This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft File: YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft (raw, json) Hash identifier: 1/CSpF+e888xQz5OhYE+Gzeq1wngcsqbSq6fSt9eKig= Subject key identifier: 19:9A:79:AA:5A:DF:60:B4:70:EF:C6:9A:34:86:D3:76:44:89:4C:AF Authority key identifier: 62:7A:99:50:9E:D5:1D:F9:3A:33:F2:A4:E2:FD:66:2D:1C:8D:66:0B Certificate issuer: /CN=627a99509ed51df93a33f2a4e2fd662d1c8d660b Certificate serial: 019B0F004D57683BE5A31E5103302E73A427 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft Manifest number: 035E Signing time: Thu 11 Dec 2025 20:00:36 +0000 Manifest this update: Thu 11 Dec 2025 20:00:36 +0000 Manifest next update: Fri 12 Dec 2025 20:00:36 +0000 Files and hashes: 1: FRrrM4yAfnu6pnFh5wowlvqVDWA.roa (hash: Hv8/4ynB8VDf7OX62BWXwwqyCndg3mMaA+WdwhpJSlw=) 2: YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.crl (hash: QFhG85z1InJAlajWxnK0wURx9OCgvhafbfjPA9IQ9P0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:4d:57:68:3b:e5:a3:1e:51:03:30:2e:73:a4:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=627a99509ed51df93a33f2a4e2fd662d1c8d660b Validity Not Before: Dec 11 20:00:36 2025 GMT Not After : Dec 12 20:00:36 2025 GMT Subject: CN=199a79aa5adf60b470efc69a3486d37644894caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2f:64:a1:24:af:43:3f:8f:5c:36:0e:f0:81: 44:d1:e7:23:3f:1c:59:15:db:48:f2:b4:a3:8e:72: c0:72:0b:03:6f:be:ba:de:72:bb:fc:9b:a8:00:dd: b2:bc:24:4c:a6:83:0d:6b:08:f1:7f:9f:3c:98:7f: ad:9c:22:b6:25:f3:47:95:dd:03:64:61:30:7d:c8: 1d:64:ff:d0:e2:1d:3f:14:4d:13:a5:c9:d5:6d:d1: 29:54:91:96:ec:0f:24:35:9c:86:78:ea:08:a6:7b: f5:09:0d:30:4a:a7:f9:3a:4b:f9:7a:aa:fc:48:dc: 30:51:75:ed:42:bd:be:a3:c6:32:5f:77:61:d7:12: ce:c3:eb:f9:ef:7e:38:9d:e2:5e:07:0a:30:82:79: 0c:22:af:e1:30:ca:6e:6d:29:48:59:7e:d9:3f:d4: f5:d1:dc:85:4d:85:a9:24:e0:86:30:e9:54:da:5d: 2b:b3:49:99:94:d2:b2:f2:e0:97:d3:e3:bc:c2:c4: 06:a8:7e:65:72:d8:92:f0:a5:80:cd:a6:a5:f3:90: 53:86:f4:23:a6:5b:a4:a2:a9:87:a5:20:fe:2b:a5: 4b:b6:04:01:1d:7e:58:d6:f0:eb:8c:1a:b4:63:41: fc:06:84:d2:3b:49:07:d5:e8:c0:23:46:74:4e:65: ce:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9A:79:AA:5A:DF:60:B4:70:EF:C6:9A:34:86:D3:76:44:89:4C:AF X509v3 Authority Key Identifier: keyid:62:7A:99:50:9E:D5:1D:F9:3A:33:F2:A4:E2:FD:66:2D:1C:8D:66:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:51:71:1f:01:56:06:36:12:8e:ae:d8:06:0e:23:50:8d:2b: 40:2d:6a:0d:9f:f2:cf:4c:98:2a:7b:f3:be:0a:1d:c4:0f:fc: 06:ce:0d:0b:08:e2:dc:f2:53:1f:93:46:21:b7:cc:f7:b7:6b: 74:5b:6a:97:23:d6:0a:20:8b:c7:7a:64:b1:2c:c3:8c:15:0f: 18:86:13:8b:35:35:cf:57:b7:fb:cc:21:0a:dd:39:fa:06:ef: 21:7f:0c:c0:fe:a9:aa:4b:f4:e5:bd:95:14:ce:36:c2:af:04: 2a:e3:71:e9:ad:9f:b3:5d:a5:25:19:87:47:fe:f4:69:f8:38: da:36:bc:0e:fb:01:1a:33:18:89:10:45:60:81:47:89:2a:f8: 0f:c1:f0:ea:0f:94:ef:79:e0:5b:c1:a8:c5:c6:13:f2:42:64: b3:0d:3f:d2:ea:73:f8:3b:bd:30:6d:cd:3f:31:30:6c:a2:d9: dc:86:5b:94:f7:35:09:35:4a:67:35:1f:2c:c7:b6:38:7d:10: 2e:dd:9e:6b:15:fb:26:8e:b9:12:a3:e6:06:8e:cf:8a:a7:31: ee:c6:bb:0d:42:a7:d8:92:a0:2d:c0:06:88:b7:7c:91:da:c8: bc:f0:21:3b:1b:4e:13:33:57:59:19:25:bb:63:34:9a:b0:b7: 9a:c4:19:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAE1XaDvlox5RAzAuc6QnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyN2E5OTUwOWVkNTFkZjkzYTMzZjJhNGUyZmQ2NjJkMWM4 ZDY2MGIwHhcNMjUxMjExMjAwMDM2WhcNMjUxMjEyMjAwMDM2WjAzMTEwLwYDVQQD EygxOTlhNzlhYTVhZGY2MGI0NzBlZmM2OWEzNDg2ZDM3NjQ0ODk0Y2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny9koSSvQz+PXDYO8IFE0ecjPxxZ FdtI8rSjjnLAcgsDb7663nK7/JuoAN2yvCRMpoMNawjxf588mH+tnCK2JfNHld0D ZGEwfcgdZP/Q4h0/FE0TpcnVbdEpVJGW7A8kNZyGeOoIpnv1CQ0wSqf5Okv5eqr8 SNwwUXXtQr2+o8YyX3dh1xLOw+v57344neJeBwowgnkMIq/hMMpubSlIWX7ZP9T1 0dyFTYWpJOCGMOlU2l0rs0mZlNKy8uCX0+O8wsQGqH5lctiS8KWAzaal85BThvQj plukoqmHpSD+K6VLtgQBHX5Y1vDrjBq0Y0H8BoTSO0kH1ejAI0Z0TmXOqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBmaeapa32C0cO/GmjSG03ZEiUyvMB8GA1UdIwQY MBaAFGJ6mVCe1R35OjPypOL9Zi0cjWYLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW5xWlVKN1ZIZms2TV9LazR2MW1MUnlOWmdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy80NjM2NjYtMDBlMC00OTJlLWE0NjMt MDEyOGQ5NzE3OWU4LzEvWW5xWlVKN1ZIZms2TV9LazR2MW1MUnlOWmdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy80NjM2NjYtMDBlMC00OTJlLWE0NjMtMDEyOGQ5NzE3OWU4 LzEvWW5xWlVKN1ZIZms2TV9LazR2MW1MUnlOWmdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo1FxHwFW BjYSjq7YBg4jUI0rQC1qDZ/yz0yYKnvzvgodxA/8Bs4NCwji3PJTH5NGIbfM97dr dFtqlyPWCiCLx3pksSzDjBUPGIYTizU1z1e3+8whCt05+gbvIX8MwP6pqkv05b2V FM42wq8EKuNx6a2fs12lJRmHR/70afg42ja8DvsBGjMYiRBFYIFHiSr4D8Hw6g+U 73ngW8GoxcYT8kJksw0/0upz+Du9MG3NPzEwbKLZ3IZblPc1CTVKZzUfLMe2OH0Q Lt2eaxX7Jo65EqPmBo7Piqcx7sa7DUKn2JKgLcAGiLd8kdrIvPAhOxtOEzNXWRkl u2M0mrC3msQZig== -----END CERTIFICATE-----Generated at Fri Dec 12 00:35:37 2025 by rpki-client