This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft File: YzkukpMXrmveCKWjuYorcB3biTo.mft (raw, json) Hash identifier: yMWLqYmxp9KkNbMo4poFDi3PH/KkbhH514/+wYlFpM8= Subject key identifier: 00:DF:D4:2F:C6:47:85:EA:61:B6:91:6E:33:28:AF:DC:A7:78:A4:61 Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Certificate serial: 019B54F3F305DC4161B9527F259F5C68FD17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft Manifest number: 060F Signing time: Thu 25 Dec 2025 10:00:31 +0000 Manifest this update: Thu 25 Dec 2025 10:00:31 +0000 Manifest next update: Fri 26 Dec 2025 10:00:31 +0000 Files and hashes: 1: 3Tq13WIcjE4wrF9fmJGXuJJ3EA0.roa (hash: GyLSfZMIbW5GjQFGTgFakvct5lf6SBp5gMlZA4ZRfho=) 2: 7t0ruCwwheWDY1iuc2ABz5OkuLU.roa (hash: Wsc9jgqPgNqZ76JLps6IqRa7nxD3XGEuiy4WXzWnIxU=) 3: ImvsPyGjqHzil2zJhiiakufkk1I.roa (hash: 29vZWJ1xOkBr4giAfRXD6EraUbozMao9ed7L/bRqJaU=) 4: OBYQZDQ1ObRE7hokU9D4Av8auQ0.roa (hash: rilwxKs37kLhwVeNVD/MIAohgiQxYvRftQXfpAgpDb0=) 5: Qf3xuPjCoTEQLfLo_UoAbyihOBg.roa (hash: upxdgtTwbpkR0XgQ85zaD7BvaiRt7M2499aUCky2ako=) 6: Smlnej5n6B69IkLJuHE_uEPKvkM.roa (hash: ZGTm9kLyb+TVFfvRl0Z+2C+98Be3iA8+F42uOm7E6Cg=) 7: YzkukpMXrmveCKWjuYorcB3biTo.crl (hash: 94XEVS5P6K9EFXuJWdxmaMcuoLg2SIDT6CRxgU8p3G0=) 8: ZtBVD_gU9JHOidmFecie_EQftRo.roa (hash: TATv9KEl0G9zS/KJs9wWiYzEnpI8uOZdyHODf/h2Zv8=) 9: fY9Iy2JY1E_TXtYJ0FV4aeZ6v-Y.roa (hash: eNIrQiQ2SfuQFshYez06LL23c6mQrj9GfYgkzxup5Xw=) 10: w-kDsP50J75PL4Ya6eQkdiS7MmA.roa (hash: e/heTB6HI2crd/P6O3UvBg+yFEyLCizumo10MAmv0a0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:f3:f3:05:dc:41:61:b9:52:7f:25:9f:5c:68:fd:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Validity Not Before: Dec 25 10:00:31 2025 GMT Not After : Dec 26 10:00:31 2025 GMT Subject: CN=00dfd42fc64785ea61b6916e3328afdca778a461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d4:67:ff:e4:94:ae:f3:b0:05:a4:33:c6:4b: e9:57:51:c3:aa:b6:1b:51:33:7d:82:d4:66:ae:bc: c0:ad:e4:13:2c:1f:e9:e5:bd:3f:8c:c7:5c:9f:65: 08:4e:dd:a1:12:e9:f0:05:a0:38:04:f6:b1:74:55: a3:54:f4:05:57:d1:e5:79:06:07:b9:19:9d:d0:76: c9:7c:49:e3:a4:b0:34:a7:7f:7b:15:50:15:23:a9: 39:0f:4c:43:da:18:f8:81:f0:62:44:3d:43:0e:a0: 85:64:e6:a7:a0:d9:3d:53:85:88:d5:3c:7e:fe:aa: f0:9a:0f:6c:62:11:d5:1b:be:c6:6a:cb:9d:57:91: 3b:17:ee:15:0f:ba:f8:b6:dc:c3:b6:c9:2b:7c:83: 1e:f4:ec:88:94:25:4d:d6:19:4a:64:3b:59:26:02: a2:e6:f3:b6:9f:e3:0b:c4:f0:62:09:32:ab:a3:a5: ea:e8:15:df:4b:b4:1f:81:5b:4e:45:c3:00:53:ab: 20:e6:24:1f:5d:59:aa:5b:df:30:58:81:87:a1:6d: 72:04:0c:a7:ee:51:8c:56:b4:55:a3:b8:b4:d8:11: 08:c1:4f:39:a3:d5:f1:31:16:78:06:f3:c8:0b:54: eb:6d:6e:bb:9c:99:17:6e:4d:ad:60:3e:46:41:5b: eb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DF:D4:2F:C6:47:85:EA:61:B6:91:6E:33:28:AF:DC:A7:78:A4:61 X509v3 Authority Key Identifier: keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:c9:36:b6:df:c9:65:b7:3b:dc:0e:6d:c0:52:41:32:c2:22: e1:91:0b:27:d8:e1:d8:ed:0f:5d:a4:54:c4:25:1a:1e:19:e1: 90:38:1f:95:a1:56:17:e0:6c:35:7e:2f:44:a8:d1:05:f5:61: a9:c2:41:d9:89:6d:ef:8b:0c:6b:15:03:9c:18:79:4e:fa:84: b1:47:89:6d:39:19:02:24:52:25:64:cb:da:f7:bc:fb:13:f3: 11:7e:70:a0:70:83:53:bf:4a:76:18:01:b3:21:b2:e9:f4:c2: c0:d2:30:ff:43:d3:2c:4f:50:4d:35:e4:e5:84:b5:3e:f5:65: 2a:a3:14:77:fe:01:c8:8a:eb:9a:98:c4:23:6d:e3:c2:5f:77: 5d:be:2b:2e:79:14:da:e8:82:1b:7a:20:6e:96:a3:bf:01:da: fe:53:2e:b3:c2:32:d8:cb:5e:8b:c8:a1:10:70:37:53:26:2a: 93:f3:c0:f3:52:e3:f2:b6:65:b9:ab:3e:6f:0d:1e:80:e8:b6: 9c:63:eb:6e:1b:38:54:df:c5:99:ee:72:6e:a9:ad:10:91:6d: 75:40:5a:52:cc:3f:85:8c:b3:47:1d:d5:86:0e:85:e5:20:e3: c1:a5:2b:68:f4:15:c6:98:d0:f0:39:f8:83:71:c0:fc:05:14: 92:3b:ce:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtU8/MF3EFhuVJ/JZ9caP0XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk Yjg5M2EwHhcNMjUxMjI1MTAwMDMxWhcNMjUxMjI2MTAwMDMxWjAzMTEwLwYDVQQD EygwMGRmZDQyZmM2NDc4NWVhNjFiNjkxNmUzMzI4YWZkY2E3NzhhNDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9Rn/+SUrvOwBaQzxkvpV1HDqrYb UTN9gtRmrrzAreQTLB/p5b0/jMdcn2UITt2hEunwBaA4BPaxdFWjVPQFV9HleQYH uRmd0HbJfEnjpLA0p397FVAVI6k5D0xD2hj4gfBiRD1DDqCFZOanoNk9U4WI1Tx+ /qrwmg9sYhHVG77GasudV5E7F+4VD7r4ttzDtskrfIMe9OyIlCVN1hlKZDtZJgKi 5vO2n+MLxPBiCTKro6Xq6BXfS7QfgVtORcMAU6sg5iQfXVmqW98wWIGHoW1yBAyn 7lGMVrRVo7i02BEIwU85o9XxMRZ4BvPIC1TrbW67nJkXbk2tYD5GQVvrAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADf1C/GR4XqYbaRbjMor9yneKRhMB8GA1UdIwQY MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt ODcyNTBmNWEwN2NjLzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABsk2tt/J Zbc73A5twFJBMsIi4ZELJ9jh2O0PXaRUxCUaHhnhkDgflaFWF+BsNX4vRKjRBfVh qcJB2Ylt74sMaxUDnBh5TvqEsUeJbTkZAiRSJWTL2ve8+xPzEX5woHCDU79KdhgB syGy6fTCwNIw/0PTLE9QTTXk5YS1PvVlKqMUd/4ByIrrmpjEI23jwl93Xb4rLnkU 2uiCG3ogbpajvwHa/lMus8Iy2Mtei8ihEHA3UyYqk/PA81Lj8rZluas+bw0egOi2 nGPrbhs4VN/Fme5ybqmtEJFtdUBaUsw/hYyzRx3Vhg6F5SDjwaUraPQVxpjQ8Dn4 g3HA/AUUkjvOyQ== -----END CERTIFICATE-----Generated at Thu Dec 25 13:06:18 2025 by rpki-client