This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft File: YuXk_tXMr2A7RmhKIVU86GJu-cE.mft (raw, json) Hash identifier: T4hWQ/YFWBwPZtd/v5a4MN+DqEzVVcag03BS48eOoBs= Subject key identifier: 74:41:30:5F:46:FE:1E:74:CB:BC:EC:28:7C:EF:0F:BE:0B:84:0D:20 Authority key identifier: 62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1 Certificate issuer: /CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1 Certificate serial: 019B3B6B4E3484FEDAA1332812D53E985475 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft Manifest number: 0475 Signing time: Sat 20 Dec 2025 11:00:46 +0000 Manifest this update: Sat 20 Dec 2025 11:00:46 +0000 Manifest next update: Sun 21 Dec 2025 11:00:46 +0000 Files and hashes: 1: 75BTAzaWIqNBNqbHGCcSmYPxzWo.roa (hash: E7g/0drvt8P/stRrLTMim2nlcTgYeQXHR6qswQWRYZY=) 2: YuXk_tXMr2A7RmhKIVU86GJu-cE.crl (hash: xSXVZyZwDCJAhQEsHzQGFKDy69r6jZicKqUmAlzYnfA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:4e:34:84:fe:da:a1:33:28:12:d5:3e:98:54:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1 Validity Not Before: Dec 20 11:00:46 2025 GMT Not After : Dec 21 11:00:46 2025 GMT Subject: CN=7441305f46fe1e74cbbcec287cef0fbe0b840d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fd:51:e5:db:b4:a1:36:17:58:bb:7f:e3:b2: 00:17:d0:96:60:6d:5a:67:3e:b3:59:70:9a:c9:da: 4e:32:85:b9:ea:13:f9:17:3f:03:59:fd:c9:9e:5a: 99:6e:e7:c8:7e:15:23:cb:f9:40:b9:79:e0:fa:51: dd:fc:cf:63:32:c5:fb:71:c5:5f:8b:f3:1e:fc:55: d4:17:44:1d:46:7c:d1:92:29:41:58:50:09:23:b0: 50:b6:c0:a9:db:c2:2e:33:ee:cf:a5:5f:a0:e0:e4: 40:ad:dd:d6:d9:e5:4e:e1:ce:fc:d0:80:5a:95:57: 26:bb:36:13:b8:d9:a6:15:36:39:ff:da:7a:9e:63: ac:18:0b:a1:5f:ce:9b:74:14:95:1d:a0:1d:1f:50: 0e:16:7b:75:6a:74:48:61:45:b5:6d:13:2e:0a:7f: 74:d0:2c:8f:1e:d8:6b:d6:6e:63:3c:f8:ee:cc:05: da:4b:f9:cf:93:e1:1c:08:36:df:b4:82:55:0a:7e: c3:b4:eb:b7:3b:93:05:2f:5f:d3:08:3d:e1:2f:d6: 69:72:ea:bc:95:21:b2:7b:19:b6:a7:0f:17:e6:df: ea:65:6c:29:7f:1e:8c:14:84:b3:65:8b:5c:0c:6a: 02:bd:4e:03:9a:18:93:e7:f2:c7:e0:14:4b:90:cc: bc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:41:30:5F:46:FE:1E:74:CB:BC:EC:28:7C:EF:0F:BE:0B:84:0D:20 X509v3 Authority Key Identifier: keyid:62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:52:59:37:58:86:b0:74:47:75:ff:4e:7e:e4:71:bd:93:6f: 41:2e:97:32:ec:99:0c:ce:ba:1b:94:58:a8:62:14:2e:63:45: 6d:2d:7a:b6:53:11:81:b0:12:3e:d3:1b:62:b4:ca:01:5a:51: 39:d9:34:e1:a8:b3:94:9d:78:35:fd:49:65:88:4a:17:ec:e9: 3a:05:2f:3f:0a:ea:bd:b3:87:c8:fe:1d:92:de:c2:9d:ea:3b: 6c:bc:29:90:9a:f0:76:eb:b6:31:d9:c7:64:36:86:5b:43:b2: f1:43:87:34:82:b6:29:e2:ed:8f:a6:6f:24:9d:10:10:50:54: 45:a9:39:af:be:de:0e:0e:db:4d:7e:5f:3e:b6:64:2c:ea:56: db:c2:53:59:6b:a4:8a:a3:74:bf:db:86:2f:44:7c:fa:2e:32: fe:f9:54:4a:64:66:20:5c:de:af:ef:bd:19:cd:d2:cb:de:67: 3f:ff:1d:0a:6b:fd:c3:a2:71:d3:c9:17:35:83:54:3e:d2:92: 20:bf:e0:14:a3:bf:f6:ae:e4:b7:a6:61:6e:c8:d2:ad:a1:3f: 2d:9f:46:4f:d8:80:82:d5:47:c3:c5:de:78:b1:f3:af:8b:e5: 67:64:50:f8:57:53:1c:e4:df:bb:0a:ad:b3:1b:de:9c:73:b9: a7:34:cf:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a040hP7aoTMoEtU+mFR1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZTVlNGZlZDVjY2FmNjAzYjQ2Njg0YTIxNTUzY2U4NjI2 ZWY5YzEwHhcNMjUxMjIwMTEwMDQ2WhcNMjUxMjIxMTEwMDQ2WjAzMTEwLwYDVQQD Eyg3NDQxMzA1ZjQ2ZmUxZTc0Y2JiY2VjMjg3Y2VmMGZiZTBiODQwZDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0f1R5du0oTYXWLt/47IAF9CWYG1a Zz6zWXCaydpOMoW56hP5Fz8DWf3JnlqZbufIfhUjy/lAuXng+lHd/M9jMsX7ccVf i/Me/FXUF0QdRnzRkilBWFAJI7BQtsCp28IuM+7PpV+g4ORArd3W2eVO4c780IBa lVcmuzYTuNmmFTY5/9p6nmOsGAuhX86bdBSVHaAdH1AOFnt1anRIYUW1bRMuCn90 0CyPHthr1m5jPPjuzAXaS/nPk+EcCDbftIJVCn7DtOu3O5MFL1/TCD3hL9Zpcuq8 lSGyexm2pw8X5t/qZWwpfx6MFISzZYtcDGoCvU4DmhiT5/LH4BRLkMy8NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRBMF9G/h50y7zsKHzvD74LhA0gMB8GA1UdIwQY MBaAFGLl5P7VzK9gO0ZoSiFVPOhibvnBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXVYa190WE1yMkE3Um1oS0lWVTg2R0p1LWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wNDQxNzktODBkZC00NTFhLWJmZDgt M2UxZDczMWRkNjMwLzEvWXVYa190WE1yMkE3Um1oS0lWVTg2R0p1LWNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8wNDQxNzktODBkZC00NTFhLWJmZDgtM2UxZDczMWRkNjMw LzEvWXVYa190WE1yMkE3Um1oS0lWVTg2R0p1LWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1JZN1iG sHRHdf9OfuRxvZNvQS6XMuyZDM66G5RYqGIULmNFbS16tlMRgbASPtMbYrTKAVpR Odk04aizlJ14Nf1JZYhKF+zpOgUvPwrqvbOHyP4dkt7Cneo7bLwpkJrwduu2MdnH ZDaGW0Oy8UOHNIK2KeLtj6ZvJJ0QEFBURak5r77eDg7bTX5fPrZkLOpW28JTWWuk iqN0v9uGL0R8+i4y/vlUSmRmIFzer++9Gc3Sy95nP/8dCmv9w6Jx08kXNYNUPtKS IL/gFKO/9q7kt6ZhbsjSraE/LZ9GT9iAgtVHw8XeeLHzr4vlZ2RQ+FdTHOTfuwqt sxvenHO5pzTPZg== -----END CERTIFICATE-----Generated at Sat Dec 20 19:06:23 2025 by rpki-client