This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft File: YZz5qeC2RhrYM4dawRaPiSP9VQs.mft (raw, json) Hash identifier: AdKiNpbFjgAO1Vv1kSSghjESjM8godtZe4GB0MUd94o= Subject key identifier: FE:B5:07:8F:AD:1B:07:C9:8B:0D:6A:FA:57:11:72:DF:1E:96:F9:4D Authority key identifier: 61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B Certificate issuer: /CN=619cf9a9e0b6461ad833875ac1168f8923fd550b Certificate serial: 019B0F007317D2A35784CCCFE49D3F00DF8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft Manifest number: 03F1 Signing time: Thu 11 Dec 2025 20:00:46 +0000 Manifest this update: Thu 11 Dec 2025 20:00:46 +0000 Manifest next update: Fri 12 Dec 2025 20:00:46 +0000 Files and hashes: 1: YZz5qeC2RhrYM4dawRaPiSP9VQs.crl (hash: iPCgbOWnjXn+RZLBDwz6zCGZDWWQzAGBhSAhz9PWw0I=) 2: huRseKKMZ6MrEbEtnTidADNp1Qk.roa (hash: 2Cpw72DhJ+0Co4QK9K/ptsbGLArKbkMx0RKaT4rzilY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:73:17:d2:a3:57:84:cc:cf:e4:9d:3f:00:df:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=619cf9a9e0b6461ad833875ac1168f8923fd550b Validity Not Before: Dec 11 20:00:46 2025 GMT Not After : Dec 12 20:00:46 2025 GMT Subject: CN=feb5078fad1b07c98b0d6afa571172df1e96f94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:70:53:0f:fa:7f:65:fa:24:72:e3:d7:30:32: 8e:77:64:d6:58:51:a9:b5:76:31:24:56:a8:04:ad: 53:66:85:fd:03:80:b5:7f:be:98:7d:1d:9a:ed:05: 69:bf:e0:5c:4a:a5:af:de:cb:7b:7a:a9:86:21:38: ef:67:7c:80:04:48:93:4b:63:7d:6f:e9:90:ef:dc: aa:cb:36:d9:e3:6f:cc:29:f6:68:66:18:04:6f:71: 92:e6:00:25:a1:49:19:10:84:74:12:f4:f4:40:d8: 2f:28:b5:70:aa:8f:ac:36:59:39:01:d4:44:23:5a: 6c:9a:ff:c7:af:7f:fb:5c:5a:87:f9:3e:7d:d3:af: 03:7d:3e:28:6f:b9:8f:7f:31:0a:1b:29:3c:fd:e0: 1d:85:80:51:8c:f9:79:b3:49:0c:70:8d:16:d6:92: 44:fd:0e:70:43:48:4e:10:f7:9d:e1:ec:b1:75:1e: 08:37:09:3b:16:4b:3a:d5:b8:da:2e:28:9c:5c:b3: ea:5f:71:4c:4f:66:fd:a1:7d:77:2d:c6:8c:42:17: 65:f3:59:fc:75:72:34:1c:46:c9:44:bb:e2:0f:e6: 24:06:71:73:f1:a8:6e:f1:4f:e0:45:c0:16:bb:55: 00:19:96:3c:5e:c6:96:d8:a5:97:fc:18:ab:cc:d8: 3d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B5:07:8F:AD:1B:07:C9:8B:0D:6A:FA:57:11:72:DF:1E:96:F9:4D X509v3 Authority Key Identifier: keyid:61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:96:b3:1c:90:55:91:6f:18:4d:50:dd:b5:67:0c:11:7d:f5: 73:f7:be:fb:93:0d:a6:6c:1d:a8:03:1a:0d:22:a8:93:35:5a: 34:2c:5c:e5:9f:d8:02:cf:d0:f6:d8:75:d8:ac:6e:a3:0b:ad: 00:37:72:3e:c8:44:d8:4a:13:26:7a:6d:ad:ac:21:06:97:5d: 59:0e:95:3d:7b:40:7c:0c:a3:8f:60:96:f7:48:65:8b:6b:cb: 30:02:6a:5b:a5:64:8a:a5:d4:dc:84:ef:1f:ef:ab:c7:b3:34: c6:f2:fe:c5:47:d4:d6:cb:92:a2:64:36:a9:f7:33:e2:a5:9f: 13:b9:10:f1:9e:96:39:04:68:a5:3f:02:1c:25:cd:9e:d4:91: 1b:52:e5:8a:92:db:a5:d8:c0:dd:47:a5:8f:3d:fb:28:18:0f: 29:07:a1:b3:2b:64:39:4e:c7:4f:df:f5:ad:73:b2:58:a3:9c: c3:c3:71:c7:8c:5a:3a:d8:61:58:27:d6:3d:23:62:08:81:28: fb:20:89:78:a3:3d:ec:85:34:b8:99:1f:09:af:4b:e2:0b:a4: 14:f2:e0:63:60:85:81:de:19:b8:8b:15:ea:2f:de:9d:56:d3: b5:33:c1:d3:bb:be:d9:e7:86:c5:53:c1:85:8a:0b:a4:c6:2e: 08:a6:d5:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAHMX0qNXhMzP5J0/AN+KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxOWNmOWE5ZTBiNjQ2MWFkODMzODc1YWMxMTY4Zjg5MjNm ZDU1MGIwHhcNMjUxMjExMjAwMDQ2WhcNMjUxMjEyMjAwMDQ2WjAzMTEwLwYDVQQD EyhmZWI1MDc4ZmFkMWIwN2M5OGIwZDZhZmE1NzExNzJkZjFlOTZmOTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3BTD/p/ZfokcuPXMDKOd2TWWFGp tXYxJFaoBK1TZoX9A4C1f76YfR2a7QVpv+BcSqWv3st7eqmGITjvZ3yABEiTS2N9 b+mQ79yqyzbZ42/MKfZoZhgEb3GS5gAloUkZEIR0EvT0QNgvKLVwqo+sNlk5AdRE I1psmv/Hr3/7XFqH+T59068DfT4ob7mPfzEKGyk8/eAdhYBRjPl5s0kMcI0W1pJE /Q5wQ0hOEPed4eyxdR4INwk7Fks61bjaLiicXLPqX3FMT2b9oX13LcaMQhdl81n8 dXI0HEbJRLviD+YkBnFz8ahu8U/gRcAWu1UAGZY8XsaW2KWX/BirzNg9vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP61B4+tGwfJiw1q+lcRct8elvlNMB8GA1UdIwQY MBaAFGGc+angtkYa2DOHWsEWj4kj/VULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVp6NXFlQzJSaHJZTTRkYXdSYVBpU1A5VlFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kNmJmYWItZWFjNi00YTQyLTg4NzIt MTRhZmFlOTEzMzZkLzEvWVp6NXFlQzJSaHJZTTRkYXdSYVBpU1A5VlFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9kNmJmYWItZWFjNi00YTQyLTg4NzItMTRhZmFlOTEzMzZk LzEvWVp6NXFlQzJSaHJZTTRkYXdSYVBpU1A5VlFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5azHJBV kW8YTVDdtWcMEX31c/e++5MNpmwdqAMaDSKokzVaNCxc5Z/YAs/Q9th12Kxuowut ADdyPshE2EoTJnptrawhBpddWQ6VPXtAfAyjj2CW90hli2vLMAJqW6VkiqXU3ITv H++rx7M0xvL+xUfU1suSomQ2qfcz4qWfE7kQ8Z6WOQRopT8CHCXNntSRG1LlipLb pdjA3Ueljz37KBgPKQehsytkOU7HT9/1rXOyWKOcw8Nxx4xaOthhWCfWPSNiCIEo +yCJeKM97IU0uJkfCa9L4gukFPLgY2CFgd4ZuIsV6i/enVbTtTPB07u+2eeGxVPB hYoLpMYuCKbVjg== -----END CERTIFICATE-----Generated at Fri Dec 12 02:29:11 2025 by rpki-client