This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft File: YYzEbXHnhIl4SIlh17UauhVB88Q.mft (raw, json) Hash identifier: 2Ad8Rtkx8pvOZ+wSPzvIX3/NQVD5BqFenekPqZSnFi8= Subject key identifier: 48:1A:46:E6:24:9D:E5:25:D5:9A:D8:29:EE:3A:08:24:A2:EC:44:F9 Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4 Certificate issuer: /CN=618cc46d71e7848978488961d7b51aba1541f3c4 Certificate serial: 019AFB43347C294C29F560E349F33F3B921F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft Manifest number: 066F Signing time: Mon 08 Dec 2025 00:01:16 +0000 Manifest this update: Mon 08 Dec 2025 00:01:16 +0000 Manifest next update: Tue 09 Dec 2025 00:01:16 +0000 Files and hashes: 1: 5B2v-t9G6c4XLHchTlmKyr_cKIc.roa (hash: TNnzqom3GkwHYObP+jkKUQTCGEpJ+jMjRi9PWCmkNiY=) 2: YYzEbXHnhIl4SIlh17UauhVB88Q.crl (hash: nnS7XDapURwkEfMsqoomTrPnVR6fMYjFVgrAccqv0s0=) 3: ZVHsY6ZkuvPvVgJnwVYAlKRfxu4.roa (hash: 5El1EqcO/tfZoHxTGK3Q7453jTBDE3FBJF97kpTWkjY=) 4: zEzHWCJriZKeuyYdBpl4VovFYcI.roa (hash: EKtQ2jHsCQ+lmT20oOt4vBuFgcYh84fbdOE/3vv/6ds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 00:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:43:34:7c:29:4c:29:f5:60:e3:49:f3:3f:3b:92:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4 Validity Not Before: Dec 8 00:01:16 2025 GMT Not After : Dec 9 00:01:16 2025 GMT Subject: CN=481a46e6249de525d59ad829ee3a0824a2ec44f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9c:00:2f:da:f3:8c:37:cf:fa:a6:78:ef:5d: 22:bc:02:43:3b:01:a7:63:c0:e9:7b:c0:a4:fd:83: bc:f6:60:9d:4f:f2:98:ab:54:53:8c:d3:0d:b2:73: ca:10:b7:be:fc:4d:8a:a7:e7:bb:8a:d5:68:e2:bc: cf:1c:06:9f:82:ef:f7:a8:cc:95:4a:65:8e:d0:81: 68:da:56:60:57:6f:4a:3c:f6:f8:10:dd:8d:80:72: 67:7c:59:a6:ff:df:b2:45:42:04:7f:b8:6d:80:ad: a9:bc:e4:1f:ae:8a:59:b4:6c:9d:24:d1:8b:b4:30: ad:2e:c4:c8:16:3f:89:8d:d0:00:76:3f:89:d2:31: dc:03:9f:dd:35:8e:f3:4f:c2:fe:a7:36:ff:af:77: 6d:b4:3a:a9:bb:87:48:3d:de:40:35:d4:51:a7:ac: 84:76:f7:6b:3e:1c:64:7b:19:9a:c4:b3:80:b9:cc: 7d:be:71:b9:b3:27:f4:5e:5c:f4:62:c0:54:b1:6f: ae:d0:f7:fd:80:78:0a:9d:68:3c:76:38:83:46:fb: 68:e7:f8:2b:fc:de:fd:99:a7:55:46:b5:54:36:7d: 6d:d0:d1:ef:97:44:0e:00:65:15:a5:44:5e:ba:d3: c6:8b:7b:22:5f:14:a5:f4:af:31:33:a3:f9:a4:0c: a3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1A:46:E6:24:9D:E5:25:D5:9A:D8:29:EE:3A:08:24:A2:EC:44:F9 X509v3 Authority Key Identifier: keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:aa:70:52:56:86:53:83:74:e6:e0:b8:3a:eb:24:c4:fa:fe: 9f:07:53:77:97:51:b7:a3:92:37:a1:e2:b5:50:05:87:98:6c: 15:5c:0e:3b:ff:d7:6a:96:30:3d:0f:f9:3f:09:03:bb:23:1e: a6:a3:74:e2:eb:ed:df:fd:68:08:83:d0:9d:8e:38:7c:fb:56: 8d:56:4d:d3:76:7a:2b:46:0a:16:2b:f9:55:54:a1:fd:18:55: 2c:0f:b4:9b:74:7f:c5:0f:54:c1:ba:8d:f2:fb:93:5c:b6:b3: 1a:3e:89:0a:6b:77:9a:dc:ec:0e:c1:84:69:ca:36:a8:38:cd: 48:2c:84:17:55:43:01:b0:7b:29:59:7e:b5:ff:83:37:d3:fb: d0:1c:db:74:43:03:e4:fd:c6:e9:34:de:4b:97:c5:3d:6c:90: e8:75:42:f2:c3:61:ab:0f:48:6a:5f:c6:82:30:02:18:c7:52: f7:96:76:7f:f6:79:ef:de:45:f6:5f:19:2b:c2:69:7f:39:b1: 3f:ce:05:57:0c:f1:a5:f3:39:83:56:d3:b6:f0:be:da:42:5a: 22:ac:31:1e:d2:a3:11:2f:50:83:6c:4f:6c:1f:6d:31:3f:54: c1:b6:b1:42:82:e1:6b:ef:8c:f6:67:1c:76:9b:74:28:31:f6: fe:4b:65:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7QzR8KUwp9WDjSfM/O5IfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxOGNjNDZkNzFlNzg0ODk3ODQ4ODk2MWQ3YjUxYWJhMTU0 MWYzYzQwHhcNMjUxMjA4MDAwMTE2WhcNMjUxMjA5MDAwMTE2WjAzMTEwLwYDVQQD Eyg0ODFhNDZlNjI0OWRlNTI1ZDU5YWQ4MjllZTNhMDgyNGEyZWM0NGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5wAL9rzjDfP+qZ4710ivAJDOwGn Y8Dpe8Ck/YO89mCdT/KYq1RTjNMNsnPKELe+/E2Kp+e7itVo4rzPHAafgu/3qMyV SmWO0IFo2lZgV29KPPb4EN2NgHJnfFmm/9+yRUIEf7htgK2pvOQfropZtGydJNGL tDCtLsTIFj+JjdAAdj+J0jHcA5/dNY7zT8L+pzb/r3dttDqpu4dIPd5ANdRRp6yE dvdrPhxkexmaxLOAucx9vnG5syf0Xlz0YsBUsW+u0Pf9gHgKnWg8djiDRvto5/gr /N79madVRrVUNn1t0NHvl0QOAGUVpUReutPGi3siXxSl9K8xM6P5pAyjvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgaRuYkneUl1ZrYKe46CCSi7ET5MB8GA1UdIwQY MBaAFGGMxG1x54SJeEiJYde1GroVQfPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVl6RWJYSG5oSWw0U0lsaDE3VWF1aFZCODhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xMjc0MzAtZDRlOC00ZGEzLWJlYTIt NGVmMTljY2M1N2QwLzEvWVl6RWJYSG5oSWw0U0lsaDE3VWF1aFZCODhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8xMjc0MzAtZDRlOC00ZGEzLWJlYTItNGVmMTljY2M1N2Qw LzEvWVl6RWJYSG5oSWw0U0lsaDE3VWF1aFZCODhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqqpwUlaG U4N05uC4OuskxPr+nwdTd5dRt6OSN6HitVAFh5hsFVwOO//XapYwPQ/5PwkDuyMe pqN04uvt3/1oCIPQnY44fPtWjVZN03Z6K0YKFiv5VVSh/RhVLA+0m3R/xQ9UwbqN 8vuTXLazGj6JCmt3mtzsDsGEaco2qDjNSCyEF1VDAbB7KVl+tf+DN9P70BzbdEMD 5P3G6TTeS5fFPWyQ6HVC8sNhqw9Ial/GgjACGMdS95Z2f/Z5795F9l8ZK8Jpfzmx P84FVwzxpfM5g1bTtvC+2kJaIqwxHtKjES9Qg2xPbB9tMT9UwbaxQoLha++M9mcc dpt0KDH2/ktlWg== -----END CERTIFICATE-----Generated at Mon Dec 8 06:17:49 2025 by rpki-client