This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft File: YXfFgJJlmeg6tzW6LgT8EId4xEE.mft (raw, json) Hash identifier: MLWMVBXU8k4FYv2p44+/TdTv9Q+Xr2k4vsJLxbHXcfo= Subject key identifier: 83:8C:C1:51:05:9F:13:2E:32:C9:B4:4E:A2:05:89:76:7A:2E:0D:60 Authority key identifier: 61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41 Certificate issuer: /CN=6177c580926599e83ab735ba2e04fc108778c441 Certificate serial: 019B30E88E60F36941310E9DD2AC5ADCF67D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft Manifest number: 0ED9 Signing time: Thu 18 Dec 2025 10:01:45 +0000 Manifest this update: Thu 18 Dec 2025 10:01:45 +0000 Manifest next update: Fri 19 Dec 2025 10:01:45 +0000 Files and hashes: 1: Gu9ez5zlQGgsXPCgSAa011q3NCY.roa (hash: XMVaMgOJ4WWG4Lp4VxV89GlWKPKFR9zZG9BiqqxMKyA=) 2: YXfFgJJlmeg6tzW6LgT8EId4xEE.crl (hash: xgDAJ5a6jht/OQJLJkqAb6F8ZQvdAKBWspBSAEHGqAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:8e:60:f3:69:41:31:0e:9d:d2:ac:5a:dc:f6:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6177c580926599e83ab735ba2e04fc108778c441 Validity Not Before: Dec 18 10:01:45 2025 GMT Not After : Dec 19 10:01:45 2025 GMT Subject: CN=838cc151059f132e32c9b44ea20589767a2e0d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:77:81:a0:42:ec:0a:0e:39:ad:56:d5:a5:73: e1:8d:a1:50:43:28:34:31:39:e9:28:e9:8c:8d:e1: 8e:46:24:0b:f3:6b:96:32:8d:b2:34:f3:31:6a:e3: cd:e7:37:90:88:27:69:c2:10:d6:61:c6:c4:94:c4: fe:60:7d:e5:56:5d:6a:5d:8a:e6:e8:d2:76:ec:d1: 9d:89:b4:15:74:a1:67:c1:fd:f8:23:b3:ff:c0:88: 33:ce:3a:93:6f:3d:57:ba:31:0e:17:23:88:9e:f8: 54:34:15:7f:3e:37:f5:b6:90:8d:d2:26:87:00:39: 6f:81:41:4c:4d:41:33:4d:8a:be:b8:91:d6:ce:61: 46:43:66:2e:9b:95:60:8b:9d:b5:64:f0:35:e1:3f: 40:e8:d6:c6:75:2d:f6:5b:55:a1:0d:1e:7c:46:cd: 98:4a:34:d3:0d:11:4f:78:0b:ad:a8:5a:62:e8:8d: a0:27:4c:31:b9:1b:e8:8f:bc:ec:c6:1f:aa:6b:c3: 5e:e9:74:8d:57:cf:97:6c:95:a4:11:27:e6:62:cc: 75:6c:bb:32:bd:7b:37:94:4d:67:cd:d1:0b:3c:7b: b0:54:64:ef:a2:fe:50:a7:dc:5c:08:50:c3:14:1b: ec:be:82:74:0e:d6:0e:05:42:bd:e5:db:e5:58:e8: db:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:8C:C1:51:05:9F:13:2E:32:C9:B4:4E:A2:05:89:76:7A:2E:0D:60 X509v3 Authority Key Identifier: keyid:61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:80:9c:f3:6e:2d:1a:13:98:b4:34:34:72:a5:cb:8b:db:22: da:37:19:d7:ac:3a:c8:b1:eb:8c:19:18:da:3c:00:5e:db:93: f1:79:ea:7a:c4:4c:a2:fc:0f:49:4f:64:02:8b:4e:41:9b:dc: d0:30:3d:a9:88:ce:51:2c:d1:9b:04:cb:24:14:ae:96:f5:db: 37:27:d3:5c:ed:25:99:fe:e0:14:20:95:df:4d:72:e4:a0:a0: 48:04:88:45:a5:21:38:34:11:7c:df:d2:d0:f1:4e:39:15:59: 8f:b9:d1:2c:9c:3c:0d:c1:df:d0:6d:a4:a2:57:aa:62:6d:8b: e5:49:9e:0c:6e:d8:bc:40:ca:ba:1d:12:10:d0:d4:8d:41:64: e4:55:1f:0a:8a:14:2a:65:1e:f5:a5:e7:1e:68:63:73:5b:6c: 45:3b:15:19:62:02:93:3f:46:82:ff:48:ad:b7:6a:f9:62:be: b9:a4:41:13:00:95:b6:01:49:50:45:98:a3:c3:59:79:44:02: c8:5f:91:79:dd:58:c1:e1:9f:b3:32:50:31:21:39:5d:8a:63: 45:1d:fc:e9:15:67:77:ee:20:52:98:89:d5:46:c6:fe:0f:68: fa:c3:2c:63:7b:22:17:9d:3f:d2:80:48:5b:41:76:7a:a2:0b: 69:66:ce:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6I5g82lBMQ6d0qxa3PZ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNzdjNTgwOTI2NTk5ZTgzYWI3MzViYTJlMDRmYzEwODc3 OGM0NDEwHhcNMjUxMjE4MTAwMTQ1WhcNMjUxMjE5MTAwMTQ1WjAzMTEwLwYDVQQD Eyg4MzhjYzE1MTA1OWYxMzJlMzJjOWI0NGVhMjA1ODk3NjdhMmUwZDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3eBoELsCg45rVbVpXPhjaFQQyg0 MTnpKOmMjeGORiQL82uWMo2yNPMxauPN5zeQiCdpwhDWYcbElMT+YH3lVl1qXYrm 6NJ27NGdibQVdKFnwf34I7P/wIgzzjqTbz1XujEOFyOInvhUNBV/Pjf1tpCN0iaH ADlvgUFMTUEzTYq+uJHWzmFGQ2Yum5Vgi521ZPA14T9A6NbGdS32W1WhDR58Rs2Y SjTTDRFPeAutqFpi6I2gJ0wxuRvoj7zsxh+qa8Ne6XSNV8+XbJWkESfmYsx1bLsy vXs3lE1nzdELPHuwVGTvov5Qp9xcCFDDFBvsvoJ0DtYOBUK95dvlWOjbSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIOMwVEFnxMuMsm0TqIFiXZ6Lg1gMB8GA1UdIwQY MBaAFGF3xYCSZZnoOrc1ui4E/BCHeMRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVhmRmdKSmxtZWc2dHpXNkxnVDhFSWQ0eEVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yOWJmN2ItNDc0NS00NDIzLWE4ZmEt YTMyZTJlZDBjZmQzLzEvWVhmRmdKSmxtZWc2dHpXNkxnVDhFSWQ0eEVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8yOWJmN2ItNDc0NS00NDIzLWE4ZmEtYTMyZTJlZDBjZmQz LzEvWVhmRmdKSmxtZWc2dHpXNkxnVDhFSWQ0eEVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwICc824t GhOYtDQ0cqXLi9si2jcZ16w6yLHrjBkY2jwAXtuT8XnqesRMovwPSU9kAotOQZvc 0DA9qYjOUSzRmwTLJBSulvXbNyfTXO0lmf7gFCCV301y5KCgSASIRaUhODQRfN/S 0PFOORVZj7nRLJw8DcHf0G2koleqYm2L5UmeDG7YvEDKuh0SENDUjUFk5FUfCooU KmUe9aXnHmhjc1tsRTsVGWICkz9Ggv9Irbdq+WK+uaRBEwCVtgFJUEWYo8NZeUQC yF+Red1YweGfszJQMSE5XYpjRR386RVnd+4gUpiJ1UbG/g9o+sMsY3siF50/0oBI W0F2eqILaWbOhA== -----END CERTIFICATE-----Generated at Thu Dec 18 18:37:17 2025 by rpki-client