This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft File: YQfi4ugXHTGdobxks2w8mF5kbCo.mft (raw, json) Hash identifier: VD0zXQF1N8KXaQgqAkQ5ImFch/rQtx0qeuexRa1Ne1g= Subject key identifier: B0:F4:4F:7C:B9:79:E5:E0:CA:0A:92:5C:BA:33:26:1F:63:84:1C:5C Authority key identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A Certificate issuer: /CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a Certificate serial: 019B3BD944A5AD19CE12F4FE3EF92AFB0DBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft Manifest number: 178E Signing time: Sat 20 Dec 2025 13:00:53 +0000 Manifest this update: Sat 20 Dec 2025 13:00:53 +0000 Manifest next update: Sun 21 Dec 2025 13:00:53 +0000 Files and hashes: 1: 2lOhAzlC5K0mMI8bchXi_D9R3Rw.roa (hash: wULZZ92mny/AlScu8gAC9jEDmMKs+7xfe1mY5oB7zrA=) 2: Djx6QNMoJb-cW9yeKmXUOuLZGxc.roa (hash: kSdS/jX6rRQff6lKohOcXS4NIaspZuS+tTFddGQqIfY=) 3: YQfi4ugXHTGdobxks2w8mF5kbCo.crl (hash: oyOISvA828hhskaPIGvZ9rFUKigU3Ukd+4uIm1C4a8g=) 4: n7FqNgB42yMNZn9HsllZdTK6BM4.roa (hash: El5LuNO8gbAy7J9nIaZ/6jvlxDskopE6EQQyObfppsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:44:a5:ad:19:ce:12:f4:fe:3e:f9:2a:fb:0d:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a Validity Not Before: Dec 20 13:00:53 2025 GMT Not After : Dec 21 13:00:53 2025 GMT Subject: CN=b0f44f7cb979e5e0ca0a925cba33261f63841c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e0:e8:28:e9:b9:15:df:85:b7:1b:94:12:59: ef:ba:bc:9e:22:77:a1:d9:19:a9:2f:12:2a:50:30: f4:e7:88:87:26:0c:c7:7f:be:be:63:40:bd:5d:3a: 31:0c:69:d6:ab:e7:ba:11:22:58:cb:32:60:c9:77: c3:3c:2d:1e:17:77:06:2b:a2:81:5d:92:d0:a2:9b: e1:59:0e:2b:47:af:e1:b2:c1:5c:5d:f9:f7:9a:ba: cf:ae:f5:c3:89:1b:8e:82:66:0f:8b:e0:19:88:2e: c6:31:04:b0:a2:a6:35:92:d0:a5:72:18:5e:4a:da: 3b:fd:31:ac:7d:f4:20:df:c9:81:b4:8d:c8:18:5d: 7d:3c:24:1d:37:ef:71:40:99:0e:19:ad:84:86:21: 9c:bc:e6:f8:e6:77:37:9f:1a:ce:0e:cd:5e:87:c3: a6:d4:ec:92:65:77:24:b4:27:3d:c9:21:7b:4f:36: 21:97:47:b8:c0:70:b5:1d:87:1b:26:b1:b2:71:8b: 71:5a:c7:05:b5:4d:30:8f:9c:4c:23:d8:03:a5:b4: ca:13:90:83:e9:a7:d2:f1:6e:1c:3a:82:90:1b:35: cf:6e:d8:22:96:6c:80:e0:2e:68:0e:9d:36:15:44: e3:c3:ed:9d:b2:ad:87:69:48:45:11:df:62:41:3b: 4f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F4:4F:7C:B9:79:E5:E0:CA:0A:92:5C:BA:33:26:1F:63:84:1C:5C X509v3 Authority Key Identifier: keyid:61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:f6:4e:b5:32:b4:49:e2:b9:da:cd:4d:12:04:7e:63:ec:23: bd:68:a2:85:26:41:54:5b:e5:84:96:18:b9:29:01:c1:dd:8b: 52:3c:93:8e:cf:68:55:73:07:1b:b5:79:b7:00:27:0e:ae:16: c2:96:d4:ce:16:ef:9c:e3:cb:ac:7d:a9:2f:87:f0:87:b3:44: 6e:48:ea:58:f7:1f:86:41:3a:07:5d:d6:56:fe:db:0b:46:cd: 72:eb:f6:f3:ca:f6:e1:b7:69:09:5c:7e:4d:ce:8b:12:60:bb: cf:b8:0d:c3:d8:02:55:c8:34:ef:ed:41:05:a3:cf:21:08:7c: 7e:19:c7:aa:4d:be:1e:09:4e:cd:0c:38:01:2a:fd:56:ce:2e: bf:27:8b:1a:73:ed:89:dd:e9:f0:8f:45:75:1b:69:4b:c1:39: fc:7d:cd:d7:2c:50:e4:7e:4f:cf:eb:7d:9b:bd:0c:77:9b:32: 9b:0b:62:0d:ca:b5:a6:ba:1e:c7:4c:76:8d:74:52:69:b3:a0: c7:44:dc:1b:1d:6f:54:a3:0d:09:59:e5:09:18:4d:6c:d1:cd: 23:97:07:2d:fb:c8:d4:3e:61:83:73:27:5c:95:f0:9a:26:40: 2d:94:9a:06:43:7b:c5:65:8a:d9:85:dc:db:a4:2b:19:de:63: 68:9b:e6:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72USlrRnOEvT+Pvkq+w29MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMDdlMmUyZTgxNzFkMzE5ZGExYmM2NGIzNmMzYzk4NWU2 NDZjMmEwHhcNMjUxMjIwMTMwMDUzWhcNMjUxMjIxMTMwMDUzWjAzMTEwLwYDVQQD EyhiMGY0NGY3Y2I5NzllNWUwY2EwYTkyNWNiYTMzMjYxZjYzODQxYzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eDoKOm5Fd+FtxuUElnvuryeIneh 2RmpLxIqUDD054iHJgzHf76+Y0C9XToxDGnWq+e6ESJYyzJgyXfDPC0eF3cGK6KB XZLQopvhWQ4rR6/hssFcXfn3mrrPrvXDiRuOgmYPi+AZiC7GMQSwoqY1ktClchhe Sto7/TGsffQg38mBtI3IGF19PCQdN+9xQJkOGa2EhiGcvOb45nc3nxrODs1eh8Om 1OySZXcktCc9ySF7TzYhl0e4wHC1HYcbJrGycYtxWscFtU0wj5xMI9gDpbTKE5CD 6afS8W4cOoKQGzXPbtgilmyA4C5oDp02FUTjw+2dsq2HaUhFEd9iQTtPPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLD0T3y5eeXgygqSXLozJh9jhBxcMB8GA1UdIwQY MBaAFGEH4uLoFx0xnaG8ZLNsPJheZGwqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVFmaTR1Z1hIVEdkb2J4a3MydzhtRjVrYkNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iMDdlNTgtZjkzYS00ZDVmLWI5MmQt NjAxNmQ1YzA1ZjMwLzEvWVFmaTR1Z1hIVEdkb2J4a3MydzhtRjVrYkNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9iMDdlNTgtZjkzYS00ZDVmLWI5MmQtNjAxNmQ1YzA1ZjMw LzEvWVFmaTR1Z1hIVEdkb2J4a3MydzhtRjVrYkNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPZOtTK0 SeK52s1NEgR+Y+wjvWiihSZBVFvlhJYYuSkBwd2LUjyTjs9oVXMHG7V5twAnDq4W wpbUzhbvnOPLrH2pL4fwh7NEbkjqWPcfhkE6B13WVv7bC0bNcuv288r24bdpCVx+ Tc6LEmC7z7gNw9gCVcg07+1BBaPPIQh8fhnHqk2+HglOzQw4ASr9Vs4uvyeLGnPt id3p8I9FdRtpS8E5/H3N1yxQ5H5Pz+t9m70Md5symwtiDcq1proex0x2jXRSabOg x0TcGx1vVKMNCVnlCRhNbNHNI5cHLfvI1D5hg3MnXJXwmiZALZSaBkN7xWWK2YXc 26QrGd5jaJvmFw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:47:21 2025 by rpki-client