11:2a:29: e8:8b:69:83:51:37:11:53:81:01:b1:36:5e:fe:34:8c:eb:f0: a2:cc:17:44:e3:9f:7a:6e:ac:d8:35:cf:93:d2:95:94:df:f9: cf:ac:ac:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsm0fADWX7M3dugeLn/qjpnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMzBlYjQzNTNlZDc1MGZhZjIzZjJmMWUxNDAxOGM2Y2Zj NjI3MTUwHhcNMjUxMjE2MTEwMDUxWhcNMjUxMjE3MTEwMDUxWjAzMTEwLwYDVQQD EyhmZWIwNDUxZmM5NTY1NjM4M2NjZGIyNTdjYTIxNmY1M2QwM2U0YzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1A2Pa0zvT2uEO/Pnma4rGBZo3d5 MRYohYaUA/M9bIij5I2pPdyuRqsj9YHvPnsCUe/YLunhicsfgHVCtkdI16D64sG4 7FtayAdzLEDV9IarlLyBtKIHnHQTtoruLABn16XTLXlvgEETC3Kg6cFVjJwSNniQ RQG88CQ+KQODRw8rDAJs1MjlM1g3NvCGsetyP0m2tf0kMf6YtejX3LVD4//QoJlo bFEdElnMzQRjsDMQP86ZeqR4OGkSpwT4TqRZgPY9xUT6yYcsLGYePCiJVO3S9CyL 3n66COfhk4uYnQ6Y7Bm2lrWfSlcijyL8TAlRuttaGQImaI+CMIptftZfZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6wRR/JVlY4PM2yV8ohb1PQPkw7MB8GA1UdIwQY MBaAFMsw60NT7XUPryPy8eFAGMbPxicVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXpEclExUHRkUS12SV9MeDRVQVl4c19HSnhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9mMDk3NDQtOGY1Yi00NWFkLTk1YTgt MWI5YTMyM2M1NzBiLzEveXpEclExUHRkUS12SV9MeDRVQVl4c19HSnhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9mMDk3NDQtOGY1Yi00NWFkLTk1YTgtMWI5YTMyM2M1NzBi LzEveXpEclExUHRkUS12SV9MeDRVQVl4c19HSnhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+75wHi7 37Glw0JXIjDrM3o2USRBWhG1OolkPaaIu2tWXLDG6bJ8GfwKwmc3o4Y3Mdv/Ozio 9XzwyFXzTwU7WwcTk5YSjyOZIhureDgWPYm3iblH7HshD+ga75HOIxuU/8idWmtB L3p9+7MNa2TMGrHY2L0ZVBZ0lZc93WGjekjKBCbANpPi9KFM65xdkmP7ugQhC8BQ eeId+ibXqnP+K/XP8jkq+2RTcU2h51+yeyAiKqrfiaZaWK9W4JMtDaVnUKmChQO5 fDGZD26Y2HnB2xQ2vcLeESop6Itpg1E3EVOBAbE2Xv40jOvwoswXROOfem6s2DXP k9KVlN/5z6ysfA== -----END CERTIFICATE-----Generated at Tue Dec 16 12:52:40 2025 by rpki-client