This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft File: YfvYiH2oRHExjYOISsAF8BtE_Uk.mft (raw, json) Hash identifier: 7OwD4S51abTTiAeEXZyy8tTcu7bl+7CycAxaubSIpDA= Subject key identifier: 6C:A8:7F:19:E1:89:07:D7:7E:BD:8F:97:E3:3A:22:F7:08:6D:46:7C Authority key identifier: 61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49 Certificate issuer: /CN=61fbd8887da84471318d83884ac005f01b44fd49 Certificate serial: 019B41A41BB7C34509854087CE5557C09C56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft Manifest number: 10AD Signing time: Sun 21 Dec 2025 16:00:32 +0000 Manifest this update: Sun 21 Dec 2025 16:00:32 +0000 Manifest next update: Mon 22 Dec 2025 16:00:32 +0000 Files and hashes: 1: VqIWjBWlYBceSFr-zqKzJgNUIvM.roa (hash: Goyl+zMBt9K8bsmInK/tMhspP8k2k8ODxJhJDONQhxk=) 2: YfvYiH2oRHExjYOISsAF8BtE_Uk.crl (hash: kEOz2q3CH08coM4ge8a9t2wWfWN65a4vpyeGG+yDC1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 16:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:1b:b7:c3:45:09:85:40:87:ce:55:57:c0:9c:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61fbd8887da84471318d83884ac005f01b44fd49 Validity Not Before: Dec 21 16:00:32 2025 GMT Not After : Dec 22 16:00:32 2025 GMT Subject: CN=6ca87f19e18907d77ebd8f97e33a22f7086d467c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f7:99:a8:af:1a:9e:59:2b:c1:09:38:dd:53: ea:ac:8c:0c:5e:2b:fe:2a:cf:a5:0a:7c:e9:77:38: 3f:43:d9:9f:b6:8f:96:80:89:0c:a5:af:65:e8:0d: 47:e7:2e:f6:f6:d1:e1:d9:b1:59:b5:53:1c:b0:a4: 7a:64:e8:aa:b3:17:97:8c:4c:82:fc:9c:0c:40:98: 4a:65:45:70:82:90:70:4a:1b:56:73:a5:52:1e:92: 45:f1:c0:cf:ef:e1:36:dd:75:2f:02:01:c9:39:3e: db:7d:94:0e:c4:d2:2a:eb:71:7b:04:d0:f9:c1:fc: ea:8e:be:f9:22:a4:84:84:c8:43:e6:b3:cf:3a:1d: 58:8d:af:70:a3:8e:f6:37:d1:16:35:d4:30:cf:67: bd:d2:7f:4d:9e:ed:d4:79:87:43:7a:dc:30:4f:ac: 1e:08:05:33:99:16:83:bf:81:56:4c:16:c5:1c:db: 98:ce:39:25:df:66:b4:66:07:94:7a:c6:3a:6c:02: b5:ae:44:09:82:3b:eb:0c:49:49:91:e5:ff:bb:88: 99:7b:67:16:62:c7:c4:30:32:41:05:2e:25:6a:43: 94:84:55:34:2b:e7:a1:5f:2f:45:a9:51:a8:a7:7f: 22:79:56:63:34:ca:8c:fe:d0:fb:da:08:14:54:b5: 06:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A8:7F:19:E1:89:07:D7:7E:BD:8F:97:E3:3A:22:F7:08:6D:46:7C X509v3 Authority Key Identifier: keyid:61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:b5:63:99:80:32:c9:30:ca:00:92:a8:62:80:f8:96:df:37: 98:3a:6f:47:3f:cb:2a:2e:fe:b3:f8:da:e9:b5:80:58:f0:30: f5:c3:e7:81:38:e7:e3:c5:53:38:17:39:21:44:57:ee:bd:89: 46:64:43:2d:ed:fe:64:53:44:5f:ae:99:33:8b:67:33:9d:4d: d0:a8:0c:13:ea:66:9d:56:7f:f6:86:73:78:88:7f:d6:c9:76: da:b3:a4:d8:3d:0c:84:2a:39:a8:66:16:34:fe:fc:d2:5b:d2: 33:87:0e:23:c2:a9:c2:3f:be:f9:e1:cb:9b:c7:48:e8:8f:d5: ad:38:0a:69:2e:81:64:55:9c:8d:cc:44:b3:16:49:da:19:6c: c7:4d:ad:a1:ae:4f:1a:80:9b:d8:f7:a3:3b:84:af:81:c2:02: 6c:17:43:de:a4:8d:a7:78:03:d6:3b:d8:06:4c:ed:54:45:3d: 9d:c6:78:2e:46:20:4a:09:3a:c3:7c:a9:3f:55:f4:14:90:a0: 31:b8:bc:67:ab:b5:c5:33:d6:0b:f3:4f:e3:ed:eb:a7:b2:10: 8b:ab:74:c5:d8:f3:cd:28:80:34:2c:13:2a:9b:76:2e:96:45: 2c:b4:7b:76:b8:09:12:0b:9a:a6:99:27:04:c4:cf:6e:f6:85: 2f:53:30:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpBu3w0UJhUCHzlVXwJxWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxZmJkODg4N2RhODQ0NzEzMThkODM4ODRhYzAwNWYwMWI0 NGZkNDkwHhcNMjUxMjIxMTYwMDMyWhcNMjUxMjIyMTYwMDMyWjAzMTEwLwYDVQQD Eyg2Y2E4N2YxOWUxODkwN2Q3N2ViZDhmOTdlMzNhMjJmNzA4NmQ0NjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6feZqK8anlkrwQk43VPqrIwMXiv+ Ks+lCnzpdzg/Q9mfto+WgIkMpa9l6A1H5y729tHh2bFZtVMcsKR6ZOiqsxeXjEyC /JwMQJhKZUVwgpBwShtWc6VSHpJF8cDP7+E23XUvAgHJOT7bfZQOxNIq63F7BND5 wfzqjr75IqSEhMhD5rPPOh1Yja9wo472N9EWNdQwz2e90n9Nnu3UeYdDetwwT6we CAUzmRaDv4FWTBbFHNuYzjkl32a0ZgeUesY6bAK1rkQJgjvrDElJkeX/u4iZe2cW YsfEMDJBBS4lakOUhFU0K+ehXy9FqVGop38ieVZjNMqM/tD72ggUVLUGAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGyofxnhiQfXfr2Pl+M6IvcIbUZ8MB8GA1UdIwQY MBaAFGH72Ih9qERxMY2DiErABfAbRP1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWZ2WWlIMm9SSEV4allPSVNzQUY4QnRFX1VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8wY2U1NjktYWI4ZS00NzEyLTk0OWEt Y2VjOWUxN2Y1MDRiLzEvWWZ2WWlIMm9SSEV4allPSVNzQUY4QnRFX1VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8wY2U1NjktYWI4ZS00NzEyLTk0OWEtY2VjOWUxN2Y1MDRi LzEvWWZ2WWlIMm9SSEV4allPSVNzQUY4QnRFX1VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrVjmYAy yTDKAJKoYoD4lt83mDpvRz/LKi7+s/ja6bWAWPAw9cPngTjn48VTOBc5IURX7r2J RmRDLe3+ZFNEX66ZM4tnM51N0KgME+pmnVZ/9oZzeIh/1sl22rOk2D0MhCo5qGYW NP780lvSM4cOI8Kpwj+++eHLm8dI6I/VrTgKaS6BZFWcjcxEsxZJ2hlsx02toa5P GoCb2PejO4SvgcICbBdD3qSNp3gD1jvYBkztVEU9ncZ4LkYgSgk6w3ypP1X0FJCg Mbi8Z6u1xTPWC/NP4+3rp7IQi6t0xdjzzSiANCwTKpt2LpZFLLR7drgJEguappkn BMTPbvaFL1Mwzw== -----END CERTIFICATE-----Generated at Mon Dec 22 00:02:31 2025 by rpki-client