This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft File: yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft (raw, json) Hash identifier: ocuZvbujrNLQKyNgpdcFReIJ07LG9mL/HRaOEGF1QHU= Subject key identifier: 34:90:DF:6B:B9:FD:0B:69:10:6C:74:8E:19:96:FC:ED:1F:30:32:83 Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22 Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622 Certificate serial: 019AF9C2A535037251896DA4A7BB59800E67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft Manifest number: 14B3 Signing time: Sun 07 Dec 2025 17:01:14 +0000 Manifest this update: Sun 07 Dec 2025 17:01:14 +0000 Manifest next update: Mon 08 Dec 2025 17:01:14 +0000 Files and hashes: 1: 1-0Y1K8-7iyhXdhoTYDD_MThh3vE.roa (hash: UqK1yASRyJvFv5c4mwnLEN1kbb6bTTjQR+7JRYc/30A=) 2: 8ugftUXGOYARk8hNtz_dZIPLHoY.roa (hash: fXuh9GYhE6qY7sn2WSDIqQCBrlOo2zt5TZUsfH3qCOk=) 3: CDJht7IkCxl1Fd3V0Jw0C5lDhbA.roa (hash: hC6TckJd7vZ/EVDDKvs8SlMNOJG6j0LoJJkkefT5TcY=) 4: MjdKbFiEyBYefwEqDa5k32efH84.roa (hash: yMrvEUe4dfvDGnvXjb6T/gK+z8B3+E50n+nxlmXb8j8=) 5: bAetBQfQtIL8HDlRLQtzqRXsmJw.roa (hash: KlLcSQqNQG0Ri5k3fpJMz79RuQ+R0fvjpj0v09+VZkU=) 6: yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl (hash: pMQb+uPDPXGuSoBSpdPFPM25rGwsewLjka45n8cp/QQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:c2:a5:35:03:72:51:89:6d:a4:a7:bb:59:80:0e:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622 Validity Not Before: Dec 7 17:01:14 2025 GMT Not After : Dec 8 17:01:14 2025 GMT Subject: CN=3490df6bb9fd0b69106c748e1996fced1f303283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:29:e7:98:42:c4:68:79:e8:53:2d:d1:25:f5: b1:c8:5a:f0:8e:5a:77:ef:2d:ed:46:bf:86:60:0b: 72:e7:95:ab:d6:e1:0e:7a:9d:d9:66:3e:d2:e9:1b: d3:6a:00:08:af:5f:e7:64:7f:53:e1:9c:3f:d0:d1: c3:8c:46:d9:a7:11:03:7f:79:a5:d1:06:48:52:29: 13:f7:ba:39:45:28:10:ce:c7:3c:d3:a6:92:ec:42: 15:9a:1f:bb:65:54:37:19:ac:5c:d7:fb:ae:51:a0: ab:ae:ca:56:a4:64:12:47:dd:54:96:60:24:5b:e1: 09:ff:f1:90:8c:be:a9:c4:13:0c:20:52:6f:62:dd: 05:20:8d:e0:fb:ec:b5:be:13:26:b0:8b:f0:d8:33: d0:0f:3b:cd:31:a8:4c:0d:5d:02:f9:69:3f:8c:4e: 0c:d7:20:80:e8:80:99:32:69:5a:95:67:87:01:62: fa:4f:38:28:e7:a7:c5:30:bd:10:c3:75:34:a1:2b: 6b:1f:2c:97:54:ce:fe:95:0f:3f:1d:57:aa:2f:33: 5e:aa:25:76:53:43:a7:28:d3:39:d6:de:26:a2:37: af:4d:4b:21:81:bb:38:78:6f:c0:7f:cf:30:7d:6f: 60:5f:99:45:7c:fd:74:d1:bd:36:81:56:96:33:a4: be:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:90:DF:6B:B9:FD:0B:69:10:6C:74:8E:19:96:FC:ED:1F:30:32:83 X509v3 Authority Key Identifier: keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:54:a1:7b:c5:7f:d4:0b:69:0e:b1:b9:09:27:f9:fc:43:ae: 54:d7:54:b8:4a:ed:5e:ae:2f:98:20:ff:a3:2a:70:90:67:a0: 5f:b9:8a:9d:b4:87:75:6d:ed:e6:54:a6:9e:18:7a:38:5a:2a: 4d:7b:8d:d0:1c:5f:29:18:83:2b:1a:bc:55:53:4d:02:e1:c5: 42:fc:34:21:b9:ba:30:73:d9:da:d9:a1:fa:2d:06:f3:ed:dd: b7:d1:91:6d:db:cc:0a:e3:d8:7d:99:18:8c:29:f1:3a:c6:a6: 40:38:a3:00:cf:5c:fa:ee:f4:37:14:aa:c8:d5:71:0b:ba:82: 0c:df:2a:e8:e9:5e:38:d6:96:28:ad:b6:74:6f:5a:0c:26:bc: ce:e1:c7:1d:7f:ee:6c:ca:50:ab:d3:de:e7:82:c5:c1:ba:1f: 0e:53:17:4a:96:02:f6:4c:82:58:d3:02:c4:2b:8c:25:ba:e9: 9d:08:5c:20:44:cb:84:f6:b4:5a:2e:f5:f7:08:b6:15:66:6d: 7f:dd:4f:82:50:4d:05:9a:f3:36:54:b3:f3:e1:01:d8:12:44: 8e:8f:ce:33:ce:98:ac:35:97:e2:77:fc:68:cb:37:c6:24:42: e2:e9:ff:25:c8:ef:c4:a5:68:3f:21:83:f2:db:f9:08:7e:8b: 6c:de:3a:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5wqU1A3JRiW2kp7tZgA5nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZDVlMzcxNzhkODUyNGM3MjY2MGExZDc5NjE2NTk5OWU1 ODY2MjIwHhcNMjUxMjA3MTcwMTE0WhcNMjUxMjA4MTcwMTE0WjAzMTEwLwYDVQQD EygzNDkwZGY2YmI5ZmQwYjY5MTA2Yzc0OGUxOTk2ZmNlZDFmMzAzMjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlynnmELEaHnoUy3RJfWxyFrwjlp3 7y3tRr+GYAty55Wr1uEOep3ZZj7S6RvTagAIr1/nZH9T4Zw/0NHDjEbZpxEDf3ml 0QZIUikT97o5RSgQzsc806aS7EIVmh+7ZVQ3Gaxc1/uuUaCrrspWpGQSR91UlmAk W+EJ//GQjL6pxBMMIFJvYt0FII3g++y1vhMmsIvw2DPQDzvNMahMDV0C+Wk/jE4M 1yCA6ICZMmlalWeHAWL6Tzgo56fFML0Qw3U0oStrHyyXVM7+lQ8/HVeqLzNeqiV2 U0OnKNM51t4mojevTUshgbs4eG/Af88wfW9gX5lFfP100b02gVaWM6S+/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSQ32u5/QtpEGx0jhmW/O0fMDKDMB8GA1UdIwQY MBaAFMjV43F42FJMcmYKHXlhZZmeWGYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODIt OWUwYWVkMmZiOGVjLzEveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODItOWUwYWVkMmZiOGVj LzEveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVShe8V/ 1AtpDrG5CSf5/EOuVNdUuErtXq4vmCD/oypwkGegX7mKnbSHdW3t5lSmnhh6OFoq TXuN0BxfKRiDKxq8VVNNAuHFQvw0Ibm6MHPZ2tmh+i0G8+3dt9GRbdvMCuPYfZkY jCnxOsamQDijAM9c+u70NxSqyNVxC7qCDN8q6OleONaWKK22dG9aDCa8zuHHHX/u bMpQq9Pe54LFwbofDlMXSpYC9kyCWNMCxCuMJbrpnQhcIETLhPa0Wi719wi2FWZt f91PglBNBZrzNlSz8+EB2BJEjo/OM86YrDWX4nf8aMs3xiRC4un/JcjvxKVoPyGD 8tv5CH6LbN46lw== -----END CERTIFICATE-----Generated at Mon Dec 8 03:02:55 2025 by rpki-client