This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft File: YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft (raw, json) Hash identifier: 7s57TP3unXqkXLZcjFNOWxUVMw5X4b2PLes37LmTUGI= Subject key identifier: C8:64:5C:7B:66:CC:1A:82:BA:89:EF:40:FA:BE:8D:DB:FE:41:2E:5B Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF Certificate issuer: /CN=621310302018a387c692146a35efd33a6ed6b1ef Certificate serial: 019B3CEBD6AD3A7A4E856BE32B440737325F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft Manifest number: 1792 Signing time: Sat 20 Dec 2025 18:00:47 +0000 Manifest this update: Sat 20 Dec 2025 18:00:47 +0000 Manifest next update: Sun 21 Dec 2025 18:00:47 +0000 Files and hashes: 1: NRlbji1zgmp6wd1PjpDk0T2ZUGk.roa (hash: TKAQNNpSaY4TAI1TdJLCf/Ljbi9ccCQ85au2gXamNHA=) 2: PwNKn35Sokbr7evbRQGt6ldKTJc.roa (hash: xbgSTs/2Kz3u8buklKtIXDkz4OYgPF3eYqw2N++Xd9U=) 3: YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl (hash: pQKpAX0P/qvqyRtJhoeUeguY5zaZ4hzFMWv2VKeRLJg=) 4: a-LdFc8kFHmTn2Z0Vu6JHLUtEY4.roa (hash: zTR8ty0nmJzU13XE2BvXWY2tGZYklQKm1YYaB327LpQ=) 5: el7j1J3bDKT27ieG83FPrQYbZJc.roa (hash: T0KRecSjSVtSKj2we6RG/6efDR4xy2f/rpalGX+ig90=) 6: hoqonLcixGOse9XNJgoeFQV8jS0.roa (hash: wxy/iAlcRlwLJ9zqBBHoE9Kmygd21D/X2jI5AKbdq90=) 7: od_NfkWMgnzZGkwU7wJ-RgWOeM4.roa (hash: OZscsQ8cir5jkIZyLY0FUkHozKmgjWJmCvTcbzJzQOg=) 8: tinXUk407KICO2MXsH1p4TReydw.roa (hash: linbqgFB5KTsziPayiqOokYdnyWHwGO4kAHLVkJgE3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:d6:ad:3a:7a:4e:85:6b:e3:2b:44:07:37:32:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef Validity Not Before: Dec 20 18:00:47 2025 GMT Not After : Dec 21 18:00:47 2025 GMT Subject: CN=c8645c7b66cc1a82ba89ef40fabe8ddbfe412e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:66:3d:c6:50:b3:a9:4d:d8:04:b1:0a:7a:fa: 54:ed:2b:d8:e2:c0:f9:9f:e4:90:e2:78:19:ce:74: c9:29:fb:c3:60:bb:ac:f0:1c:33:89:bd:6c:bf:1e: 4d:0f:98:9b:40:15:5d:a0:91:22:14:fe:16:80:e4: 7d:df:2a:f7:b4:84:cc:3b:ff:6f:0a:15:70:e6:d2: bf:4c:8b:f7:e7:25:e5:30:28:8c:1d:fb:43:2c:e0: 78:08:64:48:89:59:67:9c:71:b5:8e:4a:4a:ec:39: 34:bc:13:5d:4c:b9:b7:27:e1:cb:90:7a:85:d8:27: e6:75:5e:8b:bc:f2:e7:a0:1b:44:46:c5:e5:dd:fc: 8a:32:ac:12:88:c3:40:d1:50:73:56:46:e5:a3:a8: ce:92:93:15:8d:d7:86:2c:af:ef:0c:e2:db:62:c9: 95:0e:62:48:27:4c:d8:a0:91:f9:cb:fd:7f:9f:4a: 28:6a:0f:e3:be:c7:6d:03:10:bf:1b:ff:f3:31:0e: b9:af:2c:60:11:de:20:16:e0:6e:89:d4:38:98:ae: e3:d9:22:94:41:7f:b6:cb:a3:fc:79:e5:18:3b:79: 33:a5:31:61:24:16:9c:48:c9:f8:be:c6:93:eb:29: b5:01:10:29:55:b1:61:0a:47:cd:96:a4:11:ab:58: 5a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:64:5C:7B:66:CC:1A:82:BA:89:EF:40:FA:BE:8D:DB:FE:41:2E:5B X509v3 Authority Key Identifier: keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:db:ee:b9:9a:a1:ae:1c:4d:6c:19:58:41:df:b2:d5:9e:74: 09:bc:99:8e:b4:a8:a4:4f:85:5c:a6:07:56:94:ef:22:2d:ba: d6:f6:7a:c0:12:f5:d6:ed:7a:9d:e2:2c:59:f8:00:34:2a:68: 47:b1:cf:69:8a:9c:06:6b:4b:71:a2:af:d3:c2:a3:82:c9:ed: 65:b2:2b:0a:45:99:63:c0:a8:1d:f2:87:60:2e:9a:41:57:2d: ed:a2:63:6c:04:7c:4d:7f:52:6c:b7:49:2e:a7:a0:4b:78:34: dc:83:79:7d:85:c0:df:c8:1a:c9:70:5b:b8:22:a6:ef:be:9e: b3:49:18:f4:b3:8c:5a:07:b4:35:8b:15:66:be:76:c0:e0:e1: 0d:fc:61:4b:28:53:0b:f5:da:83:e2:1a:4b:d0:b7:79:40:13: 6e:ed:12:6d:81:2a:82:f8:ba:65:d3:c4:02:93:81:e0:e8:e8: 57:6a:09:38:d3:4d:14:30:0d:e3:e5:7a:fa:0f:76:ff:36:c3: ee:83:1d:14:f3:5d:1f:dd:65:2e:fa:13:bf:df:fc:09:f6:bd: f0:2b:c6:b3:60:67:08:b1:9d:82:35:ac:f1:99:0a:79:bb:65: 6d:0b:98:d5:8c:dd:64:ff:1e:26:fc:ba:9a:01:91:67:51:15: 17:2e:6b:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs869atOnpOhWvjK0QHNzJfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMTMxMDMwMjAxOGEzODdjNjkyMTQ2YTM1ZWZkMzNhNmVk NmIxZWYwHhcNMjUxMjIwMTgwMDQ3WhcNMjUxMjIxMTgwMDQ3WjAzMTEwLwYDVQQD EyhjODY0NWM3YjY2Y2MxYTgyYmE4OWVmNDBmYWJlOGRkYmZlNDEyZTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmY9xlCzqU3YBLEKevpU7SvY4sD5 n+SQ4ngZznTJKfvDYLus8Bwzib1svx5ND5ibQBVdoJEiFP4WgOR93yr3tITMO/9v ChVw5tK/TIv35yXlMCiMHftDLOB4CGRIiVlnnHG1jkpK7Dk0vBNdTLm3J+HLkHqF 2CfmdV6LvPLnoBtERsXl3fyKMqwSiMNA0VBzVkblo6jOkpMVjdeGLK/vDOLbYsmV DmJIJ0zYoJH5y/1/n0ooag/jvsdtAxC/G//zMQ65ryxgEd4gFuBuidQ4mK7j2SKU QX+2y6P8eeUYO3kzpTFhJBacSMn4vsaT6ym1ARApVbFhCkfNlqQRq1hatwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhkXHtmzBqCuonvQPq+jdv+QS5bMB8GA1UdIwQY MBaAFGITEDAgGKOHxpIUajXv0zpu1rHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWhNUU1DQVlvNGZHa2hScU5lX1RPbTdXc2U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9mNThhYzgtNTNlOS00Y2E2LWFjYjIt YmU1N2Q3ZGZhMGRlLzEvWWhNUU1DQVlvNGZHa2hScU5lX1RPbTdXc2U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9mNThhYzgtNTNlOS00Y2E2LWFjYjItYmU1N2Q3ZGZhMGRl LzEvWWhNUU1DQVlvNGZHa2hScU5lX1RPbTdXc2U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNvuuZqh rhxNbBlYQd+y1Z50CbyZjrSopE+FXKYHVpTvIi261vZ6wBL11u16neIsWfgANCpo R7HPaYqcBmtLcaKv08KjgsntZbIrCkWZY8CoHfKHYC6aQVct7aJjbAR8TX9SbLdJ LqegS3g03IN5fYXA38gayXBbuCKm776es0kY9LOMWge0NYsVZr52wODhDfxhSyhT C/Xag+IaS9C3eUATbu0SbYEqgvi6ZdPEApOB4OjoV2oJONNNFDAN4+V6+g92/zbD 7oMdFPNdH91lLvoTv9/8Cfa98CvGs2BnCLGdgjWs8ZkKebtlbQuY1YzdZP8eJvy6 mgGRZ1EVFy5rPw== -----END CERTIFICATE-----Generated at Sun Dec 21 01:45:42 2025 by rpki-client