This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft File: yYra-x8x-YiapHNXkrbj20aTG7k.mft (raw, json) Hash identifier: dlb9QQNCSn0ryFCJ3vWkdZVNtYdr7TyoVTX1SJhMdpQ= Subject key identifier: 14:D6:98:47:E9:2D:96:39:64:40:3F:75:8A:6D:BD:67:CD:2C:3A:FD Authority key identifier: C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9 Certificate issuer: /CN=c98adafb1f31f9889aa4735792b6e3db46931bb9 Certificate serial: 019AACB9E2BB466C6D3F4D049AEB6A6DE3CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft Manifest number: 0244 Signing time: Sat 22 Nov 2025 18:00:54 +0000 Manifest this update: Sat 22 Nov 2025 18:00:54 +0000 Manifest next update: Sun 23 Nov 2025 18:00:54 +0000 Files and hashes: 1: TV9MBnLCdq0YXMlS7n0N6-374eE.roa (hash: 29vVPe5fMsq8wMs3CBPsJgBaxcV4vylFIV1zsoy0JlI=) 2: nGx1SbHdnrm1rX0qlOFShwhhrvk.roa (hash: vTyHGstj9RMJZ9VP2y031XxQBN2W9t1AKq82ozdPQVw=) 3: s2J0JZZ-ObzDtacn5mrd8XtqC34.roa (hash: Y+AIs8qpenHiIXCup80QSbaypa7oPZCeyGun7W4ZSYw=) 4: ySMfV76exq091KBkzteS4wbjDRI.roa (hash: yqmRUwariHrpevG/CUduCKeII5YG/LbAiP31WII353g=) 5: yYra-x8x-YiapHNXkrbj20aTG7k.crl (hash: 5lRtjF7TvRXr2ficuXwqdPkKt9BRLdkIfPSgk1wFZXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:b9:e2:bb:46:6c:6d:3f:4d:04:9a:eb:6a:6d:e3:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98adafb1f31f9889aa4735792b6e3db46931bb9 Validity Not Before: Nov 22 18:00:54 2025 GMT Not After : Nov 23 18:00:54 2025 GMT Subject: CN=14d69847e92d963964403f758a6dbd67cd2c3afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c7:ce:25:30:fd:34:9f:64:00:ca:f1:4c:db: 20:2c:3b:a2:5c:39:ac:77:0f:de:6b:57:e4:fa:ca: 1b:9d:7f:f4:c2:08:10:fa:05:d9:1d:a0:45:4f:79: ad:d7:b2:19:33:72:d2:f3:50:70:e9:35:ad:9b:f2: e8:0a:2a:16:f1:92:31:9f:51:47:de:be:9d:17:1c: 30:15:39:3c:ee:f7:85:39:e9:fe:39:c4:96:42:a0: fe:e6:1e:51:7a:46:2d:47:d8:71:69:60:c5:f4:63: 22:ce:78:90:9f:be:5f:56:28:d8:db:ba:f9:41:99: c8:4a:fb:1a:5f:a6:e8:30:1b:d2:54:6b:08:b9:66: 3d:fe:ae:1d:fc:5a:69:86:97:2f:d7:fb:51:b0:cd: 28:51:59:d5:e2:7f:07:c1:f5:dc:5f:84:34:b5:3e: 07:ed:0c:4f:09:54:85:0b:54:8a:5f:42:69:61:b4: 90:51:58:92:6d:e4:5c:ee:65:d9:46:86:2d:37:6a: 11:b5:19:74:9f:4b:b6:60:42:d6:f6:23:ea:8c:ea: 68:d3:a1:38:90:d3:56:d2:96:5c:b8:de:29:b2:bb: 54:64:53:fc:d6:94:0a:6a:5b:f2:45:1b:a8:ed:a8: 2d:0b:83:c4:27:57:84:4b:96:34:89:73:f6:ed:56: a2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D6:98:47:E9:2D:96:39:64:40:3F:75:8A:6D:BD:67:CD:2C:3A:FD X509v3 Authority Key Identifier: keyid:C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:3d:62:44:3d:19:c1:18:b6:73:08:5a:71:3a:af:12:13:4c: 75:44:ee:27:87:cf:6f:8a:d2:70:fb:f5:a8:63:0a:b1:45:90: 1d:81:4e:86:4e:45:d4:5e:ee:f2:27:e9:d1:e0:43:9b:78:9e: bb:06:f9:de:5b:a5:c0:93:5b:4d:9d:31:98:0d:c1:a3:40:13: 98:a2:3d:f7:6f:c8:53:fb:6b:70:d8:c1:50:31:9d:32:3d:c0: ae:62:33:ac:17:e4:84:c1:e8:3a:f4:b4:78:9e:bf:6a:63:21: 16:b2:4b:01:e1:f8:34:a0:b7:c7:1b:e6:02:d5:aa:66:f2:f1: 0d:1a:3b:24:18:a2:37:99:a4:72:cf:f0:81:d4:a7:83:d9:55: 7e:ec:85:73:ab:44:af:48:14:b2:2f:1d:1a:d1:be:26:34:ef: 56:86:4b:01:9f:b1:cd:06:7b:be:35:ec:46:a7:98:84:71:58: ab:f4:f0:e7:6e:f9:87:9b:bf:df:86:68:4d:d7:d8:73:4b:c1: f1:2f:f1:26:47:2c:ab:f4:a5:5e:d5:2d:49:81:c8:35:5b:d1: 81:47:9e:09:56:b0:13:9b:a5:a2:c6:07:cd:b3:0b:eb:7e:06: 7d:2d:89:97:f8:01:4f:23:4a:ac:f6:6c:e0:a8:0d:27:6e:da: 9a:dc:8b:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsueK7RmxtP00EmutqbePLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OGFkYWZiMWYzMWY5ODg5YWE0NzM1NzkyYjZlM2RiNDY5 MzFiYjkwHhcNMjUxMTIyMTgwMDU0WhcNMjUxMTIzMTgwMDU0WjAzMTEwLwYDVQQD EygxNGQ2OTg0N2U5MmQ5NjM5NjQ0MDNmNzU4YTZkYmQ2N2NkMmMzYWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcfOJTD9NJ9kAMrxTNsgLDuiXDms dw/ea1fk+sobnX/0wggQ+gXZHaBFT3mt17IZM3LS81Bw6TWtm/LoCioW8ZIxn1FH 3r6dFxwwFTk87veFOen+OcSWQqD+5h5RekYtR9hxaWDF9GMizniQn75fVijY27r5 QZnISvsaX6boMBvSVGsIuWY9/q4d/Fpphpcv1/tRsM0oUVnV4n8HwfXcX4Q0tT4H 7QxPCVSFC1SKX0JpYbSQUViSbeRc7mXZRoYtN2oRtRl0n0u2YELW9iPqjOpo06E4 kNNW0pZcuN4psrtUZFP81pQKalvyRRuo7agtC4PEJ1eES5Y0iXP27Vai/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTWmEfpLZY5ZEA/dYptvWfNLDr9MB8GA1UdIwQY MBaAFMmK2vsfMfmImqRzV5K249tGkxu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVlyYS14OHgtWWlhcEhOWGtyYmoyMGFURzdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jZDM5YmUtM2UyNS00ZGJjLTg2MGYt M2IxMDNkNWE2OTBhLzEveVlyYS14OHgtWWlhcEhOWGtyYmoyMGFURzdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jZDM5YmUtM2UyNS00ZGJjLTg2MGYtM2IxMDNkNWE2OTBh LzEveVlyYS14OHgtWWlhcEhOWGtyYmoyMGFURzdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOT1iRD0Z wRi2cwhacTqvEhNMdUTuJ4fPb4rScPv1qGMKsUWQHYFOhk5F1F7u8ifp0eBDm3ie uwb53lulwJNbTZ0xmA3Bo0ATmKI992/IU/trcNjBUDGdMj3ArmIzrBfkhMHoOvS0 eJ6/amMhFrJLAeH4NKC3xxvmAtWqZvLxDRo7JBiiN5mkcs/wgdSng9lVfuyFc6tE r0gUsi8dGtG+JjTvVoZLAZ+xzQZ7vjXsRqeYhHFYq/Tw5275h5u/34ZoTdfYc0vB 8S/xJkcsq/SlXtUtSYHINVvRgUeeCVawE5ulosYHzbML634GfS2Jl/gBTyNKrPZs 4KgNJ27amtyLVA== -----END CERTIFICATE-----Generated at Sat Nov 22 20:57:18 2025 by rpki-client