This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft File: yuzkHLwsMGJu8qKNGDny1sR1fz8.mft (raw, json) Hash identifier: F1IH7JZvbNB2inVfPDV9DWCO2ldavX/TkZ5Bx8jkHpw= Subject key identifier: 9D:C1:EB:6D:AF:D7:1E:B9:26:98:4C:C1:2C:18:98:F0:B5:25:4B:4A Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f Certificate serial: 019B3AC6849CF5443454A2FE25E9BBAACF01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft Manifest number: 1793 Signing time: Sat 20 Dec 2025 08:00:47 +0000 Manifest this update: Sat 20 Dec 2025 08:00:47 +0000 Manifest next update: Sun 21 Dec 2025 08:00:47 +0000 Files and hashes: 1: 4e_esTadQCaE3n5sXcrWU4jOosk.roa (hash: 6WRB/tXZjMM79bwzWzJPIybrouf6h4CCu2BnZyX47DM=) 2: 6-71hsfN7Sg9SqcN7ij5Ydd4vxY.roa (hash: iJ+ODuzSS+eoKFDYbDz9e9c9YTvR+yNB1U32FzztfQg=) 3: HCBFWHPbguHhYNXyj3CYrDXYNWo.roa (hash: YWHjbWrm4zcEsBNnp7QDqMn1mBuhsTvb3ueYJ3IoUgs=) 4: V_-pi-_FRBXageOHGy8QNDeBiFk.roa (hash: VgqGvjscQM+9CLy4OZeK0OAAcSQ66x9VqqFHfhpG7Dw=) 5: YzdSzrn2g46QLg-Ab4yA5f8O1xU.roa (hash: juEIYlvSOfWVe6E6l6/j9UJcOILOSNhDvqnCdtQBLU0=) 6: hDp1-1e9H-OB_XxdhBwbZmZOjwU.roa (hash: RlVKHFwEDLlyQQzASoSjM9hIAoQIeVOrf1r1UW38OlQ=) 7: tTtHoX1wSZCp5whsaQk__p5Qj-c.roa (hash: XeNLM4ma2PLd2XIUXqACuWWh4dYsZ4F8oRpJO/BVSZc=) 8: yuzkHLwsMGJu8qKNGDny1sR1fz8.crl (hash: qs68ojSwj4Xzq+lIlzJgX5Xf2ONuD+D6DD7yta4YfHM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:84:9c:f5:44:34:54:a2:fe:25:e9:bb:aa:cf:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f Validity Not Before: Dec 20 08:00:47 2025 GMT Not After : Dec 21 08:00:47 2025 GMT Subject: CN=9dc1eb6dafd71eb926984cc12c1898f0b5254b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f1:20:65:cb:f7:7f:75:75:37:f5:87:28:e3: c9:19:66:4e:df:24:5f:12:91:68:f5:cc:c7:48:4e: 45:49:c5:0b:f4:22:2b:89:cb:81:d7:01:c8:90:bb: 59:63:8e:0d:75:32:91:cf:f9:4e:1c:10:ca:d3:25: 67:a1:d2:fe:53:fb:fd:fb:4c:6c:5e:03:97:12:44: c1:ba:b9:77:59:fc:96:2f:10:c9:72:73:5d:bf:62: 4c:3e:34:29:61:ea:c5:f8:63:84:39:a0:5b:e5:eb: 77:29:3c:81:4d:fa:7b:c6:e3:6d:c5:57:44:0e:48: c8:23:f1:07:c2:36:44:ac:81:87:3d:f2:e7:76:a8: df:66:b6:20:3a:06:2a:b1:4d:da:80:21:f2:4d:d9: 70:1a:fe:2b:f6:cc:1e:f4:c4:4e:ab:90:36:e4:71: a9:65:39:54:89:9a:ea:0a:78:b0:17:2b:8d:a5:3a: 08:53:03:93:1e:f1:08:75:32:51:02:ed:c6:0d:56: ae:f7:92:0e:a5:58:58:1b:2d:bb:bb:3f:b6:4d:b4: 8d:1a:9c:93:b6:e3:37:b6:c4:43:b9:55:6a:9e:38: 8d:43:5e:30:d3:c9:ef:ba:a9:ca:c8:2e:8a:19:67: 0d:13:86:4d:96:7b:71:75:34:65:4c:9f:2a:ba:e6: 1e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C1:EB:6D:AF:D7:1E:B9:26:98:4C:C1:2C:18:98:F0:B5:25:4B:4A X509v3 Authority Key Identifier: keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:c9:66:18:11:52:af:ac:dd:fd:8d:b4:41:39:05:d2:98:a8: 81:cd:32:cb:71:01:84:b8:71:da:54:55:8c:8b:46:30:a1:8e: 82:f9:ee:3c:b6:88:4a:cb:73:4b:63:22:25:90:b7:f8:64:b0: b9:a3:29:01:2b:f4:d3:73:02:5f:b8:7c:fa:c6:07:28:10:cb: b2:04:a6:13:7d:47:90:be:e0:ba:09:03:34:91:ef:f7:83:2d: e9:48:45:e4:61:a8:3d:aa:ce:02:b0:ad:a9:e4:bb:fd:24:f6: 25:2e:54:67:18:be:a5:8f:f1:3d:b7:48:49:de:15:61:43:ed: 27:56:35:7f:dd:f2:e0:ee:18:36:c1:c4:25:5d:7b:02:f9:64: 68:35:e2:ac:9e:ce:29:a3:b5:1c:9e:54:b8:70:0e:bc:24:9d: 3c:46:3c:52:e5:18:92:f6:52:30:fe:d4:a7:11:c4:a4:79:e0: 61:30:dd:9b:64:17:9a:8a:29:d8:97:69:36:1c:cd:e6:45:46: 96:82:64:32:b9:d8:ec:56:e3:5b:2e:4f:b9:17:8f:11:b9:f9: 7c:8f:83:dd:35:67:28:a8:a3:49:5f:b0:b0:e7:4a:27:e5:e5: d0:dd:6c:03:8e:26:ad:75:8e:b2:39:52:cb:81:2c:b4:1c:14: 6f:fe:e3:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xoSc9UQ0VKL+Jem7qs8BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZWNlNDFjYmMyYzMwNjI2ZWYyYTI4ZDE4MzlmMmQ2YzQ3 NTdmM2YwHhcNMjUxMjIwMDgwMDQ3WhcNMjUxMjIxMDgwMDQ3WjAzMTEwLwYDVQQD Eyg5ZGMxZWI2ZGFmZDcxZWI5MjY5ODRjYzEyYzE4OThmMGI1MjU0YjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvEgZcv3f3V1N/WHKOPJGWZO3yRf EpFo9czHSE5FScUL9CIricuB1wHIkLtZY44NdTKRz/lOHBDK0yVnodL+U/v9+0xs XgOXEkTBurl3WfyWLxDJcnNdv2JMPjQpYerF+GOEOaBb5et3KTyBTfp7xuNtxVdE DkjII/EHwjZErIGHPfLndqjfZrYgOgYqsU3agCHyTdlwGv4r9swe9MROq5A25HGp ZTlUiZrqCniwFyuNpToIUwOTHvEIdTJRAu3GDVau95IOpVhYGy27uz+2TbSNGpyT tuM3tsRDuVVqnjiNQ14w08nvuqnKyC6KGWcNE4ZNlntxdTRlTJ8quuYeBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3B622v1x65JphMwSwYmPC1JUtKMB8GA1UdIwQY MBaAFMrs5By8LDBibvKijRg58tbEdX8/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MzBjYmUtY2UwMS00NjRkLTgyZWIt ZDg1MWU0MGQ1N2JmLzEveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82MzBjYmUtY2UwMS00NjRkLTgyZWItZDg1MWU0MGQ1N2Jm LzEveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKMlmGBFS r6zd/Y20QTkF0piogc0yy3EBhLhx2lRVjItGMKGOgvnuPLaISstzS2MiJZC3+GSw uaMpASv003MCX7h8+sYHKBDLsgSmE31HkL7gugkDNJHv94Mt6UhF5GGoParOArCt qeS7/ST2JS5UZxi+pY/xPbdISd4VYUPtJ1Y1f93y4O4YNsHEJV17AvlkaDXirJ7O KaO1HJ5UuHAOvCSdPEY8UuUYkvZSMP7UpxHEpHngYTDdm2QXmoop2JdpNhzN5kVG loJkMrnY7FbjWy5PuRePEbn5fI+D3TVnKKijSV+wsOdKJ+Xl0N1sA44mrXWOsjlS y4EstBwUb/7jxw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:22:27 2025 by rpki-client