This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft File: yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft (raw, json) Hash identifier: QZD5T0a0bQ5pp+reOygdj6JQCoXRQ7QacG+BF/nqMfY= Subject key identifier: 03:F4:AD:6F:05:1A:92:28:59:40:16:B2:09:7D:88:8D:3C:29:96:D5 Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02 Certificate issuer: /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02 Certificate serial: 019B108154DA0CF754F1BC0A3EF0F8633FBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft Manifest number: 11B9 Signing time: Fri 12 Dec 2025 03:01:09 +0000 Manifest this update: Fri 12 Dec 2025 03:01:09 +0000 Manifest next update: Sat 13 Dec 2025 03:01:09 +0000 Files and hashes: 1: 3PSx9dotZYAyDtqMkmvWnodExOo.roa (hash: vk6bcm3rilt5w+/C+Ma6CzJC2WgKxVja0T1kBgt8Mfo=) 2: YC3-xixw4XeW0DEnxSoXSA3y9I0.roa (hash: g2+qW4cdB8k/DANIZo5brjTh6TFBwg+CXUq3jLsJYWU=) 3: yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl (hash: n6yCMFM70HKquV2UdJElccLZq9LKYESdvhOpCpSqRJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:54:da:0c:f7:54:f1:bc:0a:3e:f0:f8:63:3f:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02 Validity Not Before: Dec 12 03:01:09 2025 GMT Not After : Dec 13 03:01:09 2025 GMT Subject: CN=03f4ad6f051a9228594016b2097d888d3c2996d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f2:f1:72:f1:19:a1:80:57:dd:b9:71:14:c5: 1d:f7:e5:0f:58:aa:f6:e9:be:a2:ab:07:96:c5:91: bd:3f:4e:fa:db:2a:e3:fe:a9:84:41:64:38:d0:81: a2:7d:3b:57:c7:3f:43:a3:cc:a3:bd:62:59:a6:29: 9b:3d:1d:97:9e:96:fb:42:d3:a5:eb:88:5c:60:16: cb:e1:96:a8:1e:2b:1e:80:b8:9f:ec:6a:dc:18:c4: 5a:cd:65:87:bb:f6:c7:fc:5b:96:71:6d:e1:e9:04: 80:05:93:b7:68:dd:56:86:c4:fe:9e:ae:56:b3:8f: a6:85:91:6b:ac:53:df:6e:45:b1:81:68:14:43:9e: 9b:66:70:2b:13:73:57:49:22:1d:80:ec:e3:f0:26: a7:b1:e1:62:e4:cc:b9:42:c6:fd:ce:26:b3:b9:d3: 1d:fd:4b:ec:a2:d4:cc:9f:2d:bc:99:0a:57:00:a8: 17:f7:70:4c:57:47:d7:1d:02:ee:b6:68:79:68:88: 81:e6:80:49:c5:76:85:66:72:3f:a3:09:29:5b:62: 73:fb:fc:7c:d2:9c:bb:1b:eb:a7:37:f0:1e:44:02: 00:24:a5:8d:84:da:ae:f5:ee:da:3f:a9:a3:85:33: 1d:c3:71:b5:52:40:29:64:9b:4b:08:a3:4a:92:2d: 30:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F4:AD:6F:05:1A:92:28:59:40:16:B2:09:7D:88:8D:3C:29:96:D5 X509v3 Authority Key Identifier: keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:31:85:9a:07:bd:0a:d2:5e:81:3d:cc:16:40:84:b0:f1:6c: 6b:44:c2:3f:b5:86:0f:9c:00:54:f0:2f:89:a5:d7:88:81:be: 8f:14:dc:b5:c0:92:42:ec:fd:69:b6:e5:6d:74:8c:80:88:9a: 45:f0:7a:3c:81:c0:1e:ba:36:24:e6:5f:38:aa:46:cd:09:b2: 0e:a7:fd:e6:88:b5:dc:d3:ed:0b:f8:b5:1f:55:22:56:9c:33: b1:32:91:e2:6f:a8:80:4e:fc:47:f4:67:a3:14:98:69:11:5c: 0f:f3:34:91:44:af:e8:e5:52:17:cc:a6:19:91:b5:3c:db:d3: ff:bc:67:49:55:ac:9e:67:4f:e1:0f:f7:bc:f4:78:e6:63:7a: 52:f5:30:b1:65:70:42:9d:b2:2d:d4:f8:63:ed:22:d6:1d:9a: 52:6b:b3:cd:a7:20:3e:cb:18:44:62:d0:7f:a6:fb:3b:31:67: 2f:5e:af:7e:94:9c:9f:1e:1d:83:0a:d9:40:23:a9:34:f4:67: 66:46:e9:5a:5d:9a:ff:61:e8:f6:2b:4f:ed:52:70:36:40:40: 7b:15:dd:9b:bb:eb:54:29:22:68:57:03:62:5b:e1:26:d9:54: 4c:e2:af:c0:5d:b4:d7:c9:44:36:90:07:6c:86:3c:f6:2e:56: 3e:01:d5:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgVTaDPdU8bwKPvD4Yz+8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzI5Y2VkOGVmYjQxZjNiNGEyMDc4ZDk0YmJiMGEzYWFi NGZiMDIwHhcNMjUxMjEyMDMwMTA5WhcNMjUxMjEzMDMwMTA5WjAzMTEwLwYDVQQD EygwM2Y0YWQ2ZjA1MWE5MjI4NTk0MDE2YjIwOTdkODg4ZDNjMjk5NmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvLxcvEZoYBX3blxFMUd9+UPWKr2 6b6iqweWxZG9P0762yrj/qmEQWQ40IGifTtXxz9Do8yjvWJZpimbPR2Xnpb7QtOl 64hcYBbL4ZaoHisegLif7GrcGMRazWWHu/bH/FuWcW3h6QSABZO3aN1WhsT+nq5W s4+mhZFrrFPfbkWxgWgUQ56bZnArE3NXSSIdgOzj8CanseFi5My5Qsb9ziazudMd /UvsotTMny28mQpXAKgX93BMV0fXHQLutmh5aIiB5oBJxXaFZnI/owkpW2Jz+/x8 0py7G+unN/AeRAIAJKWNhNqu9e7aP6mjhTMdw3G1UkApZJtLCKNKki0wHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAP0rW8FGpIoWUAWsgl9iI08KZbVMB8GA1UdIwQY MBaAFMoynO2O+0HztKIHjZS7sKOqtPsCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWpLYzdZNzdRZk8wb2dlTmxMdXdvNnEwLXdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81MGU3ODAtZWNhNy00NThlLWI2YWEt OWRiYzM1NjcyMzI5LzEveWpLYzdZNzdRZk8wb2dlTmxMdXdvNnEwLXdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81MGU3ODAtZWNhNy00NThlLWI2YWEtOWRiYzM1NjcyMzI5 LzEveWpLYzdZNzdRZk8wb2dlTmxMdXdvNnEwLXdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApzGFmge9 CtJegT3MFkCEsPFsa0TCP7WGD5wAVPAviaXXiIG+jxTctcCSQuz9abblbXSMgIia RfB6PIHAHro2JOZfOKpGzQmyDqf95oi13NPtC/i1H1UiVpwzsTKR4m+ogE78R/Rn oxSYaRFcD/M0kUSv6OVSF8ymGZG1PNvT/7xnSVWsnmdP4Q/3vPR45mN6UvUwsWVw Qp2yLdT4Y+0i1h2aUmuzzacgPssYRGLQf6b7OzFnL16vfpScnx4dgwrZQCOpNPRn ZkbpWl2a/2Ho9itP7VJwNkBAexXdm7vrVCkiaFcDYlvhJtlUTOKvwF2018lENpAH bIY89i5WPgHVsg== -----END CERTIFICATE-----Generated at Fri Dec 12 04:04:00 2025 by rpki-client