This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft File: __N-YUS-f13ZOtubq9g9SNUYlP0.mft (raw, json) Hash identifier: RNrpupXQ8OdJa616i36pxcDqahAr0xMOmJyUsJ7aDsM= Subject key identifier: 4A:FE:F8:2D:9E:01:A7:B5:5F:03:7D:E0:EA:C9:01:FE:C6:14:5B:37 Authority key identifier: FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD Certificate issuer: /CN=fff37e6144be7f5dd93adb9babd83d48d51894fd Certificate serial: 019B6DA18318859BD1D78B277B34E9CEF546 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft Manifest number: 17A4 Signing time: Tue 30 Dec 2025 05:00:59 +0000 Manifest this update: Tue 30 Dec 2025 05:00:59 +0000 Manifest next update: Wed 31 Dec 2025 05:00:59 +0000 Files and hashes: 1: Pd6y31NGl2E53PuxfNWQ2uuokU4.roa (hash: JFGjsWEPBeCuSIlrpF4Du2GayxrXTaSof5LXDS+PGd4=) 2: __N-YUS-f13ZOtubq9g9SNUYlP0.crl (hash: JFOVzfWkcurhrPhYGlGO+Tk/yoaQdQBCO0EwgTrFOBc=) 3: dUNsJzgqtJkMy1l0L21Y0Zsy2ts.roa (hash: 1X+g9lFYFIJoJGwfwGANKciE/PMScLctb1+/RsHdL0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:a1:83:18:85:9b:d1:d7:8b:27:7b:34:e9:ce:f5:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fff37e6144be7f5dd93adb9babd83d48d51894fd Validity Not Before: Dec 30 05:00:59 2025 GMT Not After : Dec 31 05:00:59 2025 GMT Subject: CN=4afef82d9e01a7b55f037de0eac901fec6145b37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0a:6d:0f:02:05:1d:01:93:7a:9a:30:c4:1a: b8:9e:ed:fc:98:76:0b:be:52:24:e8:7d:9f:e1:ae: 96:c9:6e:38:7c:4e:aa:f1:92:0e:8a:f6:c3:4d:69: 7d:b6:51:1e:15:84:ec:7c:10:ea:a4:9d:f2:82:9f: fa:19:9c:a7:3a:d2:c4:37:5b:2a:af:9a:37:b0:50: e7:e7:02:ae:c1:d6:1e:aa:96:0a:4e:14:7b:47:2b: 0d:71:12:42:62:1f:77:c4:80:94:94:54:bc:d9:d8: 18:f1:05:a8:71:df:cd:89:4e:95:c7:05:ce:bc:48: 3b:b7:8a:4c:22:a1:8e:31:88:60:b1:58:d5:0c:5d: d8:74:e8:85:db:24:6b:fe:2d:d7:83:f9:9c:09:77: 2a:c5:fc:e9:05:4f:3f:d4:6b:63:d4:33:da:ee:be: d0:ea:a3:ba:e0:2e:56:22:11:85:41:b0:99:20:2f: d5:39:8a:04:1a:1d:ff:fc:a2:32:86:7d:44:f5:7d: e9:3a:ae:6a:b5:19:b6:77:6f:b6:b1:43:56:30:43: 92:8d:a9:a6:b8:28:27:36:dd:52:43:57:b9:55:d8: ed:a2:d8:1f:b6:26:f0:0b:8e:be:c7:90:08:91:6c: a5:0a:b4:38:02:cd:2f:68:bd:6d:1b:38:ed:ab:2f: 90:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FE:F8:2D:9E:01:A7:B5:5F:03:7D:E0:EA:C9:01:FE:C6:14:5B:37 X509v3 Authority Key Identifier: keyid:FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:a8:e9:50:a2:54:30:f2:41:49:a8:2b:73:6f:8b:94:7b:3a: 5a:eb:c8:cb:fa:e3:f8:ff:65:0b:ba:e2:97:98:24:f8:9c:e3: f4:84:62:d4:6f:d2:e7:28:09:3e:cd:30:63:53:cc:ab:bf:8a: de:53:39:fd:03:e2:13:1c:5a:db:16:a3:70:c4:ab:9b:9d:9a: eb:aa:2f:ea:6d:9d:60:c7:f6:c2:2a:47:32:dd:0d:2d:17:52: ad:d5:34:d6:c1:c0:12:70:f1:df:32:0a:15:a1:0a:1a:cd:4b: 4e:73:6c:40:c7:24:bb:e5:3c:81:16:fb:5d:14:02:0f:c3:88: 11:92:82:23:69:79:d7:cf:9b:18:33:60:bd:e1:ad:92:30:f1: 37:49:3f:a2:c2:47:a7:59:f7:c5:8f:9c:3d:d0:7e:5d:86:8a: 9d:69:ca:dd:a2:b6:51:e7:85:8e:62:95:b5:3e:ea:88:94:3f: 9b:b4:e6:d8:02:46:66:d7:d2:e6:fd:7d:8a:ae:5b:07:99:96: a4:38:d5:b3:b3:b6:45:45:a3:8c:88:3f:e8:69:ba:2d:02:78: 4e:16:f1:61:5a:f1:b2:11:42:b1:47:60:14:6c:72:9f:08:44: 4d:54:b9:b7:45:cd:c3:72:a5:7e:28:63:15:a6:04:36:a6:fb: 26:0a:c7:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttoYMYhZvR14snezTpzvVGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZjM3ZTYxNDRiZTdmNWRkOTNhZGI5YmFiZDgzZDQ4ZDUx ODk0ZmQwHhcNMjUxMjMwMDUwMDU5WhcNMjUxMjMxMDUwMDU5WjAzMTEwLwYDVQQD Eyg0YWZlZjgyZDllMDFhN2I1NWYwMzdkZTBlYWM5MDFmZWM2MTQ1YjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQptDwIFHQGTepowxBq4nu38mHYL vlIk6H2f4a6WyW44fE6q8ZIOivbDTWl9tlEeFYTsfBDqpJ3ygp/6GZynOtLEN1sq r5o3sFDn5wKuwdYeqpYKThR7RysNcRJCYh93xICUlFS82dgY8QWocd/NiU6VxwXO vEg7t4pMIqGOMYhgsVjVDF3YdOiF2yRr/i3Xg/mcCXcqxfzpBU8/1Gtj1DPa7r7Q 6qO64C5WIhGFQbCZIC/VOYoEGh3//KIyhn1E9X3pOq5qtRm2d2+2sUNWMEOSjamm uCgnNt1SQ1e5VdjtotgftibwC46+x5AIkWylCrQ4As0vaL1tGzjtqy+QOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEr++C2eAae1XwN94OrJAf7GFFs3MB8GA1UdIwQY MBaAFP/zfmFEvn9d2Trbm6vYPUjVGJT9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX19OLVlVUy1mMTNaT3R1YnE5ZzlTTlVZbFAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zMmZlMGYtYmNjOS00MmJjLTkyMjYt MGJjZTgwZDRkZmY5LzEvX19OLVlVUy1mMTNaT3R1YnE5ZzlTTlVZbFAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zMmZlMGYtYmNjOS00MmJjLTkyMjYtMGJjZTgwZDRkZmY5 LzEvX19OLVlVUy1mMTNaT3R1YnE5ZzlTTlVZbFAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcqjpUKJU MPJBSagrc2+LlHs6WuvIy/rj+P9lC7ril5gk+Jzj9IRi1G/S5ygJPs0wY1PMq7+K 3lM5/QPiExxa2xajcMSrm52a66ov6m2dYMf2wipHMt0NLRdSrdU01sHAEnDx3zIK FaEKGs1LTnNsQMcku+U8gRb7XRQCD8OIEZKCI2l518+bGDNgveGtkjDxN0k/osJH p1n3xY+cPdB+XYaKnWnK3aK2UeeFjmKVtT7qiJQ/m7Tm2AJGZtfS5v19iq5bB5mW pDjVs7O2RUWjjIg/6Gm6LQJ4ThbxYVrxshFCsUdgFGxynwhETVS5t0XNw3Klfihj FaYENqb7JgrHXg== -----END CERTIFICATE-----Generated at Tue Dec 30 12:14:02 2025 by rpki-client