This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft File: ysIWQb28-sJMVLakhZSDxeQWQLY.mft (raw, json) Hash identifier: cf1Yt/q9BRFTPfh/r2gh/8uAdwznqTHB9fOL7L+w+EQ= Subject key identifier: 8D:C5:7F:AE:7A:80:23:C5:67:8B:87:E2:76:13:D4:CA:04:ED:75:DA Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6 Certificate issuer: /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6 Certificate serial: 019AAD27799F4785A0126E50FE5ABD27DB85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft Manifest number: 1744 Signing time: Sat 22 Nov 2025 20:00:36 +0000 Manifest this update: Sat 22 Nov 2025 20:00:36 +0000 Manifest next update: Sun 23 Nov 2025 20:00:36 +0000 Files and hashes: 1: 2Oc3FqLDZOIsZ3-ChpBNgzAI1qA.roa (hash: ngieeqkZH2PetACTisY+FlZAWILVipXJYp8vJQiZ9t4=) 2: jECFVXifI2PML21GlnCLdBYUig0.roa (hash: 88xVe4+njhjbTw9qYTdy0ykyXz6/PEaM+aox252NmaU=) 3: x3vXcqd4rOe3aN_H50pQssbociA.roa (hash: KHAoiYRVl8v/BdqhdcKxO0EIBKUpuD3RXPz3naD0K1c=) 4: ysIWQb28-sJMVLakhZSDxeQWQLY.crl (hash: L3Ocgupr4+r1dFIJ1XkqrxjEG+JiF9qhSYnauDLMeDY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ad:27:79:9f:47:85:a0:12:6e:50:fe:5a:bd:27:db:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6 Validity Not Before: Nov 22 20:00:36 2025 GMT Not After : Nov 23 20:00:36 2025 GMT Subject: CN=8dc57fae7a8023c5678b87e27613d4ca04ed75da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:b4:c0:a1:5e:b2:62:9f:09:95:2f:2c:11:44: f0:2c:a9:3e:38:96:b8:78:70:42:49:43:47:26:bb: 72:d4:a0:1d:e0:e8:b6:3e:f1:75:d9:dc:b8:db:47: fb:d9:2f:55:69:04:20:36:f2:fb:aa:ac:e1:2a:88: eb:d1:9b:60:a4:68:38:cc:79:f6:0e:81:61:c4:1b: a8:08:8e:b4:d6:da:9d:eb:a5:cd:2f:2f:51:fe:cd: 69:cd:7f:13:2c:c8:5a:0f:8c:23:dc:33:e9:dc:59: 68:87:00:30:a6:0f:c5:49:42:48:0f:3f:72:89:98: 44:6e:11:66:28:e9:26:d9:ca:01:2e:56:4f:46:61: 4a:9d:65:85:d4:6a:0a:8b:30:36:d7:4c:08:2e:57: 3b:03:33:6b:d1:3a:fd:17:bf:f9:d6:ee:02:0a:c1: f8:06:64:15:db:06:12:7e:41:46:16:91:2b:7a:f1: 82:f6:11:41:70:96:4b:87:3c:04:5b:7d:c2:d7:37: 0d:bb:12:9a:47:6c:59:e2:5c:bd:58:73:09:d4:42: 0a:0e:ee:36:e2:7a:2b:53:d8:1b:32:65:b3:2d:92: 04:3c:cd:b9:94:1f:ca:69:0f:97:7d:7d:16:ea:d5: eb:b6:0c:bb:c3:7b:ae:56:25:98:ba:2e:70:a3:a2: 54:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C5:7F:AE:7A:80:23:C5:67:8B:87:E2:76:13:D4:CA:04:ED:75:DA X509v3 Authority Key Identifier: keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:4b:3e:e4:d2:69:fe:8c:7f:25:c6:10:ca:4c:5a:9a:8d:22: 31:b5:d6:8e:ac:62:06:ba:92:48:e5:e6:29:82:a3:4b:dd:f5: 4f:5d:e7:28:5d:30:4f:ad:c0:6b:83:97:62:c4:6c:43:ce:1e: 55:22:7b:10:90:0f:6c:2f:c3:7e:5c:eb:5f:30:99:f7:8e:28: cc:e2:82:6c:d2:7a:cb:f1:f7:eb:37:92:41:a3:f2:e8:2b:12: c4:9f:1e:6e:65:8a:e8:72:29:5a:89:94:14:b2:f9:66:34:9a: a4:a5:71:be:9b:cf:14:f2:3a:be:95:d0:d1:9d:96:ab:03:31: 91:48:55:c8:ef:ae:e7:bf:72:e8:dd:93:9e:c7:33:a1:c3:cb: 0a:a0:e2:dd:07:4b:b1:f5:3d:23:f5:71:d9:0e:c5:90:4c:e1: 8d:f1:63:03:f9:fa:06:40:3c:ba:b1:19:c8:ed:80:d1:b0:9e: ca:9b:b7:8c:2f:7d:63:3f:b3:d0:c6:f4:99:4d:7d:45:14:59: 2c:07:92:d1:f7:6a:19:b6:e9:0a:e0:05:6e:27:10:f3:17:38: 63:5b:81:e6:4f:25:81:70:3c:62:6a:b7:17:0b:3d:37:82:7f: 6d:19:e4:15:1e:f8:6f:ef:99:73:51:3a:85:77:28:9a:80:a3: a9:07:90:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqtJ3mfR4WgEm5Q/lq9J9uFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYzIxNjQxYmRiY2ZhYzI0YzU0YjZhNDg1OTQ4M2M1ZTQx NjQwYjYwHhcNMjUxMTIyMjAwMDM2WhcNMjUxMTIzMjAwMDM2WjAzMTEwLwYDVQQD Eyg4ZGM1N2ZhZTdhODAyM2M1Njc4Yjg3ZTI3NjEzZDRjYTA0ZWQ3NWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9rTAoV6yYp8JlS8sEUTwLKk+OJa4 eHBCSUNHJrty1KAd4Oi2PvF12dy420f72S9VaQQgNvL7qqzhKojr0ZtgpGg4zHn2 DoFhxBuoCI601tqd66XNLy9R/s1pzX8TLMhaD4wj3DPp3FlohwAwpg/FSUJIDz9y iZhEbhFmKOkm2coBLlZPRmFKnWWF1GoKizA210wILlc7AzNr0Tr9F7/51u4CCsH4 BmQV2wYSfkFGFpErevGC9hFBcJZLhzwEW33C1zcNuxKaR2xZ4ly9WHMJ1EIKDu42 4norU9gbMmWzLZIEPM25lB/KaQ+XfX0W6tXrtgy7w3uuViWYui5wo6JU4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3Ff656gCPFZ4uH4nYT1MoE7XXaMB8GA1UdIwQY MBaAFMrCFkG9vPrCTFS2pIWUg8XkFkC2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84NzdlNDAtNmNhMS00YTJiLTg5YTUt OGFiZjVlZTZjNGFkLzEveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi84NzdlNDAtNmNhMS00YTJiLTg5YTUtOGFiZjVlZTZjNGFk LzEveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJks+5NJp /ox/JcYQykxamo0iMbXWjqxiBrqSSOXmKYKjS931T13nKF0wT63Aa4OXYsRsQ84e VSJ7EJAPbC/DflzrXzCZ944ozOKCbNJ6y/H36zeSQaPy6CsSxJ8ebmWK6HIpWomU FLL5ZjSapKVxvpvPFPI6vpXQ0Z2WqwMxkUhVyO+u579y6N2TnsczocPLCqDi3QdL sfU9I/Vx2Q7FkEzhjfFjA/n6BkA8urEZyO2A0bCeypu3jC99Yz+z0Mb0mU19RRRZ LAeS0fdqGbbpCuAFbicQ8xc4Y1uB5k8lgXA8Ymq3Fws9N4J/bRnkFR74b++Zc1E6 hXcomoCjqQeQRA== -----END CERTIFICATE-----Generated at Sat Nov 22 21:50:04 2025 by rpki-client