This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft File: yteUrGAc4lBbZfl1p9UWovAKWzE.mft (raw, json) Hash identifier: Zs3Fa7KGdeJUgTFyz6STlb3gTEExsfCPvyh19JOGRi0= Subject key identifier: 49:B3:35:A6:C4:35:AD:6D:C2:F7:55:81:DC:E9:62:8F:03:F8:EB:FC Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31 Certificate issuer: /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31 Certificate serial: 019B3BD9816F09C100521D526CCDD5F93352 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft Manifest number: 1791 Signing time: Sat 20 Dec 2025 13:01:08 +0000 Manifest this update: Sat 20 Dec 2025 13:01:08 +0000 Manifest next update: Sun 21 Dec 2025 13:01:08 +0000 Files and hashes: 1: 2E9kWgPtYN0WAc6RCe6lEkD5GGc.roa (hash: WZKZ1nRj/095D4tmKUIjIrN2QssyrW7JaucRn5aUuQo=) 2: XBS2bilHl7hAUnhaEuY8p5cjE4c.roa (hash: GRT8VC70aJ9wVqj8F9C5XozSwpU4dQPqDcpv9YGwfrE=) 3: e8UexKJSMZ7skwYQtvgWIbq4MXE.roa (hash: z8UU85PauzAWCWu0c4/whBUMLEZehA442FaYRyi9WiQ=) 4: iet7MjdD3tNr9H3e8mAcOix2TP8.roa (hash: ezXufe6PAorgReJqNNieKsjaS0PdS8wnpJWtjRxO3X4=) 5: tzsxxq3WmCusza_r9Nk7AWxH7Jk.roa (hash: goqPhfATTY7UUdH4nZlMzNdPQpsyFFgFHBxyoIIk6WA=) 6: yteUrGAc4lBbZfl1p9UWovAKWzE.crl (hash: 89cu3ueZ3WKYLY1Xw07H51pj45SsKdn1Z6eK3duSVlg=) 7: zSyEja7s6-FcC2A4cfsL-HNjtEE.roa (hash: 2GY8yor4l2LD8bv0Z/SVmO/KolDg2zRMpa7nMwkf0ko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:81:6f:09:c1:00:52:1d:52:6c:cd:d5:f9:33:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31 Validity Not Before: Dec 20 13:01:08 2025 GMT Not After : Dec 21 13:01:08 2025 GMT Subject: CN=49b335a6c435ad6dc2f75581dce9628f03f8ebfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:be:da:4f:b1:94:9f:a9:67:e7:b7:09:14:d9: 82:da:55:39:25:4c:2f:51:ef:28:a1:1c:65:4d:a2: 5c:8a:e6:07:4e:34:12:f5:82:1c:13:79:60:46:4f: e7:26:4c:77:ab:ce:28:96:36:a9:c5:f1:14:49:9b: e9:c5:e4:0d:89:80:4d:50:42:28:9a:29:09:2b:4f: 0c:a9:9d:80:ba:1b:09:f6:bb:75:04:15:39:0d:82: 12:92:b0:64:6e:48:67:51:91:fb:db:18:30:7a:b9: 0d:cd:47:e7:0e:79:6d:07:6f:e2:ab:72:f1:3a:12: cf:ad:66:5e:1f:20:ff:0a:af:c4:17:84:e2:50:b8: 00:8d:99:e7:fb:df:d1:ef:39:d2:c7:27:d0:e9:ef: 15:e9:03:71:63:24:f9:a0:90:23:e3:f3:1c:2e:8c: 02:8f:1c:6f:fd:b4:09:fb:73:54:b8:71:d1:7e:6a: 21:ff:40:e3:9d:57:fd:57:88:04:70:3f:85:86:a4: 78:0c:d6:e5:8b:02:a3:89:10:91:79:2c:03:ce:00: 4c:d0:3a:9e:f5:b3:bd:0c:13:cf:fe:32:c4:8e:41: 4b:53:03:b9:9d:8d:2d:a2:37:a5:1e:11:8e:dc:43: 8d:d4:94:81:c8:ab:83:97:f0:f4:98:b2:f3:4c:54: fa:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B3:35:A6:C4:35:AD:6D:C2:F7:55:81:DC:E9:62:8F:03:F8:EB:FC X509v3 Authority Key Identifier: keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:3c:91:51:29:7b:67:b3:f4:e7:2b:5d:d9:6e:fc:82:a4:ca: 2d:00:3f:ff:36:ac:da:60:ef:2f:3d:b2:73:e5:00:7d:b2:05: 91:b2:d4:63:ff:34:0a:88:1b:14:6a:3d:95:58:39:ff:9f:53: a8:e4:ee:33:45:e7:c8:74:45:48:df:49:67:f3:d4:81:fa:1e: 3f:bf:2f:37:a5:90:4c:0d:cd:9d:08:66:9f:0b:9b:bd:d6:c0: 51:41:a2:06:c6:8c:94:aa:ce:a1:59:13:36:44:f1:5f:a8:0c: 01:43:31:78:22:4a:55:e6:c2:4d:b4:a9:a4:78:5b:e9:f0:bd: 17:46:5d:93:4d:23:3c:98:d9:da:1c:5c:64:d2:73:5b:cc:34: d9:bd:43:e6:b8:4e:91:52:01:4a:f7:11:24:3c:3f:f4:91:51: 80:e1:57:8d:7f:a7:ea:c0:24:7e:07:74:09:f3:1b:63:24:3c: 3c:ae:19:ca:7e:41:2e:fb:ea:ed:4e:c5:65:69:8d:45:6a:f0: c5:3e:51:0c:77:5c:4e:87:0c:69:29:7c:1a:fc:1b:be:49:58: 75:98:c4:d0:51:99:b7:3c:ea:64:d4:88:99:a2:bc:b6:d2:38: 0d:84:8c:24:09:77:12:9f:c9:a7:e9:41:af:18:5f:4d:18:6f: 72:1a:10:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72YFvCcEAUh1SbM3V+TNSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZDc5NGFjNjAxY2UyNTA1YjY1Zjk3NWE3ZDUxNmEyZjAw YTViMzEwHhcNMjUxMjIwMTMwMTA4WhcNMjUxMjIxMTMwMTA4WjAzMTEwLwYDVQQD Eyg0OWIzMzVhNmM0MzVhZDZkYzJmNzU1ODFkY2U5NjI4ZjAzZjhlYmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL7aT7GUn6ln57cJFNmC2lU5JUwv Ue8ooRxlTaJciuYHTjQS9YIcE3lgRk/nJkx3q84oljapxfEUSZvpxeQNiYBNUEIo mikJK08MqZ2AuhsJ9rt1BBU5DYISkrBkbkhnUZH72xgwerkNzUfnDnltB2/iq3Lx OhLPrWZeHyD/Cq/EF4TiULgAjZnn+9/R7znSxyfQ6e8V6QNxYyT5oJAj4/McLowC jxxv/bQJ+3NUuHHRfmoh/0DjnVf9V4gEcD+FhqR4DNbliwKjiRCReSwDzgBM0Dqe 9bO9DBPP/jLEjkFLUwO5nY0tojelHhGO3EON1JSByKuDl/D0mLLzTFT68QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmzNabENa1twvdVgdzpYo8D+Ov8MB8GA1UdIwQY MBaAFMrXlKxgHOJQW2X5dafVFqLwClsxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXRlVXJHQWM0bEJiWmZsMXA5VVdvdkFLV3pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mOWE0YmUtZDc5Yy00MTkyLWE2YjMt M2I5ODhmMTg4ZDkxLzEveXRlVXJHQWM0bEJiWmZsMXA5VVdvdkFLV3pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9mOWE0YmUtZDc5Yy00MTkyLWE2YjMtM2I5ODhmMTg4ZDkx LzEveXRlVXJHQWM0bEJiWmZsMXA5VVdvdkFLV3pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVDyRUSl7 Z7P05ytd2W78gqTKLQA//zas2mDvLz2yc+UAfbIFkbLUY/80CogbFGo9lVg5/59T qOTuM0XnyHRFSN9JZ/PUgfoeP78vN6WQTA3NnQhmnwubvdbAUUGiBsaMlKrOoVkT NkTxX6gMAUMxeCJKVebCTbSppHhb6fC9F0Zdk00jPJjZ2hxcZNJzW8w02b1D5rhO kVIBSvcRJDw/9JFRgOFXjX+n6sAkfgd0CfMbYyQ8PK4Zyn5BLvvq7U7FZWmNRWrw xT5RDHdcTocMaSl8GvwbvklYdZjE0FGZtzzqZNSImaK8ttI4DYSMJAl3Ep/Jp+lB rxhfTRhvchoQlw== -----END CERTIFICATE-----Generated at Sat Dec 20 14:37:49 2025 by rpki-client