This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft File: Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft (raw, json) Hash identifier: lJ4cw/qqD060/nj0IK4U7GkfS1qj7g2ozPneZ27IWDo= Subject key identifier: 71:3D:4C:62:BC:FC:75:96:55:53:58:C5:5F:13:8E:50:A7:A6:56:5C Authority key identifier: 62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D Certificate issuer: /CN=625b5cf9e29912448cbbbc86d20561899cdb104d Certificate serial: 019B43C98A1D3EBD57B404592F870CD6B89F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft Manifest number: 1348 Signing time: Mon 22 Dec 2025 02:00:39 +0000 Manifest this update: Mon 22 Dec 2025 02:00:39 +0000 Manifest next update: Tue 23 Dec 2025 02:00:39 +0000 Files and hashes: 1: 3ir5WkvJIRxtwZei2sctSN0sCz0.roa (hash: kbUd9aHqn6kQ8QUhYDDaCsn+6zI4AKFQfFGDo83vd6o=) 2: Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl (hash: D6ReaNprPgFptkPRtm1odxDq7JQPNo9Qucixne1S2Qo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:8a:1d:3e:bd:57:b4:04:59:2f:87:0c:d6:b8:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=625b5cf9e29912448cbbbc86d20561899cdb104d Validity Not Before: Dec 22 02:00:39 2025 GMT Not After : Dec 23 02:00:39 2025 GMT Subject: CN=713d4c62bcfc7596555358c55f138e50a7a6565c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e6:cb:24:98:54:11:d9:91:69:2b:a0:30:8f: 31:b2:3e:34:16:52:ba:eb:13:65:3b:38:e6:2c:86: 7a:b5:4a:9d:e1:55:02:2f:4c:56:64:10:90:36:67: b0:75:4b:72:c3:00:90:33:d6:e4:09:54:20:55:21: 1b:22:88:4b:9d:87:59:ed:2a:b2:82:21:8b:9b:6d: fb:37:39:9e:f1:e4:d3:e6:49:43:56:99:d6:28:2d: b5:b7:89:49:c1:3c:9c:32:a0:f6:70:29:36:95:3b: 2e:8b:e5:ae:46:10:82:8e:4f:3a:13:3c:20:7b:41: e7:e4:35:d6:07:33:68:03:ea:24:30:e7:e1:2b:c9: 87:2e:d6:2d:8c:63:bc:16:4e:ba:ce:c2:b9:b3:55: f9:3e:2d:b3:1a:8e:04:1e:4d:20:0d:b1:e6:c6:b8: 57:37:4b:5d:d2:9b:65:03:95:78:ef:d2:32:9d:62: 5c:d5:2e:cf:5b:ea:c5:21:d8:6e:c3:0f:4b:aa:88: 6d:96:55:12:59:27:68:6f:e0:0c:b2:fb:90:1f:05: 4a:32:3d:74:e0:cf:09:53:78:70:62:b6:b2:8b:e8: d9:bd:e8:35:81:d4:d6:01:b6:d6:01:7c:46:22:9d: 6a:b9:6e:5c:4c:58:30:da:7a:b1:89:62:14:54:10: d6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3D:4C:62:BC:FC:75:96:55:53:58:C5:5F:13:8E:50:A7:A6:56:5C X509v3 Authority Key Identifier: keyid:62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:08:c6:2d:51:42:95:bd:5b:78:62:9f:16:49:26:25:42:12: c2:38:5d:03:5a:4b:56:84:e4:d7:a3:e7:60:56:e6:92:ec:8e: fa:e7:d3:e8:8a:99:7d:21:3d:59:b8:43:75:91:90:a8:13:f0: be:dd:86:d2:28:13:7f:ec:52:a7:e6:9e:14:0e:09:e1:83:44: 6c:18:a5:3d:03:95:e0:f6:38:08:d7:ee:0c:c4:2f:26:e5:f5: 6a:00:72:5a:f7:01:af:6b:61:2a:1e:0a:6b:b2:ae:05:82:d6: cf:ad:d5:7c:00:36:2a:f9:ba:98:8f:eb:ae:25:06:be:ce:1f: 30:86:4c:43:1e:7d:9d:a6:68:8e:8d:d6:05:e4:c0:81:d9:bb: 23:ea:ee:d1:ba:9f:53:cc:78:b2:26:2d:02:04:1d:ef:76:10: d2:dd:b8:57:30:c1:50:ec:48:0e:7f:a0:9b:42:9e:28:ef:1d: c4:91:28:3d:7f:2e:c6:61:8c:37:b8:be:f1:16:53:2a:cc:34: ec:7b:fe:54:cd:68:9b:5d:7b:7e:2a:a8:ef:9e:af:24:86:3f: 6e:c6:71:58:cc:5a:84:db:e4:8f:9a:9b:2f:f7:b4:17:f4:24: 44:f5:fc:bd:97:54:ca:16:38:3d:9e:dc:41:22:f8:5c:e2:ad: 18:10:5e:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDyYodPr1XtARZL4cM1rifMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNWI1Y2Y5ZTI5OTEyNDQ4Y2JiYmM4NmQyMDU2MTg5OWNk YjEwNGQwHhcNMjUxMjIyMDIwMDM5WhcNMjUxMjIzMDIwMDM5WjAzMTEwLwYDVQQD Eyg3MTNkNGM2MmJjZmM3NTk2NTU1MzU4YzU1ZjEzOGU1MGE3YTY1NjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiObLJJhUEdmRaSugMI8xsj40FlK6 6xNlOzjmLIZ6tUqd4VUCL0xWZBCQNmewdUtywwCQM9bkCVQgVSEbIohLnYdZ7Sqy giGLm237Nzme8eTT5klDVpnWKC21t4lJwTycMqD2cCk2lTsui+WuRhCCjk86Ezwg e0Hn5DXWBzNoA+okMOfhK8mHLtYtjGO8Fk66zsK5s1X5Pi2zGo4EHk0gDbHmxrhX N0td0ptlA5V479IynWJc1S7PW+rFIdhuww9LqohtllUSWSdob+AMsvuQHwVKMj10 4M8JU3hwYrayi+jZveg1gdTWAbbWAXxGIp1quW5cTFgw2nqxiWIUVBDWswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHE9TGK8/HWWVVNYxV8TjlCnplZcMB8GA1UdIwQY MBaAFGJbXPnimRJEjLu8htIFYYmc2xBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWx0Yy1lS1pFa1NNdTd5RzBnVmhpWnpiRUUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85N2NjYWItZDBjOC00MmU4LTg3MjUt YTU4NmIwN2FkZDcyLzEvWWx0Yy1lS1pFa1NNdTd5RzBnVmhpWnpiRUUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy85N2NjYWItZDBjOC00MmU4LTg3MjUtYTU4NmIwN2FkZDcy LzEvWWx0Yy1lS1pFa1NNdTd5RzBnVmhpWnpiRUUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQjGLVFC lb1beGKfFkkmJUISwjhdA1pLVoTk16PnYFbmkuyO+ufT6IqZfSE9WbhDdZGQqBPw vt2G0igTf+xSp+aeFA4J4YNEbBilPQOV4PY4CNfuDMQvJuX1agByWvcBr2thKh4K a7KuBYLWz63VfAA2Kvm6mI/rriUGvs4fMIZMQx59naZojo3WBeTAgdm7I+ru0bqf U8x4siYtAgQd73YQ0t24VzDBUOxIDn+gm0KeKO8dxJEoPX8uxmGMN7i+8RZTKsw0 7Hv+VM1om117fiqo756vJIY/bsZxWMxahNvkj5qbL/e0F/QkRPX8vZdUyhY4PZ7c QSL4XOKtGBBebg== -----END CERTIFICATE-----Generated at Mon Dec 22 07:20:13 2025 by rpki-client