This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft File: YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft (raw, json) Hash identifier: Ru4nubbhuwZGubwr1oPOUbOaMNGE4JUx8Fys8rWisfs= Subject key identifier: 86:65:45:5E:E6:24:E3:3B:1B:99:C5:E5:55:62:2B:88:3B:A7:DE:1C Authority key identifier: 61:34:08:18:A8:63:39:08:CF:37:EA:14:5D:66:D9:24:52:FB:73:AA Certificate issuer: /CN=61340818a8633908cf37ea145d66d92452fb73aa Certificate serial: 019B65E85A589317A417F1FEFA21833B9FBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft Manifest number: 0BFF Signing time: Sun 28 Dec 2025 17:01:24 +0000 Manifest this update: Sun 28 Dec 2025 17:01:24 +0000 Manifest next update: Mon 29 Dec 2025 17:01:24 +0000 Files and hashes: 1: YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl (hash: 4/IDQ6Op4uIztE+4Sfs2DZg9iJoPEfMkqMO28tOLTu4=) 2: jYlgI_qcApYE3RAZAnK4EbiyzdM.roa (hash: xXRxHK1q9xpKOQP7dBVRrylt76oRLGOFXjW/2uY1+iQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:e8:5a:58:93:17:a4:17:f1:fe:fa:21:83:3b:9f:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61340818a8633908cf37ea145d66d92452fb73aa Validity Not Before: Dec 28 17:01:24 2025 GMT Not After : Dec 29 17:01:24 2025 GMT Subject: CN=8665455ee624e33b1b99c5e555622b883ba7de1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c3:26:b0:93:6e:ae:bd:50:41:1a:e1:3d:5e: 4e:3a:c0:b1:3a:c0:66:ef:0c:ba:2d:94:bb:45:1e: a9:f0:98:6b:b3:58:a2:60:f3:5b:37:d5:ae:df:8e: b0:ce:bb:fb:b2:f7:ba:98:8a:ba:7d:53:2b:5c:c1: 20:44:71:68:70:5b:4c:15:91:2c:07:ab:20:a7:c4: b2:99:a5:e6:a4:8c:98:ec:98:48:c3:98:f6:5b:f1: 53:7d:bc:ed:aa:68:be:cd:e6:f4:56:59:c4:4d:46: 06:e1:49:27:c4:5a:35:4f:97:9b:67:5d:fb:58:0c: 22:23:43:97:b2:04:ea:e2:6c:d9:0c:02:13:8e:97: 3f:58:50:6c:1c:20:f1:d2:a1:b7:69:da:e3:50:97: 35:07:3b:69:13:bd:3c:90:1b:1c:d6:f7:bf:a7:fa: fc:48:da:e3:c3:03:85:63:1d:74:77:d9:2e:60:f1: 46:7d:f1:91:68:b7:da:53:a8:9a:1d:91:d2:b9:d2: 24:68:7d:84:4d:34:ca:22:6d:54:c4:3a:5c:76:df: 9d:c2:e5:a8:7d:53:e2:a5:20:5a:86:dd:0c:14:f3: e2:56:10:d7:79:3e:67:c1:dd:83:ce:e7:5a:6d:6e: 04:e2:f5:ea:c4:e9:ea:37:4c:e6:bb:16:a2:05:38: fe:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:65:45:5E:E6:24:E3:3B:1B:99:C5:E5:55:62:2B:88:3B:A7:DE:1C X509v3 Authority Key Identifier: keyid:61:34:08:18:A8:63:39:08:CF:37:EA:14:5D:66:D9:24:52:FB:73:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:b1:bb:83:78:ea:fe:a7:d4:5b:a4:1d:54:7a:59:ff:bb:e4: e7:b2:e2:d5:e1:5c:69:24:84:1c:8f:4a:c2:1b:79:a6:9b:2c: 84:d2:72:0a:61:79:92:50:7f:a9:9b:41:bb:d3:d9:f5:50:42: 69:53:38:a5:27:b4:2e:30:61:0d:15:ed:89:d9:59:df:07:90: 4c:ab:29:a0:94:21:bf:bb:ce:e0:95:ec:94:4a:85:0d:52:10: 09:35:f2:52:be:32:24:35:40:49:b7:1c:4a:61:86:78:30:0a: 87:4b:e6:dd:18:bf:19:1f:f1:19:62:f1:bd:b8:2d:26:d6:49: a5:d5:6d:fe:97:f6:9d:d5:e1:15:42:51:e2:1c:60:fa:17:78: dc:8f:4c:fd:d2:4b:59:6e:85:a7:9e:1e:ec:d1:ed:31:dc:4d: 38:0e:e1:be:1f:a4:6a:a5:2d:0c:10:50:52:a4:f2:19:e7:f6: d9:5c:d9:63:ae:a1:9f:61:ee:7d:4f:b0:5d:32:cb:4d:85:58: ce:b9:01:d9:eb:8b:99:ea:5c:a3:28:b3:82:1f:e6:fb:bf:99: 47:15:22:d9:27:bf:db:9e:a0:b4:11:b3:bf:ea:ae:8f:15:5c: 85:71:b3:cb:9a:f4:b4:67:ac:5b:96:66:c5:58:92:66:f2:df: d3:5d:00:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtl6FpYkxekF/H++iGDO5+8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMzQwODE4YTg2MzM5MDhjZjM3ZWExNDVkNjZkOTI0NTJm YjczYWEwHhcNMjUxMjI4MTcwMTI0WhcNMjUxMjI5MTcwMTI0WjAzMTEwLwYDVQQD Eyg4NjY1NDU1ZWU2MjRlMzNiMWI5OWM1ZTU1NTYyMmI4ODNiYTdkZTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcMmsJNurr1QQRrhPV5OOsCxOsBm 7wy6LZS7RR6p8Jhrs1iiYPNbN9Wu346wzrv7sve6mIq6fVMrXMEgRHFocFtMFZEs B6sgp8SymaXmpIyY7JhIw5j2W/FTfbztqmi+zeb0VlnETUYG4UknxFo1T5ebZ137 WAwiI0OXsgTq4mzZDAITjpc/WFBsHCDx0qG3adrjUJc1BztpE708kBsc1ve/p/r8 SNrjwwOFYx10d9kuYPFGffGRaLfaU6iaHZHSudIkaH2ETTTKIm1UxDpcdt+dwuWo fVPipSBaht0MFPPiVhDXeT5nwd2DzudabW4E4vXqxOnqN0zmuxaiBTj+pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZlRV7mJOM7G5nF5VViK4g7p94cMB8GA1UdIwQY MBaAFGE0CBioYzkIzzfqFF1m2SRS+3OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVRRSUdLaGpPUWpQTi1vVVhXYlpKRkw3YzZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8zOTFkZDctNGI5Ni00NmE1LWFmYjQt NmI2MTViN2RiZmUwLzEvWVRRSUdLaGpPUWpQTi1vVVhXYlpKRkw3YzZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8zOTFkZDctNGI5Ni00NmE1LWFmYjQtNmI2MTViN2RiZmUw LzEvWVRRSUdLaGpPUWpQTi1vVVhXYlpKRkw3YzZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLG7g3jq /qfUW6QdVHpZ/7vk57Li1eFcaSSEHI9Kwht5ppsshNJyCmF5klB/qZtBu9PZ9VBC aVM4pSe0LjBhDRXtidlZ3weQTKspoJQhv7vO4JXslEqFDVIQCTXyUr4yJDVASbcc SmGGeDAKh0vm3Ri/GR/xGWLxvbgtJtZJpdVt/pf2ndXhFUJR4hxg+hd43I9M/dJL WW6Fp54e7NHtMdxNOA7hvh+kaqUtDBBQUqTyGef22VzZY66hn2HufU+wXTLLTYVY zrkB2euLmepcoyizgh/m+7+ZRxUi2Se/256gtBGzv+qujxVchXGzy5r0tGesW5Zm xViSZvLf010AJw== -----END CERTIFICATE-----Generated at Sun Dec 28 20:25:45 2025 by rpki-client