This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft File: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft (raw, json) Hash identifier: oB2kuqbsxCwiPTk/aRQsLT8DsaVpS5O22ATNkglw570= Subject key identifier: 5A:15:AA:AD:4C:7F:38:2E:0B:51:DA:49:D8:85:2B:9F:69:1A:1A:30 Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e Certificate serial: 019B386A072549974B2CBFED8DC9C22D11E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft Manifest number: 17E7 Signing time: Fri 19 Dec 2025 21:00:31 +0000 Manifest this update: Fri 19 Dec 2025 21:00:31 +0000 Manifest next update: Sat 20 Dec 2025 21:00:31 +0000 Files and hashes: 1: BH4JiNSau-Drbx1LaCjE1x1v30A.roa (hash: TbmERc+CgiPXJOmSpqLjpiM3C2RIrXoRaOqYGrV/7rc=) 2: J2m2ISQHz5hJjKyZkS2pJF0KRqI.roa (hash: 6G3IQ5SdI2eYbxPznkHPeUYzIj1Gq0tlz/lJz4R+v2c=) 3: KomOW-f7nkXyA6zp9usghp6DZAI.roa (hash: Rlm5FL44HCYTCzeeRWFpNgyaz/17csui71bsmAvCmko=) 4: OVVGVOkQTuoF7N6T_CK7fdKH4AA.roa (hash: yfK0eZGByG4055Lr1MzGeMYuSR5WRcTowVu+x++4W0o=) 5: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl (hash: XUon7KsJm5VcGcOQGylPOUyWZ09ph3FhL7DEsAe/Va4=) 6: bePIOwHo2yd_SzOvruKwF9356uc.roa (hash: AE/WNLdQCiM+hKgplC+GUSqytNFuyhj+98knbmTnMvA=) 7: fj1r2eQRURbfHzLqz1r8LUH9mVA.roa (hash: RTFZ5yGadIatm8cDgVUSamVjEv2odxS8PZJ1SetFXHU=) 8: v3x5iNNrmiatDTviLrTJBlnNTao.roa (hash: y4jZmJDEPRDwVYIDs+oTsrk+QPXd/ySPMMJZ/R51xOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:6a:07:25:49:97:4b:2c:bf:ed:8d:c9:c2:2d:11:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e Validity Not Before: Dec 19 21:00:31 2025 GMT Not After : Dec 20 21:00:31 2025 GMT Subject: CN=5a15aaad4c7f382e0b51da49d8852b9f691a1a30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f7:46:d7:89:1d:05:2b:0d:c2:f0:3c:d5:d1: c4:c4:98:43:1e:7c:58:1c:88:6e:24:b2:d8:5a:51: 0a:b5:50:09:1a:68:df:72:b8:92:02:a0:36:b7:b6: 47:56:2a:0c:5d:9b:ef:4b:23:91:28:b6:30:7d:f4: 33:a6:4c:11:34:ca:99:fe:96:33:81:5a:41:64:a5: 99:15:6e:21:d7:38:ef:21:d9:d6:09:8b:2c:60:2c: f7:32:8c:57:fc:13:02:86:9e:5d:4d:c8:ff:da:c4: 5e:37:a5:e4:5b:0b:bf:e1:76:4f:fe:64:4d:67:57: 9d:ce:9a:ef:b2:7b:24:5c:84:67:41:68:5d:13:de: 37:e0:d9:48:81:32:66:01:5f:24:61:f5:fb:a4:d5: 20:2a:13:d2:b9:eb:57:13:65:37:ce:59:41:6c:68: 35:9a:5b:05:ee:41:7f:3a:58:33:78:ee:97:3f:40: a2:fa:2e:54:3c:42:51:2c:31:92:1c:8d:24:43:08: bc:e2:3b:70:d6:e4:af:60:23:d8:e6:14:e1:77:17: 6e:19:e9:ed:99:aa:47:a6:5b:99:08:d2:1d:a3:36: 46:c8:41:d4:0f:65:ce:95:85:bc:4a:34:6d:40:92: 6d:da:90:b0:bb:12:64:ac:03:a7:df:43:e4:24:bd: 53:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:15:AA:AD:4C:7F:38:2E:0B:51:DA:49:D8:85:2B:9F:69:1A:1A:30 X509v3 Authority Key Identifier: keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:50:64:51:c0:09:09:c4:f0:6c:31:31:29:2c:8d:49:c4:c8: 6d:76:2c:0a:4b:ce:19:61:93:8a:f6:a7:56:9d:3d:5a:7a:41: 57:1c:15:0c:c4:72:bf:4f:09:b0:f1:96:95:2c:e9:9a:38:63: 44:8d:91:4a:a4:5a:a7:d1:6b:01:65:a5:5a:de:7f:55:32:00: 87:5c:22:fc:1c:ab:c8:c1:8d:fd:48:0a:05:26:df:2f:3e:f3: e6:7d:3b:53:39:0c:7e:d6:e8:24:3e:1e:85:95:58:fc:5b:56: cb:2f:a2:56:3c:b5:b8:fd:76:e1:56:10:93:8d:57:f0:0a:aa: e7:f3:25:f8:cd:4e:47:64:b2:16:71:cb:25:e9:c5:39:9a:34: 8d:6e:39:89:ae:2c:0f:d5:86:1d:98:38:32:8d:a8:c5:fd:23: 25:c7:52:14:ed:35:af:e0:ed:d5:cf:94:8a:0c:2f:64:6b:c0: af:0e:5f:05:77:b2:72:d5:2b:14:de:97:24:ec:19:e1:25:1c: 2c:2f:89:66:5b:d6:33:cb:fe:d5:6b:e3:be:dd:97:6c:11:51: 80:68:29:d0:c3:ec:96:30:05:9d:f7:4f:a0:db:f0:02:e0:7b: d3:8b:df:78:87:6a:44:1d:84:e8:95:70:5d:52:0d:86:94:c7: 4e:a7:54:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4agclSZdLLL/tjcnCLRHmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNGFkNDUzNWFjODhkZDUzNDE5OWYyYTcyNjA5NWFmNzFh ZmU0NGUwHhcNMjUxMjE5MjEwMDMxWhcNMjUxMjIwMjEwMDMxWjAzMTEwLwYDVQQD Eyg1YTE1YWFhZDRjN2YzODJlMGI1MWRhNDlkODg1MmI5ZjY5MWExYTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvdG14kdBSsNwvA81dHExJhDHnxY HIhuJLLYWlEKtVAJGmjfcriSAqA2t7ZHVioMXZvvSyORKLYwffQzpkwRNMqZ/pYz gVpBZKWZFW4h1zjvIdnWCYssYCz3MoxX/BMChp5dTcj/2sReN6XkWwu/4XZP/mRN Z1edzprvsnskXIRnQWhdE9434NlIgTJmAV8kYfX7pNUgKhPSuetXE2U3zllBbGg1 mlsF7kF/OlgzeO6XP0Ci+i5UPEJRLDGSHI0kQwi84jtw1uSvYCPY5hThdxduGent mapHpluZCNIdozZGyEHUD2XOlYW8SjRtQJJt2pCwuxJkrAOn30PkJL1TdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFoVqq1MfzguC1HaSdiFK59pGhowMB8GA1UdIwQY MBaAFGJK1FNayI3VNBmfKnJgla9xr+ROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTct ZmI1OTQ5ODA4ZGRjLzEvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTctZmI1OTQ5ODA4ZGRj LzEvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1BkUcAJ CcTwbDExKSyNScTIbXYsCkvOGWGTivanVp09WnpBVxwVDMRyv08JsPGWlSzpmjhj RI2RSqRap9FrAWWlWt5/VTIAh1wi/ByryMGN/UgKBSbfLz7z5n07UzkMftboJD4e hZVY/FtWyy+iVjy1uP124VYQk41X8Aqq5/Ml+M1OR2SyFnHLJenFOZo0jW45ia4s D9WGHZg4Mo2oxf0jJcdSFO01r+Dt1c+UigwvZGvArw5fBXeyctUrFN6XJOwZ4SUc LC+JZlvWM8v+1Wvjvt2XbBFRgGgp0MPsljAFnfdPoNvwAuB704vfeIdqRB2E6JVw XVINhpTHTqdU3A== -----END CERTIFICATE-----Generated at Sat Dec 20 01:14:57 2025 by rpki-client