This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft File: YRuftFY550kvKzYx9kD2q5r7YpA.mft (raw, json) Hash identifier: y949XAMlFFEXIW2wvoq31/R4jis6Xfk3tY6kXd71ug8= Subject key identifier: 28:D8:C5:14:33:C9:5F:95:2F:64:00:C7:19:F0:15:C5:1D:E4:2A:F3 Authority key identifier: 61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90 Certificate issuer: /CN=611b9fb45639e7492f2b3631f640f6ab9afb6290 Certificate serial: 019B5CE508F7EF21833D6DA27CA55C10DF83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft Manifest number: 023B Signing time: Fri 26 Dec 2025 23:01:12 +0000 Manifest this update: Fri 26 Dec 2025 23:01:12 +0000 Manifest next update: Sat 27 Dec 2025 23:01:12 +0000 Files and hashes: 1: 78p7eZsSQ8zonV0TNMaLaLjK96I.roa (hash: +QO+TKXARPaWdOJ8baQ83Q+fqGFHJ3lndWpB+9vwuT8=) 2: Aqz_ehMSCGzxFOJ8FvGbcOAmgSU.roa (hash: s3KelrVfC9+y7bPujzwFv1EKOWZnruzzVkasMV5xnU4=) 3: Dz7fUAyA3Q6aEL4NtI6fDewBO-Q.roa (hash: xVI7un3YDJ74QBZKCGBUFc9S59Re+F08cwvGlwnT43k=) 4: LuLOUOJIGHxq7ykgB21inUS-57w.roa (hash: ab5+eNLQ6Vj2WxgXbW4Ku3+IuOco/UzZZHvYaaD6UKw=) 5: YRuftFY550kvKzYx9kD2q5r7YpA.crl (hash: JXpX72dcGEoic5Owj7N1hZCuHMuazekpq8lgFbqyVsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 23:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:e5:08:f7:ef:21:83:3d:6d:a2:7c:a5:5c:10:df:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=611b9fb45639e7492f2b3631f640f6ab9afb6290 Validity Not Before: Dec 26 23:01:12 2025 GMT Not After : Dec 27 23:01:12 2025 GMT Subject: CN=28d8c51433c95f952f6400c719f015c51de42af3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d2:47:0f:c2:12:0c:ec:3a:70:f7:df:72:0d: 1a:08:88:6e:b6:e7:61:cd:38:e2:ab:d2:d1:c2:c0: c4:97:ba:07:ac:ca:f1:31:20:7c:c1:0e:97:1d:84: c1:6c:8a:0c:56:73:1c:3e:d3:82:af:fb:31:17:45: 87:12:d6:f1:4a:59:8f:68:2b:1c:d5:28:b3:74:aa: 7d:be:98:25:cf:66:e9:d8:cc:8c:5f:67:b8:3c:1f: 52:76:ca:f1:7c:28:e5:df:f8:52:27:05:a3:c5:bd: a0:59:49:b4:d0:15:62:0e:a6:d7:25:0a:ca:13:dd: c1:d3:3e:71:54:d1:3e:e0:57:9c:a5:21:28:07:e7: 5d:96:06:30:4d:81:61:0b:2c:d8:6e:d8:07:3c:26: ac:a1:9a:9b:c0:7c:f6:f2:34:8e:9b:51:6a:e0:c5: fb:2d:c6:18:d0:1a:6c:3d:38:6d:2a:76:ea:47:77: 3b:b6:c4:66:1a:38:60:d5:9b:9d:84:4d:50:14:42: 09:99:2a:a6:fe:94:5f:c9:c3:dd:6a:c2:ec:28:ce: b4:73:f5:00:ca:23:0b:a1:ba:70:d6:8c:b7:83:c1: 10:5a:6f:3d:73:ca:f1:67:83:c1:49:ca:0f:86:af: 7b:5d:73:47:33:01:2e:0c:fd:ea:92:b9:67:78:f9: 88:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D8:C5:14:33:C9:5F:95:2F:64:00:C7:19:F0:15:C5:1D:E4:2A:F3 X509v3 Authority Key Identifier: keyid:61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:e3:83:28:71:3f:76:4a:11:3a:51:b4:d6:40:8e:f4:dc:c8: 7e:17:43:5e:e9:01:5e:e5:b4:c0:43:6b:5a:50:17:cb:fb:eb: 7f:65:82:2e:f3:47:3e:ff:64:6c:ff:46:7c:75:da:d7:d1:64: 00:ba:91:6b:57:60:e2:e8:9a:14:6e:6f:df:b6:e7:f2:63:a2: 26:fb:8c:62:20:57:f0:bc:6b:18:d5:1d:57:e4:06:85:2e:d3: a8:b0:5b:80:67:2f:90:b0:c7:15:3e:e4:75:4c:e5:9a:54:6c: 69:51:97:77:0f:87:0b:41:9f:e1:e3:21:a4:33:3b:30:3d:a4: a2:4a:69:79:ba:88:a8:06:6a:92:0a:48:cb:7a:a0:26:51:38: 34:5c:31:ba:fe:65:9e:ec:fd:40:5e:2c:94:79:1d:c9:2b:51: 2b:27:61:16:60:a0:92:b5:ef:b4:03:3e:1a:ce:e7:b6:81:f4: 32:53:bd:4d:1c:1c:b9:0d:56:3d:3f:8e:6f:f8:00:bb:9e:5c: 55:62:13:65:9d:6e:28:32:22:f2:0d:02:45:8f:45:6e:5f:e8: af:94:2d:92:e6:56:28:10:ba:5f:58:87:87:15:f9:8a:26:58: a8:e4:b2:66:70:7c:65:c6:e0:e0:1f:c1:2b:74:dd:42:8a:00: 63:3d:ca:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtc5Qj37yGDPW2ifKVcEN+DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMWI5ZmI0NTYzOWU3NDkyZjJiMzYzMWY2NDBmNmFiOWFm YjYyOTAwHhcNMjUxMjI2MjMwMTEyWhcNMjUxMjI3MjMwMTEyWjAzMTEwLwYDVQQD EygyOGQ4YzUxNDMzYzk1Zjk1MmY2NDAwYzcxOWYwMTVjNTFkZTQyYWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodJHD8ISDOw6cPffcg0aCIhutudh zTjiq9LRwsDEl7oHrMrxMSB8wQ6XHYTBbIoMVnMcPtOCr/sxF0WHEtbxSlmPaCsc 1SizdKp9vpglz2bp2MyMX2e4PB9SdsrxfCjl3/hSJwWjxb2gWUm00BViDqbXJQrK E93B0z5xVNE+4FecpSEoB+ddlgYwTYFhCyzYbtgHPCasoZqbwHz28jSOm1Fq4MX7 LcYY0BpsPThtKnbqR3c7tsRmGjhg1ZudhE1QFEIJmSqm/pRfycPdasLsKM60c/UA yiMLobpw1oy3g8EQWm89c8rxZ4PBScoPhq97XXNHMwEuDP3qkrlnePmISQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjYxRQzyV+VL2QAxxnwFcUd5CrzMB8GA1UdIwQY MBaAFGEbn7RWOedJLys2MfZA9qua+2KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVJ1ZnRGWTU1MGt2S3pZeDlrRDJxNXI3WXBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi84NDgyZDItNzIzMy00MTc3LTk5MmYt N2Q3NWUyYjFhN2I5LzEvWVJ1ZnRGWTU1MGt2S3pZeDlrRDJxNXI3WXBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi84NDgyZDItNzIzMy00MTc3LTk5MmYtN2Q3NWUyYjFhN2I5 LzEvWVJ1ZnRGWTU1MGt2S3pZeDlrRDJxNXI3WXBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+ODKHE/ dkoROlG01kCO9NzIfhdDXukBXuW0wENrWlAXy/vrf2WCLvNHPv9kbP9GfHXa19Fk ALqRa1dg4uiaFG5v37bn8mOiJvuMYiBX8LxrGNUdV+QGhS7TqLBbgGcvkLDHFT7k dUzlmlRsaVGXdw+HC0Gf4eMhpDM7MD2kokppebqIqAZqkgpIy3qgJlE4NFwxuv5l nuz9QF4slHkdyStRKydhFmCgkrXvtAM+Gs7ntoH0MlO9TRwcuQ1WPT+Ob/gAu55c VWITZZ1uKDIi8g0CRY9Fbl/or5QtkuZWKBC6X1iHhxX5iiZYqOSyZnB8Zcbg4B/B K3TdQooAYz3Kdw== -----END CERTIFICATE-----Generated at Sat Dec 27 07:16:43 2025 by rpki-client