This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft File: YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft (raw, json) Hash identifier: xvlvwAQhHedV1nlPsUk2mZPN3jaBv2hlM7wQCutsPs4= Subject key identifier: 90:C3:9E:C5:73:1B:59:C2:69:D1:33:54:54:85:3A:E3:7D:61:0F:67 Authority key identifier: 61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5 Certificate issuer: /CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5 Certificate serial: 019B638BF51C5879D7EB25D1F18944F06891 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft Manifest number: 0F36 Signing time: Sun 28 Dec 2025 06:01:15 +0000 Manifest this update: Sun 28 Dec 2025 06:01:15 +0000 Manifest next update: Mon 29 Dec 2025 06:01:15 +0000 Files and hashes: 1: 02GOfZbMNICRgOj9G0mIGs2I4vI.roa (hash: 7F9bn3m0UkAUH0crYUw2LxUKO5iFZMnEUQvddNdyyzY=) 2: 1wktyXo13sUHT1rATESg5FNiuyk.roa (hash: hCP3ZMMgaFh8n4sim6mqZazNXZKLtUNK2izenZ+UBc4=) 3: YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl (hash: Axc2Ln3fCbJOkCG7tDN4UPJfekGWDGKUq5UMTwDYt4I=) 4: yxSHMNq1K4qzrK8RBcry_vpRL0Y.roa (hash: ES8XPk3Ggq1Zs2KaMQwv/Lx7ybdkBhCiefUow9lLBOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:8b:f5:1c:58:79:d7:eb:25:d1:f1:89:44:f0:68:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5 Validity Not Before: Dec 28 06:01:15 2025 GMT Not After : Dec 29 06:01:15 2025 GMT Subject: CN=90c39ec5731b59c269d1335454853ae37d610f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5a:b9:76:c6:62:16:b8:0a:64:82:dd:95:7d: 59:07:a7:f0:09:f0:50:83:bc:94:74:75:5e:b6:5d: 32:7a:6f:47:dd:76:9c:4b:7d:20:8b:02:06:79:86: 75:2f:b3:28:61:fb:a6:e5:02:bf:58:24:85:3f:5e: 14:d1:b9:d3:b9:c4:75:a6:54:8f:1e:62:d0:68:c9: 3c:e0:0e:df:45:69:90:2a:9c:62:c7:dd:6e:d6:2f: 23:45:70:d2:15:eb:6d:67:fe:7e:06:5d:d1:13:4b: 52:47:61:40:22:55:73:cf:3d:24:7d:6f:d0:80:9f: 02:3e:15:d2:b9:1e:17:e5:6d:0e:13:bd:7f:22:f5: cd:55:10:93:35:55:af:39:c7:04:4c:8d:1f:fc:50: f6:dc:60:17:13:91:9c:f7:70:a3:2c:df:9e:28:7e: b4:f9:0a:c6:7a:af:d4:b2:1e:05:b1:8f:3b:3e:92: d4:57:f2:39:41:a6:2b:8e:03:26:f5:05:9f:63:8c: 60:4c:d0:45:82:8c:e2:6f:ae:ab:70:95:43:86:a1: 61:bb:8e:3d:d6:41:9a:e4:3d:b1:49:50:d3:0d:9d: 70:5d:77:66:35:a2:07:62:79:ce:4c:32:9f:a8:d5: e8:af:86:35:19:6b:5f:59:33:2c:e0:19:f9:53:eb: 57:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C3:9E:C5:73:1B:59:C2:69:D1:33:54:54:85:3A:E3:7D:61:0F:67 X509v3 Authority Key Identifier: keyid:61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:43:60:e8:82:f0:cd:d0:de:f8:04:db:53:b2:2b:68:8a:07: 22:94:ed:02:32:12:77:ba:5b:af:b9:87:33:39:9f:41:2e:59: 1a:ea:b7:d0:8d:d6:64:bd:19:3a:9e:48:cb:14:b3:1d:64:ee: bf:00:1c:66:22:b0:02:e3:da:93:3d:2d:c8:61:30:d0:22:05: 17:1d:36:50:d0:45:01:fe:71:9e:2a:e5:e8:e3:50:74:a0:4e: da:28:8a:28:5b:ea:79:8c:1b:5c:6a:1f:66:4a:a8:3e:28:b4: 53:0c:36:92:d4:42:56:48:b2:5b:fa:d5:55:30:4e:f4:67:21: 9d:34:72:31:61:5f:92:8d:8e:d6:48:05:4a:67:6b:aa:58:cf: 69:61:ba:74:7d:2a:9a:d3:80:f1:ff:4b:ce:a1:4c:b8:6a:a7: a0:22:75:12:7a:4b:66:e3:a7:a9:9b:14:ec:27:f2:09:e3:44: e6:1d:d4:82:3e:07:53:1b:05:03:76:b5:5b:17:d2:19:79:44: 52:8a:4c:f4:41:91:74:47:f5:e1:01:f6:29:fb:32:5d:7d:69: 3a:7e:b1:96:69:ad:88:8d:87:74:92:20:59:6f:33:7c:64:58: f8:11:4c:3a:1f:29:7a:01:5d:ed:5b:8b:b7:c5:2b:de:01:dd: 1a:0f:53:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtji/UcWHnX6yXR8YlE8GiRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNGUxOWEyMjc1ODE2YTI4ZTVlODBjOGY5YTI4Y2M1YTFk OWMwZDUwHhcNMjUxMjI4MDYwMTE1WhcNMjUxMjI5MDYwMTE1WjAzMTEwLwYDVQQD Eyg5MGMzOWVjNTczMWI1OWMyNjlkMTMzNTQ1NDg1M2FlMzdkNjEwZjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylq5dsZiFrgKZILdlX1ZB6fwCfBQ g7yUdHVetl0yem9H3XacS30giwIGeYZ1L7MoYfum5QK/WCSFP14U0bnTucR1plSP HmLQaMk84A7fRWmQKpxix91u1i8jRXDSFettZ/5+Bl3RE0tSR2FAIlVzzz0kfW/Q gJ8CPhXSuR4X5W0OE71/IvXNVRCTNVWvOccETI0f/FD23GAXE5Gc93CjLN+eKH60 +QrGeq/Ush4FsY87PpLUV/I5QaYrjgMm9QWfY4xgTNBFgozib66rcJVDhqFhu449 1kGa5D2xSVDTDZ1wXXdmNaIHYnnOTDKfqNXor4Y1GWtfWTMs4Bn5U+tXdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDDnsVzG1nCadEzVFSFOuN9YQ9nMB8GA1UdIwQY MBaAFGFOGaInWBaijl6AyPmijMWh2cDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVU0Wm9pZFlGcUtPWG9ESS1hS014YUhad05VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lNThlMjctY2FmZC00MTdjLTk1ZDAt ODcwNTQ0Y2FhZmFiLzEvWVU0Wm9pZFlGcUtPWG9ESS1hS014YUhad05VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9lNThlMjctY2FmZC00MTdjLTk1ZDAtODcwNTQ0Y2FhZmFi LzEvWVU0Wm9pZFlGcUtPWG9ESS1hS014YUhad05VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACkNg6ILw zdDe+ATbU7IraIoHIpTtAjISd7pbr7mHMzmfQS5ZGuq30I3WZL0ZOp5IyxSzHWTu vwAcZiKwAuPakz0tyGEw0CIFFx02UNBFAf5xnirl6ONQdKBO2iiKKFvqeYwbXGof ZkqoPii0Uww2ktRCVkiyW/rVVTBO9GchnTRyMWFfko2O1kgFSmdrqljPaWG6dH0q mtOA8f9LzqFMuGqnoCJ1EnpLZuOnqZsU7CfyCeNE5h3Ugj4HUxsFA3a1WxfSGXlE UopM9EGRdEf14QH2KfsyXX1pOn6xlmmtiI2HdJIgWW8zfGRY+BFMOh8pegFd7VuL t8Ur3gHdGg9TUQ== -----END CERTIFICATE-----Generated at Sun Dec 28 09:07:06 2025 by rpki-client