This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft File: yteUrGAc4lBbZfl1p9UWovAKWzE.mft (raw, json) Hash identifier: 9phxAB0Ura/p+MycTViIDesy3kcm2PDTyfqusYWeNhs= Subject key identifier: A2:C2:D8:F1:C6:47:44:26:E1:3C:9B:B1:11:63:E9:06:55:29:E7:C1 Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31 Certificate issuer: /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31 Certificate serial: 019AF46541C3CB3CDD02B7EBD369078EFD61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft Manifest number: 176C Signing time: Sat 06 Dec 2025 16:01:07 +0000 Manifest this update: Sat 06 Dec 2025 16:01:07 +0000 Manifest next update: Sun 07 Dec 2025 16:01:07 +0000 Files and hashes: 1: 2E9kWgPtYN0WAc6RCe6lEkD5GGc.roa (hash: WZKZ1nRj/095D4tmKUIjIrN2QssyrW7JaucRn5aUuQo=) 2: XBS2bilHl7hAUnhaEuY8p5cjE4c.roa (hash: GRT8VC70aJ9wVqj8F9C5XozSwpU4dQPqDcpv9YGwfrE=) 3: e8UexKJSMZ7skwYQtvgWIbq4MXE.roa (hash: z8UU85PauzAWCWu0c4/whBUMLEZehA442FaYRyi9WiQ=) 4: iet7MjdD3tNr9H3e8mAcOix2TP8.roa (hash: ezXufe6PAorgReJqNNieKsjaS0PdS8wnpJWtjRxO3X4=) 5: tzsxxq3WmCusza_r9Nk7AWxH7Jk.roa (hash: goqPhfATTY7UUdH4nZlMzNdPQpsyFFgFHBxyoIIk6WA=) 6: yteUrGAc4lBbZfl1p9UWovAKWzE.crl (hash: 5PvbDN89GbSlHOfpwcEK0qRaNjwqjHqqHNv17ifZBnY=) 7: zSyEja7s6-FcC2A4cfsL-HNjtEE.roa (hash: 2GY8yor4l2LD8bv0Z/SVmO/KolDg2zRMpa7nMwkf0ko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:41:c3:cb:3c:dd:02:b7:eb:d3:69:07:8e:fd:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31 Validity Not Before: Dec 6 16:01:07 2025 GMT Not After : Dec 7 16:01:07 2025 GMT Subject: CN=a2c2d8f1c6474426e13c9bb11163e9065529e7c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ef:62:3f:d8:e8:c9:1a:38:fa:72:a7:11:2b: fa:de:bd:2f:a6:48:70:6d:ee:54:87:c1:e2:a4:d9: 81:39:eb:63:f5:cb:5b:e7:85:26:85:9f:0a:9d:f6: e1:a1:16:d1:4e:9b:9b:24:ca:b4:45:38:b8:1e:fd: f4:98:ef:d2:4b:33:93:db:c6:68:82:54:ac:e5:c7: af:f2:0a:a5:6c:71:54:51:01:d3:d9:8b:b7:3b:dc: 92:d3:c2:a4:34:3e:43:a7:6a:7b:4e:06:e4:e6:87: 9d:c2:0c:97:bd:fa:01:da:5b:dd:c3:0f:dd:a6:02: 1c:35:0d:76:bf:5f:d4:94:ff:35:7b:0c:5b:31:c2: f6:c6:b3:e4:19:e9:69:0e:a8:cb:30:db:61:35:6a: b9:0a:b2:02:c8:8f:5c:0f:b9:79:21:26:4f:3e:ba: a8:f2:05:83:99:58:b0:87:cb:44:96:c5:74:10:6e: 3c:dd:0a:b2:b7:83:52:14:1a:2e:80:3d:10:b8:3c: 50:cc:47:4b:c9:53:ac:a9:b4:66:c1:24:21:b3:d6: 0c:e2:53:58:2e:7a:00:79:9b:c1:f6:9a:53:e8:65: 60:f5:50:0f:e9:07:9c:07:b9:1f:1a:6f:31:93:e0: ec:11:99:81:db:d4:1c:c1:cd:d1:b7:12:15:38:35: 67:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C2:D8:F1:C6:47:44:26:E1:3C:9B:B1:11:63:E9:06:55:29:E7:C1 X509v3 Authority Key Identifier: keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:d0:35:0e:24:9e:8f:3f:5f:0b:63:23:d0:d2:03:49:52:26: 85:00:28:45:ba:a9:1d:a7:12:e2:14:a6:07:99:ec:33:8e:17: 38:81:9c:9d:e7:fa:cf:d8:aa:10:62:ae:e3:33:28:ab:19:5d: 60:15:f6:8e:75:11:d1:c1:d8:87:20:26:d0:b7:7b:9e:d2:54: 6e:1b:6b:64:17:70:c0:ac:60:fa:3d:1a:a1:9b:28:f8:89:e9: c9:d9:48:6b:3a:53:22:94:80:51:87:43:c8:63:12:1a:98:cf: b1:7c:0b:6a:25:d6:64:00:2b:25:e9:c1:d8:7b:3e:ed:14:2c: bb:e3:93:1e:2c:ba:48:e3:6a:4c:f5:e1:2b:7e:bc:32:81:8d: 63:eb:9d:06:35:11:64:9c:be:c4:14:42:cf:b4:16:17:65:f7: 39:e7:0b:82:6c:93:82:2a:7b:f0:e1:79:08:fe:eb:1a:2d:67: b3:e7:2f:e1:49:91:6e:e4:22:99:c4:0a:33:9c:ca:4d:54:a1: 4e:3d:9f:b1:f4:6a:6f:c7:fe:eb:fd:e8:24:52:28:cd:f4:2c: 38:ff:c7:75:1b:1d:9f:e3:8b:54:fe:29:7d:f5:3d:f3:77:0f: 89:a2:77:d0:13:32:86:ec:f0:5b:d8:74:6c:90:e4:ea:d9:f1: a8:d6:50:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZUHDyzzdArfr02kHjv1hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZDc5NGFjNjAxY2UyNTA1YjY1Zjk3NWE3ZDUxNmEyZjAw YTViMzEwHhcNMjUxMjA2MTYwMTA3WhcNMjUxMjA3MTYwMTA3WjAzMTEwLwYDVQQD EyhhMmMyZDhmMWM2NDc0NDI2ZTEzYzliYjExMTYzZTkwNjU1MjllN2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu9iP9joyRo4+nKnESv63r0vpkhw be5Uh8HipNmBOetj9ctb54UmhZ8KnfbhoRbRTpubJMq0RTi4Hv30mO/SSzOT28Zo glSs5cev8gqlbHFUUQHT2Yu3O9yS08KkND5Dp2p7Tgbk5oedwgyXvfoB2lvdww/d pgIcNQ12v1/UlP81ewxbMcL2xrPkGelpDqjLMNthNWq5CrICyI9cD7l5ISZPPrqo 8gWDmViwh8tElsV0EG483Qqyt4NSFBougD0QuDxQzEdLyVOsqbRmwSQhs9YM4lNY LnoAeZvB9ppT6GVg9VAP6QecB7kfGm8xk+DsEZmB29Qcwc3RtxIVODVnhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLC2PHGR0Qm4TybsRFj6QZVKefBMB8GA1UdIwQY MBaAFMrXlKxgHOJQW2X5dafVFqLwClsxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXRlVXJHQWM0bEJiWmZsMXA5VVdvdkFLV3pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mOWE0YmUtZDc5Yy00MTkyLWE2YjMt M2I5ODhmMTg4ZDkxLzEveXRlVXJHQWM0bEJiWmZsMXA5VVdvdkFLV3pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9mOWE0YmUtZDc5Yy00MTkyLWE2YjMtM2I5ODhmMTg4ZDkx LzEveXRlVXJHQWM0bEJiWmZsMXA5VVdvdkFLV3pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtA1DiSe jz9fC2Mj0NIDSVImhQAoRbqpHacS4hSmB5nsM44XOIGcnef6z9iqEGKu4zMoqxld YBX2jnUR0cHYhyAm0Ld7ntJUbhtrZBdwwKxg+j0aoZso+InpydlIazpTIpSAUYdD yGMSGpjPsXwLaiXWZAArJenB2Hs+7RQsu+OTHiy6SONqTPXhK368MoGNY+udBjUR ZJy+xBRCz7QWF2X3OecLgmyTgip78OF5CP7rGi1ns+cv4UmRbuQimcQKM5zKTVSh Tj2fsfRqb8f+6/3oJFIozfQsOP/HdRsdn+OLVP4pffU983cPiaJ30BMyhuzwW9h0 bJDk6tnxqNZQow== -----END CERTIFICATE-----Generated at Sun Dec 7 02:18:01 2025 by rpki-client