This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft File: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft (raw, json) Hash identifier: 1Ycd1nYnAoWmiXdhFW4V5GAT66/6FLuGjDWSCUzzI+Q= Subject key identifier: 4D:10:83:FB:DF:52:37:2A:9C:A2:81:22:AE:A8:3F:C7:03:F1:3A:2D Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0 Certificate issuer: /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0 Certificate serial: 019B428013FF4E5B1B3A96077F08F46C44FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft Manifest number: 1791 Signing time: Sun 21 Dec 2025 20:00:48 +0000 Manifest this update: Sun 21 Dec 2025 20:00:48 +0000 Manifest next update: Mon 22 Dec 2025 20:00:48 +0000 Files and hashes: 1: 12cWFr32i6PF2CeFM1PO-xgXt6A.roa (hash: kaGn4iTJ9yXgrBEjfOG5dUlsL+x0SJaJYPyNDbIcR54=) 2: PnEzUVbrYhXZNNLfCN-Xtl0-Pzk.roa (hash: lXzPnJfE3bH0euvEvGwi8aTfi10gIwh0zvOckFmaQMI=) 3: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl (hash: OckeDYMwqnTCZvUxZRIA2TjntXBPQn9J/e1F7821O1w=) 4: faW_PPYk_4UD9_3RNfk7L7R4hKg.roa (hash: NsYb0FRDPoAtzYBgzGg3wYZizhwYw15oPV3lBi8uVeo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:13:ff:4e:5b:1b:3a:96:07:7f:08:f4:6c:44:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0 Validity Not Before: Dec 21 20:00:48 2025 GMT Not After : Dec 22 20:00:48 2025 GMT Subject: CN=4d1083fbdf52372a9ca28122aea83fc703f13a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:11:55:76:f3:04:22:5d:e7:19:f9:c6:7a:58: d4:69:99:3c:16:65:8d:c6:18:70:c1:b5:75:f5:95: 99:22:cc:f9:c0:77:0d:36:7c:5f:d3:8c:97:2b:a6: 97:a3:f2:f8:11:66:08:76:93:98:3d:c5:fe:ce:42: 67:34:c0:35:8f:c8:91:ad:32:45:b0:99:2b:12:f3: aa:6b:87:f2:e4:35:0c:68:03:be:30:02:45:77:a6: 7b:6c:d0:80:c8:e6:94:bb:ac:b6:4e:37:2c:0d:ab: ee:98:a2:06:54:c5:08:0f:1f:5f:33:fd:41:e4:69: 0d:af:23:a5:f9:fd:ca:f3:68:5c:22:fc:b9:1b:7b: 86:c0:4a:3a:5f:40:31:79:d3:3d:a2:e6:db:29:1b: 10:ee:2a:d0:f7:b3:11:b9:eb:1e:6b:0f:ee:b6:55: f4:43:26:4f:e1:2a:36:74:9f:27:3f:aa:f8:8d:4a: 2a:60:5b:16:26:77:4d:92:89:ae:39:4d:f7:33:78: b7:df:51:32:6f:fd:b7:d8:cc:7f:06:fc:06:c5:e1: 7e:2f:7f:be:b2:3a:59:a3:0a:f0:a7:08:33:23:4c: d4:de:e1:db:81:94:43:f1:da:77:39:54:48:8b:74: 61:67:5c:f4:2a:7f:c3:0f:cf:1d:40:1f:6b:75:6b: 78:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:10:83:FB:DF:52:37:2A:9C:A2:81:22:AE:A8:3F:C7:03:F1:3A:2D X509v3 Authority Key Identifier: keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:53:bc:36:42:a8:bd:75:39:55:d6:57:37:73:00:7d:5f:cf: 8a:0e:ff:33:24:95:40:ac:2e:6b:b1:5e:8d:c4:cc:f2:c0:cd: dd:b2:b1:c1:0f:d3:10:06:a5:2e:c5:f5:93:df:fa:71:e4:e2: 48:ec:90:c2:ea:10:e3:62:9f:77:2d:ea:f7:45:13:52:f9:56: 97:6a:d4:8d:a4:00:4c:ed:52:10:03:b9:38:ea:b1:36:db:d7: 6f:b7:21:52:42:2d:27:b0:62:85:f8:78:0e:e4:3d:3c:6d:0a: 76:1b:ac:72:28:af:e7:f6:cc:d3:a9:30:b9:c9:22:39:be:8b: 17:a7:1f:fd:38:40:ab:dc:af:9d:bf:26:f1:a9:65:87:97:5d: 64:0a:52:74:95:17:67:0b:19:6f:2e:2d:fb:c2:b8:9f:7d:07: 83:a0:d7:71:51:ef:83:d3:5e:d6:0c:46:4c:5e:e9:2d:d6:e3: 72:61:0b:e6:77:37:a2:9a:50:a3:5a:38:78:99:4d:15:dc:83: e4:e4:2a:40:15:03:1c:17:c7:88:22:ad:fb:94:3b:fa:e0:0b: 3f:6b:72:a1:b9:42:b7:6e:a1:6b:cf:e5:83:0d:b3:b9:e5:cf: 9a:49:17:4c:8f:50:d4:e0:d4:84:98:3c:5d:1d:f7:62:03:b3: cc:fa:45:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgBP/TlsbOpYHfwj0bET9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxN2NkOGQ0OGI1ZDE1NjY3YmYxMzEzOTZkNGE2YzU5ZDdk MTY3YzAwHhcNMjUxMjIxMjAwMDQ4WhcNMjUxMjIyMjAwMDQ4WjAzMTEwLwYDVQQD Eyg0ZDEwODNmYmRmNTIzNzJhOWNhMjgxMjJhZWE4M2ZjNzAzZjEzYTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRFVdvMEIl3nGfnGeljUaZk8FmWN xhhwwbV19ZWZIsz5wHcNNnxf04yXK6aXo/L4EWYIdpOYPcX+zkJnNMA1j8iRrTJF sJkrEvOqa4fy5DUMaAO+MAJFd6Z7bNCAyOaUu6y2TjcsDavumKIGVMUIDx9fM/1B 5GkNryOl+f3K82hcIvy5G3uGwEo6X0AxedM9oubbKRsQ7irQ97MRueseaw/utlX0 QyZP4So2dJ8nP6r4jUoqYFsWJndNkomuOU33M3i331Eyb/232Mx/BvwGxeF+L3++ sjpZowrwpwgzI0zU3uHbgZRD8dp3OVRIi3RhZ1z0Kn/DD88dQB9rdWt4sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0Qg/vfUjcqnKKBIq6oP8cD8TotMB8GA1UdIwQY MBaAFGF82NSLXRVme/ExOW1KbFnX0WfAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVh6WTFJdGRGV1o3OFRFNWJVcHNXZGZSWjhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8xMDVlMjMtNmNlNi00Y2UwLTkzZmEt YmY2ZTk3ZGRkMDc5LzEvWVh6WTFJdGRGV1o3OFRFNWJVcHNXZGZSWjhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8xMDVlMjMtNmNlNi00Y2UwLTkzZmEtYmY2ZTk3ZGRkMDc5 LzEvWVh6WTFJdGRGV1o3OFRFNWJVcHNXZGZSWjhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAclO8NkKo vXU5VdZXN3MAfV/Pig7/MySVQKwua7FejcTM8sDN3bKxwQ/TEAalLsX1k9/6ceTi SOyQwuoQ42Kfdy3q90UTUvlWl2rUjaQATO1SEAO5OOqxNtvXb7chUkItJ7Bihfh4 DuQ9PG0Kdhusciiv5/bM06kwuckiOb6LF6cf/ThAq9yvnb8m8allh5ddZApSdJUX ZwsZby4t+8K4n30Hg6DXcVHvg9Ne1gxGTF7pLdbjcmEL5nc3oppQo1o4eJlNFdyD 5OQqQBUDHBfHiCKt+5Q7+uALP2tyoblCt26ha8/lgw2zueXPmkkXTI9Q1ODUhJg8 XR33YgOzzPpFYw== -----END CERTIFICATE-----Generated at Mon Dec 22 01:43:51 2025 by rpki-client