This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft File: YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft (raw, json) Hash identifier: Jpku6mZIms6EM1aHBdQau5cLZ1mJXzNsM2mSf025Yds= Subject key identifier: 33:8E:28:5C:AC:F5:E6:C9:10:74:7E:B8:BD:29:56:17:21:41:BC:C1 Authority key identifier: 61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3 Certificate issuer: /CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3 Certificate serial: 019B4C5EE97A6251141387CAEF10B76DB322 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft Manifest number: 0E55 Signing time: Tue 23 Dec 2025 18:00:47 +0000 Manifest this update: Tue 23 Dec 2025 18:00:47 +0000 Manifest next update: Wed 24 Dec 2025 18:00:47 +0000 Files and hashes: 1: YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl (hash: VgF2wno8nD3Brv/4SGmvnAZ4BoRK6iIBnE0gJkwoVtY=) 2: tm8Rt7Sc2c1PcYKasPfyO3eBX9M.roa (hash: fWTds4doBQAqbglPwbw6IGwEFIO7de7/7OMc6gbtl08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5e:e9:7a:62:51:14:13:87:ca:ef:10:b7:6d:b3:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3 Validity Not Before: Dec 23 18:00:47 2025 GMT Not After : Dec 24 18:00:47 2025 GMT Subject: CN=338e285cacf5e6c910747eb8bd2956172141bcc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c9:a5:51:f1:42:f4:75:f1:63:15:a2:89:c3: 00:14:d9:59:db:c5:7e:eb:23:3e:d7:e2:ad:32:6f: 95:81:58:a3:f3:29:5d:2c:0c:ad:be:53:fc:5d:77: 88:52:26:d3:29:b0:ea:56:e9:e3:89:87:ba:cd:a2: 2b:19:20:55:c1:5e:39:75:34:37:8a:47:9d:e2:0a: 1d:51:ed:fe:75:52:5f:05:8e:00:a1:c3:4b:43:7f: c4:4a:3e:3d:26:88:b5:33:66:23:7b:a3:59:ed:49: b4:fe:f8:49:89:4f:ff:46:4e:22:51:b6:9f:c2:5c: d9:2f:fa:a8:d0:82:3a:55:a2:1b:64:64:a2:8c:97: 48:02:78:fc:93:60:07:22:f4:13:c9:e8:17:46:42: c1:7e:e1:e0:8e:64:e9:19:74:20:6f:f2:e0:aa:f9: cb:a1:57:af:80:b9:17:9f:0e:c9:36:27:29:2e:97: e8:5d:ca:23:a3:8b:8c:4d:48:54:4b:59:fb:15:28: 96:3f:01:68:ab:fe:b5:8e:8c:63:65:0f:76:4c:3c: 26:af:89:37:23:46:76:f4:93:e1:50:48:f6:69:94: e2:a7:f7:f2:61:f4:96:84:8a:4b:75:97:a0:01:3d: 4b:22:0c:71:9f:94:8a:69:f7:a6:6e:f8:35:81:45: 71:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8E:28:5C:AC:F5:E6:C9:10:74:7E:B8:BD:29:56:17:21:41:BC:C1 X509v3 Authority Key Identifier: keyid:61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:b4:fd:3a:45:48:19:df:77:6e:08:dd:a0:00:b2:db:07:c1: c6:23:33:9c:96:f1:2b:b7:09:88:39:3f:72:72:bd:9f:de:2c: c9:79:eb:38:0f:f2:81:2a:60:4a:0f:bd:0f:d1:0d:0c:b3:b1: a2:96:ac:69:ff:68:63:0c:80:48:99:d7:ed:d8:64:db:f7:ab: 80:6a:77:58:4a:a5:93:1f:fc:7f:ab:81:ea:78:d0:51:68:2f: b1:1e:ce:f5:06:e7:22:7f:69:56:cf:73:60:a8:b6:3b:30:f1: bf:b2:f0:f0:e9:ea:fe:2f:cf:11:23:97:f8:0d:bf:c9:22:d3: 4c:d6:b5:7f:79:84:7d:fd:19:20:8d:ea:4a:ce:7b:5d:58:54: 9b:d1:87:55:49:02:2f:2f:0c:c5:8d:88:d1:a5:74:1e:0c:ad: 25:7e:46:c7:46:8f:b2:ca:e6:9f:49:e1:44:61:c6:48:16:b6: 11:40:7f:14:9f:e1:06:1f:f7:36:47:c0:39:15:38:a3:00:fd: bf:ce:a4:c0:10:82:ae:03:65:fa:19:51:03:73:96:d5:b3:1e: 73:29:f5:a3:1e:0c:e1:1f:08:e7:cc:f6:1d:1a:3a:21:1f:e3: e1:81:3a:5c:15:a3:87:45:11:86:c9:ec:57:f0:e0:d3:af:4a: 38:7e:9a:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMXul6YlEUE4fK7xC3bbMiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMGY4Zjk5ZmNhNjlhYTczZjg4YTUzMWRiNDZkMjI4YTdl MmMzZDMwHhcNMjUxMjIzMTgwMDQ3WhcNMjUxMjI0MTgwMDQ3WjAzMTEwLwYDVQQD EygzMzhlMjg1Y2FjZjVlNmM5MTA3NDdlYjhiZDI5NTYxNzIxNDFiY2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcmlUfFC9HXxYxWiicMAFNlZ28V+ 6yM+1+KtMm+VgVij8yldLAytvlP8XXeIUibTKbDqVunjiYe6zaIrGSBVwV45dTQ3 iked4godUe3+dVJfBY4AocNLQ3/ESj49Joi1M2Yje6NZ7Um0/vhJiU//Rk4iUbaf wlzZL/qo0II6VaIbZGSijJdIAnj8k2AHIvQTyegXRkLBfuHgjmTpGXQgb/LgqvnL oVevgLkXnw7JNicpLpfoXcojo4uMTUhUS1n7FSiWPwFoq/61joxjZQ92TDwmr4k3 I0Z29JPhUEj2aZTip/fyYfSWhIpLdZegAT1LIgxxn5SKafembvg1gUVxmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOOKFys9ebJEHR+uL0pVhchQbzBMB8GA1UdIwQY MBaAFGEPj5n8ppqnP4ilMdtG0iin4sPTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVEtUG1meW1tcWNfaUtVeDIwYlNLS2ZpdzlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9kOTQ2ODEtYWJlNi00ZTIzLTliOTgt NzlhMGE1MjhlMGE0LzEvWVEtUG1meW1tcWNfaUtVeDIwYlNLS2ZpdzlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9kOTQ2ODEtYWJlNi00ZTIzLTliOTgtNzlhMGE1MjhlMGE0 LzEvWVEtUG1meW1tcWNfaUtVeDIwYlNLS2ZpdzlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq7T9OkVI Gd93bgjdoACy2wfBxiMznJbxK7cJiDk/cnK9n94syXnrOA/ygSpgSg+9D9ENDLOx opasaf9oYwyASJnX7dhk2/ergGp3WEqlkx/8f6uB6njQUWgvsR7O9QbnIn9pVs9z YKi2OzDxv7Lw8Onq/i/PESOX+A2/ySLTTNa1f3mEff0ZII3qSs57XVhUm9GHVUkC Ly8MxY2I0aV0HgytJX5Gx0aPssrmn0nhRGHGSBa2EUB/FJ/hBh/3NkfAORU4owD9 v86kwBCCrgNl+hlRA3OW1bMecyn1ox4M4R8I58z2HRo6IR/j4YE6XBWjh0URhsns V/Dg069KOH6aJQ== -----END CERTIFICATE-----Generated at Wed Dec 24 00:14:49 2025 by rpki-client