This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft File: yzAqJzq07yWo6pGko3ebz30d5Zs.mft (raw, json) Hash identifier: vOBoL4lXUMpp9aOA9M/j5XWVAPzWLtJhwfdHLzVZt4A= Subject key identifier: 9C:EB:00:C9:FE:B0:AF:C4:AC:3A:0E:A6:95:F7:B6:FF:02:A6:9A:0F Authority key identifier: CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B Certificate issuer: /CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b Certificate serial: 019B281BC1B08DA2196560523BB2C7F5A3ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft Manifest number: 0F0C Signing time: Tue 16 Dec 2025 17:01:06 +0000 Manifest this update: Tue 16 Dec 2025 17:01:06 +0000 Manifest next update: Wed 17 Dec 2025 17:01:06 +0000 Files and hashes: 1: DcSO93z7fLoOXoqmDIifEXGL2wg.roa (hash: nhLe1W2M8L/RVeyBnebjnTgtFIE/bzp14sFZY8G/wn8=) 2: yzAqJzq07yWo6pGko3ebz30d5Zs.crl (hash: XXyBllgS0C1yhtRsiO4lvOP5tm2HZ0QWhXKua010SJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:c1:b0:8d:a2:19:65:60:52:3b:b2:c7:f5:a3:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b Validity Not Before: Dec 16 17:01:06 2025 GMT Not After : Dec 17 17:01:06 2025 GMT Subject: CN=9ceb00c9feb0afc4ac3a0ea695f7b6ff02a69a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7b:e8:91:4f:9d:fe:b7:86:69:2c:fc:72:c9: 3b:5f:9d:2b:a2:1c:af:cd:ba:dd:d4:79:63:ff:3b: 55:4c:64:bf:8f:e0:d7:65:6e:87:a7:f4:79:20:27: a6:2b:f7:5f:ba:35:dc:77:3a:b3:5d:3f:49:d6:2d: cc:28:17:62:bc:e6:ba:ac:a2:46:b2:3f:09:a0:11: 5f:63:37:a2:fe:6e:77:af:d5:c0:f5:c4:a5:b8:34: e8:a9:0e:bf:c9:5d:15:7a:d6:8c:5f:ff:b6:bf:63: e7:a8:33:e0:7d:37:2a:b6:83:d2:97:d5:2d:dc:d9: 22:b8:03:98:21:97:59:4e:8e:4b:ec:65:c2:6d:90: 88:43:bc:c5:1f:08:3c:1f:f0:fb:ab:5c:71:f1:88: 5f:74:ba:c1:9a:9a:b0:b7:0f:d1:97:7f:a6:dd:8a: 0c:56:77:0f:8d:1f:56:12:b9:a8:2a:5e:ce:e8:65: 08:99:0e:d2:a6:8e:fb:4e:8b:c4:bf:55:e9:46:4d: 5a:27:b8:f4:c7:96:79:59:29:ff:f3:8c:15:8a:2f: 10:a3:5d:37:4c:8b:5b:76:d7:cd:45:f0:58:34:e3: b2:f0:49:75:3a:75:8f:bf:c5:6c:0e:18:9c:48:eb: a3:44:56:6b:10:5e:ee:2b:c4:12:66:f7:f3:36:a3: b4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:EB:00:C9:FE:B0:AF:C4:AC:3A:0E:A6:95:F7:B6:FF:02:A6:9A:0F X509v3 Authority Key Identifier: keyid:CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:44:e0:dd:8d:45:4d:fc:a1:18:0d:45:90:d8:9d:ce:5f:9e: b9:7f:4d:5e:4a:a8:24:99:b0:34:9d:97:22:7b:c3:a9:70:03: ec:06:f7:11:17:5e:25:46:71:45:08:9a:42:60:3a:58:1a:1f: f7:b4:d5:53:8f:87:b2:3c:e9:35:2a:7d:e5:16:2d:6d:52:05: 26:37:4f:08:12:e9:f5:1a:d8:21:1e:fd:e4:1f:f4:3e:0f:b4: 4e:de:78:95:b4:4d:25:f7:9f:11:a7:ab:b3:dc:4c:a5:4e:ec: fa:20:cc:7e:f0:ef:d3:54:7f:bb:28:49:87:54:23:65:27:66: db:7b:76:a8:6e:5c:c5:72:a6:80:3b:8b:9a:5b:3e:45:73:be: 30:d7:48:ad:7b:db:43:c8:07:59:42:c3:ac:48:4b:33:12:50: ee:dc:c3:4e:08:b6:9d:13:64:a3:0d:48:10:10:7e:d7:80:fa: 18:1a:3c:0a:da:ed:5a:26:78:33:f0:28:e3:2c:bf:0f:d2:d1: 4a:fb:56:3a:5d:f2:ea:26:ba:46:88:d4:e7:40:7f:cc:eb:e6: 3e:91:da:4b:92:f3:16:62:a9:8a:88:2a:df:6d:d8:0f:8f:d1: d0:91:91:4c:8c:67:f3:a1:9e:ae:8d:22:c2:e5:1c:cc:1b:4e: 79:83:cb:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG8GwjaIZZWBSO7LH9aPtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMzAyYTI3M2FiNGVmMjVhOGVhOTFhNGEzNzc5YmNmN2Qx ZGU1OWIwHhcNMjUxMjE2MTcwMTA2WhcNMjUxMjE3MTcwMTA2WjAzMTEwLwYDVQQD Eyg5Y2ViMDBjOWZlYjBhZmM0YWMzYTBlYTY5NWY3YjZmZjAyYTY5YTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3vokU+d/reGaSz8csk7X50rohyv zbrd1Hlj/ztVTGS/j+DXZW6Hp/R5ICemK/dfujXcdzqzXT9J1i3MKBdivOa6rKJG sj8JoBFfYzei/m53r9XA9cSluDToqQ6/yV0VetaMX/+2v2PnqDPgfTcqtoPSl9Ut 3NkiuAOYIZdZTo5L7GXCbZCIQ7zFHwg8H/D7q1xx8YhfdLrBmpqwtw/Rl3+m3YoM VncPjR9WErmoKl7O6GUImQ7Spo77TovEv1XpRk1aJ7j0x5Z5WSn/84wVii8Qo103 TItbdtfNRfBYNOOy8El1OnWPv8VsDhicSOujRFZrEF7uK8QSZvfzNqO0owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzrAMn+sK/ErDoOppX3tv8CppoPMB8GA1UdIwQY MBaAFMswKic6tO8lqOqRpKN3m899HeWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXpBcUp6cTA3eVdvNnBHa28zZWJ6MzBkNVpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85NzdkZGItMzA5NS00ODhkLWIzNmIt ODAwOGQxZTdjMzhjLzEveXpBcUp6cTA3eVdvNnBHa28zZWJ6MzBkNVpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi85NzdkZGItMzA5NS00ODhkLWIzNmItODAwOGQxZTdjMzhj LzEveXpBcUp6cTA3eVdvNnBHa28zZWJ6MzBkNVpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPETg3Y1F TfyhGA1FkNidzl+euX9NXkqoJJmwNJ2XInvDqXAD7Ab3ERdeJUZxRQiaQmA6WBof 97TVU4+HsjzpNSp95RYtbVIFJjdPCBLp9RrYIR795B/0Pg+0Tt54lbRNJfefEaer s9xMpU7s+iDMfvDv01R/uyhJh1QjZSdm23t2qG5cxXKmgDuLmls+RXO+MNdIrXvb Q8gHWULDrEhLMxJQ7tzDTgi2nRNkow1IEBB+14D6GBo8CtrtWiZ4M/Ao4yy/D9LR SvtWOl3y6ia6RojU50B/zOvmPpHaS5LzFmKpiogq323YD4/R0JGRTIxn86Gero0i wuUczBtOeYPLoA== -----END CERTIFICATE-----Generated at Tue Dec 16 19:34:08 2025 by rpki-client