This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft File: YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft (raw, json) Hash identifier: um4pWQ62sjdG2YlTZSM4CwTxpKSRZn8QVqUMC2nv/24= Subject key identifier: 41:94:AE:01:4F:D5:AB:32:1A:8D:E6:71:A7:A4:D7:75:1C:5E:6A:70 Authority key identifier: 61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC Certificate issuer: /CN=6133ec1a240143dae111bb92d192dabf775d81ec Certificate serial: 019B3344B3BA3AA808D51FADF0B81331E3FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft Manifest number: 0A29 Signing time: Thu 18 Dec 2025 21:01:38 +0000 Manifest this update: Thu 18 Dec 2025 21:01:38 +0000 Manifest next update: Fri 19 Dec 2025 21:01:38 +0000 Files and hashes: 1: COcUW0x5kxM0ZoYaE6bjH_ilI5I.roa (hash: DiDBhNFDOT29doleyEuXM5Xz1UWaH+5+crJRRQCdBnI=) 2: YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl (hash: i2UuSapE4MqeCylzM9/9vxvelp6ty+wx0e8IfKyFkg8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:b3:ba:3a:a8:08:d5:1f:ad:f0:b8:13:31:e3:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6133ec1a240143dae111bb92d192dabf775d81ec Validity Not Before: Dec 18 21:01:38 2025 GMT Not After : Dec 19 21:01:38 2025 GMT Subject: CN=4194ae014fd5ab321a8de671a7a4d7751c5e6a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d1:6e:48:05:2f:55:8a:c2:12:69:4d:d4:5f: 96:b6:f7:ae:f9:92:fc:77:3f:4a:5c:08:51:42:5f: e7:c5:7f:0f:15:c3:c5:73:9f:68:11:8c:5d:86:52: 23:1b:9c:e9:b2:9c:ef:e3:07:41:c9:ef:b8:ef:4c: 14:3d:23:7d:ef:76:1f:6a:e4:30:33:49:25:bd:ec: 0b:09:9c:56:57:a6:84:0d:92:d4:5f:83:37:01:b3: c8:e8:1d:56:93:72:c6:29:b2:4c:47:e7:38:82:9f: 3f:23:7e:70:12:73:a1:3d:4f:95:4b:fc:e4:ee:dd: e1:f3:96:6c:c2:64:cb:d5:6b:de:5e:4c:e0:57:87: 6e:6b:a7:59:08:1d:ea:19:79:67:db:71:e8:db:4b: be:9b:9c:c0:6a:2b:78:61:ad:46:11:7f:d4:ce:97: 25:71:06:82:0f:76:ca:e7:92:a2:65:ac:19:49:02: e2:2c:e6:1e:f7:26:11:ae:fd:2d:ee:2b:a4:3b:a7: d2:90:02:79:4b:fb:df:c3:82:d5:1f:c6:19:a5:14: 5a:02:7b:b5:64:5e:66:b2:aa:e6:8b:74:fd:61:93: 5d:78:62:47:b4:32:49:82:e6:aa:09:b9:5b:82:72: c8:8f:33:38:40:b2:27:16:3c:b8:4e:96:6a:dc:45: 54:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:94:AE:01:4F:D5:AB:32:1A:8D:E6:71:A7:A4:D7:75:1C:5E:6A:70 X509v3 Authority Key Identifier: keyid:61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:f3:05:03:3a:6e:d2:a7:dd:c4:0d:2d:1d:38:77:9c:9c:77: 28:ae:12:30:12:56:9b:f0:e4:42:9c:4d:8b:ef:c1:fe:d6:10: fb:d3:8c:83:49:ba:ec:48:82:26:fd:53:28:4a:df:97:31:db: f4:54:ee:76:ae:5f:7c:6f:5b:68:64:45:7d:4e:42:18:64:7a: 43:45:d3:6c:48:9e:dd:48:82:1d:47:64:ac:38:1f:3a:b9:07: 60:15:5f:cd:3d:e6:cf:2a:7f:97:22:2b:da:96:16:b4:ad:1d: 07:d9:27:ee:32:ef:4a:63:1b:3c:e0:e9:39:18:db:74:11:7b: bd:6f:4a:35:a2:ae:3a:b1:b6:b8:32:b6:1e:d7:98:ad:2b:26: e2:f9:88:cd:ca:eb:8c:76:ad:32:9b:b6:e9:f8:ab:20:d1:dc: 22:49:93:9b:a9:50:ee:dd:9d:8d:42:9e:fe:67:49:07:cf:9a: b4:1e:e3:e6:b6:20:32:b2:43:eb:4a:9b:6a:5a:90:af:f9:c9: 16:2a:e2:91:46:76:cb:b3:2b:fe:00:7d:10:d1:41:be:ef:f8: d3:6a:a7:65:f0:54:fe:5e:0a:57:9e:cb:bd:b2:9b:58:12:c5: 10:52:75:2a:13:d2:f0:20:66:4b:02:d0:d2:37:09:79:ad:b2: b8:e8:a8:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRLO6OqgI1R+t8LgTMeP6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMzNlYzFhMjQwMTQzZGFlMTExYmI5MmQxOTJkYWJmNzc1 ZDgxZWMwHhcNMjUxMjE4MjEwMTM4WhcNMjUxMjE5MjEwMTM4WjAzMTEwLwYDVQQD Eyg0MTk0YWUwMTRmZDVhYjMyMWE4ZGU2NzFhN2E0ZDc3NTFjNWU2YTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdFuSAUvVYrCEmlN1F+Wtveu+ZL8 dz9KXAhRQl/nxX8PFcPFc59oEYxdhlIjG5zpspzv4wdBye+470wUPSN973YfauQw M0klvewLCZxWV6aEDZLUX4M3AbPI6B1Wk3LGKbJMR+c4gp8/I35wEnOhPU+VS/zk 7t3h85ZswmTL1WveXkzgV4dua6dZCB3qGXln23Ho20u+m5zAait4Ya1GEX/Uzpcl cQaCD3bK55KiZawZSQLiLOYe9yYRrv0t7iukO6fSkAJ5S/vfw4LVH8YZpRRaAnu1 ZF5msqrmi3T9YZNdeGJHtDJJguaqCblbgnLIjzM4QLInFjy4TpZq3EVUPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGUrgFP1asyGo3mcaek13UcXmpwMB8GA1UdIwQY MBaAFGEz7BokAUPa4RG7ktGS2r93XYHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVRQc0dpUUJROXJoRWJ1UzBaTGF2M2RkZ2V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84MzFmNTMtOTBkMS00MjA4LWE2ZDUt YzVmZTQ0NDIwYzA5LzEvWVRQc0dpUUJROXJoRWJ1UzBaTGF2M2RkZ2V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84MzFmNTMtOTBkMS00MjA4LWE2ZDUtYzVmZTQ0NDIwYzA5 LzEvWVRQc0dpUUJROXJoRWJ1UzBaTGF2M2RkZ2V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvMFAzpu 0qfdxA0tHTh3nJx3KK4SMBJWm/DkQpxNi+/B/tYQ+9OMg0m67EiCJv1TKErflzHb 9FTudq5ffG9baGRFfU5CGGR6Q0XTbEie3UiCHUdkrDgfOrkHYBVfzT3mzyp/lyIr 2pYWtK0dB9kn7jLvSmMbPODpORjbdBF7vW9KNaKuOrG2uDK2HteYrSsm4vmIzcrr jHatMpu26firINHcIkmTm6lQ7t2djUKe/mdJB8+atB7j5rYgMrJD60qbalqQr/nJ FirikUZ2y7Mr/gB9ENFBvu/402qnZfBU/l4KV57LvbKbWBLFEFJ1KhPS8CBmSwLQ 0jcJea2yuOio4A== -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:52 2025 by rpki-client