This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft File: YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft (raw, json) Hash identifier: Mp3i2iZOrMq8a2zzt/l/pUX+gbfXMzR/CrQT87hrq3k= Subject key identifier: 8D:23:B2:04:ED:0A:99:54:FB:C4:16:37:D7:1B:31:D6:AD:D6:BD:84 Authority key identifier: 61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98 Certificate issuer: /CN=6149cbba3e6629beaebfb69668678ada51744898 Certificate serial: 019B3E6C50DE255FFF0A78D86218D243FE60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft Manifest number: 14B1 Signing time: Sun 21 Dec 2025 01:00:44 +0000 Manifest this update: Sun 21 Dec 2025 01:00:44 +0000 Manifest next update: Mon 22 Dec 2025 01:00:44 +0000 Files and hashes: 1: 0IG70QW2hCrm52M5Cqyqdv7Bcb0.roa (hash: usdtXTbOrc0vwd46ZO8C/l/xue6j9QcbuHgY1Bupvvo=) 2: YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl (hash: 0cinYa8g6AQRfew5ZNeEnZ8IJMNDr6N+bDQH37NO2m4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 01:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:50:de:25:5f:ff:0a:78:d8:62:18:d2:43:fe:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6149cbba3e6629beaebfb69668678ada51744898 Validity Not Before: Dec 21 01:00:44 2025 GMT Not After : Dec 22 01:00:44 2025 GMT Subject: CN=8d23b204ed0a9954fbc41637d71b31d6add6bd84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:22:c4:e5:88:66:ca:ec:2d:23:f8:79:9d:df: 19:22:e8:3b:4c:1e:53:b4:d4:10:aa:d9:2f:74:66: 51:77:1c:34:ef:2a:4b:dc:ac:3b:a4:a8:1b:9e:7f: bd:e8:3a:13:79:07:a5:3e:45:69:6a:ef:8a:44:46: c4:1c:05:4e:a5:86:a5:f8:0a:37:b8:a1:53:08:a6: f5:f4:48:c8:d2:de:88:b8:dd:21:82:6a:69:30:b8: 89:d3:5f:0b:4a:96:9a:9d:d8:f5:fa:7f:bf:3c:5e: 2c:dd:7d:b9:3a:ca:77:75:95:1e:fc:06:b9:e2:f6: 7a:fe:07:fb:d9:e5:25:9e:5e:2a:48:79:af:9e:ca: 3d:a3:3b:fa:52:8b:9b:e6:f0:99:56:fa:0d:77:3d: c1:d3:51:e7:f8:95:50:8a:f4:03:bf:8e:2e:56:56: 5b:b3:c8:85:43:d5:fd:42:3a:70:5e:96:e6:c3:20: 01:9d:11:26:b7:65:db:e5:01:51:c7:ac:02:db:2c: f8:fa:55:7a:48:dc:d2:f4:ad:13:af:22:e4:b0:57: 6c:80:f1:e0:be:9d:84:98:c3:d9:ac:d8:e1:0e:09: 92:c9:38:9e:4a:02:57:83:ee:ac:76:b6:a8:c4:23: 10:1d:76:1f:c9:8d:9c:df:bc:b1:f6:01:e3:c4:6f: 63:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:23:B2:04:ED:0A:99:54:FB:C4:16:37:D7:1B:31:D6:AD:D6:BD:84 X509v3 Authority Key Identifier: keyid:61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:fd:e4:81:ce:bf:eb:1f:c0:ca:a4:95:bc:0c:44:64:a8:9e: c8:ad:dd:cd:1e:49:d9:34:52:9f:72:d0:18:05:52:f3:64:69: 8d:d9:9c:c6:76:24:60:a0:44:b2:1c:39:4a:24:14:68:7d:a8: 8d:39:0f:63:3d:5e:03:c1:7f:7e:57:1c:89:da:4d:cd:b3:cc: 87:97:6c:bf:12:9b:33:67:bc:d5:af:ea:ce:5c:db:c7:48:0b: 32:04:cf:ac:18:b7:0f:35:a8:4e:a6:36:3c:8d:23:b2:42:d6: f1:e4:36:87:09:c1:4a:24:31:c5:86:6a:18:0d:0a:3c:dd:80: 39:9c:d1:3f:81:80:cc:44:a0:ed:4d:f8:e5:41:72:5f:b8:76: ef:fa:cf:00:97:5d:08:c9:6e:73:9d:42:a3:93:d6:c2:ef:9f: b5:37:c1:00:bd:29:9c:39:28:95:8c:4d:50:dc:4d:b6:c2:b9: 90:32:70:ac:75:24:58:4d:77:85:98:92:25:4f:c5:d8:0a:ca: 4f:9c:a0:93:2b:48:05:fc:f5:2a:53:b3:5f:37:2a:8d:7b:d6: 97:2b:fc:9d:e2:5b:c6:b1:8e:df:e3:cc:4e:11:4f:12:88:5c: 9a:81:82:88:eb:10:e1:fe:ae:b8:03:e6:08:1a:aa:4f:ac:3e: 9a:85:82:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bFDeJV//CnjYYhjSQ/5gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNDljYmJhM2U2NjI5YmVhZWJmYjY5NjY4Njc4YWRhNTE3 NDQ4OTgwHhcNMjUxMjIxMDEwMDQ0WhcNMjUxMjIyMDEwMDQ0WjAzMTEwLwYDVQQD Eyg4ZDIzYjIwNGVkMGE5OTU0ZmJjNDE2MzdkNzFiMzFkNmFkZDZiZDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSLE5YhmyuwtI/h5nd8ZIug7TB5T tNQQqtkvdGZRdxw07ypL3Kw7pKgbnn+96DoTeQelPkVpau+KREbEHAVOpYal+Ao3 uKFTCKb19EjI0t6IuN0hgmppMLiJ018LSpaandj1+n+/PF4s3X25Osp3dZUe/Aa5 4vZ6/gf72eUlnl4qSHmvnso9ozv6Uoub5vCZVvoNdz3B01Hn+JVQivQDv44uVlZb s8iFQ9X9QjpwXpbmwyABnREmt2Xb5QFRx6wC2yz4+lV6SNzS9K0TryLksFdsgPHg vp2EmMPZrNjhDgmSyTieSgJXg+6sdraoxCMQHXYfyY2c37yx9gHjxG9jFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0jsgTtCplU+8QWN9cbMdat1r2EMB8GA1UdIwQY MBaAFGFJy7o+Zim+rr+2lmhnitpRdEiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVVuTHVqNW1LYjZ1djdhV2FHZUsybEYwU0pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yM2Y1MzItZmU4Ni00MTk4LThjM2It NGQ0M2Y2NmFiNzMxLzEvWVVuTHVqNW1LYjZ1djdhV2FHZUsybEYwU0pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yM2Y1MzItZmU4Ni00MTk4LThjM2ItNGQ0M2Y2NmFiNzMx LzEvWVVuTHVqNW1LYjZ1djdhV2FHZUsybEYwU0pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/3kgc6/ 6x/AyqSVvAxEZKieyK3dzR5J2TRSn3LQGAVS82RpjdmcxnYkYKBEshw5SiQUaH2o jTkPYz1eA8F/flccidpNzbPMh5dsvxKbM2e81a/qzlzbx0gLMgTPrBi3DzWoTqY2 PI0jskLW8eQ2hwnBSiQxxYZqGA0KPN2AOZzRP4GAzESg7U345UFyX7h27/rPAJdd CMluc51Co5PWwu+ftTfBAL0pnDkolYxNUNxNtsK5kDJwrHUkWE13hZiSJU/F2ArK T5ygkytIBfz1KlOzXzcqjXvWlyv8neJbxrGO3+PMThFPEohcmoGCiOsQ4f6uuAPm CBqqT6w+moWCOg== -----END CERTIFICATE-----Generated at Sun Dec 21 10:44:49 2025 by rpki-client