This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft File: YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft (raw, json) Hash identifier: kyeKu1URSCunM5G1FQWvjQUDWMTEndXbg3vOEnjfXQQ= Subject key identifier: B8:82:F6:07:A2:E1:DF:55:79:BB:E6:70:AF:77:F2:3E:37:63:21:04 Authority key identifier: 61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B Certificate issuer: /CN=614799c67c08547d80bb35d02dae505d5a65dc5b Certificate serial: 019B39EAAFF2992DD5A3B5A17DA32D84603D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft Manifest number: 0995 Signing time: Sat 20 Dec 2025 04:00:40 +0000 Manifest this update: Sat 20 Dec 2025 04:00:40 +0000 Manifest next update: Sun 21 Dec 2025 04:00:40 +0000 Files and hashes: 1: R4scpsswEHtZHUE-nwU3HaURKXg.roa (hash: og9/o35XSt8h5Pisf2/20OBVwfKzhDJ2QToFc39vgzg=) 2: YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl (hash: irxa1LHHmH1Dp51VvVeHYi7bhA7ernZQ2JqiT8XFiX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:af:f2:99:2d:d5:a3:b5:a1:7d:a3:2d:84:60:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614799c67c08547d80bb35d02dae505d5a65dc5b Validity Not Before: Dec 20 04:00:40 2025 GMT Not After : Dec 21 04:00:40 2025 GMT Subject: CN=b882f607a2e1df5579bbe670af77f23e37632104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c6:80:bb:b2:d8:60:b8:c9:1d:de:2c:21:7e: 3a:cd:c3:4b:c2:df:52:52:66:a5:2b:a8:5d:7e:0b: c4:2b:89:c0:4d:86:14:b9:2f:05:c2:f8:67:fe:63: 47:71:54:0e:89:d4:0f:c4:49:dc:37:b9:d2:d6:6b: dc:1c:2c:cf:57:c3:a7:c5:48:36:5f:5c:80:35:e3: f8:43:68:af:b6:62:0f:ac:3c:21:eb:34:88:60:b1: 65:0b:6c:ef:e1:5b:71:c3:93:34:8b:08:bc:94:0a: 75:ec:51:13:47:6c:f6:7e:75:eb:54:5b:88:7d:d1: 17:07:88:f4:e7:56:72:a7:58:b5:5f:7a:44:2b:fb: 0e:96:79:d2:79:6d:08:af:3a:9a:1a:97:44:45:f5: aa:ec:dd:cd:49:a1:9e:05:d9:81:ca:91:16:fa:b9: f6:94:11:24:b2:50:db:7f:07:b3:cb:b6:bb:98:b6: e2:2e:c7:3a:75:b9:eb:46:e8:2d:76:4e:42:79:c9: dc:4e:ea:3e:99:bf:ca:8b:e9:05:e5:37:c4:ce:7e: 0f:d8:d8:0d:58:ea:8d:83:38:af:e6:c1:98:8a:43: 6b:6b:20:4b:3e:9b:8e:36:c5:df:45:cd:a2:57:98: 29:3a:e0:8c:50:08:8f:e4:05:33:eb:24:de:d4:f7: 10:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:82:F6:07:A2:E1:DF:55:79:BB:E6:70:AF:77:F2:3E:37:63:21:04 X509v3 Authority Key Identifier: keyid:61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:94:4e:43:b5:19:c4:5a:c7:77:1c:09:7a:d7:c2:0c:8c:0a: cd:fd:34:25:8c:d5:ba:ad:19:34:7d:91:21:bf:09:e7:b2:13: f6:97:2b:16:16:39:00:4f:78:33:b6:e9:0a:64:af:a4:f8:fd: 2e:f3:97:a0:41:a9:5f:ff:7f:eb:65:3b:83:52:51:f4:55:02: 8b:a0:0a:ae:90:6e:f0:c9:12:de:d4:9b:50:26:89:ae:4c:f1: e1:76:8c:a9:08:70:65:a5:aa:f6:c7:78:ec:98:37:fa:67:43: f0:7a:a6:fe:12:01:9f:bf:b8:5d:4c:cc:20:ac:c5:c7:d9:51: 82:b9:4b:79:9d:58:2c:df:6f:54:17:99:24:c6:e5:0b:4b:42: c2:66:cd:d8:68:e8:71:21:7f:df:b3:19:94:04:ff:4e:78:e1: b9:95:00:50:82:24:33:08:8a:3c:4d:1d:0f:be:13:45:e8:b0: 20:4e:d1:8e:bf:1b:28:1d:10:0d:2e:6a:07:c3:9d:80:5a:7e: e3:3f:cf:ff:09:4a:60:f4:73:38:89:17:e9:15:c7:df:b3:cb: cc:7c:90:c8:7d:e4:c7:d3:76:2b:0f:e5:72:a9:eb:6c:7f:f4: b2:fe:c7:b0:1d:a0:b7:0a:20:75:6d:90:85:c8:f6:6b:ee:66: ab:73:2a:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56q/ymS3Vo7WhfaMthGA9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNDc5OWM2N2MwODU0N2Q4MGJiMzVkMDJkYWU1MDVkNWE2 NWRjNWIwHhcNMjUxMjIwMDQwMDQwWhcNMjUxMjIxMDQwMDQwWjAzMTEwLwYDVQQD EyhiODgyZjYwN2EyZTFkZjU1NzliYmU2NzBhZjc3ZjIzZTM3NjMyMTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MaAu7LYYLjJHd4sIX46zcNLwt9S UmalK6hdfgvEK4nATYYUuS8Fwvhn/mNHcVQOidQPxEncN7nS1mvcHCzPV8OnxUg2 X1yANeP4Q2ivtmIPrDwh6zSIYLFlC2zv4Vtxw5M0iwi8lAp17FETR2z2fnXrVFuI fdEXB4j051Zyp1i1X3pEK/sOlnnSeW0IrzqaGpdERfWq7N3NSaGeBdmBypEW+rn2 lBEkslDbfwezy7a7mLbiLsc6dbnrRugtdk5CecncTuo+mb/Ki+kF5TfEzn4P2NgN WOqNgziv5sGYikNrayBLPpuONsXfRc2iV5gpOuCMUAiP5AUz6yTe1PcQoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLiC9gei4d9VebvmcK938j43YyEEMB8GA1UdIwQY MBaAFGFHmcZ8CFR9gLs10C2uUF1aZdxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVVlWnhud0lWSDJBdXpYUUxhNVFYVnBsM0ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mN2M5ZDEtMGY1Yi00MmY1LTkzMWQt MWRjMGI4NGExYzdlLzEvWVVlWnhud0lWSDJBdXpYUUxhNVFYVnBsM0ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9mN2M5ZDEtMGY1Yi00MmY1LTkzMWQtMWRjMGI4NGExYzdl LzEvWVVlWnhud0lWSDJBdXpYUUxhNVFYVnBsM0ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpROQ7UZ xFrHdxwJetfCDIwKzf00JYzVuq0ZNH2RIb8J57IT9pcrFhY5AE94M7bpCmSvpPj9 LvOXoEGpX/9/62U7g1JR9FUCi6AKrpBu8MkS3tSbUCaJrkzx4XaMqQhwZaWq9sd4 7Jg3+mdD8Hqm/hIBn7+4XUzMIKzFx9lRgrlLeZ1YLN9vVBeZJMblC0tCwmbN2Gjo cSF/37MZlAT/TnjhuZUAUIIkMwiKPE0dD74TReiwIE7Rjr8bKB0QDS5qB8OdgFp+ 4z/P/wlKYPRzOIkX6RXH37PLzHyQyH3kx9N2Kw/lcqnrbH/0sv7HsB2gtwogdW2Q hcj2a+5mq3MqMQ== -----END CERTIFICATE-----Generated at Sat Dec 20 11:02:29 2025 by rpki-client