This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft File: YzkukpMXrmveCKWjuYorcB3biTo.mft (raw, json) Hash identifier: 1g9IHLb4x4nvFg8ajH5aPD30mLNUVQFXDbwApIXN+jU= Subject key identifier: B7:22:19:4D:46:52:29:27:B0:DA:00:88:F5:93:B6:11:65:CA:29:D0 Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Certificate serial: 019B39EB234ED3BDF6C265BC283F34368ED7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft Manifest number: 0601 Signing time: Sat 20 Dec 2025 04:01:09 +0000 Manifest this update: Sat 20 Dec 2025 04:01:09 +0000 Manifest next update: Sun 21 Dec 2025 04:01:09 +0000 Files and hashes: 1: 3Tq13WIcjE4wrF9fmJGXuJJ3EA0.roa (hash: GyLSfZMIbW5GjQFGTgFakvct5lf6SBp5gMlZA4ZRfho=) 2: 7t0ruCwwheWDY1iuc2ABz5OkuLU.roa (hash: Wsc9jgqPgNqZ76JLps6IqRa7nxD3XGEuiy4WXzWnIxU=) 3: ImvsPyGjqHzil2zJhiiakufkk1I.roa (hash: 29vZWJ1xOkBr4giAfRXD6EraUbozMao9ed7L/bRqJaU=) 4: OBYQZDQ1ObRE7hokU9D4Av8auQ0.roa (hash: rilwxKs37kLhwVeNVD/MIAohgiQxYvRftQXfpAgpDb0=) 5: Qf3xuPjCoTEQLfLo_UoAbyihOBg.roa (hash: upxdgtTwbpkR0XgQ85zaD7BvaiRt7M2499aUCky2ako=) 6: Smlnej5n6B69IkLJuHE_uEPKvkM.roa (hash: ZGTm9kLyb+TVFfvRl0Z+2C+98Be3iA8+F42uOm7E6Cg=) 7: YzkukpMXrmveCKWjuYorcB3biTo.crl (hash: XsnwSZoZvduOrVr/4pLSbJvnfkeA1ZaB0zvnc7Yf4CQ=) 8: ZtBVD_gU9JHOidmFecie_EQftRo.roa (hash: TATv9KEl0G9zS/KJs9wWiYzEnpI8uOZdyHODf/h2Zv8=) 9: fY9Iy2JY1E_TXtYJ0FV4aeZ6v-Y.roa (hash: eNIrQiQ2SfuQFshYez06LL23c6mQrj9GfYgkzxup5Xw=) 10: w-kDsP50J75PL4Ya6eQkdiS7MmA.roa (hash: e/heTB6HI2crd/P6O3UvBg+yFEyLCizumo10MAmv0a0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:23:4e:d3:bd:f6:c2:65:bc:28:3f:34:36:8e:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Validity Not Before: Dec 20 04:01:09 2025 GMT Not After : Dec 21 04:01:09 2025 GMT Subject: CN=b722194d46522927b0da0088f593b61165ca29d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fd:74:0d:36:79:e2:db:2c:63:4c:0e:ba:f5: 48:54:e7:1d:20:db:2d:e7:03:64:16:ed:63:6d:a8: 4e:71:ba:ce:a3:e7:fe:38:8a:58:b9:45:a8:b9:fd: 0a:3d:40:8a:0c:db:20:32:8e:58:e8:a1:40:59:16: 82:cc:4b:22:3a:16:98:73:c1:2d:53:f3:82:12:52: d2:b0:8c:eb:89:4f:e8:7b:06:4a:d4:08:31:fc:c0: d7:b8:d5:25:ee:9c:38:8a:88:37:eb:ba:57:3f:e0: d8:cc:b2:d3:04:13:3d:cc:18:87:c1:1f:eb:fb:b8: e8:ba:d8:43:bc:fe:4b:26:ad:24:bc:cc:aa:03:bc: 03:c9:54:a1:1d:19:76:40:6a:76:c7:00:83:02:7a: 5b:25:23:12:04:91:45:96:2f:1a:c6:56:db:b7:e4: c0:dd:12:a6:5f:a8:88:94:9a:9b:12:2d:52:52:c4: 66:93:d9:4b:42:fe:3c:54:9c:96:0e:0b:84:91:1d: b7:2f:64:b6:47:2c:84:76:b5:ab:b2:b7:de:81:6f: f1:1a:02:83:d0:5e:fc:46:9e:ac:1a:1f:c1:40:3f: e3:c6:f3:2a:a6:1d:06:f0:56:7d:ae:81:30:3f:c8: 51:b1:1c:03:4d:17:39:fb:90:02:39:e4:e7:9c:ed: dd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:22:19:4D:46:52:29:27:B0:DA:00:88:F5:93:B6:11:65:CA:29:D0 X509v3 Authority Key Identifier: keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:b6:63:28:a2:ad:97:0c:07:55:a0:6f:af:5b:9d:42:a4:95: 12:8b:44:31:ee:f7:a5:e6:05:ac:7b:17:57:6c:c0:b4:a7:44: 5c:9d:17:11:44:38:71:ae:91:49:b3:fb:15:a8:0f:4e:b5:18: 0c:60:91:a1:d1:06:bb:10:59:c5:8d:8c:b5:06:a2:11:33:5e: 96:11:d5:57:d4:f7:93:a7:eb:0a:98:e0:71:2e:42:d8:c8:2f: d9:7a:94:2a:81:f0:ea:73:be:a1:ba:77:b1:d9:6d:c8:c5:8e: e5:7b:a3:c0:78:9f:b9:de:99:d8:a4:0d:23:88:c9:c1:a6:9f: 93:e9:a7:70:ec:16:45:6d:11:67:11:d0:ad:88:0e:e1:c1:f1: 52:2c:86:df:44:dd:8b:d1:cf:08:c9:a2:55:06:ba:db:33:8c: 24:7a:a0:dd:c7:64:dc:bc:7a:ab:26:4a:d4:20:fa:c1:b5:78: 6c:ff:fa:e6:b6:8c:30:bc:bc:17:fd:d5:2b:f2:3f:38:42:cd: b4:79:2e:2c:f0:8e:d5:59:16:b3:7a:64:15:ae:d7:76:77:fa: 55:bb:eb:b8:fa:da:d4:12:da:49:c8:3c:c4:28:d1:fd:ef:d6: de:10:8c:c5:78:a8:b7:24:67:f5:51:af:3f:61:54:ea:bc:39: ba:44:72:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56yNO0732wmW8KD80No7XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk Yjg5M2EwHhcNMjUxMjIwMDQwMTA5WhcNMjUxMjIxMDQwMTA5WjAzMTEwLwYDVQQD EyhiNzIyMTk0ZDQ2NTIyOTI3YjBkYTAwODhmNTkzYjYxMTY1Y2EyOWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov10DTZ54tssY0wOuvVIVOcdINst 5wNkFu1jbahOcbrOo+f+OIpYuUWouf0KPUCKDNsgMo5Y6KFAWRaCzEsiOhaYc8Et U/OCElLSsIzriU/oewZK1Agx/MDXuNUl7pw4iog367pXP+DYzLLTBBM9zBiHwR/r +7jouthDvP5LJq0kvMyqA7wDyVShHRl2QGp2xwCDAnpbJSMSBJFFli8axlbbt+TA 3RKmX6iIlJqbEi1SUsRmk9lLQv48VJyWDguEkR23L2S2RyyEdrWrsrfegW/xGgKD 0F78Rp6sGh/BQD/jxvMqph0G8FZ9roEwP8hRsRwDTRc5+5ACOeTnnO3d3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLciGU1GUiknsNoAiPWTthFlyinQMB8GA1UdIwQY MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt ODcyNTBmNWEwN2NjLzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsrZjKKKt lwwHVaBvr1udQqSVEotEMe73peYFrHsXV2zAtKdEXJ0XEUQ4ca6RSbP7FagPTrUY DGCRodEGuxBZxY2MtQaiETNelhHVV9T3k6frCpjgcS5C2Mgv2XqUKoHw6nO+obp3 sdltyMWO5XujwHifud6Z2KQNI4jJwaafk+mncOwWRW0RZxHQrYgO4cHxUiyG30Td i9HPCMmiVQa62zOMJHqg3cdk3Lx6qyZK1CD6wbV4bP/65raMMLy8F/3VK/I/OELN tHkuLPCO1VkWs3pkFa7Xdnf6VbvruPra1BLaScg8xCjR/e/W3hCMxXiotyRn9VGv P2FU6rw5ukRyow== -----END CERTIFICATE-----Generated at Sat Dec 20 05:36:16 2025 by rpki-client