This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft File: YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft (raw, json) Hash identifier: RVuGPz8Y0ldF5yXO3eDTkuOpbp7aPFqOqqqLR3YYszE= Subject key identifier: 4B:EE:F3:8B:11:9A:88:8E:AF:4D:3D:9A:57:75:E3:2F:57:59:50:7F Authority key identifier: 60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B Certificate issuer: /CN=607548c37abebc58b928ed285433d69e95df9c3b Certificate serial: 019B56077E6BA65F223FA241810AB601BDB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft Manifest number: 0B5B Signing time: Thu 25 Dec 2025 15:01:30 +0000 Manifest this update: Thu 25 Dec 2025 15:01:30 +0000 Manifest next update: Fri 26 Dec 2025 15:01:30 +0000 Files and hashes: 1: GvnG-mS30kZsC0VMkjG-9H9bKNc.roa (hash: fCMqeP5mwLekpgJxD7sr/iDT7Y2EP3bkaxbq5G7CFnk=) 2: TmI7Mg0osOv9bcSkbnpna9M6d0g.roa (hash: 1lYpqMce8T6tJ64vHbX2gN5OdLdLTb07QCcWuKyM15g=) 3: YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl (hash: E346405or8B84L+pvfCnFFioP/zn7s1WC+zf/pYDfg4=) 4: rDRUKkzZmI7yjCKpqiCtK-fUy7Q.roa (hash: uAeF6E4mouy6Lmf4flTkP1sxauS/RBJXZig4r2f6XkE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:07:7e:6b:a6:5f:22:3f:a2:41:81:0a:b6:01:bd:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=607548c37abebc58b928ed285433d69e95df9c3b Validity Not Before: Dec 25 15:01:30 2025 GMT Not After : Dec 26 15:01:30 2025 GMT Subject: CN=4beef38b119a888eaf4d3d9a5775e32f5759507f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ff:01:df:56:22:f1:c8:0c:c8:b7:22:09:45: ff:80:c4:e9:b2:82:48:e4:c9:fd:39:a4:41:9b:b7: 26:cf:15:ee:41:ce:d1:31:96:8d:60:c1:5d:86:8e: 50:ba:f5:71:f9:3d:46:e7:8a:26:63:30:cd:22:86: 4f:90:6f:e2:97:c0:54:78:2f:a9:ff:96:e7:69:64: 0b:b5:f0:be:c0:93:4c:c3:25:05:95:20:4e:1b:ec: 9e:15:d1:33:bc:1e:1c:a3:50:38:a3:11:f5:9e:a1: 79:96:1b:aa:78:c6:0b:48:08:ef:53:2f:88:0d:36: 52:1c:af:2a:d0:90:be:76:d3:e9:f4:a7:4b:7b:0a: e8:5f:40:28:cc:b3:97:8b:7a:05:2d:a2:74:3c:ed: fe:36:ec:81:49:21:04:3e:bf:1a:2b:b2:7b:b3:58: 64:48:c1:d6:b7:47:1c:df:82:34:2d:ce:1b:07:bd: fa:b9:0d:7b:45:cc:76:c9:64:e7:c1:4c:53:d7:cd: 80:45:f5:e1:7e:8a:e5:8f:cf:cb:e6:48:e5:4c:90: 8a:ee:8b:b7:43:46:27:96:05:11:ff:7a:bb:e5:88: 2b:7d:38:e3:9d:5b:df:05:cc:05:d9:1a:b6:10:46: 27:0b:a6:71:9a:d9:8f:2a:77:51:de:8a:74:1e:8c: 84:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:EE:F3:8B:11:9A:88:8E:AF:4D:3D:9A:57:75:E3:2F:57:59:50:7F X509v3 Authority Key Identifier: keyid:60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:04:c6:60:36:1f:16:7c:dd:56:48:26:b2:f7:4a:8c:fd:d4: 94:01:2c:35:4d:bf:dd:52:79:7a:14:3e:8b:a8:b3:89:e0:70: 38:fd:ef:98:75:37:19:da:dd:cd:ab:4c:73:91:71:09:43:59: ca:97:58:57:64:f0:ad:ef:3f:f7:c3:1a:15:d1:a5:43:b8:4f: d8:f0:90:32:a0:ef:36:e5:f2:7b:79:c2:8c:fb:f3:f1:b7:d6: 37:5d:f5:94:21:db:8f:01:9f:4f:be:25:33:da:85:27:6f:d5: f5:01:17:5c:c4:0e:aa:94:aa:46:f1:0b:95:9d:06:0a:a0:f2: 39:53:30:2c:9c:51:f8:05:e9:ed:29:7d:d3:ee:bd:91:aa:34: 51:87:e5:57:b9:08:88:1d:7f:fd:7e:21:97:d5:c4:fa:7a:22: 3f:f3:1b:aa:06:6e:03:1b:5f:bd:ea:c0:1e:c9:f9:54:86:92: e3:34:c5:b6:99:30:22:5d:c2:d3:62:92:07:bf:80:08:a6:4d: e6:bb:e2:26:3d:dd:13:45:97:9b:b0:11:7c:d4:fe:a5:d0:84: 89:e2:ff:19:ac:02:ab:28:8f:ff:f4:04:10:aa:3e:f8:d1:78: f5:b6:18:2d:57:1a:8d:98:b2:a5:0f:0d:31:2e:df:31:4c:f7: 57:31:a8:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWB35rpl8iP6JBgQq2Ab2xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNzU0OGMzN2FiZWJjNThiOTI4ZWQyODU0MzNkNjllOTVk ZjljM2IwHhcNMjUxMjI1MTUwMTMwWhcNMjUxMjI2MTUwMTMwWjAzMTEwLwYDVQQD Eyg0YmVlZjM4YjExOWE4ODhlYWY0ZDNkOWE1Nzc1ZTMyZjU3NTk1MDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3v8B31Yi8cgMyLciCUX/gMTpsoJI 5Mn9OaRBm7cmzxXuQc7RMZaNYMFdho5QuvVx+T1G54omYzDNIoZPkG/il8BUeC+p /5bnaWQLtfC+wJNMwyUFlSBOG+yeFdEzvB4co1A4oxH1nqF5lhuqeMYLSAjvUy+I DTZSHK8q0JC+dtPp9KdLewroX0AozLOXi3oFLaJ0PO3+NuyBSSEEPr8aK7J7s1hk SMHWt0cc34I0Lc4bB736uQ17Rcx2yWTnwUxT182ARfXhforlj8/L5kjlTJCK7ou3 Q0YnlgUR/3q75YgrfTjjnVvfBcwF2Rq2EEYnC6ZxmtmPKndR3op0HoyEhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvu84sRmoiOr009mld14y9XWVB/MB8GA1UdIwQY MBaAFGB1SMN6vrxYuSjtKFQz1p6V35w7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUhWSXczcS12Rmk1S08wb1ZEUFducFhmbkRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81MmI2MzQtNjE0OC00ZTJlLWI4ZjMt MGM5OGM1NzBhNmUwLzEvWUhWSXczcS12Rmk1S08wb1ZEUFducFhmbkRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi81MmI2MzQtNjE0OC00ZTJlLWI4ZjMtMGM5OGM1NzBhNmUw LzEvWUhWSXczcS12Rmk1S08wb1ZEUFducFhmbkRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAowTGYDYf FnzdVkgmsvdKjP3UlAEsNU2/3VJ5ehQ+i6izieBwOP3vmHU3GdrdzatMc5FxCUNZ ypdYV2Twre8/98MaFdGlQ7hP2PCQMqDvNuXye3nCjPvz8bfWN131lCHbjwGfT74l M9qFJ2/V9QEXXMQOqpSqRvELlZ0GCqDyOVMwLJxR+AXp7Sl90+69kao0UYflV7kI iB1//X4hl9XE+noiP/MbqgZuAxtfverAHsn5VIaS4zTFtpkwIl3C02KSB7+ACKZN 5rviJj3dE0WXm7ARfNT+pdCEieL/GawCqyiP//QEEKo++NF49bYYLVcajZiypQ8N MS7fMUz3VzGoCQ== -----END CERTIFICATE-----Generated at Thu Dec 25 16:01:23 2025 by rpki-client