This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft File: Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft (raw, json) Hash identifier: l5GV5kyJM3i+DRNXJm1VYYr5gzPPx6t/s7v8AH1aRQg= Subject key identifier: 24:AA:1C:E1:8A:FA:8E:73:DD:4F:5B:22:4D:25:F9:DE:F0:3D:AB:80 Authority key identifier: 62:DD:5A:40:75:42:8A:7F:C9:AC:94:E6:D2:A2:D9:A9:92:EF:48:53 Certificate issuer: /CN=62dd5a4075428a7fc9ac94e6d2a2d9a992ef4853 Certificate serial: 019B41370CF6947F7AA08486312B6E51C8BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 14:01:25 +0000 Manifest this update: Sun 21 Dec 2025 14:01:25 +0000 Manifest next update: Mon 22 Dec 2025 14:01:25 +0000 Files and hashes: 1: BLUnMEvzOCDdig3vAOJNkanKcVQ.roa (hash: FOxz1hyJdKlYisYef78m6hR6cwVT1BQH7/wecUVrCqc=) 2: Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl (hash: ztRUqgduWRJeRa9ZIPG9cmAHePpMhpTmtRzt/ICP/F4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:37:0c:f6:94:7f:7a:a0:84:86:31:2b:6e:51:c8:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62dd5a4075428a7fc9ac94e6d2a2d9a992ef4853 Validity Not Before: Dec 21 14:01:25 2025 GMT Not After : Dec 22 14:01:25 2025 GMT Subject: CN=24aa1ce18afa8e73dd4f5b224d25f9def03dab80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b0:6c:3f:1a:a0:0d:16:40:8b:cb:30:06:63: 7a:94:20:a5:8f:b8:2f:3e:4d:0b:ae:f0:8c:55:ee: 8d:25:b1:9e:63:40:c1:20:46:f0:ee:b4:9c:39:7f: 11:74:c8:e6:a6:49:42:c2:8d:b6:20:ff:eb:f9:44: 74:c8:d6:15:ac:e0:56:00:ef:03:91:1a:42:3e:f0: 4b:15:71:15:59:ff:28:6e:93:14:6c:19:f5:53:0b: 51:70:5e:f2:dd:7d:e5:54:22:15:bf:b9:d0:df:ff: a7:f6:55:1c:d6:00:ef:f8:04:7d:4a:e7:c5:99:9f: 79:d3:86:36:4a:f1:e7:75:b9:1a:89:2a:2c:9f:a7: 60:28:94:d7:c5:7a:28:f1:9e:55:ee:dd:46:21:76: 65:68:e3:ef:7c:8f:8f:35:f8:d5:13:9a:43:36:06: 66:0c:5c:7c:1c:7d:49:a8:98:cf:bb:5b:be:1e:d1: fe:20:2a:1c:b4:4a:c5:b1:ad:4e:21:cc:81:3a:a5: 1b:28:62:bf:1e:df:49:12:a7:eb:9a:7b:d8:2f:a2: 7f:30:a2:1a:9e:23:37:f4:86:6e:d7:a4:c9:13:b5: 9a:2d:4d:d6:3b:6c:1f:fa:92:0d:f5:33:a1:96:ef: 9a:36:dd:b8:73:48:f8:5e:fe:c9:dd:52:33:06:0c: fe:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AA:1C:E1:8A:FA:8E:73:DD:4F:5B:22:4D:25:F9:DE:F0:3D:AB:80 X509v3 Authority Key Identifier: keyid:62:DD:5A:40:75:42:8A:7F:C9:AC:94:E6:D2:A2:D9:A9:92:EF:48:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:ad:b7:1b:4d:dd:80:96:a2:37:6e:c8:27:f5:58:11:38:a1: 56:88:c7:d4:34:55:5f:46:33:5f:9c:ce:66:8b:ea:15:5f:3d: b2:53:c6:f6:18:9d:6f:00:3a:50:21:56:91:9f:ea:59:c7:2f: 91:f0:4f:26:29:cb:64:7b:4e:6e:91:0c:69:4b:07:55:50:72: 96:b4:d4:0f:41:de:d2:d4:c8:e0:43:28:21:6a:ed:70:43:91: 84:59:6b:86:7d:4a:27:12:cb:ed:6f:1b:25:b5:14:6b:81:3a: 66:a0:12:ff:06:96:8c:24:ce:19:37:df:14:30:0f:1d:b0:d7: aa:b6:8a:f9:74:aa:bf:39:02:be:0d:73:f2:c3:60:96:51:87: e3:c2:1e:d7:b6:e2:ba:be:23:88:36:67:b2:fe:93:3e:94:04: 48:94:68:af:90:f2:6f:f5:35:49:c4:5d:bb:da:9d:8d:44:79: b6:30:10:55:60:d8:a4:65:42:2b:82:6d:16:67:10:92:f3:42: c8:92:ca:11:93:39:28:31:c2:39:42:6a:9e:8a:a3:7c:27:74: 63:e0:92:ad:6c:6e:b9:91:28:cf:71:7e:b3:e3:00:cd:ef:46: 6a:b9:73:3a:49:df:b9:2f:a8:ad:9c:9e:bd:70:36:a0:a3:d6: 4d:96:b9:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNwz2lH96oISGMStuUci8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZGQ1YTQwNzU0MjhhN2ZjOWFjOTRlNmQyYTJkOWE5OTJl ZjQ4NTMwHhcNMjUxMjIxMTQwMTI1WhcNMjUxMjIyMTQwMTI1WjAzMTEwLwYDVQQD EygyNGFhMWNlMThhZmE4ZTczZGQ0ZjViMjI0ZDI1ZjlkZWYwM2RhYjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrBsPxqgDRZAi8swBmN6lCClj7gv Pk0LrvCMVe6NJbGeY0DBIEbw7rScOX8RdMjmpklCwo22IP/r+UR0yNYVrOBWAO8D kRpCPvBLFXEVWf8obpMUbBn1UwtRcF7y3X3lVCIVv7nQ3/+n9lUc1gDv+AR9SufF mZ9504Y2SvHndbkaiSosn6dgKJTXxXoo8Z5V7t1GIXZlaOPvfI+PNfjVE5pDNgZm DFx8HH1JqJjPu1u+HtH+ICoctErFsa1OIcyBOqUbKGK/Ht9JEqfrmnvYL6J/MKIa niM39IZu16TJE7WaLU3WO2wf+pIN9TOhlu+aNt24c0j4Xv7J3VIzBgz+pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSqHOGK+o5z3U9bIk0l+d7wPauAMB8GA1UdIwQY MBaAFGLdWkB1Qop/yayU5tKi2amS70hTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXQxYVFIVkNpbl9KckpUbTBxTFpxWkx2U0ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzIyYzgtMTRlMy00MDgyLTkyZDEt NjVmODkwMGU1YzgyLzEvWXQxYVFIVkNpbl9KckpUbTBxTFpxWkx2U0ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iNzIyYzgtMTRlMy00MDgyLTkyZDEtNjVmODkwMGU1Yzgy LzEvWXQxYVFIVkNpbl9KckpUbTBxTFpxWkx2U0ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFq23G03d gJaiN27IJ/VYETihVojH1DRVX0YzX5zOZovqFV89slPG9hidbwA6UCFWkZ/qWccv kfBPJinLZHtObpEMaUsHVVBylrTUD0He0tTI4EMoIWrtcEORhFlrhn1KJxLL7W8b JbUUa4E6ZqAS/waWjCTOGTffFDAPHbDXqraK+XSqvzkCvg1z8sNgllGH48Ie17bi ur4jiDZnsv6TPpQESJRor5Dyb/U1ScRdu9qdjUR5tjAQVWDYpGVCK4JtFmcQkvNC yJLKEZM5KDHCOUJqnoqjfCd0Y+CSrWxuuZEoz3F+s+MAze9GarlzOknfuS+orZye vXA2oKPWTZa5+Q== -----END CERTIFICATE-----Generated at Sun Dec 21 17:11:57 2025 by rpki-client