This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft File: yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft (raw, json) Hash identifier: GaFjRz3ZBGsggtaVVI/aFbM1UOkGlI2BLiDSaErGfiQ= Subject key identifier: 00:80:9A:25:3A:E2:1B:AC:2F:D5:10:2A:CE:DF:CD:79:A2:73:38:10 Authority key identifier: CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76 Certificate issuer: /CN=cab11f493b31a5a2c1f23ce0e3004647a3242576 Certificate serial: 019B37C58A60D352652109D31C5325CAC21D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft Manifest number: 04A1 Signing time: Fri 19 Dec 2025 18:00:51 +0000 Manifest this update: Fri 19 Dec 2025 18:00:51 +0000 Manifest next update: Sat 20 Dec 2025 18:00:51 +0000 Files and hashes: 1: iO6OOltzYSW2yZ_5E85X-P4mF_0.roa (hash: 2XDE+mCyZurCdSAHCb4+FLC8SwOf/SeiDXoheU8dhOI=) 2: yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl (hash: 49k8ufA368pdELbgCZOHxAWyzKLAfbNxmfFFP81QiJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:8a:60:d3:52:65:21:09:d3:1c:53:25:ca:c2:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cab11f493b31a5a2c1f23ce0e3004647a3242576 Validity Not Before: Dec 19 18:00:51 2025 GMT Not After : Dec 20 18:00:51 2025 GMT Subject: CN=00809a253ae21bac2fd5102acedfcd79a2733810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5a:cf:54:85:43:53:15:1d:84:fe:48:44:ff: a0:42:85:25:03:eb:02:3a:43:fe:74:4a:21:0f:27: 75:97:f1:db:03:e5:a0:c0:a2:ef:be:8d:cf:73:9a: 10:e7:97:e3:b2:04:e3:24:bc:d3:00:e4:9c:dd:af: 12:7f:2c:20:f3:74:2a:ac:5a:79:db:34:53:b2:bf: c1:f8:fb:d2:f6:94:18:6c:ff:32:b9:f6:a7:ec:d0: 1d:c7:86:0a:7c:ef:17:eb:de:e8:e0:3c:ca:a5:b0: 06:29:ef:70:89:f4:1f:2d:6f:ae:bd:f8:81:c4:58: e0:17:b4:73:17:f5:67:af:ac:72:fe:af:25:76:df: 88:10:67:7b:99:ff:19:0b:1b:30:41:30:e4:c2:7a: 36:a8:f2:f3:3c:db:f4:3d:ae:6c:94:50:e6:f5:bb: 63:46:45:51:c1:c8:3b:3c:cf:5c:e4:5a:fa:3c:5e: 07:c8:23:e5:1f:67:0a:e8:00:60:a1:df:f2:7b:c8: b0:52:bb:47:e7:74:dc:1c:48:28:13:0e:ad:02:72: fb:6f:e0:c2:ed:e4:29:a6:b8:22:73:73:72:d2:10: 47:64:d3:93:a1:55:56:4a:60:3a:6a:44:1f:4e:79: c2:52:03:fa:cf:4c:6b:da:d9:7a:ad:5c:5d:15:47: 01:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:80:9A:25:3A:E2:1B:AC:2F:D5:10:2A:CE:DF:CD:79:A2:73:38:10 X509v3 Authority Key Identifier: keyid:CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:af:ea:d0:2a:f6:b2:14:b3:9e:87:b2:0b:8e:2b:a5:7c:da: c0:70:d2:d0:cf:a7:da:82:eb:18:01:e8:5f:05:3d:8b:61:d9: 86:76:4a:d6:73:27:77:85:d9:ef:9b:f4:fe:97:a3:a3:7c:6e: 12:3d:f9:59:a7:93:ba:4d:15:29:64:02:81:2c:7a:29:5c:cc: 06:91:b0:89:99:1d:22:c0:55:5d:0c:4a:fb:87:3e:6b:9a:6f: 42:97:1a:0c:cc:25:e5:04:77:cb:53:03:01:44:33:1c:9f:37: 82:f2:f1:b5:f5:0a:3e:93:db:67:b2:35:73:01:4d:5d:fb:6a: 77:83:67:47:36:78:ee:52:6f:68:12:c3:20:20:b6:d8:98:23: 22:61:2b:2f:e4:88:29:87:d6:a4:d5:e4:c0:fd:00:27:ea:29: e7:5c:e7:80:a2:5a:cd:6a:29:91:a9:49:fb:c9:1d:e2:45:71: 63:bf:b3:fe:ae:4a:ff:52:0d:41:d5:0b:2b:ca:b4:b4:36:3b: aa:bd:d9:dd:40:11:36:c3:cc:77:a6:54:6d:32:38:fd:f0:1e: 81:04:c2:f9:5d:f9:65:06:91:cd:cf:66:fb:90:92:a1:d9:15: 52:1a:3d:49:d8:d8:c5:d1:cf:b2:7f:a1:08:d6:6e:c5:62:84: 28:8f:8d:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xYpg01JlIQnTHFMlysIdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYjExZjQ5M2IzMWE1YTJjMWYyM2NlMGUzMDA0NjQ3YTMy NDI1NzYwHhcNMjUxMjE5MTgwMDUxWhcNMjUxMjIwMTgwMDUxWjAzMTEwLwYDVQQD EygwMDgwOWEyNTNhZTIxYmFjMmZkNTEwMmFjZWRmY2Q3OWEyNzMzODEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlrPVIVDUxUdhP5IRP+gQoUlA+sC OkP+dEohDyd1l/HbA+WgwKLvvo3Pc5oQ55fjsgTjJLzTAOSc3a8Sfywg83QqrFp5 2zRTsr/B+PvS9pQYbP8yufan7NAdx4YKfO8X697o4DzKpbAGKe9wifQfLW+uvfiB xFjgF7RzF/Vnr6xy/q8ldt+IEGd7mf8ZCxswQTDkwno2qPLzPNv0Pa5slFDm9btj RkVRwcg7PM9c5Fr6PF4HyCPlH2cK6ABgod/ye8iwUrtH53TcHEgoEw6tAnL7b+DC 7eQpprgic3Ny0hBHZNOToVVWSmA6akQfTnnCUgP6z0xr2tl6rVxdFUcBDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACAmiU64husL9UQKs7fzXmiczgQMB8GA1UdIwQY MBaAFMqxH0k7MaWiwfI84OMARkejJCV2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXJFZlNUc3hwYUxCOGp6ZzR3QkdSNk1rSlhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83NGQyZWEtNmU2MC00MGFmLWE1NmEt MTUxZjZlZDE3NjkxLzEveXJFZlNUc3hwYUxCOGp6ZzR3QkdSNk1rSlhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83NGQyZWEtNmU2MC00MGFmLWE1NmEtMTUxZjZlZDE3Njkx LzEveXJFZlNUc3hwYUxCOGp6ZzR3QkdSNk1rSlhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEK/q0Cr2 shSznoeyC44rpXzawHDS0M+n2oLrGAHoXwU9i2HZhnZK1nMnd4XZ75v0/pejo3xu Ej35WaeTuk0VKWQCgSx6KVzMBpGwiZkdIsBVXQxK+4c+a5pvQpcaDMwl5QR3y1MD AUQzHJ83gvLxtfUKPpPbZ7I1cwFNXftqd4NnRzZ47lJvaBLDICC22JgjImErL+SI KYfWpNXkwP0AJ+op51zngKJazWopkalJ+8kd4kVxY7+z/q5K/1INQdULK8q0tDY7 qr3Z3UARNsPMd6ZUbTI4/fAegQTC+V35ZQaRzc9m+5CSodkVUho9SdjYxdHPsn+h CNZuxWKEKI+NrQ== -----END CERTIFICATE-----Generated at Sat Dec 20 03:35:46 2025 by rpki-client