This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft File: YoVOil7h3sifJbKnhZAj_7Ejufg.mft (raw, json) Hash identifier: 51qGv98io7b/rgo/T2qUC+QcRroyf7XRG93D+lvuasQ= Subject key identifier: A3:45:96:E7:8D:89:F0:EA:DB:F5:80:20:CE:8B:64:20:CF:0E:6E:A1 Authority key identifier: 62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8 Certificate issuer: /CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8 Certificate serial: 019B3E6E19CC254818BB7EDAB9AFE8A3FB65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft Manifest number: 0710 Signing time: Sun 21 Dec 2025 01:02:41 +0000 Manifest this update: Sun 21 Dec 2025 01:02:41 +0000 Manifest next update: Mon 22 Dec 2025 01:02:41 +0000 Files and hashes: 1: TrtZuni9BXkr6xZOXYLQCg04wuw.roa (hash: SIw1RJxvKD/HG9TI34PNPQ5r5zhuKGFFi0wwoRLgCSI=) 2: YoVOil7h3sifJbKnhZAj_7Ejufg.crl (hash: 3pG3slonR2sZrmrYWPx+Gb4jzc6aUAOzcf3Eod6WrlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6e:19:cc:25:48:18:bb:7e:da:b9:af:e8:a3:fb:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8 Validity Not Before: Dec 21 01:02:41 2025 GMT Not After : Dec 22 01:02:41 2025 GMT Subject: CN=a34596e78d89f0eadbf58020ce8b6420cf0e6ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c4:f0:1f:20:3a:17:e4:95:4b:0b:1a:de:e7: 07:3e:da:dc:7b:24:54:15:03:7e:d0:2a:e6:89:82: 9c:ff:04:b4:96:18:39:9b:37:66:d8:49:93:65:8d: 3c:89:2c:02:45:3e:ba:5e:73:62:37:ea:a7:dc:f3: 99:c3:52:e2:7a:67:a4:86:b3:ae:1b:3a:c1:03:68: c2:ac:aa:c2:bc:74:35:84:5c:a4:dc:78:fd:37:7a: 87:77:04:d8:86:bd:10:2b:51:e3:f6:7d:41:70:44: 59:26:c8:ae:70:2d:61:60:cf:46:a0:b5:2b:58:99: 78:8d:a4:49:d3:f9:73:0c:7a:b2:63:ba:ef:56:18: 88:16:e1:69:64:a9:4f:be:0e:2d:65:ef:10:8e:a4: e9:b0:ca:10:48:ab:06:8c:c5:83:e1:a5:0c:6e:f7: 65:30:2c:b1:7d:f8:4c:74:3d:6c:68:b4:0b:e6:ed: 9b:ea:b6:f7:23:be:5a:b6:c5:89:7f:d1:b8:3c:66: f1:21:81:c4:f1:65:1d:f3:28:c5:d1:3d:ca:70:48: 10:8f:8f:26:d9:8f:2d:33:5c:77:02:73:d5:28:5f: c0:43:83:48:08:d4:97:8c:7d:42:90:ac:70:09:93: b9:84:5d:f4:db:77:b1:3b:01:bf:69:53:a1:fa:54: cd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:45:96:E7:8D:89:F0:EA:DB:F5:80:20:CE:8B:64:20:CF:0E:6E:A1 X509v3 Authority Key Identifier: keyid:62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:cd:d9:13:aa:c3:5e:6e:f4:8d:e7:80:31:b3:c1:4d:73:ff: 08:dc:59:d2:2a:8c:d0:4d:86:c9:48:64:72:5c:1f:2e:d3:0f: 2d:6f:f3:11:94:77:54:d7:01:90:43:3f:07:f3:31:bc:4f:f7: 2d:af:67:8f:3d:b8:40:9d:45:a7:3f:f3:f7:66:a7:39:df:aa: 11:68:b5:59:a7:b3:83:c4:7a:9b:30:1a:7c:15:35:80:e2:e8: 6e:fe:0d:3a:82:51:8d:56:ee:8c:53:ce:ae:83:ad:50:ee:d6: 58:4c:6b:31:72:e7:a4:37:b2:e9:66:6d:d6:7e:16:c4:a3:19: e1:39:7b:f0:63:2a:2f:ec:7d:24:15:5e:f6:d0:34:e6:6f:e3: c6:19:49:dd:62:f9:c5:09:51:79:db:f4:15:f5:d4:79:ea:89: 91:07:90:28:8f:ab:ef:7e:d9:f8:70:b1:36:0e:68:82:ab:f8: ab:1c:95:76:60:a0:8f:88:7d:b4:09:6f:79:4c:6a:8c:22:86: 93:18:b6:b8:28:ed:e1:c3:0a:3e:8c:10:51:78:f6:cc:8b:71: ae:a9:70:db:1e:3d:22:ff:0d:82:b6:f0:a7:40:48:12:5b:91: 1e:11:0b:96:9b:e0:4d:e3:d9:45:d4:80:74:e3:0f:dc:d2:e0: 78:15:05:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bhnMJUgYu37aua/oo/tlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyODU0ZThhNWVlMWRlYzg5ZjI1YjJhNzg1OTAyM2ZmYjEy M2I5ZjgwHhcNMjUxMjIxMDEwMjQxWhcNMjUxMjIyMDEwMjQxWjAzMTEwLwYDVQQD EyhhMzQ1OTZlNzhkODlmMGVhZGJmNTgwMjBjZThiNjQyMGNmMGU2ZWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18TwHyA6F+SVSwsa3ucHPtrceyRU FQN+0CrmiYKc/wS0lhg5mzdm2EmTZY08iSwCRT66XnNiN+qn3POZw1LiemekhrOu GzrBA2jCrKrCvHQ1hFyk3Hj9N3qHdwTYhr0QK1Hj9n1BcERZJsiucC1hYM9GoLUr WJl4jaRJ0/lzDHqyY7rvVhiIFuFpZKlPvg4tZe8QjqTpsMoQSKsGjMWD4aUMbvdl MCyxffhMdD1saLQL5u2b6rb3I75atsWJf9G4PGbxIYHE8WUd8yjF0T3KcEgQj48m 2Y8tM1x3AnPVKF/AQ4NICNSXjH1CkKxwCZO5hF3023exOwG/aVOh+lTNhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKNFlueNifDq2/WAIM6LZCDPDm6hMB8GA1UdIwQY MBaAFGKFTope4d7InyWyp4WQI/+xI7n4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW9WT2lsN2gzc2lmSmJLbmhaQWpfN0VqdWZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNjFkM2QtODkwZC00OTI2LThmMzgt MzViMWM1YjhhZDM0LzEvWW9WT2lsN2gzc2lmSmJLbmhaQWpfN0VqdWZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNjFkM2QtODkwZC00OTI2LThmMzgtMzViMWM1YjhhZDM0 LzEvWW9WT2lsN2gzc2lmSmJLbmhaQWpfN0VqdWZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhM3ZE6rD Xm70jeeAMbPBTXP/CNxZ0iqM0E2GyUhkclwfLtMPLW/zEZR3VNcBkEM/B/MxvE/3 La9njz24QJ1Fpz/z92anOd+qEWi1Waezg8R6mzAafBU1gOLobv4NOoJRjVbujFPO roOtUO7WWExrMXLnpDey6WZt1n4WxKMZ4Tl78GMqL+x9JBVe9tA05m/jxhlJ3WL5 xQlRedv0FfXUeeqJkQeQKI+r737Z+HCxNg5ogqv4qxyVdmCgj4h9tAlveUxqjCKG kxi2uCjt4cMKPowQUXj2zItxrqlw2x49Iv8Ngrbwp0BIEluRHhELlpvgTePZRdSA dOMP3NLgeBUFKQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:58:34 2025 by rpki-client