This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft File: YuXk_tXMr2A7RmhKIVU86GJu-cE.mft (raw, json) Hash identifier: GnR+XiEIdDE4r1dfTn4OtFBOx4pZG6g4a5YGeNqYOqE= Subject key identifier: 45:FB:5F:97:04:D8:44:17:36:F7:B8:CD:59:C0:38:82:54:7F:0C:94 Authority key identifier: 62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1 Certificate issuer: /CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1 Certificate serial: 019B6F8F7DF1A3FDB7407FDE7B85C71D09FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft Manifest number: 0490 Signing time: Tue 30 Dec 2025 14:00:33 +0000 Manifest this update: Tue 30 Dec 2025 14:00:33 +0000 Manifest next update: Wed 31 Dec 2025 14:00:33 +0000 Files and hashes: 1: 75BTAzaWIqNBNqbHGCcSmYPxzWo.roa (hash: E7g/0drvt8P/stRrLTMim2nlcTgYeQXHR6qswQWRYZY=) 2: YuXk_tXMr2A7RmhKIVU86GJu-cE.crl (hash: C9/Xn5gLGc6oDM2BKVvLYYJrJXMfA4nRE1CyHtujZqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 14:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:8f:7d:f1:a3:fd:b7:40:7f:de:7b:85:c7:1d:09:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1 Validity Not Before: Dec 30 14:00:33 2025 GMT Not After : Dec 31 14:00:33 2025 GMT Subject: CN=45fb5f9704d8441736f7b8cd59c03882547f0c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7a:12:02:22:e1:a3:67:61:32:fd:e8:45:ea: 4b:3a:9a:51:34:a3:95:fe:47:2d:e3:f4:d1:56:25: 57:ca:d2:ea:aa:37:14:2b:a1:96:d5:25:68:d2:08: 98:f3:7a:7a:85:3b:97:4d:bd:a9:bb:de:86:43:ad: df:65:49:ad:3f:7b:a8:f8:28:eb:fa:cf:09:9b:31: 48:91:88:67:10:2f:8e:ad:d2:33:4b:54:79:9b:0f: 15:88:17:42:91:e9:33:2d:da:b4:8a:a7:2e:e7:d0: 70:ce:9d:13:de:62:45:67:53:2b:3f:0b:5c:35:0b: 9d:00:d2:9e:4e:2d:f5:8c:47:6b:03:fa:10:ba:4a: e6:89:8e:64:f5:6b:c2:92:f8:d2:c8:93:f3:1f:b0: 46:e9:b0:6c:fd:fb:e9:81:ca:41:6b:f3:0d:33:4a: 3a:a5:80:5f:06:ea:8b:fe:9c:df:1c:74:49:2f:96: df:41:b4:92:83:98:ab:84:4a:c4:54:34:99:73:c2: 9f:9c:b8:41:77:b3:3a:8c:60:1a:17:cd:6e:d2:16: f7:c2:05:23:9a:5c:d0:15:bb:d4:5b:60:51:33:8f: dc:c7:14:dd:13:aa:3c:8f:1a:9b:7b:4b:44:cc:5c: 5a:52:a2:f1:ef:b0:08:95:13:85:8c:4a:1a:26:39: f7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FB:5F:97:04:D8:44:17:36:F7:B8:CD:59:C0:38:82:54:7F:0C:94 X509v3 Authority Key Identifier: keyid:62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:60:a5:f1:54:f2:53:43:79:57:5b:c0:87:b7:5a:29:bf:6e: b1:85:92:d5:a6:a2:a6:53:1e:b3:1e:2f:88:c6:59:32:a4:54: 20:b1:7b:2e:c4:1d:31:66:af:ff:23:80:a3:ce:ee:af:9d:9e: b7:83:f0:ab:65:42:d5:c4:40:4b:98:5f:45:1b:2f:be:5c:ec: 68:f5:4c:4b:5a:d7:59:90:4f:de:e4:7a:08:ed:a9:73:51:d0: a0:31:85:d0:6d:c7:11:03:ee:39:95:a2:ce:2b:f6:6b:df:80: f2:63:05:90:ab:fd:a8:4e:8d:29:56:42:1b:77:a2:02:7d:70: 2d:62:49:d0:91:fb:de:c9:49:9a:da:5a:84:e7:0f:9a:66:d2: 80:27:dc:62:d2:15:44:6c:bb:01:7a:d6:ef:03:ee:8b:14:4e: fe:3e:f3:77:ba:ac:7e:2f:33:75:9b:ba:66:dc:06:df:fe:20: bf:fd:63:c7:9d:68:a0:3e:a1:be:7c:33:72:ba:f2:37:29:5b: b1:75:7b:69:af:86:2f:e0:c9:e5:5d:3a:c3:3d:8e:49:a6:f5: 8d:18:64:f6:05:28:7e:86:34:75:10:0e:24:e6:35:bd:b7:fd: fd:e2:a5:f1:28:17:ff:11:56:e1:9d:be:5d:69:d7:9a:06:40: 0a:b6:7b:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvj33xo/23QH/ee4XHHQn9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZTVlNGZlZDVjY2FmNjAzYjQ2Njg0YTIxNTUzY2U4NjI2 ZWY5YzEwHhcNMjUxMjMwMTQwMDMzWhcNMjUxMjMxMTQwMDMzWjAzMTEwLwYDVQQD Eyg0NWZiNWY5NzA0ZDg0NDE3MzZmN2I4Y2Q1OWMwMzg4MjU0N2YwYzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnoSAiLho2dhMv3oRepLOppRNKOV /kct4/TRViVXytLqqjcUK6GW1SVo0giY83p6hTuXTb2pu96GQ63fZUmtP3uo+Cjr +s8JmzFIkYhnEC+OrdIzS1R5mw8ViBdCkekzLdq0iqcu59Bwzp0T3mJFZ1MrPwtc NQudANKeTi31jEdrA/oQukrmiY5k9WvCkvjSyJPzH7BG6bBs/fvpgcpBa/MNM0o6 pYBfBuqL/pzfHHRJL5bfQbSSg5irhErEVDSZc8KfnLhBd7M6jGAaF81u0hb3wgUj mlzQFbvUW2BRM4/cxxTdE6o8jxqbe0tEzFxaUqLx77AIlROFjEoaJjn3qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEX7X5cE2EQXNve4zVnAOIJUfwyUMB8GA1UdIwQY MBaAFGLl5P7VzK9gO0ZoSiFVPOhibvnBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXVYa190WE1yMkE3Um1oS0lWVTg2R0p1LWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wNDQxNzktODBkZC00NTFhLWJmZDgt M2UxZDczMWRkNjMwLzEvWXVYa190WE1yMkE3Um1oS0lWVTg2R0p1LWNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8wNDQxNzktODBkZC00NTFhLWJmZDgtM2UxZDczMWRkNjMw LzEvWXVYa190WE1yMkE3Um1oS0lWVTg2R0p1LWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimCl8VTy U0N5V1vAh7daKb9usYWS1aaiplMesx4viMZZMqRUILF7LsQdMWav/yOAo87ur52e t4Pwq2VC1cRAS5hfRRsvvlzsaPVMS1rXWZBP3uR6CO2pc1HQoDGF0G3HEQPuOZWi ziv2a9+A8mMFkKv9qE6NKVZCG3eiAn1wLWJJ0JH73slJmtpahOcPmmbSgCfcYtIV RGy7AXrW7wPuixRO/j7zd7qsfi8zdZu6ZtwG3/4gv/1jx51ooD6hvnwzcrryNylb sXV7aa+GL+DJ5V06wz2OSab1jRhk9gUofoY0dRAOJOY1vbf9/eKl8SgX/xFW4Z2+ XWnXmgZACrZ7tA== -----END CERTIFICATE-----Generated at Tue Dec 30 18:41:07 2025 by rpki-client