This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft File: YTXB97cUDIcufz_zRitO3GMddnQ.mft (raw, json) Hash identifier: LDiZZP6ZSaHL4GHSxGVta7yA4UgaWqRfZpnXlmJchzE= Subject key identifier: 2E:B2:F4:85:B7:72:14:E9:FE:7A:5E:59:CD:F6:54:DD:57:78:5D:13 Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74 Certificate issuer: /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674 Certificate serial: 019B3CEBF8956A39745B6A999C345E29A3D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft Manifest number: 1353 Signing time: Sat 20 Dec 2025 18:00:56 +0000 Manifest this update: Sat 20 Dec 2025 18:00:56 +0000 Manifest next update: Sun 21 Dec 2025 18:00:56 +0000 Files and hashes: 1: 63TdjH6W107on2R0OsWADBs0on8.roa (hash: Ncx3bdjsiwwzAHtwjbAlakIAyaghqw6YvVL5UElIrQk=) 2: YTXB97cUDIcufz_zRitO3GMddnQ.crl (hash: YJcy8X1NpqRXoebgMAqgmbJByofmQEYF8sf/nwRFEtE=) 3: fWsFtqjlg1LQ_p_q5K_2GnL8QEw.roa (hash: CoDBOpj4/7ndyh9Jvl792nll1Mc+xm7ePsUPRUs36YE=) 4: rJW6voa1Wjy_FJWB-mYHdAKiSVs.roa (hash: vjUPxR8jUNlJ30WRpjQpZExmSVG2787XG5OfBnV64ZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:f8:95:6a:39:74:5b:6a:99:9c:34:5e:29:a3:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674 Validity Not Before: Dec 20 18:00:56 2025 GMT Not After : Dec 21 18:00:56 2025 GMT Subject: CN=2eb2f485b77214e9fe7a5e59cdf654dd57785d13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3c:6e:26:2d:b7:59:99:80:a6:7f:3b:d1:c4: f2:56:3c:a4:16:6a:e2:84:c7:57:b6:75:06:52:a0: 45:ff:88:62:43:dc:7c:55:61:0f:3f:c5:19:0e:0a: 00:98:44:a5:31:fe:67:8c:af:b5:c0:a9:e7:32:92: 4c:04:6d:4d:82:8b:d6:36:67:9a:09:da:c4:95:cc: 69:1f:72:13:14:62:36:98:b9:e2:0b:30:f0:0e:5d: 83:ed:5f:9e:45:c1:a8:42:09:79:21:46:78:60:e3: 4a:65:ea:11:de:fd:8c:61:ec:ac:07:8e:da:20:8d: fc:e5:de:8a:fc:9d:e6:4e:71:ca:33:75:31:7c:84: 92:f3:5c:42:b4:cd:c2:f2:92:c1:7b:27:09:2a:d9: 71:89:50:b7:ba:1d:70:c8:32:4a:4b:22:77:02:8a: 50:21:85:52:05:e9:16:78:86:ae:c3:5e:43:79:00: ca:66:bd:bc:e1:d5:6b:d7:d1:b9:87:54:cc:86:ea: 77:af:71:32:c0:1e:68:15:c3:b0:f2:e2:c3:da:fc: 80:3d:67:11:b0:8a:c5:07:87:8e:e1:86:10:16:bd: e1:ab:26:94:66:fd:b1:8f:16:87:32:e6:12:d6:87: f9:4a:bc:ce:44:11:3b:24:61:c0:5b:f4:56:82:83: 04:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B2:F4:85:B7:72:14:E9:FE:7A:5E:59:CD:F6:54:DD:57:78:5D:13 X509v3 Authority Key Identifier: keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:c3:11:77:67:c7:a4:ed:87:91:89:9d:95:1b:d8:99:a5:d7: cd:03:6c:42:6c:fb:60:ff:bd:69:b1:8a:a1:78:f6:cf:3c:ac: ae:f7:1e:6f:b0:a2:4a:03:9c:da:3b:a6:46:b7:ce:82:33:e7: c6:07:3e:13:97:ed:1b:32:4e:51:c2:0b:b0:c3:0d:b7:f0:58: 48:53:c7:02:02:a6:0a:f8:6d:c8:f1:4f:91:70:d6:04:65:da: ab:bc:80:a7:4c:98:16:a8:a7:13:a8:80:b7:af:5a:de:67:66: 6d:49:ff:92:56:39:25:03:16:09:96:c0:bc:c6:7b:ac:ac:82: 3e:ef:cf:9e:70:c4:8e:3c:45:bb:c3:0d:ee:5d:14:f7:2e:e0: 8c:6b:b0:81:07:77:50:63:f1:fe:ca:d3:d1:c5:67:2c:cc:00: 20:06:c5:74:a1:37:c5:69:9c:d8:12:a0:1f:c0:2d:3a:9a:1c: c5:99:06:a8:e5:96:2a:b6:4c:45:53:d6:f0:30:96:21:ea:d1: 67:2c:89:ee:a0:db:96:58:9f:51:94:b8:3b:3f:39:b1:f8:f3: 3b:3d:6b:67:c4:75:f0:67:55:cb:30:75:00:b8:8d:b0:47:5b: 2f:bd:93:5e:03:04:07:ff:01:b5:fb:da:d8:13:d6:59:50:fa: 44:77:32:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86/iVajl0W2qZnDReKaPYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMzVjMWY3YjcxNDBjODcyZTdmM2ZmMzQ2MmI0ZWRjNjMx ZDc2NzQwHhcNMjUxMjIwMTgwMDU2WhcNMjUxMjIxMTgwMDU2WjAzMTEwLwYDVQQD EygyZWIyZjQ4NWI3NzIxNGU5ZmU3YTVlNTljZGY2NTRkZDU3Nzg1ZDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjxuJi23WZmApn870cTyVjykFmri hMdXtnUGUqBF/4hiQ9x8VWEPP8UZDgoAmESlMf5njK+1wKnnMpJMBG1NgovWNmea CdrElcxpH3ITFGI2mLniCzDwDl2D7V+eRcGoQgl5IUZ4YONKZeoR3v2MYeysB47a II385d6K/J3mTnHKM3UxfISS81xCtM3C8pLBeycJKtlxiVC3uh1wyDJKSyJ3AopQ IYVSBekWeIauw15DeQDKZr284dVr19G5h1TMhup3r3EywB5oFcOw8uLD2vyAPWcR sIrFB4eO4YYQFr3hqyaUZv2xjxaHMuYS1of5SrzORBE7JGHAW/RWgoMEMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6y9IW3chTp/npeWc32VN1XeF0TMB8GA1UdIwQY MBaAFGE1wfe3FAyHLn8/80YrTtxjHXZ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVRYQjk3Y1VESWN1ZnpfelJpdE8zR01kZG5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80MzNlZGYtYWFmOC00NjY5LTg3N2Mt ZTM3ODFkOGZlNzRjLzEvWVRYQjk3Y1VESWN1ZnpfelJpdE8zR01kZG5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80MzNlZGYtYWFmOC00NjY5LTg3N2MtZTM3ODFkOGZlNzRj LzEvWVRYQjk3Y1VESWN1ZnpfelJpdE8zR01kZG5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIMMRd2fH pO2HkYmdlRvYmaXXzQNsQmz7YP+9abGKoXj2zzysrvceb7CiSgOc2jumRrfOgjPn xgc+E5ftGzJOUcILsMMNt/BYSFPHAgKmCvhtyPFPkXDWBGXaq7yAp0yYFqinE6iA t69a3mdmbUn/klY5JQMWCZbAvMZ7rKyCPu/PnnDEjjxFu8MN7l0U9y7gjGuwgQd3 UGPx/srT0cVnLMwAIAbFdKE3xWmc2BKgH8AtOpocxZkGqOWWKrZMRVPW8DCWIerR ZyyJ7qDbllifUZS4Oz85sfjzOz1rZ8R18GdVyzB1ALiNsEdbL72TXgMEB/8Btfva 2BPWWVD6RHcynw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:32:21 2025 by rpki-client