This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft File: YWAUEB_7zmdROc1MAroAY0rYbgI.mft (raw, json) Hash identifier: 5NJUK7IBfW23facZHziRDQ/C6qiKbX76JZ1U0GipygE= Subject key identifier: BB:6C:90:33:9C:BA:8D:BE:27:C8:D7:0E:83:63:33:47:F9:87:A9:A8 Authority key identifier: 61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02 Certificate issuer: /CN=616014101ffbce675139cd4c02ba00634ad86e02 Certificate serial: 019B3CB55AD52F7700B6E4143FE61B4143FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft Manifest number: 171B Signing time: Sat 20 Dec 2025 17:01:16 +0000 Manifest this update: Sat 20 Dec 2025 17:01:16 +0000 Manifest next update: Sun 21 Dec 2025 17:01:16 +0000 Files and hashes: 1: 7vWonm9bF5IcZc4b_JwarXdqm9s.roa (hash: hJURA5qklA/bOkBC37NwKVvc+QzGI8iekbBVx5yVdVA=) 2: YWAUEB_7zmdROc1MAroAY0rYbgI.crl (hash: WccUBgcdhYuNJDlNtDDbgpv09QmM57XttT26KHgkfpM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:5a:d5:2f:77:00:b6:e4:14:3f:e6:1b:41:43:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=616014101ffbce675139cd4c02ba00634ad86e02 Validity Not Before: Dec 20 17:01:16 2025 GMT Not After : Dec 21 17:01:16 2025 GMT Subject: CN=bb6c90339cba8dbe27c8d70e83633347f987a9a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:76:f2:79:4d:96:39:96:df:f5:18:f1:f0:05: 23:45:ba:e1:ea:55:4e:56:e5:88:c9:c2:80:ae:37: 54:f5:2e:13:ee:52:b1:00:e2:4a:59:48:26:3f:2e: 65:4e:0b:be:67:87:91:ea:26:45:b2:ae:09:ea:4b: bf:12:ed:6a:2a:25:ba:1b:bd:3e:94:e7:be:30:ba: 48:19:6d:90:7a:70:06:23:11:c0:f3:db:31:2e:b9: a1:97:f0:7e:a2:a9:67:fb:c3:7e:2a:b0:b8:0e:bd: 7e:9c:bc:1e:c5:9f:9c:0a:82:53:e3:c5:f2:7f:c7: a9:2b:02:46:58:4b:1f:82:54:f1:68:ca:1b:6d:25: 06:7c:82:e0:1d:3e:c7:93:2c:35:ad:b1:d9:ae:79: 08:0e:92:99:39:cf:8c:9d:46:a6:ec:02:8e:43:13: 2b:bf:5e:46:62:2f:f6:d4:43:90:31:31:5e:6a:77: aa:8b:b2:b4:d7:d3:e5:9d:70:06:58:ef:8f:10:33: 89:6a:46:8c:36:97:0c:ac:7d:f8:c0:0e:dd:f6:f5: 33:71:95:f2:a0:06:75:95:26:59:4b:30:c8:96:b4: 71:6b:c0:5c:18:71:ea:0a:af:4f:e1:6b:3a:2b:c3: 60:dd:00:a3:79:7f:13:cf:ff:64:06:43:17:7e:ff: d9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:6C:90:33:9C:BA:8D:BE:27:C8:D7:0E:83:63:33:47:F9:87:A9:A8 X509v3 Authority Key Identifier: keyid:61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:dd:b2:9c:67:4a:59:c0:69:bd:38:55:b9:29:87:10:99:4c: ce:ce:58:12:4f:c4:d8:09:a4:19:8c:31:01:1c:2e:e6:99:e6: 6c:d9:c6:62:75:b3:7a:7d:81:66:c3:b0:96:e4:6a:e7:99:a3: c7:39:fb:5b:fd:91:b7:3d:bd:be:84:67:02:d1:40:fa:b8:91: 66:0c:48:92:29:22:8d:8e:4c:a9:23:4d:11:68:17:de:a9:a7: ef:46:f2:a8:93:9c:c8:db:08:ac:03:d0:fd:24:0d:50:7c:96: 4e:b1:f8:0f:8d:e8:7f:35:72:63:90:f8:fb:7d:15:86:70:37: a2:d7:27:07:67:6f:82:9b:a5:a4:60:bd:45:d0:94:70:2d:81: 0b:d6:cb:e4:9b:d5:80:90:67:1a:6d:55:b9:5e:4e:45:aa:44: a7:7c:98:24:ba:51:39:3b:52:70:c1:40:68:53:57:01:0b:da: a0:42:23:4e:d2:c1:16:b7:fa:78:48:9c:1d:d4:a2:c5:05:1d: 1a:b0:da:f6:e7:41:85:78:1e:da:da:a9:b0:4d:6d:0f:66:06: 66:bb:5d:70:3e:c8:a8:42:40:3f:7e:37:d5:8e:37:99:97:9d: d8:67:d3:76:ce:fd:f5:71:a9:63:99:7e:fb:eb:80:af:e8:c4: 18:6a:68:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tVrVL3cAtuQUP+YbQUP/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNjAxNDEwMWZmYmNlNjc1MTM5Y2Q0YzAyYmEwMDYzNGFk ODZlMDIwHhcNMjUxMjIwMTcwMTE2WhcNMjUxMjIxMTcwMTE2WjAzMTEwLwYDVQQD EyhiYjZjOTAzMzljYmE4ZGJlMjdjOGQ3MGU4MzYzMzM0N2Y5ODdhOWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHbyeU2WOZbf9Rjx8AUjRbrh6lVO VuWIycKArjdU9S4T7lKxAOJKWUgmPy5lTgu+Z4eR6iZFsq4J6ku/Eu1qKiW6G70+ lOe+MLpIGW2QenAGIxHA89sxLrmhl/B+oqln+8N+KrC4Dr1+nLwexZ+cCoJT48Xy f8epKwJGWEsfglTxaMobbSUGfILgHT7Hkyw1rbHZrnkIDpKZOc+MnUam7AKOQxMr v15GYi/21EOQMTFeaneqi7K019PlnXAGWO+PEDOJakaMNpcMrH34wA7d9vUzcZXy oAZ1lSZZSzDIlrRxa8BcGHHqCq9P4Ws6K8Ng3QCjeX8Tz/9kBkMXfv/ZlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtskDOcuo2+J8jXDoNjM0f5h6moMB8GA1UdIwQY MBaAFGFgFBAf+85nUTnNTAK6AGNK2G4CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVdBVUVCXzd6bWRST2MxTUFyb0FZMHJZYmdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9jYzg0NDEtZGRiNi00Nzk1LTkwMzAt NTljZGRiYTE3NmVmLzEvWVdBVUVCXzd6bWRST2MxTUFyb0FZMHJZYmdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9jYzg0NDEtZGRiNi00Nzk1LTkwMzAtNTljZGRiYTE3NmVm LzEvWVdBVUVCXzd6bWRST2MxTUFyb0FZMHJZYmdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAat2ynGdK WcBpvThVuSmHEJlMzs5YEk/E2AmkGYwxARwu5pnmbNnGYnWzen2BZsOwluRq55mj xzn7W/2Rtz29voRnAtFA+riRZgxIkikijY5MqSNNEWgX3qmn70byqJOcyNsIrAPQ /SQNUHyWTrH4D43ofzVyY5D4+30VhnA3otcnB2dvgpulpGC9RdCUcC2BC9bL5JvV gJBnGm1VuV5ORapEp3yYJLpROTtScMFAaFNXAQvaoEIjTtLBFrf6eEicHdSixQUd GrDa9udBhXge2tqpsE1tD2YGZrtdcD7IqEJAP3431Y43mZed2GfTds799XGpY5l+ ++uAr+jEGGpobA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:15:35 2025 by rpki-client