This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft File: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft (raw, json) Hash identifier: TzD43GfWs7zbCQ/YDBAtU3pwx+05J55XpvomPgIJnKc= Subject key identifier: 35:A4:AD:34:1E:82:45:15:5C:90:24:7D:A0:07:1B:CD:35:83:F5:C0 Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94 Certificate issuer: /CN=637104d927e7e1ef8febbffddf28145495011094 Certificate serial: 019B3D59DBF59D3C6286D6BBE54D434D5D7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft Manifest number: 16B4 Signing time: Sat 20 Dec 2025 20:00:57 +0000 Manifest this update: Sat 20 Dec 2025 20:00:57 +0000 Manifest next update: Sun 21 Dec 2025 20:00:57 +0000 Files and hashes: 1: MluEItNzhsZo0KlEkHW2gGjFsZA.roa (hash: hoWRhUtEL622AwT/94vc4oZQjrwHDprmF8UFYzmZ0qI=) 2: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl (hash: BqzsS7nqdsJ4WIpdcGSuS6VVs8W+W65SiS/5AxIPoaI=) 3: qdzMsGh5S6wiS7QQa-GGYlBb1qM.roa (hash: 6/bZRBO2jbasIfkz3gmkcsaKY6ttqzhNRaTLSgH7xuI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:db:f5:9d:3c:62:86:d6:bb:e5:4d:43:4d:5d:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637104d927e7e1ef8febbffddf28145495011094 Validity Not Before: Dec 20 20:00:57 2025 GMT Not After : Dec 21 20:00:57 2025 GMT Subject: CN=35a4ad341e8245155c90247da0071bcd3583f5c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:2f:f6:38:00:35:c4:68:ce:f1:db:88:a4:48: e3:59:b8:d1:1a:b9:76:a2:de:74:c9:3e:48:27:7c: 53:56:b8:a9:de:71:95:5c:aa:b2:45:ea:03:49:bf: 09:ed:4a:35:e0:ed:f6:ad:aa:3c:e6:6d:82:2d:e9: bb:4e:40:58:ba:6c:28:d1:49:d8:8e:d9:e1:56:a8: 5f:bd:3d:30:64:05:a2:8c:f1:1c:63:51:09:dd:14: 23:30:51:7f:49:e9:06:03:b0:19:b4:13:49:65:8e: b9:61:87:29:8a:81:30:9f:44:b6:fb:f5:64:44:08: 79:ff:b5:d2:87:48:22:22:df:6c:5f:31:8c:fb:e4: 39:cc:36:ee:65:dd:f4:eb:2e:0e:70:b9:bd:b0:d7: d1:5a:b3:5b:37:8b:47:50:fe:a0:0a:9e:51:cc:7b: 17:35:31:8b:79:ec:30:14:76:1e:85:fa:35:2c:ff: 9c:c2:5b:e4:88:e1:f8:9a:a8:b8:24:72:69:cf:14: 69:31:b6:33:67:46:e2:ee:41:08:e2:e5:ca:61:01: 4f:43:45:25:c9:33:8a:cc:37:9b:6d:e8:b2:b1:3a: 08:db:9c:8f:3e:fd:19:0a:4d:8f:6d:6b:6d:5e:77: 8f:d3:17:0e:4b:b1:08:32:a7:41:d3:ee:af:21:36: 9d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A4:AD:34:1E:82:45:15:5C:90:24:7D:A0:07:1B:CD:35:83:F5:C0 X509v3 Authority Key Identifier: keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:1b:46:67:fc:3d:b1:c8:56:90:81:87:1b:a7:35:0a:ab:be: bc:e9:c4:43:0c:e2:c7:68:eb:28:4e:c6:09:60:cc:62:57:11: e5:e9:e8:86:fc:37:10:39:b5:7e:5a:64:d5:82:86:ba:8d:18: fb:bf:0f:c7:e1:03:e9:de:71:96:4d:a1:0f:24:ed:51:75:47: 5a:80:be:ab:18:91:b3:b2:1e:4f:eb:b0:f4:12:b6:d9:cd:67: 9f:57:43:75:ed:84:6c:68:fd:00:06:ec:34:2e:9f:4c:f1:fe: e7:5a:1c:f4:51:4e:fc:4d:79:09:73:c6:ad:bc:ad:dd:f0:ca: d2:18:61:b1:22:9b:84:4b:e9:a8:17:23:bf:99:07:20:a8:3c: 24:b9:d3:ce:6f:5b:02:eb:51:6e:e3:ff:02:b0:f8:5b:69:38: ee:cf:c9:b2:2a:9d:5f:01:ec:00:58:8f:79:93:0b:ee:5f:23: 5b:85:d0:de:98:32:a3:13:b1:93:8f:91:f6:56:a3:4b:c7:bd: 51:78:37:fe:2b:f5:27:e5:73:e8:86:97:a8:a5:cd:f1:a9:e6: af:76:71:85:71:ab:e4:96:54:25:f1:7e:c9:cc:1e:08:74:57: 97:b4:da:70:89:65:b6:6b:84:22:77:ed:be:e9:3c:21:fe:8e: 21:f8:9f:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wdv1nTxihta75U1DTV18MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNzEwNGQ5MjdlN2UxZWY4ZmViYmZmZGRmMjgxNDU0OTUw MTEwOTQwHhcNMjUxMjIwMjAwMDU3WhcNMjUxMjIxMjAwMDU3WjAzMTEwLwYDVQQD EygzNWE0YWQzNDFlODI0NTE1NWM5MDI0N2RhMDA3MWJjZDM1ODNmNWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8i/2OAA1xGjO8duIpEjjWbjRGrl2 ot50yT5IJ3xTVrip3nGVXKqyReoDSb8J7Uo14O32rao85m2CLem7TkBYumwo0UnY jtnhVqhfvT0wZAWijPEcY1EJ3RQjMFF/SekGA7AZtBNJZY65YYcpioEwn0S2+/Vk RAh5/7XSh0giIt9sXzGM++Q5zDbuZd306y4OcLm9sNfRWrNbN4tHUP6gCp5RzHsX NTGLeewwFHYehfo1LP+cwlvkiOH4mqi4JHJpzxRpMbYzZ0bi7kEI4uXKYQFPQ0Ul yTOKzDebbeiysToI25yPPv0ZCk2PbWttXneP0xcOS7EIMqdB0+6vITadMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWkrTQegkUVXJAkfaAHG801g/XAMB8GA1UdIwQY MBaAFGNxBNkn5+Hvj+u//d8oFFSVARCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kZDFkZGYtNzNjZi00YmIyLThhNmUt NmU0YWVjODZmZTFlLzEvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9kZDFkZGYtNzNjZi00YmIyLThhNmUtNmU0YWVjODZmZTFl LzEvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjRtGZ/w9 schWkIGHG6c1Cqu+vOnEQwzix2jrKE7GCWDMYlcR5enohvw3EDm1flpk1YKGuo0Y +78Px+ED6d5xlk2hDyTtUXVHWoC+qxiRs7IeT+uw9BK22c1nn1dDde2EbGj9AAbs NC6fTPH+51oc9FFO/E15CXPGrbyt3fDK0hhhsSKbhEvpqBcjv5kHIKg8JLnTzm9b AutRbuP/ArD4W2k47s/JsiqdXwHsAFiPeZML7l8jW4XQ3pgyoxOxk4+R9lajS8e9 UXg3/iv1J+Vz6IaXqKXN8anmr3ZxhXGr5JZUJfF+ycweCHRXl7TacIlltmuEInft vuk8If6OIfif4w== -----END CERTIFICATE-----Generated at Sun Dec 21 01:23:12 2025 by rpki-client