This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft File: yQ7dEObZBiIVv9ZORbO_imuZY3k.mft (raw, json) Hash identifier: 6YfqroShfvYgOXOPuUYKS4zNxbZdKJWw+cmx7/vkE9s= Subject key identifier: 93:74:16:01:B8:B9:AC:B5:DE:1B:C1:33:F7:36:72:3B:81:B5:6E:4A Authority key identifier: C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79 Certificate issuer: /CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379 Certificate serial: 019AACB9D570F6041CC156FEA69952D9A65D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft Manifest number: 0591 Signing time: Sat 22 Nov 2025 18:00:51 +0000 Manifest this update: Sat 22 Nov 2025 18:00:51 +0000 Manifest next update: Sun 23 Nov 2025 18:00:51 +0000 Files and hashes: 1: wJZWkACD4z74xYl3Eh73b1e6c9o.roa (hash: EI0fca0IMjIZuHA6NlKScJkQo5wgsNdZcRbsaJt4IfY=) 2: yQ7dEObZBiIVv9ZORbO_imuZY3k.crl (hash: PSMSvRB5sBanQOzEsIp4KP7Crjvyco7XSTgEhT2VV1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:b9:d5:70:f6:04:1c:c1:56:fe:a6:99:52:d9:a6:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379 Validity Not Before: Nov 22 18:00:51 2025 GMT Not After : Nov 23 18:00:51 2025 GMT Subject: CN=93741601b8b9acb5de1bc133f736723b81b56e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:49:05:17:ed:a2:6f:5b:4f:9d:ba:08:0f:a3: 75:e7:fe:1d:cf:24:66:4b:48:d7:1b:26:39:2c:d2: 4c:05:6c:6d:f5:df:fa:71:3d:e6:8e:4a:3c:03:1e: 8f:90:f8:7c:0e:76:fa:26:64:08:59:33:da:66:e0: 2a:db:5b:d7:02:89:5e:9b:6d:c8:15:50:a8:7d:b8: cd:90:42:4c:f3:f2:38:17:fb:c9:26:95:ee:27:e4: 11:09:a6:21:2d:87:50:d6:dc:89:5b:0d:d7:5c:24: e0:5d:59:a4:e7:fe:4d:48:b4:37:8c:2e:cc:b0:8d: 04:8a:c9:a4:1f:d7:13:59:e8:b0:d8:35:fd:a6:be: 77:8b:4f:8a:41:4e:b7:5c:63:3f:42:49:d8:f3:8f: 02:d2:4b:51:ba:94:8f:57:5f:99:f0:0d:0e:a7:20: 8d:49:c8:59:68:22:a7:3b:86:ff:a6:51:2f:10:f8: 76:39:69:34:95:25:f1:da:ff:4c:45:53:fe:f4:e8: 5c:d2:22:2f:c8:02:b1:38:09:c7:d4:b8:01:76:0c: 29:7b:65:55:fa:a4:bf:f7:cf:77:76:6b:c9:6c:e9: 88:26:1c:b4:55:55:a9:1b:be:55:a5:01:91:eb:8f: b4:54:34:c9:d0:ed:40:ce:58:29:88:5b:fc:bc:86: 97:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:74:16:01:B8:B9:AC:B5:DE:1B:C1:33:F7:36:72:3B:81:B5:6E:4A X509v3 Authority Key Identifier: keyid:C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:0c:73:4a:47:e1:d5:ec:37:37:6d:c4:60:ef:c2:c4:9c:68: 9d:81:4f:0e:a5:65:b6:a2:4a:c1:e6:4d:b1:b0:e6:51:a3:aa: fd:d5:04:0b:39:e1:ad:fe:1c:bf:dc:48:cb:22:5d:63:38:e7: 11:08:b9:a9:f0:56:28:e7:6f:f2:10:6f:5f:d5:af:e5:bd:68: e8:70:55:d8:b9:d3:1c:e6:cf:15:b2:6b:eb:7a:c7:e0:ff:dc: 2a:c3:e5:b7:dc:dc:a1:f3:5d:b9:aa:19:78:f2:23:3a:39:74: 95:55:be:75:b3:8e:cd:14:3c:ef:45:b1:d3:d7:1f:66:b6:62: 8f:c8:ee:5a:f8:10:76:1b:de:63:18:c9:98:31:14:20:b8:dc: f5:1e:b3:72:38:e6:ce:c1:2c:cb:c8:3b:a4:d5:00:15:e0:26: 21:0c:c4:6a:4f:7e:91:3c:6d:28:88:4b:97:f0:e3:9a:85:14: 14:79:4a:2f:00:b2:f0:70:99:91:9d:43:03:b0:03:3f:f1:98: e3:c2:bc:10:cf:f8:72:5d:50:74:8b:9f:54:21:85:dd:63:0c: 8b:47:49:8b:89:86:a9:0b:1f:55:1c:34:af:bc:a1:af:54:78: 13:52:0c:e3:e4:31:f2:14:74:d5:31:d5:ed:22:04:f6:e6:b3: 92:97:f7:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsudVw9gQcwVb+pplS2aZdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MGVkZDEwZTZkOTA2MjIxNWJmZDY0ZTQ1YjNiZjhhNmI5 OTYzNzkwHhcNMjUxMTIyMTgwMDUxWhcNMjUxMTIzMTgwMDUxWjAzMTEwLwYDVQQD Eyg5Mzc0MTYwMWI4YjlhY2I1ZGUxYmMxMzNmNzM2NzIzYjgxYjU2ZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUkFF+2ib1tPnboID6N15/4dzyRm S0jXGyY5LNJMBWxt9d/6cT3mjko8Ax6PkPh8Dnb6JmQIWTPaZuAq21vXAolem23I FVCofbjNkEJM8/I4F/vJJpXuJ+QRCaYhLYdQ1tyJWw3XXCTgXVmk5/5NSLQ3jC7M sI0EismkH9cTWeiw2DX9pr53i0+KQU63XGM/QknY848C0ktRupSPV1+Z8A0OpyCN SchZaCKnO4b/plEvEPh2OWk0lSXx2v9MRVP+9Ohc0iIvyAKxOAnH1LgBdgwpe2VV +qS/9893dmvJbOmIJhy0VVWpG75VpQGR64+0VDTJ0O1AzlgpiFv8vIaXFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJN0FgG4uay13hvBM/c2cjuBtW5KMB8GA1UdIwQY MBaAFMkO3RDm2QYiFb/WTkWzv4prmWN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVE3ZEVPYlpCaUlWdjlaT1JiT19pbXVaWTNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82NDgzYzItMzkyMS00YzZlLTkzNzMt MzFhNGRhNjFkNTc2LzEveVE3ZEVPYlpCaUlWdjlaT1JiT19pbXVaWTNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82NDgzYzItMzkyMS00YzZlLTkzNzMtMzFhNGRhNjFkNTc2 LzEveVE3ZEVPYlpCaUlWdjlaT1JiT19pbXVaWTNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgxzSkfh 1ew3N23EYO/CxJxonYFPDqVltqJKweZNsbDmUaOq/dUECznhrf4cv9xIyyJdYzjn EQi5qfBWKOdv8hBvX9Wv5b1o6HBV2LnTHObPFbJr63rH4P/cKsPlt9zcofNduaoZ ePIjOjl0lVW+dbOOzRQ870Wx09cfZrZij8juWvgQdhveYxjJmDEUILjc9R6zcjjm zsEsy8g7pNUAFeAmIQzEak9+kTxtKIhLl/DjmoUUFHlKLwCy8HCZkZ1DA7ADP/GY 48K8EM/4cl1QdIufVCGF3WMMi0dJi4mGqQsfVRw0r7yhr1R4E1IM4+Qx8hR01THV 7SIE9uazkpf32g== -----END CERTIFICATE-----Generated at Sat Nov 22 21:48:37 2025 by rpki-client