This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft File: YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft (raw, json) Hash identifier: Lp6OjjPSYkz7g3sSw6iwp8ax/Q0SAOz9EN7dl1+HKMA= Subject key identifier: 57:B8:61:36:F9:39:28:F0:E2:BC:37:25:6C:2F:89:25:72:D7:B3:66 Authority key identifier: 61:2C:1C:53:F6:C1:D9:96:23:6C:BB:37:BA:32:47:67:03:99:A6:2D Certificate issuer: /CN=612c1c53f6c1d996236cbb37ba3247670399a62d Certificate serial: 019B360E6F044BD9F55E8F59595D57196F21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft Manifest number: 0EAA Signing time: Fri 19 Dec 2025 10:01:14 +0000 Manifest this update: Fri 19 Dec 2025 10:01:14 +0000 Manifest next update: Sat 20 Dec 2025 10:01:14 +0000 Files and hashes: 1: YSwcU_bB2ZYjbLs3ujJHZwOZpi0.crl (hash: paBdbFw0xUDfqzyjW0ZLa1HOw2H3ETXxJZU3r9atecg=) 2: cmQy3O27JTVMgc0scAWzRQz1k34.roa (hash: JrHBwEb+drqrBDZnlCxDUthDJ1gAVyMOlFCkBCL2cqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 10:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:6f:04:4b:d9:f5:5e:8f:59:59:5d:57:19:6f:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=612c1c53f6c1d996236cbb37ba3247670399a62d Validity Not Before: Dec 19 10:01:14 2025 GMT Not After : Dec 20 10:01:14 2025 GMT Subject: CN=57b86136f93928f0e2bc37256c2f892572d7b366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7d:70:cf:b8:56:2c:39:9d:57:54:ee:bc:29: f8:d7:f3:f5:42:77:57:dc:ea:d0:1c:00:b6:5f:0c: ef:4d:7a:f9:75:33:b7:e6:ba:ce:a1:c8:61:d2:27: b2:5e:bb:bb:73:53:4e:04:f3:36:b1:fa:61:49:1d: c0:4f:8d:d9:30:9c:66:68:1d:d6:8a:c9:7a:bf:3c: a4:65:f4:e6:cb:c5:e8:7f:8e:87:7f:9d:3d:ad:af: 3d:8b:d7:0c:ef:8d:19:da:8a:22:78:0b:e2:ef:6a: 77:bc:3f:ab:02:68:bc:81:a5:52:5a:7b:78:56:dc: fd:c8:53:54:1d:2c:af:79:37:eb:d1:41:4d:99:67: 42:32:f3:93:de:e1:65:b6:a0:db:e6:cb:c3:a8:7d: dd:e6:14:79:36:1a:c7:85:67:fb:2a:15:6d:9d:5b: 76:df:6e:01:bb:0b:34:46:92:ba:bc:ab:21:9b:37: 73:43:f2:39:b5:7a:68:53:c7:38:89:1d:7b:3d:d6: 68:81:c5:fd:fe:f9:a7:5d:cf:2a:8c:bc:52:af:aa: be:37:91:7d:49:9c:02:f9:8b:c6:8e:61:3c:2d:4a: 23:71:80:c7:b2:c5:89:20:97:fb:2e:74:4f:8b:d7: e3:63:78:88:a7:b4:47:1b:11:4f:a8:6c:d4:e7:be: c0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B8:61:36:F9:39:28:F0:E2:BC:37:25:6C:2F:89:25:72:D7:B3:66 X509v3 Authority Key Identifier: keyid:61:2C:1C:53:F6:C1:D9:96:23:6C:BB:37:BA:32:47:67:03:99:A6:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:54:67:51:90:1c:ce:83:5a:4a:64:a9:5e:f9:60:ea:aa:7f: 74:12:26:b8:cf:3d:b1:9a:9f:41:5b:71:78:03:91:6d:ce:76: 8e:f2:69:c1:16:18:25:7a:e3:c4:35:f3:a5:f7:cd:ec:81:14: a1:6f:09:17:95:f3:bd:03:ff:bc:7e:b5:60:6e:5d:cf:12:1a: 33:78:43:31:4b:ad:a9:04:68:6c:bd:6f:3d:53:a4:51:8a:07: 79:bd:80:b1:5b:b4:5a:c0:4e:89:a1:19:91:3f:ea:e7:d2:e3: 92:c7:4e:fa:2c:01:17:8d:79:16:4c:7f:0e:20:13:52:3f:ac: 97:9e:f1:8e:bb:d6:fa:92:9b:68:ad:22:d9:f3:08:09:cf:0e: b2:5f:c0:a3:af:9b:62:27:64:96:63:03:96:5d:8d:6f:62:4e: d0:27:2a:e6:22:62:ed:83:a8:08:36:8b:0e:33:99:fb:ea:fe: cc:23:93:4b:71:6b:13:26:0a:b0:8f:1c:e6:88:e9:bf:63:c6: 92:28:57:e7:6e:bf:9a:60:bb:78:b4:87:71:1b:e4:bc:8f:0d: 27:60:3c:f9:92:10:e1:79:d6:38:6d:ed:12:5c:ec:7c:ae:6c: 83:78:e8:55:5f:33:b1:68:f2:fd:72:75:6c:1f:70:7d:7f:49: 11:66:be:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2Dm8ES9n1Xo9ZWV1XGW8hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMmMxYzUzZjZjMWQ5OTYyMzZjYmIzN2JhMzI0NzY3MDM5 OWE2MmQwHhcNMjUxMjE5MTAwMTE0WhcNMjUxMjIwMTAwMTE0WjAzMTEwLwYDVQQD Eyg1N2I4NjEzNmY5MzkyOGYwZTJiYzM3MjU2YzJmODkyNTcyZDdiMzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu31wz7hWLDmdV1TuvCn41/P1QndX 3OrQHAC2XwzvTXr5dTO35rrOochh0ieyXru7c1NOBPM2sfphSR3AT43ZMJxmaB3W isl6vzykZfTmy8Xof46Hf509ra89i9cM740Z2ooieAvi72p3vD+rAmi8gaVSWnt4 Vtz9yFNUHSyveTfr0UFNmWdCMvOT3uFltqDb5svDqH3d5hR5NhrHhWf7KhVtnVt2 324Buws0RpK6vKshmzdzQ/I5tXpoU8c4iR17PdZogcX9/vmnXc8qjLxSr6q+N5F9 SZwC+YvGjmE8LUojcYDHssWJIJf7LnRPi9fjY3iIp7RHGxFPqGzU577AWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFe4YTb5OSjw4rw3JWwviSVy17NmMB8GA1UdIwQY MBaAFGEsHFP2wdmWI2y7N7oyR2cDmaYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVN3Y1VfYkIyWllqYkxzM3VqSkhad09acGkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9mMDA3OGUtZDBjNy00MjhlLTk1MjQt ZWNhZjU3OGEzNGUzLzEvWVN3Y1VfYkIyWllqYkxzM3VqSkhad09acGkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9mMDA3OGUtZDBjNy00MjhlLTk1MjQtZWNhZjU3OGEzNGUz LzEvWVN3Y1VfYkIyWllqYkxzM3VqSkhad09acGkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1RnUZAc zoNaSmSpXvlg6qp/dBImuM89sZqfQVtxeAORbc52jvJpwRYYJXrjxDXzpffN7IEU oW8JF5XzvQP/vH61YG5dzxIaM3hDMUutqQRobL1vPVOkUYoHeb2AsVu0WsBOiaEZ kT/q59LjksdO+iwBF415Fkx/DiATUj+sl57xjrvW+pKbaK0i2fMICc8Osl/Ao6+b YidklmMDll2Nb2JO0Ccq5iJi7YOoCDaLDjOZ++r+zCOTS3FrEyYKsI8c5ojpv2PG kihX526/mmC7eLSHcRvkvI8NJ2A8+ZIQ4XnWOG3tElzsfK5sg3joVV8zsWjy/XJ1 bB9wfX9JEWa+sw== -----END CERTIFICATE-----Generated at Fri Dec 19 18:51:56 2025 by rpki-client