This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft File: yzJFVZQK5Rr10fQr1axxWGT6GCk.mft (raw, json) Hash identifier: MSP2ywSTohM0i0WLV2CGxYWCDJrMYj5bM1HlK5C3TSc= Subject key identifier: F0:A5:11:0D:EE:8F:A4:33:74:74:9F:68:D1:6C:A0:2C:5B:08:08:20 Authority key identifier: CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29 Certificate issuer: /CN=cb324555940ae51af5d1f42bd5ac715864fa1829 Certificate serial: 019B1A97701B19AA8BC1591E6046E82922C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft Manifest number: 07C7 Signing time: Sun 14 Dec 2025 02:01:30 +0000 Manifest this update: Sun 14 Dec 2025 02:01:30 +0000 Manifest next update: Mon 15 Dec 2025 02:01:30 +0000 Files and hashes: 1: ZOtgfqLDYdNWH5fYDhWkm9PND4Y.roa (hash: JwgLkVzCQiB/ULcLxd8PPGsr5tfW+toDKbyYKCvjGSc=) 2: by9kfZ4EbEKUVkVK0jeGqBsmfmk.roa (hash: LEv0S+P2XEMPTW4EvLdn5P/pRRYNUEDyCa7a7Tp2BTY=) 3: yzJFVZQK5Rr10fQr1axxWGT6GCk.crl (hash: fkGw5hcpuRUcMCrjomqUepiR8aJb8TWTg3m81/rnp3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:97:70:1b:19:aa:8b:c1:59:1e:60:46:e8:29:22:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb324555940ae51af5d1f42bd5ac715864fa1829 Validity Not Before: Dec 14 02:01:30 2025 GMT Not After : Dec 15 02:01:30 2025 GMT Subject: CN=f0a5110dee8fa43374749f68d16ca02c5b080820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d6:35:b3:9e:55:d5:e7:4b:66:02:2f:c1:46: 42:41:d3:dd:56:9a:10:8a:a1:9a:a4:fc:da:86:1a: 85:35:f8:0a:8d:b3:bf:02:34:86:01:d7:e7:67:99: ae:6f:29:97:d5:03:a3:c7:62:3a:1a:0e:40:34:5a: 00:96:b3:84:cb:6b:50:c8:a4:95:88:0e:17:ce:4f: 51:eb:70:2d:52:e2:6b:3a:30:e8:58:b9:bc:6c:0b: 82:cc:58:77:dc:46:cf:24:a7:b5:cc:ea:f6:98:20: ac:e0:d4:88:81:d9:7a:78:56:68:99:53:f6:4a:58: 0e:56:4c:f1:6f:d7:8b:10:e5:4a:d5:01:99:5f:e9: a4:31:e6:b6:ad:6c:8d:a4:81:0a:99:f0:7a:60:3b: 27:d3:0c:1a:e7:3f:a4:6f:c2:ef:99:a6:95:06:2d: 9c:00:05:26:81:ba:2b:ac:d3:3c:87:78:ad:6c:fa: 06:f5:56:3e:78:45:a3:40:0f:ef:3b:7f:fb:33:be: 13:02:75:37:c8:16:8f:e7:d6:46:b3:6a:80:f8:e4: 94:de:8e:b6:c9:09:e0:d9:c9:cd:8d:b8:78:f1:48: 30:81:fa:67:4d:ae:84:94:a5:66:b9:74:9b:8d:f6: 83:64:9e:16:0b:ab:64:f5:9e:81:c5:aa:09:b3:ad: d4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A5:11:0D:EE:8F:A4:33:74:74:9F:68:D1:6C:A0:2C:5B:08:08:20 X509v3 Authority Key Identifier: keyid:CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a9:bb:74:49:e2:d5:1a:d0:d6:87:d0:ce:88:97:88:3d:4d: 9e:c8:0b:7c:1e:5a:7c:28:22:1b:31:58:70:d4:67:50:ee:7e: fa:9a:ee:64:76:85:dc:11:b5:1e:8c:58:48:69:28:b8:c2:54: 0f:2c:c0:de:21:ee:82:b9:83:f7:1d:be:d1:4e:2c:4d:7f:d0: 8a:1e:e1:14:e8:a9:b7:58:90:c8:cc:1a:c0:55:ec:38:dd:b2: 99:9b:30:ee:f0:73:d9:24:d5:aa:42:89:62:67:bb:91:4f:0d: d1:d5:8b:52:e4:42:59:18:8d:ee:d0:95:92:3e:b4:93:9e:35: 5e:24:cd:9b:d3:28:d1:cb:d7:c7:09:3b:90:7e:b8:23:a3:5b: 08:a3:93:fd:ca:de:3d:d9:5e:a2:96:bb:60:ef:95:d4:bf:88: 58:44:97:3d:69:eb:a0:67:f0:7d:3e:5a:8b:94:4e:4e:33:ba: 23:2b:59:c1:33:87:17:5f:97:3b:6e:40:68:a3:c9:fa:ad:f3: 6c:53:b4:15:f2:7b:89:b3:8b:5f:5e:51:33:c6:15:c3:d5:f8: 9f:91:53:0c:c4:53:98:2c:1e:97:51:de:36:b3:0b:ac:c3:31: 07:f6:c0:18:e3:83:8f:a3:f2:ec:63:82:7c:d9:93:d2:e8:e4: a0:8d:22:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsal3AbGaqLwVkeYEboKSLCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMzI0NTU1OTQwYWU1MWFmNWQxZjQyYmQ1YWM3MTU4NjRm YTE4MjkwHhcNMjUxMjE0MDIwMTMwWhcNMjUxMjE1MDIwMTMwWjAzMTEwLwYDVQQD EyhmMGE1MTEwZGVlOGZhNDMzNzQ3NDlmNjhkMTZjYTAyYzViMDgwODIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtY1s55V1edLZgIvwUZCQdPdVpoQ iqGapPzahhqFNfgKjbO/AjSGAdfnZ5mubymX1QOjx2I6Gg5ANFoAlrOEy2tQyKSV iA4Xzk9R63AtUuJrOjDoWLm8bAuCzFh33EbPJKe1zOr2mCCs4NSIgdl6eFZomVP2 SlgOVkzxb9eLEOVK1QGZX+mkMea2rWyNpIEKmfB6YDsn0wwa5z+kb8LvmaaVBi2c AAUmgborrNM8h3itbPoG9VY+eEWjQA/vO3/7M74TAnU3yBaP59ZGs2qA+OSU3o62 yQng2cnNjbh48UgwgfpnTa6ElKVmuXSbjfaDZJ4WC6tk9Z6BxaoJs63UyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPClEQ3uj6QzdHSfaNFsoCxbCAggMB8GA1UdIwQY MBaAFMsyRVWUCuUa9dH0K9WscVhk+hgpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXpKRlZaUUs1UnIxMGZRcjFheHhXR1Q2R0NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zMDA5ODMtNGRmZC00MTljLWJjMjAt MjAyYzI2ODlkZmEwLzEveXpKRlZaUUs1UnIxMGZRcjFheHhXR1Q2R0NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8zMDA5ODMtNGRmZC00MTljLWJjMjAtMjAyYzI2ODlkZmEw LzEveXpKRlZaUUs1UnIxMGZRcjFheHhXR1Q2R0NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6m7dEni 1RrQ1ofQzoiXiD1NnsgLfB5afCgiGzFYcNRnUO5++pruZHaF3BG1HoxYSGkouMJU DyzA3iHugrmD9x2+0U4sTX/Qih7hFOipt1iQyMwawFXsON2ymZsw7vBz2STVqkKJ Yme7kU8N0dWLUuRCWRiN7tCVkj60k541XiTNm9Mo0cvXxwk7kH64I6NbCKOT/cre Pdleopa7YO+V1L+IWESXPWnroGfwfT5ai5ROTjO6IytZwTOHF1+XO25AaKPJ+q3z bFO0FfJ7ibOLX15RM8YVw9X4n5FTDMRTmCwel1HeNrMLrMMxB/bAGOODj6Py7GOC fNmT0ujkoI0i8A== -----END CERTIFICATE-----Generated at Sun Dec 14 09:14:59 2025 by rpki-client