This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft File: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft (raw, json) Hash identifier: 7FWA/UjFN8AorZTcBo+b4Ad2FFNLJu4wbtZ6Oo0wEg8= Subject key identifier: 19:99:CF:B9:B3:5A:7E:56:54:E7:87:AC:33:9C:D8:0C:A5:EC:CC:35 Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c Certificate serial: 019B680D202F3B9CFE6769D71B7762B4470F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft Manifest number: 1088 Signing time: Mon 29 Dec 2025 03:00:49 +0000 Manifest this update: Mon 29 Dec 2025 03:00:49 +0000 Manifest next update: Tue 30 Dec 2025 03:00:49 +0000 Files and hashes: 1: 0iPJ2Dh0D4LzrYF2tobncG31bno.roa (hash: Agw0WqN/VV08aCvp6BEcIrMtpqo5iMZ3tN+s+tu8iOA=) 2: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl (hash: e4XkX8VNTMbmaFfNH0QkBKKKeUYgLvjQ1uNaMzG3yVs=) 3: o_aC0ciJClNGA5KV7O_P3R8hl0E.roa (hash: BcUpIMH/Rq6gpE/K7kGRGMnVEEvzUZNtMIL3foe8ZBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:0d:20:2f:3b:9c:fe:67:69:d7:1b:77:62:b4:47:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c Validity Not Before: Dec 29 03:00:49 2025 GMT Not After : Dec 30 03:00:49 2025 GMT Subject: CN=1999cfb9b35a7e5654e787ac339cd80ca5eccc35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b1:92:11:cd:9f:37:71:5a:20:ae:39:59:34: 48:ce:2e:93:83:a3:17:71:5b:8a:d1:e7:2b:4e:2c: b9:0e:cb:1c:7b:4a:da:dc:6c:b3:2d:fb:c1:93:dd: a9:d9:d6:5a:d7:82:99:8c:5e:c0:26:69:1f:3a:7d: 7f:d4:35:ea:24:71:9b:53:d4:db:d9:fb:27:28:56: 78:b7:c2:08:7e:05:66:a2:06:84:b0:20:32:41:0b: 19:a5:8d:68:1a:ca:af:64:d5:37:f6:17:ca:94:73: 5d:a9:7a:cd:fe:40:ff:5f:50:95:e5:38:e1:c6:78: 59:51:a6:87:ee:e0:bf:47:40:e1:be:43:51:69:96: 95:e9:e3:69:3a:98:da:bb:78:9e:ed:7d:17:05:ce: 4f:75:5c:f5:e9:9c:05:08:c3:08:9e:66:3c:54:74: 4e:fe:ea:fb:60:93:3f:fe:9d:38:26:0f:7e:fd:96: b9:cc:02:d8:4b:53:77:86:85:4a:04:0d:46:f1:0d: c3:54:de:99:4b:9c:dc:92:4b:bf:c5:51:fd:49:06: d2:dc:47:1c:73:85:28:71:4c:87:1b:a8:29:73:d3: bc:50:bb:24:80:4f:78:ac:d0:d0:ef:bf:36:1c:f6: 8e:38:6a:21:a5:80:2c:bb:07:54:df:7a:75:32:4d: 74:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:99:CF:B9:B3:5A:7E:56:54:E7:87:AC:33:9C:D8:0C:A5:EC:CC:35 X509v3 Authority Key Identifier: keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:26:b4:77:a9:5f:25:b7:62:6b:47:c5:cf:d3:6e:fa:46:75: 0f:82:f7:cb:92:0a:84:01:6f:48:dd:55:60:e3:eb:05:32:8d: e8:4b:f3:1d:bd:81:98:bc:d4:02:28:40:46:a7:a0:b2:2c:8f: 30:f5:97:b8:96:d8:96:c4:3e:91:57:96:f9:86:b7:67:8a:b1: 18:52:6a:15:cc:e8:bb:59:d4:47:1e:c8:d4:d6:69:79:2d:42: 02:91:8f:50:62:6c:2a:10:4b:78:34:aa:1d:75:0c:60:8e:b7: 11:34:68:6a:74:e5:6c:4b:ad:76:b0:72:d1:17:8a:1d:e0:4b: c5:a3:27:5f:c7:33:5b:34:88:9a:06:a6:85:49:9c:5f:1e:e8: 8b:cd:df:a2:2d:e7:21:c9:6e:c2:31:96:ac:72:be:e4:dd:c8: 23:4b:06:7f:4a:54:15:e1:29:d5:58:d2:f4:23:20:4c:85:d9: 85:a8:b2:98:75:57:ed:27:09:48:8c:bb:c2:91:4a:0e:4a:2a: 7b:b7:10:74:b3:01:5b:33:1e:74:06:d0:c7:82:e2:88:b1:a5: 5e:eb:ef:3d:24:c6:76:cb:4b:82:91:bf:c8:44:dd:c0:31:1d: 6a:4c:2e:f0:a6:2c:8a:c6:f6:52:ef:04:09:aa:b5:06:fd:78: f5:17:ab:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoDSAvO5z+Z2nXG3ditEcPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNGNhMGQwOWJiZDA1ZjRiOGE4YWMzMGEzMjlmNjcxNTEx MDc1OGMwHhcNMjUxMjI5MDMwMDQ5WhcNMjUxMjMwMDMwMDQ5WjAzMTEwLwYDVQQD EygxOTk5Y2ZiOWIzNWE3ZTU2NTRlNzg3YWMzMzljZDgwY2E1ZWNjYzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bGSEc2fN3FaIK45WTRIzi6Tg6MX cVuK0ecrTiy5Dssce0ra3GyzLfvBk92p2dZa14KZjF7AJmkfOn1/1DXqJHGbU9Tb 2fsnKFZ4t8IIfgVmogaEsCAyQQsZpY1oGsqvZNU39hfKlHNdqXrN/kD/X1CV5Tjh xnhZUaaH7uC/R0DhvkNRaZaV6eNpOpjau3ie7X0XBc5PdVz16ZwFCMMInmY8VHRO /ur7YJM//p04Jg9+/Za5zALYS1N3hoVKBA1G8Q3DVN6ZS5zckku/xVH9SQbS3Ecc c4UocUyHG6gpc9O8ULskgE94rNDQ7782HPaOOGohpYAsuwdU33p1Mk10DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBmZz7mzWn5WVOeHrDOc2Ayl7Mw1MB8GA1UdIwQY MBaAFGFMoNCbvQX0uKisMKMp9nFREHWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS80Nzg2YzItMTFhMS00OGE0LWJhODAt Nzk0NDk3NjU5OWQ4LzEvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS80Nzg2YzItMTFhMS00OGE0LWJhODAtNzk0NDk3NjU5OWQ4 LzEvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZya0d6lf Jbdia0fFz9Nu+kZ1D4L3y5IKhAFvSN1VYOPrBTKN6EvzHb2BmLzUAihARqegsiyP MPWXuJbYlsQ+kVeW+Ya3Z4qxGFJqFczou1nURx7I1NZpeS1CApGPUGJsKhBLeDSq HXUMYI63ETRoanTlbEutdrBy0ReKHeBLxaMnX8czWzSImgamhUmcXx7oi83foi3n IcluwjGWrHK+5N3II0sGf0pUFeEp1VjS9CMgTIXZhaiymHVX7ScJSIy7wpFKDkoq e7cQdLMBWzMedAbQx4LiiLGlXuvvPSTGdstLgpG/yETdwDEdakwu8KYsisb2Uu8E Caq1Bv149RerYQ== -----END CERTIFICATE-----Generated at Mon Dec 29 04:16:31 2025 by rpki-client