This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft File: YWFHDTm-S6LdXfj6R7FjlieOZwo.mft (raw, json) Hash identifier: mkfn3+Y7ztgfW/82wuFZ8a4nr7CWMBUQeEKIZEd4Q6M= Subject key identifier: 69:D7:94:93:78:CE:B2:2D:8E:00:61:F6:B2:D9:8C:F0:01:F5:E3:B5 Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A Certificate issuer: /CN=6161470d39be4ba2dd5df8fa47b16396278e670a Certificate serial: 019B3D908CD04E5171A0F6A9D6B8A36FE422 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft Manifest number: 133C Signing time: Sat 20 Dec 2025 21:00:41 +0000 Manifest this update: Sat 20 Dec 2025 21:00:41 +0000 Manifest next update: Sun 21 Dec 2025 21:00:41 +0000 Files and hashes: 1: AbbCpXYiPra6RxhQTvg6tXGKv2M.roa (hash: FNfTwP/KDnV+ro4Bwjh1vRofBv3ZvkWsRE+40NBNKuk=) 2: FGboOzE5w8Avx6zvXiGJurlcXzU.roa (hash: ME54k9XxSNDAp5P0H67LsrOuZ6Ebe7/DSYtgtZypMoY=) 3: Wbf3TpGPW6_mWaG66XxtMUTmb5k.roa (hash: Kx6Oc/JjYSTEsN+RCZ0T24iZupA82iqVacFfzuICYqY=) 4: YWFHDTm-S6LdXfj6R7FjlieOZwo.crl (hash: sqmbGHmcyL2n9D1JxWhNPZUv5Mrytd6qD5g9e+cETUc=) 5: hqDxB-Ir5z3Y_G6a9rOSto5ZH88.roa (hash: 2802mZRHrPPS6iUejTLOubgUc+cQnwe3PYotooKVAJk=) 6: od5OSHsrRHxJrICxzwVu43I_RWY.roa (hash: EQRBns0cqYxWGEdIIr3QIm5kW2CuUKF+BPL8pSHvs8Q=) 7: p03EoH5XFva0OIfQnxqffNm4ZvE.roa (hash: Wew8is0Ow617QiWMc1vuUJjZYXt68/dM84EY8eQITFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:8c:d0:4e:51:71:a0:f6:a9:d6:b8:a3:6f:e4:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a Validity Not Before: Dec 20 21:00:41 2025 GMT Not After : Dec 21 21:00:41 2025 GMT Subject: CN=69d7949378ceb22d8e0061f6b2d98cf001f5e3b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8b:6a:37:8b:d7:df:e7:17:e3:b2:5f:fc:78: 01:ce:ab:a6:57:bf:f7:29:13:ed:f9:66:42:d6:24: dd:d2:23:47:0a:d5:c7:72:3e:b4:c5:7f:29:ef:40: ac:46:25:21:c8:9e:9e:de:3a:59:f2:35:ec:fe:90: cf:f4:99:8a:aa:89:12:6f:8c:39:13:0b:cc:55:9b: 5b:70:dc:b1:7b:3c:11:53:02:b4:e7:58:64:55:68: 87:36:7e:a8:7b:ec:c3:33:99:00:02:90:bb:e2:2c: 3e:3d:95:91:f4:37:33:d0:2e:48:94:d5:6f:ce:99: 3b:60:e9:5f:df:5a:99:fc:00:b3:dd:8a:de:6f:e0: 3e:87:3c:b7:63:6a:4d:16:05:d2:8d:31:8a:ab:e9: 5a:fb:0e:dd:aa:e6:f3:b7:bf:1c:46:5a:a8:05:a0: 33:12:4c:51:e7:f8:ec:fc:3b:d7:fa:fd:aa:ff:36: f0:24:01:58:65:29:e4:3d:f4:04:12:03:5b:27:40: de:51:47:ee:a8:5b:66:b4:8b:10:94:e5:3d:e4:08: 21:98:c2:d2:fc:4d:e6:e4:00:db:1e:69:36:d7:4b: e8:15:80:02:dc:3d:41:9e:3f:bc:cc:03:c2:70:bc: 9b:0d:99:d1:f7:01:1d:dd:dd:69:bb:01:8f:30:97: 83:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D7:94:93:78:CE:B2:2D:8E:00:61:F6:B2:D9:8C:F0:01:F5:E3:B5 X509v3 Authority Key Identifier: keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:a7:d7:e0:d7:cc:6e:d7:10:79:a2:5f:ef:4c:03:c2:11:b9: d5:5d:e3:68:93:5f:4d:8b:30:72:ef:d2:a3:7c:5d:30:72:f2: f6:91:e3:25:2b:41:a4:63:f9:ba:e3:08:20:29:c6:65:c2:78: 65:6c:f6:9b:ba:7a:41:52:b3:fb:7a:35:5a:c7:59:bd:4e:f1: d6:91:a6:3f:ab:b6:37:7f:76:5d:58:07:3b:52:cc:5d:44:d3: 17:fc:ab:95:a1:7d:c7:46:f3:d6:2e:66:21:f2:94:16:a6:ba: 3b:90:08:87:ea:85:db:4b:97:32:2c:4b:3a:a0:06:0c:57:1e: fa:1b:1e:ee:08:33:d0:3d:85:6f:5e:9e:c8:4f:77:af:18:30: 38:49:9c:4a:52:53:98:b9:97:9a:c6:8c:e1:f3:1c:c3:af:22: 8f:df:64:a0:4d:db:9e:19:5f:06:7a:a4:36:dd:94:24:96:a5: 2b:37:20:5e:fa:16:96:da:07:15:d3:4f:6b:22:9e:53:ef:49: 11:de:cf:cf:5c:70:ee:84:a5:5d:43:e0:2e:46:d0:4a:6a:94: 27:90:f8:c6:6c:68:fa:66:c9:0f:e5:b6:fa:c5:ba:a3:b6:10: ff:a1:3a:77:38:44:e6:a3:33:b9:5d:60:5c:9f:a6:1b:e5:02: 7e:13:b6:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kIzQTlFxoPap1rijb+QiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNjE0NzBkMzliZTRiYTJkZDVkZjhmYTQ3YjE2Mzk2Mjc4 ZTY3MGEwHhcNMjUxMjIwMjEwMDQxWhcNMjUxMjIxMjEwMDQxWjAzMTEwLwYDVQQD Eyg2OWQ3OTQ5Mzc4Y2ViMjJkOGUwMDYxZjZiMmQ5OGNmMDAxZjVlM2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4tqN4vX3+cX47Jf/HgBzqumV7/3 KRPt+WZC1iTd0iNHCtXHcj60xX8p70CsRiUhyJ6e3jpZ8jXs/pDP9JmKqokSb4w5 EwvMVZtbcNyxezwRUwK051hkVWiHNn6oe+zDM5kAApC74iw+PZWR9Dcz0C5IlNVv zpk7YOlf31qZ/ACz3Yreb+A+hzy3Y2pNFgXSjTGKq+la+w7dqubzt78cRlqoBaAz EkxR5/js/DvX+v2q/zbwJAFYZSnkPfQEEgNbJ0DeUUfuqFtmtIsQlOU95AghmMLS /E3m5ADbHmk210voFYAC3D1Bnj+8zAPCcLybDZnR9wEd3d1puwGPMJeDjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnXlJN4zrItjgBh9rLZjPAB9eO1MB8GA1UdIwQY MBaAFGFhRw05vkui3V34+kexY5YnjmcKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVdGSERUbS1TNkxkWGZqNlI3RmpsaWVPWndvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9lNTE4NTYtZTUyZS00YjI0LThjOTkt YzI0MGJmYzljYmMxLzEvWVdGSERUbS1TNkxkWGZqNlI3RmpsaWVPWndvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9lNTE4NTYtZTUyZS00YjI0LThjOTktYzI0MGJmYzljYmMx LzEvWVdGSERUbS1TNkxkWGZqNlI3RmpsaWVPWndvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKfX4NfM btcQeaJf70wDwhG51V3jaJNfTYswcu/So3xdMHLy9pHjJStBpGP5uuMIICnGZcJ4 ZWz2m7p6QVKz+3o1WsdZvU7x1pGmP6u2N392XVgHO1LMXUTTF/yrlaF9x0bz1i5m IfKUFqa6O5AIh+qF20uXMixLOqAGDFce+hse7ggz0D2Fb16eyE93rxgwOEmcSlJT mLmXmsaM4fMcw68ij99koE3bnhlfBnqkNt2UJJalKzcgXvoWltoHFdNPayKeU+9J Ed7Pz1xw7oSlXUPgLkbQSmqUJ5D4xmxo+mbJD+W2+sW6o7YQ/6E6dzhE5qMzuV1g XJ+mG+UCfhO2KA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:13:16 2025 by rpki-client