This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft File: YsX8533eTi7k_WU1EAUpwvRE15o.mft (raw, json) Hash identifier: 5pK7QNIaA2K3GZAOda0oF5uZKM/ozNDgCCoc97DEtkA= Subject key identifier: F3:21:0A:22:F0:08:4C:18:93:F4:56:6B:47:FF:16:C0:6E:6B:D9:DF Authority key identifier: 62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A Certificate issuer: /CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a Certificate serial: 019B41DBB89FAB90118E3EC98E3220F63613 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 17:01:17 +0000 Manifest this update: Sun 21 Dec 2025 17:01:17 +0000 Manifest next update: Mon 22 Dec 2025 17:01:17 +0000 Files and hashes: 1: HKNH5qVY82EVhwf41jFwu0WLXWQ.roa (hash: lq97v+q7hVfTasgsk/QjtVrEG9iM12Kuyq3A6kQDZ7s=) 2: YsX8533eTi7k_WU1EAUpwvRE15o.crl (hash: z7LpLEA9t5ixGYYUUAU3P9AydSrWNOoAiemIHFy+adg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:b8:9f:ab:90:11:8e:3e:c9:8e:32:20:f6:36:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a Validity Not Before: Dec 21 17:01:17 2025 GMT Not After : Dec 22 17:01:17 2025 GMT Subject: CN=f3210a22f0084c1893f4566b47ff16c06e6bd9df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ba:4e:c6:27:a1:ed:b2:eb:8a:e7:0f:28:77: a5:c3:2d:a6:06:36:dc:8c:1c:65:c0:d2:ac:4b:28: 47:2c:13:04:53:a1:aa:ed:b5:b1:e8:ce:1a:f1:07: d7:e0:e0:f3:f5:6e:af:60:43:b2:7e:af:78:c8:60: 45:66:e3:50:77:f0:67:1f:5e:08:68:57:86:66:aa: 7d:a2:83:b8:ad:6c:57:81:85:f2:00:62:86:40:8d: 81:a9:04:5f:b5:42:c7:68:52:e3:88:5b:ac:93:fa: 05:00:eb:a5:d7:e2:d9:9d:3b:74:31:3d:74:b7:b3: 57:54:74:28:46:d5:8d:2f:52:42:1d:fc:ea:8d:eb: c3:99:c1:9f:56:ea:ac:81:f0:3e:64:b9:94:df:8a: 89:ac:99:fc:44:77:be:82:dd:6f:f9:de:e0:03:33: 08:91:0a:53:40:b8:12:1c:45:77:00:07:1b:45:30: d4:16:0f:f4:e8:0b:84:17:a4:ea:a4:66:8e:1d:ef: a4:13:04:50:4f:13:1e:90:9d:d4:46:39:a0:a5:ed: be:6a:24:e7:b8:a6:de:c1:73:10:97:09:ab:9f:ce: ba:40:4f:0c:c2:22:9c:7d:8d:0f:79:8c:6a:82:a2: 17:2a:01:c3:0e:f3:89:53:65:b2:bb:22:6b:ef:0d: db:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:21:0A:22:F0:08:4C:18:93:F4:56:6B:47:FF:16:C0:6E:6B:D9:DF X509v3 Authority Key Identifier: keyid:62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ef:6d:5c:0e:d2:6b:a9:4f:1a:7e:ef:59:cf:88:67:33:e3: 98:19:81:26:49:42:8d:a3:8e:eb:c6:2d:0e:4b:ba:62:ea:61: f6:db:26:6d:1f:89:95:b1:52:40:7c:6f:29:17:7a:c2:ee:30: bc:43:7a:19:db:b9:fd:f6:13:fe:12:ab:0a:74:6c:77:03:12: cc:7e:3c:3c:cf:c9:32:7d:a8:eb:37:71:72:b5:67:9e:d0:b1: 12:46:c3:47:a4:0d:c5:3a:c7:15:4d:3a:4d:c7:ec:31:63:f3: de:cc:98:b0:2b:89:6c:b4:89:35:12:79:5b:5a:3c:4e:49:10: ba:21:98:74:ef:6c:86:b3:df:69:77:80:3a:14:ff:5d:21:49: 1a:b0:2d:75:ee:46:35:bb:38:3f:56:7d:1a:34:df:0a:2b:7b: 5d:e6:74:01:09:73:5e:f9:d8:e3:5d:b3:3d:65:fa:15:e5:83: 5a:2a:88:dc:e3:13:f6:f7:2e:b5:f4:b4:68:7a:bb:2e:3e:71: 18:d5:66:be:8a:e2:4a:d8:7b:47:b7:ac:dd:d5:fb:dc:c4:1a: d8:3e:11:12:84:de:86:6e:4f:ea:5b:ea:ee:27:83:d9:53:e8: d8:d1:ed:43:f0:a8:cc:27:e9:49:0c:dc:77:6c:d8:bd:ab:2c: 32:68:11:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB27ifq5ARjj7JjjIg9jYTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYzVmY2U3N2RkZTRlMmVlNGZkNjUzNTEwMDUyOWMyZjQ0 NGQ3OWEwHhcNMjUxMjIxMTcwMTE3WhcNMjUxMjIyMTcwMTE3WjAzMTEwLwYDVQQD EyhmMzIxMGEyMmYwMDg0YzE4OTNmNDU2NmI0N2ZmMTZjMDZlNmJkOWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7pOxieh7bLriucPKHelwy2mBjbc jBxlwNKsSyhHLBMEU6Gq7bWx6M4a8QfX4ODz9W6vYEOyfq94yGBFZuNQd/BnH14I aFeGZqp9ooO4rWxXgYXyAGKGQI2BqQRftULHaFLjiFusk/oFAOul1+LZnTt0MT10 t7NXVHQoRtWNL1JCHfzqjevDmcGfVuqsgfA+ZLmU34qJrJn8RHe+gt1v+d7gAzMI kQpTQLgSHEV3AAcbRTDUFg/06AuEF6TqpGaOHe+kEwRQTxMekJ3URjmgpe2+aiTn uKbewXMQlwmrn866QE8MwiKcfY0PeYxqgqIXKgHDDvOJU2WyuyJr7w3bvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPMhCiLwCEwYk/RWa0f/FsBua9nfMB8GA1UdIwQY MBaAFGLF/Od93k4u5P1lNRAFKcL0RNeaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXNYODUzM2VUaTdrX1dVMUVBVXB3dlJFMTVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8wMDNmNzAtMGE4OC00ZmFiLWIzNzQt YWY2YmU5MDU3OTlkLzEvWXNYODUzM2VUaTdrX1dVMUVBVXB3dlJFMTVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8wMDNmNzAtMGE4OC00ZmFiLWIzNzQtYWY2YmU5MDU3OTlk LzEvWXNYODUzM2VUaTdrX1dVMUVBVXB3dlJFMTVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdu9tXA7S a6lPGn7vWc+IZzPjmBmBJklCjaOO68YtDku6Yuph9tsmbR+JlbFSQHxvKRd6wu4w vEN6Gdu5/fYT/hKrCnRsdwMSzH48PM/JMn2o6zdxcrVnntCxEkbDR6QNxTrHFU06 TcfsMWPz3syYsCuJbLSJNRJ5W1o8TkkQuiGYdO9shrPfaXeAOhT/XSFJGrAtde5G Nbs4P1Z9GjTfCit7XeZ0AQlzXvnY412zPWX6FeWDWiqI3OMT9vcutfS0aHq7Lj5x GNVmvoriSth7R7es3dX73MQa2D4REoTehm5P6lvq7ieD2VPo2NHtQ/CozCfpSQzc d2zYvassMmgRuQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:14:22 2025 by rpki-client