This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft File: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft (raw, json) Hash identifier: 6WHu9PFAnZM4G0wBb/GNL++Y8VXZOAcfVFOdWlSqXp8= Subject key identifier: 1E:A1:52:05:82:70:F6:AD:D3:BD:19:8E:F0:B0:FA:F6:4F:C2:54:2B Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e Certificate serial: 019B42120CBC368D699C414AAA71FC23A2C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft Manifest number: 17EC Signing time: Sun 21 Dec 2025 18:00:37 +0000 Manifest this update: Sun 21 Dec 2025 18:00:37 +0000 Manifest next update: Mon 22 Dec 2025 18:00:37 +0000 Files and hashes: 1: BH4JiNSau-Drbx1LaCjE1x1v30A.roa (hash: TbmERc+CgiPXJOmSpqLjpiM3C2RIrXoRaOqYGrV/7rc=) 2: J2m2ISQHz5hJjKyZkS2pJF0KRqI.roa (hash: 6G3IQ5SdI2eYbxPznkHPeUYzIj1Gq0tlz/lJz4R+v2c=) 3: KomOW-f7nkXyA6zp9usghp6DZAI.roa (hash: Rlm5FL44HCYTCzeeRWFpNgyaz/17csui71bsmAvCmko=) 4: OVVGVOkQTuoF7N6T_CK7fdKH4AA.roa (hash: yfK0eZGByG4055Lr1MzGeMYuSR5WRcTowVu+x++4W0o=) 5: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl (hash: Su4YZ4vOAl2mEdgbpO6uP7xQoWroCnCrqPCRfhkq+Os=) 6: bePIOwHo2yd_SzOvruKwF9356uc.roa (hash: AE/WNLdQCiM+hKgplC+GUSqytNFuyhj+98knbmTnMvA=) 7: fj1r2eQRURbfHzLqz1r8LUH9mVA.roa (hash: RTFZ5yGadIatm8cDgVUSamVjEv2odxS8PZJ1SetFXHU=) 8: v3x5iNNrmiatDTviLrTJBlnNTao.roa (hash: y4jZmJDEPRDwVYIDs+oTsrk+QPXd/ySPMMJZ/R51xOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 18:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:12:0c:bc:36:8d:69:9c:41:4a:aa:71:fc:23:a2:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e Validity Not Before: Dec 21 18:00:37 2025 GMT Not After : Dec 22 18:00:37 2025 GMT Subject: CN=1ea152058270f6add3bd198ef0b0faf64fc2542b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:33:9b:be:f0:e2:6e:b2:92:46:46:a3:a1:8d: 67:09:07:fa:d1:43:69:f5:1e:c8:da:d2:e1:a9:ba: d1:97:ed:b6:56:23:f3:93:7e:e6:f1:77:8a:27:1f: 57:be:dc:db:16:93:c7:29:84:c6:37:f9:60:b9:bc: ab:9c:85:88:db:99:06:93:ce:cd:a0:3f:a0:8c:c8: 05:a0:96:25:07:08:8c:ab:80:60:12:9b:43:1c:f0: cf:ba:eb:03:31:e0:1e:81:dd:49:78:8b:ed:11:5b: 53:31:41:fd:f6:40:8d:ae:dd:69:91:2f:8a:94:d7: 04:31:31:82:65:3d:eb:fe:bb:89:34:77:70:48:3c: 7a:9b:59:ab:c8:08:ee:8e:c6:28:3c:a6:d6:81:a1: aa:a8:47:1d:2b:00:6b:85:06:6b:58:e9:f7:bf:ae: 1c:dd:ba:4e:63:a4:10:0c:ca:df:fc:ff:d9:dd:05: df:c5:25:b6:e1:68:fb:4e:52:ec:0b:4b:1b:d8:b0: 72:36:39:3c:4d:25:b7:0d:c9:d5:df:42:bb:9e:2e: 76:98:66:53:09:e0:ee:90:d1:a2:63:95:43:e5:b4: 1c:f8:51:c6:e3:bc:8f:b5:92:13:0d:29:e1:2a:78: 6c:e0:6a:38:1d:ba:eb:44:e1:12:60:58:69:05:1b: 94:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A1:52:05:82:70:F6:AD:D3:BD:19:8E:F0:B0:FA:F6:4F:C2:54:2B X509v3 Authority Key Identifier: keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:e5:26:c0:55:4c:d4:ab:55:d8:d7:ef:96:15:65:71:55:ef: 49:8d:d5:fa:fd:52:39:e7:03:45:14:1d:25:39:46:ec:fd:ad: f0:c3:96:c7:e1:36:74:e4:4b:48:85:14:b1:f8:60:bb:1d:1a: 7a:e9:1f:e0:18:a6:37:06:28:b7:01:a3:47:75:cd:30:cb:9f: 17:65:0d:dd:21:31:54:90:2c:b7:e6:ef:ab:1f:e0:58:88:37: ab:78:d4:09:00:10:d6:4a:19:0a:6b:22:37:f4:57:c9:5c:81: f3:ec:67:b4:f8:6c:53:8a:8c:e8:94:2d:29:ab:c5:6d:fa:aa: 1d:9d:65:c7:3b:e3:af:cf:d5:f6:f1:67:ab:66:7d:59:37:ff: 86:89:c4:db:14:58:a9:78:d3:1d:c2:cc:ca:81:a6:d2:ab:1c: 7a:6e:62:19:42:ec:0c:da:92:59:4c:d8:c0:19:0f:a6:bb:e9: 9d:a9:8f:a6:86:29:3a:1d:d3:e2:73:f9:77:75:ea:eb:dc:0e: f3:10:d0:db:74:b7:0c:0a:f5:6f:4e:b5:82:e2:df:e0:de:e1: df:d4:1d:f3:e3:0e:7c:38:8d:25:65:41:b4:c0:bb:6d:26:01: bf:78:51:73:49:2c:c0:15:97:3a:15:bc:b6:d6:61:6b:0c:c5: e5:8b:d9:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCEgy8No1pnEFKqnH8I6LIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNGFkNDUzNWFjODhkZDUzNDE5OWYyYTcyNjA5NWFmNzFh ZmU0NGUwHhcNMjUxMjIxMTgwMDM3WhcNMjUxMjIyMTgwMDM3WjAzMTEwLwYDVQQD EygxZWExNTIwNTgyNzBmNmFkZDNiZDE5OGVmMGIwZmFmNjRmYzI1NDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDObvvDibrKSRkajoY1nCQf60UNp 9R7I2tLhqbrRl+22ViPzk37m8XeKJx9XvtzbFpPHKYTGN/lgubyrnIWI25kGk87N oD+gjMgFoJYlBwiMq4BgEptDHPDPuusDMeAegd1JeIvtEVtTMUH99kCNrt1pkS+K lNcEMTGCZT3r/ruJNHdwSDx6m1mryAjujsYoPKbWgaGqqEcdKwBrhQZrWOn3v64c 3bpOY6QQDMrf/P/Z3QXfxSW24Wj7TlLsC0sb2LByNjk8TSW3DcnV30K7ni52mGZT CeDukNGiY5VD5bQc+FHG47yPtZITDSnhKnhs4Go4HbrrROESYFhpBRuUZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6hUgWCcPat070ZjvCw+vZPwlQrMB8GA1UdIwQY MBaAFGJK1FNayI3VNBmfKnJgla9xr+ROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTct ZmI1OTQ5ODA4ZGRjLzEvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTctZmI1OTQ5ODA4ZGRj LzEvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc+UmwFVM 1KtV2NfvlhVlcVXvSY3V+v1SOecDRRQdJTlG7P2t8MOWx+E2dORLSIUUsfhgux0a eukf4BimNwYotwGjR3XNMMufF2UN3SExVJAst+bvqx/gWIg3q3jUCQAQ1koZCmsi N/RXyVyB8+xntPhsU4qM6JQtKavFbfqqHZ1lxzvjr8/V9vFnq2Z9WTf/honE2xRY qXjTHcLMyoGm0qscem5iGULsDNqSWUzYwBkPprvpnamPpoYpOh3T4nP5d3Xq69wO 8xDQ23S3DAr1b061guLf4N7h39Qd8+MOfDiNJWVBtMC7bSYBv3hRc0kswBWXOhW8 ttZhawzF5YvZPA== -----END CERTIFICATE-----Generated at Mon Dec 22 00:46:11 2025 by rpki-client