This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.mft File: YcXtDe2GJbMrZTMgcinyxGclmEg.mft (raw, json) Hash identifier: OMhzEfUjZe8Ungc0aWdQPeMEIfEg3wDVB7h7hFi4kZY= Subject key identifier: 50:5D:07:3F:11:CA:A7:B1:59:BD:AB:53:3D:A8:53:BF:88:76:B4:32 Authority key identifier: 61:C5:ED:0D:ED:86:25:B3:2B:65:33:20:72:29:F2:C4:67:25:98:48 Certificate issuer: /CN=61c5ed0ded8625b32b6533207229f2c467259848 Certificate serial: 019B33B281F4ED8F795492C7CCE19B9CB505 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcXtDe2GJbMrZTMgcinyxGclmEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 23:01:35 +0000 Manifest this update: Thu 18 Dec 2025 23:01:35 +0000 Manifest next update: Fri 19 Dec 2025 23:01:35 +0000 Files and hashes: 1: CYWLmYxcCQgki-Xk5YRvuSHALzs.roa (hash: 61Fic0FYH+kK7MaPnl8UV3ohGlvf2gRHDh8nlfVoQGY=) 2: YcXtDe2GJbMrZTMgcinyxGclmEg.crl (hash: GGQzC8yt6RweJlSlzx3NHG0hQgVJSpUJoSjsGyQMsuI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.crl rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.mft rsync://rpki.ripe.net/repository/DEFAULT/YcXtDe2GJbMrZTMgcinyxGclmEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:81:f4:ed:8f:79:54:92:c7:cc:e1:9b:9c:b5:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61c5ed0ded8625b32b6533207229f2c467259848 Validity Not Before: Dec 18 23:01:35 2025 GMT Not After : Dec 19 23:01:35 2025 GMT Subject: CN=505d073f11caa7b159bdab533da853bf8876b432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:98:33:fa:bd:be:3b:80:c0:20:a4:cc:fd:b0: 85:1c:28:ee:90:66:2a:ff:55:cd:74:1d:e6:04:18: dc:2c:fa:10:e8:10:43:ee:61:a3:4e:04:c8:b5:a2: fa:6d:f1:7d:6d:ce:14:ae:41:ff:38:f1:e1:42:42: 46:96:6d:9c:9e:e1:b6:bc:40:47:ba:32:19:ba:0a: 61:91:89:59:af:33:13:94:e3:5b:35:ee:7a:3c:97: 50:5f:b1:68:d1:e7:1a:e2:29:19:27:99:af:03:ad: 45:e0:97:37:1b:96:ca:7d:7f:5f:7d:d7:39:84:41: 88:8d:ce:16:7a:35:07:0d:00:e8:14:89:fb:5c:53: 73:6f:76:0c:12:00:c3:17:58:32:c3:9a:29:be:51: 4e:41:32:6c:e0:dd:f3:be:b7:9d:e6:40:6d:36:3e: 4e:7a:8a:80:8e:2b:18:90:b1:04:aa:e8:69:8d:5f: e4:1b:a1:95:2b:ca:ff:73:ea:63:9b:b3:1b:23:2f: 52:2a:a6:cd:5b:c0:a5:96:d6:5d:c9:d6:6f:72:ea: 3f:70:6e:44:31:df:98:7a:36:9d:2d:e4:b8:0a:5e: 6f:c9:21:25:6a:58:1e:29:f1:ec:13:be:0a:9e:31: a6:f5:87:2b:a4:f6:3b:a1:9c:0c:6d:11:93:6e:9d: 27:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5D:07:3F:11:CA:A7:B1:59:BD:AB:53:3D:A8:53:BF:88:76:B4:32 X509v3 Authority Key Identifier: keyid:61:C5:ED:0D:ED:86:25:B3:2B:65:33:20:72:29:F2:C4:67:25:98:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcXtDe2GJbMrZTMgcinyxGclmEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:f0:5d:f1:bb:29:89:c3:0b:4a:11:59:0f:3d:05:f7:de:c8: f8:68:06:93:fc:fd:6a:af:17:1b:46:b7:87:3a:9a:7e:b9:c7: ed:a5:1a:d1:fc:8c:af:02:ff:60:4f:d0:cf:c8:8c:23:2d:04: 54:48:f0:28:d7:23:7c:08:b4:47:e6:8a:ce:70:15:1b:88:91: 61:69:5f:db:95:f7:19:80:9b:9d:fe:8f:e1:39:fa:83:77:02: 9c:78:9c:12:d6:f2:74:b2:6f:a7:b9:6b:16:74:0e:a1:a1:5e: a3:7f:ca:e8:65:21:a7:f5:c6:67:47:d1:03:61:59:81:55:33: c2:c8:c8:b9:ce:db:db:11:81:14:b7:9e:32:d2:32:1a:dd:61: 4b:66:88:3c:df:5d:b4:77:66:4b:4e:78:f1:1a:f1:9f:c1:24: fe:be:c8:9b:1d:3d:f0:0e:0e:3a:6f:13:8a:d5:d6:93:3e:fc: 67:94:ea:5f:60:c2:12:dd:fe:8a:bd:ac:66:8c:8d:c5:58:88: d1:26:8a:06:f9:b9:d8:0a:0c:e9:9e:fe:e2:b2:70:a7:ef:36: 20:3c:8b:c9:94:c1:c9:a5:8a:7b:2f:68:7e:da:14:3d:5d:0e: 9d:dc:5f:53:5e:55:f0:64:d4:79:b1:76:da:58:fd:36:ef:36: c5:7e:51:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsoH07Y95VJLHzOGbnLUFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYzVlZDBkZWQ4NjI1YjMyYjY1MzMyMDcyMjlmMmM0Njcy NTk4NDgwHhcNMjUxMjE4MjMwMTM1WhcNMjUxMjE5MjMwMTM1WjAzMTEwLwYDVQQD Eyg1MDVkMDczZjExY2FhN2IxNTliZGFiNTMzZGE4NTNiZjg4NzZiNDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5gz+r2+O4DAIKTM/bCFHCjukGYq /1XNdB3mBBjcLPoQ6BBD7mGjTgTItaL6bfF9bc4UrkH/OPHhQkJGlm2cnuG2vEBH ujIZugphkYlZrzMTlONbNe56PJdQX7Fo0eca4ikZJ5mvA61F4Jc3G5bKfX9ffdc5 hEGIjc4WejUHDQDoFIn7XFNzb3YMEgDDF1gyw5opvlFOQTJs4N3zvred5kBtNj5O eoqAjisYkLEEquhpjV/kG6GVK8r/c+pjm7MbIy9SKqbNW8ClltZdydZvcuo/cG5E Md+YejadLeS4Cl5vySElalgeKfHsE74KnjGm9YcrpPY7oZwMbRGTbp0npwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBdBz8RyqexWb2rUz2oU7+IdrQyMB8GA1UdIwQY MBaAFGHF7Q3thiWzK2UzIHIp8sRnJZhIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWNYdERlMkdKYk1yWlRNZ2Npbnl4R2NsbUVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82MDYyYWYtNTNiYy00MzVkLWI1ZmIt YTExODQ5ODMyNWY3LzEvWWNYdERlMkdKYk1yWlRNZ2Npbnl4R2NsbUVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS82MDYyYWYtNTNiYy00MzVkLWI1ZmItYTExODQ5ODMyNWY3 LzEvWWNYdERlMkdKYk1yWlRNZ2Npbnl4R2NsbUVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvBd8bsp icMLShFZDz0F997I+GgGk/z9aq8XG0a3hzqafrnH7aUa0fyMrwL/YE/Qz8iMIy0E VEjwKNcjfAi0R+aKznAVG4iRYWlf25X3GYCbnf6P4Tn6g3cCnHicEtbydLJvp7lr FnQOoaFeo3/K6GUhp/XGZ0fRA2FZgVUzwsjIuc7b2xGBFLeeMtIyGt1hS2aIPN9d tHdmS0548Rrxn8Ek/r7Imx098A4OOm8TitXWkz78Z5TqX2DCEt3+ir2sZoyNxViI 0SaKBvm52AoM6Z7+4rJwp+82IDyLyZTByaWKey9oftoUPV0OndxfU15V8GTUebF2 2lj9Nu82xX5RpA== -----END CERTIFICATE-----Generated at Fri Dec 19 05:32:53 2025 by rpki-client