This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft File: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft (raw, json) Hash identifier: /P9QXfQmQm5Rf100t44KpOACNCImoFohXisw/TKzCwY= Subject key identifier: 28:FA:BF:5D:FC:6B:FD:D7:A2:11:17:81:F9:77:D9:38:28:7C:8D:D1 Authority key identifier: 62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65 Certificate issuer: /CN=62c66267943d413cdf760dc6850104c1c0fc1d65 Certificate serial: 019B3E6E2156EF1913CB474921B6459EAF60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft Manifest number: 07A5 Signing time: Sun 21 Dec 2025 01:02:43 +0000 Manifest this update: Sun 21 Dec 2025 01:02:43 +0000 Manifest next update: Mon 22 Dec 2025 01:02:43 +0000 Files and hashes: 1: VDp2XndX6JtfGoVwkuuoCgKyVMU.roa (hash: Rhw0fwZkj0N5t7R6u0JuhOm1mEK44+j2oimY3iLluL4=) 2: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl (hash: CSCbPOtLwkl+3VYH4cns6eBe38DOlCoQc7ESIjvXhjs=) 3: tbUJNdzqV1cqj6cepbLRJaiPbU4.roa (hash: IS4lVDG4Sm/RB8vspTgrINHiyvQuQpEscgsUN00C+BY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6e:21:56:ef:19:13:cb:47:49:21:b6:45:9e:af:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62c66267943d413cdf760dc6850104c1c0fc1d65 Validity Not Before: Dec 21 01:02:43 2025 GMT Not After : Dec 22 01:02:43 2025 GMT Subject: CN=28fabf5dfc6bfdd7a2111781f977d938287c8dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f9:85:2c:aa:d8:fd:67:20:43:5d:bb:f3:2f: a4:f4:a9:1d:a4:20:d6:bb:e9:35:a0:b1:e4:a0:de: e3:ab:12:4c:42:a1:2b:be:11:72:bf:e9:d7:2d:d7: 16:17:cd:58:cc:fd:73:20:25:38:8a:74:f3:32:a2: 3f:63:25:c7:dc:51:a5:b4:b4:19:ed:28:b5:ef:5b: b8:e8:bf:14:8d:01:72:dd:05:e9:7b:9b:2b:96:45: 82:ad:b2:a4:9a:80:f5:d2:76:d8:30:72:f1:b0:d8: 2f:6d:b0:39:05:6c:59:c4:f3:54:49:df:22:84:49: e1:2c:f3:aa:05:27:da:0f:31:da:37:69:71:bb:ad: 75:8c:df:a3:0b:41:3d:9a:f6:88:3c:e1:65:34:d2: a8:0a:16:41:c5:3c:2e:24:13:ad:74:db:6b:e1:b0: 2a:61:47:f6:12:b5:d5:50:3f:fa:61:b2:f2:d2:b7: 19:5b:dc:23:86:40:80:8a:23:3a:e6:3a:db:fa:21: 3f:40:71:27:2f:78:5d:64:18:e6:10:30:e0:3c:d1: 85:a5:b8:78:46:85:95:89:72:4b:68:62:57:25:f7: 94:b2:14:bd:47:e2:33:b7:f2:bb:c5:8b:cd:ac:72: b2:36:75:bc:96:a5:b4:04:fd:52:19:99:37:bd:0c: 1e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FA:BF:5D:FC:6B:FD:D7:A2:11:17:81:F9:77:D9:38:28:7C:8D:D1 X509v3 Authority Key Identifier: keyid:62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:10:c8:71:74:0d:7f:51:67:0a:d7:4a:dc:9d:af:49:4f:82: ba:5f:b4:6f:a1:ee:2d:dd:de:f8:0a:66:5e:95:93:ff:ca:cb: 9f:d4:6f:88:45:39:4c:af:4a:83:38:72:2a:7b:ae:07:f2:f6: 2d:7a:e9:28:45:7b:ad:69:5f:75:42:1c:8d:50:50:8a:fe:cb: 3d:e1:c5:1c:71:4f:2b:a3:b9:93:34:11:c4:0c:34:c3:71:99: cc:5a:ba:a1:ef:9b:4d:18:d5:b5:10:64:81:29:db:54:bb:f8: 30:71:cf:a1:17:ed:cd:1c:14:cc:39:d5:fe:d6:b3:54:5b:d7: f4:fe:28:be:ad:df:51:47:b0:e6:17:77:d1:5c:88:0b:49:47: b4:43:50:cb:bb:4f:58:e6:4b:98:2e:0b:8e:a6:71:f2:fa:ad: 57:74:4a:d6:e0:17:d7:13:cc:d7:2c:21:77:33:0c:9e:79:b6: 61:2b:1d:ed:14:f9:cb:fc:52:74:f4:bd:11:ed:d5:2f:17:0f: fb:bd:34:a8:1c:3b:2f:36:ec:0d:08:0d:8d:71:c0:50:13:aa: a9:0a:81:ca:ed:8d:ee:79:a6:7a:2a:e3:f4:29:53:12:77:5b: 32:9f:99:ef:0b:e9:68:40:a1:e1:a7:80:eb:ea:7f:e5:b5:9b: ec:7e:5c:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+biFW7xkTy0dJIbZFnq9gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYzY2MjY3OTQzZDQxM2NkZjc2MGRjNjg1MDEwNGMxYzBm YzFkNjUwHhcNMjUxMjIxMDEwMjQzWhcNMjUxMjIyMDEwMjQzWjAzMTEwLwYDVQQD EygyOGZhYmY1ZGZjNmJmZGQ3YTIxMTE3ODFmOTc3ZDkzODI4N2M4ZGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfmFLKrY/WcgQ1278y+k9KkdpCDW u+k1oLHkoN7jqxJMQqErvhFyv+nXLdcWF81YzP1zICU4inTzMqI/YyXH3FGltLQZ 7Si171u46L8UjQFy3QXpe5srlkWCrbKkmoD10nbYMHLxsNgvbbA5BWxZxPNUSd8i hEnhLPOqBSfaDzHaN2lxu611jN+jC0E9mvaIPOFlNNKoChZBxTwuJBOtdNtr4bAq YUf2ErXVUD/6YbLy0rcZW9wjhkCAiiM65jrb+iE/QHEnL3hdZBjmEDDgPNGFpbh4 RoWViXJLaGJXJfeUshS9R+Izt/K7xYvNrHKyNnW8lqW0BP1SGZk3vQweQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCj6v138a/3XohEXgfl32TgofI3RMB8GA1UdIwQY MBaAFGLGYmeUPUE833YNxoUBBMHA/B1lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXNaaVo1UTlRVHpmZGczR2hRRUV3Y0Q4SFdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81MGY0ZjctNDljYy00YzgyLTkzMjQt YTlkN2FkNDQyYjNiLzEvWXNaaVo1UTlRVHpmZGczR2hRRUV3Y0Q4SFdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81MGY0ZjctNDljYy00YzgyLTkzMjQtYTlkN2FkNDQyYjNi LzEvWXNaaVo1UTlRVHpmZGczR2hRRUV3Y0Q4SFdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBDIcXQN f1FnCtdK3J2vSU+Cul+0b6HuLd3e+ApmXpWT/8rLn9RviEU5TK9KgzhyKnuuB/L2 LXrpKEV7rWlfdUIcjVBQiv7LPeHFHHFPK6O5kzQRxAw0w3GZzFq6oe+bTRjVtRBk gSnbVLv4MHHPoRftzRwUzDnV/tazVFvX9P4ovq3fUUew5hd30VyIC0lHtENQy7tP WOZLmC4LjqZx8vqtV3RK1uAX1xPM1ywhdzMMnnm2YSsd7RT5y/xSdPS9Ee3VLxcP +700qBw7LzbsDQgNjXHAUBOqqQqByu2N7nmmeirj9ClTEndbMp+Z7wvpaECh4aeA 6+p/5bWb7H5cOw== -----END CERTIFICATE-----Generated at Sun Dec 21 05:20:19 2025 by rpki-client