This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json) Hash identifier: 6toEZzytagvrljfnB4xKLdKbUaEBxE+3oPhqsPPYFmc= Subject key identifier: 44:6D:D2:14:8B:D3:CF:1D:03:8D:37:27:20:5A:8A:A9:71:71:70:2A Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25 Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25 Certificate serial: 019B44A544520E7F532B1DDFFCD94737B1C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft Manifest number: 16B9 Signing time: Mon 22 Dec 2025 06:00:40 +0000 Manifest this update: Mon 22 Dec 2025 06:00:40 +0000 Manifest next update: Tue 23 Dec 2025 06:00:40 +0000 Files and hashes: 1: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: Rnq6TxJcqrupy8UeO7w7F+4DANygMTDMtopZXbcy+TA=) 2: _wocLw8I_D0bWM_gydbHP3YBnWM.roa (hash: ipZCy+v8LxPOj8oL+HxTUZYzmJcHqr9rYLmV463tU+U=) 3: jP1IuFeYqRVYzU2ZxiYcMgwYBwo.roa (hash: 8tUnk9Rc0BoFNUvYX8+NZuDnDdmkv70Pafdtm7lPIM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:44:52:0e:7f:53:2b:1d:df:fc:d9:47:37:b1:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61a14553cacf103274d433e6b268066e01541b25 Validity Not Before: Dec 22 06:00:40 2025 GMT Not After : Dec 23 06:00:40 2025 GMT Subject: CN=446dd2148bd3cf1d038d3727205a8aa97171702a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4e:22:bf:7e:c0:7c:f7:16:fa:5e:7e:bd:3f: f5:9d:24:df:05:99:86:d6:bf:9e:64:39:27:d1:ec: b8:2e:f3:65:01:e7:e6:1d:c2:ba:d9:5b:f6:cb:8d: cf:43:2f:ca:75:2a:8f:a4:b3:4f:38:09:77:e2:c6: 5a:03:4c:83:6f:b2:c3:fa:eb:f9:4c:8f:01:d0:72: 76:cb:fb:cc:c9:c6:30:6e:90:44:52:c9:22:22:3f: 72:0e:9e:c6:96:06:1b:dd:76:22:8b:e5:d1:00:92: 72:33:b8:d8:ae:13:01:ac:41:31:4d:29:b2:63:50: 04:0d:b6:3f:70:93:6b:ac:1e:0e:6f:9d:e0:18:cc: 78:39:34:00:1d:ed:df:27:44:ed:ed:40:3a:05:53: 1d:9a:2d:35:be:6d:cf:54:9b:d6:86:36:53:1a:09: 2e:0f:fe:9a:71:d1:7b:20:68:43:73:c4:76:3d:4f: 6c:62:59:94:d8:6a:42:90:ed:26:fc:fc:25:32:7a: f6:a3:19:e7:09:c1:04:d4:12:18:0e:25:d8:3f:bd: 19:f4:b7:c9:ac:fd:a2:b7:0a:ad:0f:27:63:ce:65: 72:dd:d1:4e:d6:00:f1:32:f3:39:a8:64:56:58:91: d9:a0:38:06:90:cc:26:88:81:14:6e:a7:bd:e0:36: 35:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6D:D2:14:8B:D3:CF:1D:03:8D:37:27:20:5A:8A:A9:71:71:70:2A X509v3 Authority Key Identifier: keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:78:9e:3b:72:87:c5:0b:19:02:49:24:ef:d4:53:9d:79:4d: 73:06:1d:13:f5:c3:a6:a7:2c:35:9a:2b:cd:f3:81:ce:26:50: ae:bd:01:88:a0:30:fa:ab:84:54:a1:08:c9:c8:6d:3e:6c:b5: 62:48:fd:46:c9:7e:39:0c:af:16:dc:3c:f1:a2:52:4a:8f:b4: ea:6a:a1:2f:0b:01:a3:f5:c4:58:ae:9e:e8:d2:2c:86:e5:40: a1:3f:8c:e9:60:3b:dd:8b:91:e1:3e:6b:20:06:ea:a6:30:b5: d6:a7:45:ee:1f:f5:7b:fa:8f:05:7c:06:0b:e2:cb:ab:b0:d0: 6c:46:61:69:46:15:02:d5:44:1b:1e:5f:6b:89:71:a9:9d:ef: c2:3d:2d:58:41:c3:a0:a2:3b:66:e8:2b:0c:54:99:c7:9e:90: ef:4c:37:64:71:fb:c5:0e:98:cc:53:8f:dc:e8:df:9f:f0:0b: f0:ca:6c:01:ff:59:ef:d3:86:a1:29:72:fb:84:61:cd:c3:78: 82:f1:4c:a5:90:f7:79:f5:75:27:b7:a8:d9:1d:ba:c1:16:65: 45:6d:e2:6e:42:a2:dd:2a:ab:66:d7:fe:ba:88:95:a4:28:9d: 45:61:11:ef:ca:e4:94:67:40:47:78:ac:8c:c9:06:8c:e6:5c: bc:93:13:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpURSDn9TKx3f/NlHN7HDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYTE0NTUzY2FjZjEwMzI3NGQ0MzNlNmIyNjgwNjZlMDE1 NDFiMjUwHhcNMjUxMjIyMDYwMDQwWhcNMjUxMjIzMDYwMDQwWjAzMTEwLwYDVQQD Eyg0NDZkZDIxNDhiZDNjZjFkMDM4ZDM3MjcyMDVhOGFhOTcxNzE3MDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA404iv37AfPcW+l5+vT/1nSTfBZmG 1r+eZDkn0ey4LvNlAefmHcK62Vv2y43PQy/KdSqPpLNPOAl34sZaA0yDb7LD+uv5 TI8B0HJ2y/vMycYwbpBEUskiIj9yDp7GlgYb3XYii+XRAJJyM7jYrhMBrEExTSmy Y1AEDbY/cJNrrB4Ob53gGMx4OTQAHe3fJ0Tt7UA6BVMdmi01vm3PVJvWhjZTGgku D/6acdF7IGhDc8R2PU9sYlmU2GpCkO0m/PwlMnr2oxnnCcEE1BIYDiXYP70Z9LfJ rP2itwqtDydjzmVy3dFO1gDxMvM5qGRWWJHZoDgGkMwmiIEUbqe94DY1KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERt0hSL088dA403JyBaiqlxcXAqMB8GA1UdIwQY MBaAFGGhRVPKzxAydNQz5rJoBm4BVBslMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC84ZGQwNTEtZTJlNy00OTZjLWE5ZDAt ZmEyNjZiYjcyZjczLzEvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC84ZGQwNTEtZTJlNy00OTZjLWE5ZDAtZmEyNjZiYjcyZjcz LzEvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXieO3KH xQsZAkkk79RTnXlNcwYdE/XDpqcsNZorzfOBziZQrr0BiKAw+quEVKEIychtPmy1 Ykj9Rsl+OQyvFtw88aJSSo+06mqhLwsBo/XEWK6e6NIshuVAoT+M6WA73YuR4T5r IAbqpjC11qdF7h/1e/qPBXwGC+LLq7DQbEZhaUYVAtVEGx5fa4lxqZ3vwj0tWEHD oKI7ZugrDFSZx56Q70w3ZHH7xQ6YzFOP3Ojfn/AL8MpsAf9Z79OGoSly+4RhzcN4 gvFMpZD3efV1J7eo2R26wRZlRW3ibkKi3SqrZtf+uoiVpCidRWER78rklGdAR3is jMkGjOZcvJMT+Q== -----END CERTIFICATE-----Generated at Mon Dec 22 15:59:49 2025 by rpki-client