This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft File: Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft (raw, json) Hash identifier: uskX5pvicaY2AYz7r5sILwVOqe0UGNeSlBI1AIS2TlE= Subject key identifier: FE:06:0C:B2:B7:F1:D5:B4:73:8C:29:85:18:5D:58:71:A5:A4:05:5A Authority key identifier: 61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC Certificate issuer: /CN=61aedfdc7133e95f42498f7760f68fb80faa84ac Certificate serial: 019B1B04A87E5431BA9A5A4F2C94D7C78CD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft Manifest number: 10C8 Signing time: Sun 14 Dec 2025 04:00:48 +0000 Manifest this update: Sun 14 Dec 2025 04:00:48 +0000 Manifest next update: Mon 15 Dec 2025 04:00:48 +0000 Files and hashes: 1: Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl (hash: eeDZEOV5gmaYPPm8CUfgqDjAlF3EajFOBpgi+rnaU5o=) 2: iUluP9dzGEFPZV1QT7qhxKlYtLc.roa (hash: dqFbgrXc+CPp5bc1uUsZ9NzSqOeylcrCuwJIJApbIDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:04:a8:7e:54:31:ba:9a:5a:4f:2c:94:d7:c7:8c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61aedfdc7133e95f42498f7760f68fb80faa84ac Validity Not Before: Dec 14 04:00:48 2025 GMT Not After : Dec 15 04:00:48 2025 GMT Subject: CN=fe060cb2b7f1d5b4738c2985185d5871a5a4055a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:0a:64:b6:c9:6f:cc:5c:b8:46:b7:63:60:b5: 60:3e:9d:79:d8:51:77:63:9c:18:97:48:11:fa:da: d4:d2:01:e7:fe:f6:40:4b:1d:85:62:e3:f2:29:9f: 83:05:7b:6f:9e:fb:2c:17:e4:fd:e4:eb:cc:39:83: 31:ec:3f:7f:df:dd:60:7a:be:55:ef:ba:bf:fd:6d: 3a:de:ff:7b:e6:bf:c6:70:8d:5d:d3:6a:f6:2e:4f: e6:fa:1e:97:4e:c1:44:37:1c:fe:72:a4:7f:02:af: 9b:aa:e2:58:e6:65:c0:e8:5a:3e:90:fc:cd:b2:a7: 7e:9d:7c:41:1c:1a:01:67:3c:99:05:1c:7c:54:91: b9:a9:1a:e6:19:51:49:16:0d:9f:e4:09:51:fb:a7: 39:e8:02:80:c3:ba:6e:27:ad:ab:92:02:14:3d:15: 59:ab:98:47:a8:ba:15:e1:9d:9f:1e:57:c7:9e:58: 9e:e0:6d:79:fd:b8:d0:69:5b:3b:14:f9:33:e5:93: e8:67:7e:ec:5e:f2:f0:57:e6:10:58:9c:4b:cc:d8: 70:06:6b:b9:98:f0:b9:0c:62:11:b3:d0:47:04:71: 45:3b:62:f3:08:7e:cf:83:bf:82:9d:1c:b5:8d:39: bf:0b:9b:52:40:c3:c6:1e:15:9c:a3:48:df:5e:12: c2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:06:0C:B2:B7:F1:D5:B4:73:8C:29:85:18:5D:58:71:A5:A4:05:5A X509v3 Authority Key Identifier: keyid:61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:d8:c0:93:37:81:c6:02:af:a2:7f:59:85:c3:14:d6:8e:eb: 75:4d:c1:e2:d4:34:b3:7a:1a:d8:fc:13:57:3a:7b:a0:3f:77: bb:14:df:41:83:1d:b8:1e:e7:3e:5e:95:b5:7c:a8:34:e0:f0: b6:f6:ce:33:e8:c5:87:a1:80:a2:ba:aa:4c:cb:c6:54:99:e2: 4d:25:4d:ea:3e:d2:36:1e:23:c7:a3:d3:70:43:dd:d4:f3:4c: 0a:89:f2:0e:e4:87:44:af:dd:38:b8:ef:99:0f:ae:a0:2d:d2: 08:dc:ba:ca:28:60:b6:7d:44:5b:82:83:17:63:81:11:52:41: 45:82:c1:4f:5e:ec:6c:a3:20:2d:03:70:c4:97:7a:54:eb:80: 31:62:59:a1:a5:56:ae:71:7f:e6:90:63:82:3c:bb:15:6a:55: 95:54:f1:ed:7d:c1:75:55:00:40:ff:e4:cb:5d:e4:b3:ec:cc: 69:1b:07:6b:d7:fe:b8:2d:5c:cc:b2:b3:1d:d6:82:15:94:0f: db:7b:38:1e:ab:ba:ee:a7:fe:dd:9c:cc:45:51:1f:24:c0:c4: 15:75:51:21:8d:c5:90:a5:43:62:ce:c9:1b:2a:e7:fb:16:d9: c3:8b:97:0f:e5:0b:40:17:bb:33:73:c1:b5:e9:b8:50:90:20: 75:0f:ca:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbBKh+VDG6mlpPLJTXx4zYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYWVkZmRjNzEzM2U5NWY0MjQ5OGY3NzYwZjY4ZmI4MGZh YTg0YWMwHhcNMjUxMjE0MDQwMDQ4WhcNMjUxMjE1MDQwMDQ4WjAzMTEwLwYDVQQD EyhmZTA2MGNiMmI3ZjFkNWI0NzM4YzI5ODUxODVkNTg3MWE1YTQwNTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gpktslvzFy4RrdjYLVgPp152FF3 Y5wYl0gR+trU0gHn/vZASx2FYuPyKZ+DBXtvnvssF+T95OvMOYMx7D9/391ger5V 77q//W063v975r/GcI1d02r2Lk/m+h6XTsFENxz+cqR/Aq+bquJY5mXA6Fo+kPzN sqd+nXxBHBoBZzyZBRx8VJG5qRrmGVFJFg2f5AlR+6c56AKAw7puJ62rkgIUPRVZ q5hHqLoV4Z2fHlfHnlie4G15/bjQaVs7FPkz5ZPoZ37sXvLwV+YQWJxLzNhwBmu5 mPC5DGIRs9BHBHFFO2LzCH7Pg7+CnRy1jTm/C5tSQMPGHhWco0jfXhLCPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4GDLK38dW0c4wphRhdWHGlpAVaMB8GA1UdIwQY MBaAFGGu39xxM+lfQkmPd2D2j7gPqoSsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWE3ZjNIRXo2VjlDU1k5M1lQYVB1QS1xaEt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wMmI1MjItOWYwOC00NmZjLTk5ZWEt OWYzZThmOWVmYzk5LzEvWWE3ZjNIRXo2VjlDU1k5M1lQYVB1QS1xaEt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8wMmI1MjItOWYwOC00NmZjLTk5ZWEtOWYzZThmOWVmYzk5 LzEvWWE3ZjNIRXo2VjlDU1k5M1lQYVB1QS1xaEt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUdjAkzeB xgKvon9ZhcMU1o7rdU3B4tQ0s3oa2PwTVzp7oD93uxTfQYMduB7nPl6VtXyoNODw tvbOM+jFh6GAorqqTMvGVJniTSVN6j7SNh4jx6PTcEPd1PNMConyDuSHRK/dOLjv mQ+uoC3SCNy6yihgtn1EW4KDF2OBEVJBRYLBT17sbKMgLQNwxJd6VOuAMWJZoaVW rnF/5pBjgjy7FWpVlVTx7X3BdVUAQP/ky13ks+zMaRsHa9f+uC1czLKzHdaCFZQP 23s4Hqu67qf+3ZzMRVEfJMDEFXVRIY3FkKVDYs7JGyrn+xbZw4uXD+ULQBe7M3PB tem4UJAgdQ/KkA== -----END CERTIFICATE-----Generated at Sun Dec 14 07:48:37 2025 by rpki-client