This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft File: Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft (raw, json) Hash identifier: L5z38tEnDg7nV3w+HNwIo2mEXQHrfJTp1KXw7c/TfVQ= Subject key identifier: 67:B2:9E:73:A0:F3:EB:49:C4:33:83:9E:1C:F7:D8:0C:57:95:9E:93 Authority key identifier: 62:EF:97:75:50:FA:7C:81:3D:EE:5C:1B:90:E9:51:1B:9C:68:DD:0A Certificate issuer: /CN=62ef977550fa7c813dee5c1b90e9511b9c68dd0a Certificate serial: 019B7291F08C52CAE547D6C9B87FDEEABB61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft Manifest number: 0AE7 Signing time: Wed 31 Dec 2025 04:02:05 +0000 Manifest this update: Wed 31 Dec 2025 04:02:05 +0000 Manifest next update: Thu 01 Jan 2026 04:02:05 +0000 Files and hashes: 1: MpAhSV5_JYGm73KDLYsRhjMMngA.roa (hash: I/TPMBAXObvOasW2mYRrnWqkuLDeYNgwfZaEC70a/SQ=) 2: Yu-XdVD6fIE97lwbkOlRG5xo3Qo.crl (hash: MejppBsEiyL4phKEhwcB267t4V30zfJ6vmQ5xnjasF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.crl rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft rsync://rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 04:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:91:f0:8c:52:ca:e5:47:d6:c9:b8:7f:de:ea:bb:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62ef977550fa7c813dee5c1b90e9511b9c68dd0a Validity Not Before: Dec 31 04:02:05 2025 GMT Not After : Jan 1 04:02:05 2026 GMT Subject: CN=67b29e73a0f3eb49c433839e1cf7d80c57959e93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a2:51:1d:7f:3c:74:58:1e:f8:a3:e7:0d:c7: b1:a6:f5:e2:b2:8b:b9:df:a9:be:5b:82:84:27:d9: b3:b9:0a:c1:69:bc:87:81:0e:f5:3c:b2:68:ac:f8: 77:06:25:0e:15:55:07:48:64:0f:74:9c:97:d1:c9: 06:8d:2c:e2:f5:59:29:19:d9:08:c7:51:5f:a2:57: 58:cf:06:a2:17:0d:16:6a:38:41:5b:7a:27:a5:24: 8d:ea:25:4d:13:2e:4a:36:0f:f9:ba:a9:94:4f:65: 5f:47:98:3c:f6:e2:5c:31:e9:63:54:af:4d:86:ee: 1a:37:9a:fc:7f:4a:6a:7a:ba:a8:41:9e:1f:12:9c: 5b:b8:7d:d3:f6:4c:45:b0:83:69:0c:7d:2a:91:13: f9:8a:9c:df:29:c7:7e:b6:6e:c5:5a:6e:d6:bf:39: 6c:d3:8b:69:42:c7:d0:ad:db:40:a3:83:ae:5e:ed: 4b:c4:cb:c7:25:9b:79:ef:a3:52:44:99:17:87:d2: 0f:7e:25:7f:55:6c:1f:bd:8f:bc:4f:d7:30:56:61: 33:7e:15:06:5a:a1:10:f1:df:3f:67:84:c8:5c:da: 4f:72:c1:7b:4f:16:a1:60:e2:9d:c6:a6:39:0b:ff: c8:5c:d0:f5:1b:bc:a6:32:bf:f5:23:be:2f:66:85: f5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B2:9E:73:A0:F3:EB:49:C4:33:83:9E:1C:F7:D8:0C:57:95:9E:93 X509v3 Authority Key Identifier: keyid:62:EF:97:75:50:FA:7C:81:3D:EE:5C:1B:90:E9:51:1B:9C:68:DD:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:07:a5:34:3b:49:93:db:e0:a8:de:75:12:5a:2b:ee:a7:16: 11:b3:ae:9a:c0:07:8d:1e:53:74:38:18:c5:d9:6f:0d:75:e8: c0:69:3a:bd:80:14:0d:d3:fd:9d:1e:aa:7f:51:80:ff:78:5a: 53:58:07:88:54:97:97:ad:7e:83:99:b3:74:a1:0f:e5:9a:e2: 02:a7:8a:a4:b2:64:66:3b:71:1a:8c:43:2f:75:79:ed:0b:b9: c6:a6:22:b8:a2:3d:5d:3a:2f:52:02:7c:12:11:56:04:9c:2d: 2a:21:59:04:42:7d:f5:de:39:1c:f8:2f:2c:41:30:36:5c:7e: f2:2c:1f:03:30:6e:34:a2:23:09:f4:fd:71:22:78:bb:b1:32: 7c:4b:b0:37:21:02:8a:a8:cf:81:c9:e8:7f:cc:91:cb:9d:61: e8:a3:4e:43:d1:37:10:fe:5d:d3:54:ac:14:00:c8:c8:35:35: 77:a1:f1:f2:6a:79:49:85:56:92:bc:b7:6f:fa:ea:a9:7e:ab: e7:4b:23:27:ac:f0:54:d7:46:2c:23:4e:4b:77:4d:bd:f0:9c: 8d:0c:87:9b:61:c0:c5:82:d0:ed:39:05:cb:57:99:20:65:e0: 33:63:dd:d1:84:5e:9f:a0:98:e5:36:46:a2:1b:87:5c:bd:db: a1:9d:08:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtykfCMUsrlR9bJuH/e6rthMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZWY5Nzc1NTBmYTdjODEzZGVlNWMxYjkwZTk1MTFiOWM2 OGRkMGEwHhcNMjUxMjMxMDQwMjA1WhcNMjYwMTAxMDQwMjA1WjAzMTEwLwYDVQQD Eyg2N2IyOWU3M2EwZjNlYjQ5YzQzMzgzOWUxY2Y3ZDgwYzU3OTU5ZTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaJRHX88dFge+KPnDcexpvXisou5 36m+W4KEJ9mzuQrBabyHgQ71PLJorPh3BiUOFVUHSGQPdJyX0ckGjSzi9VkpGdkI x1FfoldYzwaiFw0WajhBW3onpSSN6iVNEy5KNg/5uqmUT2VfR5g89uJcMeljVK9N hu4aN5r8f0pqerqoQZ4fEpxbuH3T9kxFsINpDH0qkRP5ipzfKcd+tm7FWm7Wvzls 04tpQsfQrdtAo4OuXu1LxMvHJZt576NSRJkXh9IPfiV/VWwfvY+8T9cwVmEzfhUG WqEQ8d8/Z4TIXNpPcsF7TxahYOKdxqY5C//IXND1G7ymMr/1I74vZoX1qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGeynnOg8+tJxDODnhz32AxXlZ6TMB8GA1UdIwQY MBaAFGLvl3VQ+nyBPe5cG5DpURucaN0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXUtWGRWRDZmSUU5N2x3YmtPbFJHNXhvM1FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84ZTM4ZDctZTdkNS00ZGQ4LWEzNjAt NTg0YTE0MGI4YjcxLzEvWXUtWGRWRDZmSUU5N2x3YmtPbFJHNXhvM1FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My84ZTM4ZDctZTdkNS00ZGQ4LWEzNjAtNTg0YTE0MGI4Yjcx LzEvWXUtWGRWRDZmSUU5N2x3YmtPbFJHNXhvM1FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQelNDtJ k9vgqN51Elor7qcWEbOumsAHjR5TdDgYxdlvDXXowGk6vYAUDdP9nR6qf1GA/3ha U1gHiFSXl61+g5mzdKEP5ZriAqeKpLJkZjtxGoxDL3V57Qu5xqYiuKI9XTovUgJ8 EhFWBJwtKiFZBEJ99d45HPgvLEEwNlx+8iwfAzBuNKIjCfT9cSJ4u7EyfEuwNyEC iqjPgcnof8yRy51h6KNOQ9E3EP5d01SsFADIyDU1d6Hx8mp5SYVWkry3b/rqqX6r 50sjJ6zwVNdGLCNOS3dNvfCcjQyHm2HAxYLQ7TkFy1eZIGXgM2Pd0YRen6CY5TZG ohuHXL3boZ0Ing== -----END CERTIFICATE-----Generated at Wed Dec 31 13:27:45 2025 by rpki-client