This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft File: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json) Hash identifier: FSV0RHxr9KsYvCqGUPuSMjSb0JO3d37fBM/E4sPHR+g= Subject key identifier: B4:1B:4C:F5:26:BA:71:22:9A:A2:C1:32:D6:44:42:77:00:5E:66:26 Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53 Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053 Certificate serial: 019B3B6B6E010C4B72497F47AEA57BE8386E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft Manifest number: 0F83 Signing time: Sat 20 Dec 2025 11:00:54 +0000 Manifest this update: Sat 20 Dec 2025 11:00:54 +0000 Manifest next update: Sun 21 Dec 2025 11:00:54 +0000 Files and hashes: 1: CNe8Ce9LX6bIFoae7IEYInIJvX8.roa (hash: vAks/DifGuIDg8MpuhTecKF4JO7GCicanpj2dhKngMI=) 2: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: YxynzunfoMKEN3hxGmwvt7DAAGHC/WIHh870NAKbUBA=) 3: nXfzcpDMArjxgb2F7qR75SrYmPY.roa (hash: 50wVvlHYuRdw/re5wFDGWVBuuEfzzC0RRb8vEvTcySU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:6e:01:0c:4b:72:49:7f:47:ae:a5:7b:e8:38:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053 Validity Not Before: Dec 20 11:00:54 2025 GMT Not After : Dec 21 11:00:54 2025 GMT Subject: CN=b41b4cf526ba71229aa2c132d6444277005e6626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3e:fd:10:d5:41:14:21:92:e5:3f:3c:0a:68: 2b:6d:a6:cd:22:c6:a4:19:55:60:a5:c0:7f:c9:ec: 5f:04:9c:e7:4a:7b:49:f6:ed:60:e9:c0:34:20:02: 50:42:6c:a7:95:f5:09:9c:93:09:5d:93:8e:81:5d: f1:c9:08:ae:93:c4:3f:81:37:e5:38:81:7c:13:7d: 01:ff:10:a6:17:85:9d:c5:24:ad:9a:b0:2e:5f:12: a8:94:5b:b3:4d:38:cb:28:0b:29:59:b2:93:32:19: cd:3e:9a:46:a4:02:ef:f3:28:d8:ae:db:8b:99:0e: a7:21:df:e8:dc:46:8d:cc:b2:38:0b:2f:b7:96:74: 89:4a:9c:e1:d6:f7:7f:40:dd:5f:9b:99:d7:da:8c: d7:d5:6d:54:c9:bf:1d:e5:ba:12:26:17:cf:53:f1: 07:1c:17:cb:1d:c6:52:69:af:86:91:4d:8f:f0:63: 08:aa:ae:2e:fe:a1:04:d3:c4:4d:16:47:49:6c:11: e1:fb:9f:87:18:00:27:98:7b:bc:ce:80:3e:16:48: a7:d3:d6:9f:aa:e5:a5:81:17:01:e8:3b:4d:48:6e: 2d:8e:8e:19:a0:c5:e9:d8:d1:0d:a0:88:a8:ab:c8: 28:8a:60:77:5a:d6:38:f5:fc:42:da:4c:6d:4d:c4: d8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1B:4C:F5:26:BA:71:22:9A:A2:C1:32:D6:44:42:77:00:5E:66:26 X509v3 Authority Key Identifier: keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:6c:66:7e:99:bd:2f:7a:01:77:09:eb:52:bb:c2:fd:b7:4c: 60:6a:f1:6d:fc:00:7e:0b:0c:16:8e:97:7a:bd:4c:62:86:8a: 43:5e:27:e6:cf:8b:de:bf:72:ea:e4:26:0a:7f:37:97:13:e8: e0:c2:4e:c5:b0:7a:5f:b0:d4:ae:01:a8:45:6e:16:9f:a0:9b: 5b:8a:1c:95:84:e3:5d:97:d1:2c:f4:b5:3f:68:17:e8:09:62: b2:ac:38:35:f3:b7:0c:46:2f:31:a1:ca:ed:ca:3b:2a:cf:fe: e0:ba:e9:bf:0b:da:6f:30:35:72:e8:5b:56:39:e2:20:ac:0e: 58:70:e5:cc:3e:1c:f1:fc:ea:f9:69:33:18:ca:aa:d0:70:f3: 89:2d:6a:c1:5e:94:f7:2f:d7:21:5f:98:cc:e0:2c:7c:52:26: 62:a6:8c:50:fd:61:47:6a:d0:dd:fd:53:aa:9a:41:47:cb:92: 85:9b:c4:4b:6e:48:ef:eb:83:d2:8b:6c:a2:be:b2:ff:bd:3c: c0:df:f9:da:c6:1e:7e:78:36:69:2f:b2:06:18:37:d6:c7:2b: 7f:3e:b1:83:4c:6b:85:c1:a9:37:4c:45:90:56:ef:a7:91:a2: fa:69:93:74:36:3c:70:1a:e5:82:69:8e:29:f7:b8:51:30:ba: 98:f0:68:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a24BDEtySX9HrqV76DhuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwODAxMWVhNTFhOWZiY2Y4YmFlMGRmMWVkNDk5YTM0MDdk NjMwNTMwHhcNMjUxMjIwMTEwMDU0WhcNMjUxMjIxMTEwMDU0WjAzMTEwLwYDVQQD EyhiNDFiNGNmNTI2YmE3MTIyOWFhMmMxMzJkNjQ0NDI3NzAwNWU2NjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD79ENVBFCGS5T88CmgrbabNIsak GVVgpcB/yexfBJznSntJ9u1g6cA0IAJQQmynlfUJnJMJXZOOgV3xyQiuk8Q/gTfl OIF8E30B/xCmF4WdxSStmrAuXxKolFuzTTjLKAspWbKTMhnNPppGpALv8yjYrtuL mQ6nId/o3EaNzLI4Cy+3lnSJSpzh1vd/QN1fm5nX2ozX1W1Uyb8d5boSJhfPU/EH HBfLHcZSaa+GkU2P8GMIqq4u/qEE08RNFkdJbBHh+5+HGAAnmHu8zoA+Fkin09af quWlgRcB6DtNSG4tjo4ZoMXp2NENoIioq8goimB3WtY49fxC2kxtTcTYSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQbTPUmunEimqLBMtZEQncAXmYmMB8GA1UdIwQY MBaAFGCAEepRqfvPi64N8e1JmjQH1jBTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUlBUjZsR3AtOC1McmczeDdVbWFOQWZXTUZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80ZjBlYzUtNTRkMi00MGZiLTk0OTgt NzQyZjg2OTFiZWFhLzEvWUlBUjZsR3AtOC1McmczeDdVbWFOQWZXTUZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80ZjBlYzUtNTRkMi00MGZiLTk0OTgtNzQyZjg2OTFiZWFh LzEvWUlBUjZsR3AtOC1McmczeDdVbWFOQWZXTUZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWxmfpm9 L3oBdwnrUrvC/bdMYGrxbfwAfgsMFo6Xer1MYoaKQ14n5s+L3r9y6uQmCn83lxPo 4MJOxbB6X7DUrgGoRW4Wn6CbW4oclYTjXZfRLPS1P2gX6Alisqw4NfO3DEYvMaHK 7co7Ks/+4LrpvwvabzA1cuhbVjniIKwOWHDlzD4c8fzq+WkzGMqq0HDziS1qwV6U 9y/XIV+YzOAsfFImYqaMUP1hR2rQ3f1TqppBR8uShZvES25I7+uD0otsor6y/708 wN/52sYefng2aS+yBhg31scrfz6xg0xrhcGpN0xFkFbvp5Gi+mmTdDY8cBrlgmmO Kfe4UTC6mPBoDw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:53:45 2025 by rpki-client