This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft File: YT0j8hITJ9kX1wjY_hUzgkVZWag.mft (raw, json) Hash identifier: 84b5nnXmPJczveW+DsYi476HnfiCcVltsfsRhtg7Ks0= Subject key identifier: 94:F5:9A:3A:35:4B:AF:5C:33:B7:DF:4E:FF:28:82:1C:18:F4:59:97 Authority key identifier: 61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8 Certificate issuer: /CN=613d23f2121327d917d708d8fe153382455959a8 Certificate serial: 019B631DE70D740A457389AD557DC2381887 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft Manifest number: 1390 Signing time: Sun 28 Dec 2025 04:01:02 +0000 Manifest this update: Sun 28 Dec 2025 04:01:02 +0000 Manifest next update: Mon 29 Dec 2025 04:01:02 +0000 Files and hashes: 1: DWd1OJAlcB2kSAEMao72mBJOdXY.roa (hash: AUWrMkI+mL2Ml+jd7sUK/SrRZUJ6V8L3ibna7HmKGhM=) 2: TCWMAcVIf1XmxOwoevTUCYxUQM0.roa (hash: /HDY0JXfbE0ZuzLTJcC22r4Z292oLlEe3+9pLUhfZL0=) 3: YT0j8hITJ9kX1wjY_hUzgkVZWag.crl (hash: YTPJGV7sr/L+hXYI6KdEVDYa704dd712x++ljy4KNXs=) 4: iBynxkBNgbzstPi8YjTQg23GPp8.roa (hash: 1ul4Px7X5BB0Iif+/FHz4HFwB9Mu3DthKPuzgZoc0E0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1d:e7:0d:74:0a:45:73:89:ad:55:7d:c2:38:18:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=613d23f2121327d917d708d8fe153382455959a8 Validity Not Before: Dec 28 04:01:02 2025 GMT Not After : Dec 29 04:01:02 2025 GMT Subject: CN=94f59a3a354baf5c33b7df4eff28821c18f45997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3e:f9:44:39:47:48:eb:f0:72:4a:e4:df:f8: 5b:3e:cf:e7:8d:48:df:e2:68:fa:e4:fe:42:ef:ac: c1:27:bb:10:32:be:38:08:46:1a:e0:a6:26:b4:bd: f3:28:d3:60:52:27:01:a8:a2:eb:02:11:a7:44:42: be:36:8a:d6:ce:f4:7c:27:7b:4c:6e:3c:b2:6b:8e: 1f:c5:d9:0b:56:5c:3b:c7:aa:42:9a:6d:e7:55:41: 50:14:ac:0e:3f:e3:0f:09:80:12:e9:93:2f:b1:31: 90:80:37:f3:ad:70:0a:57:cf:cb:34:ec:ab:a7:b0: f2:77:b2:68:81:cf:7c:3e:54:54:e1:6b:f1:c6:45: a0:ea:29:da:78:0a:1e:88:b8:dd:67:ee:d5:47:09: 5e:79:8b:57:1e:97:80:f3:9c:cb:0c:1a:39:4e:17: a3:1a:95:f4:bc:da:3d:c9:9a:8a:ce:6e:48:b7:5f: 44:ee:e8:a9:64:5a:a2:cf:c6:04:b6:5e:9b:79:c8: 74:4b:56:ca:45:d3:b4:48:5a:7e:c2:56:10:fc:36: d1:95:84:aa:5c:80:66:08:2d:39:65:71:d2:79:41: 59:a8:6a:7f:5f:71:8e:44:48:ca:0a:5c:d3:e4:f7: 9b:80:70:60:44:ec:e7:f1:2d:fd:88:49:04:8a:50: 76:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F5:9A:3A:35:4B:AF:5C:33:B7:DF:4E:FF:28:82:1C:18:F4:59:97 X509v3 Authority Key Identifier: keyid:61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:28:93:8e:b0:b2:20:e2:f9:a7:a0:b9:ee:61:3f:fb:e7:55: b4:05:b9:42:6e:6e:07:e5:4b:39:59:8a:95:6d:b7:18:00:bb: 45:9f:86:bc:9e:5e:8e:95:2a:2f:ab:4c:ce:24:76:49:c2:2f: 89:72:07:eb:3b:e6:1e:7f:61:40:9e:5b:e8:c7:eb:6c:23:14: 26:24:8a:31:99:95:ff:75:04:a1:50:b6:8e:79:ec:d6:46:49: 1d:64:6b:7f:f8:1d:c6:bc:c5:8b:41:e3:0a:50:54:14:15:95: 36:08:d8:41:51:e7:c6:4e:e4:13:97:6b:0f:50:a8:61:d4:8e: 0d:2f:bd:fa:ec:f0:64:cf:43:d7:60:ab:d9:dd:51:c8:93:79: ed:d1:9c:96:ec:28:5b:88:cc:c3:f1:59:1a:04:54:1d:1b:5d: 17:5b:2a:8c:3d:f9:62:e1:41:b7:ea:07:81:33:36:fc:a6:ef: a1:b3:23:b4:8a:f0:f9:0c:f9:3f:e1:a4:56:3f:2c:4d:c3:e0: 69:63:05:45:5c:d7:c2:0d:91:95:29:ae:27:50:20:80:c9:91: 22:e0:87:fc:ee:41:2d:87:5f:b1:c1:c0:c7:87:21:3b:99:56: 14:4b:d0:61:36:bf:3a:60:06:6e:40:8b:6b:7c:07:fe:4e:f5: de:f8:03:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHecNdApFc4mtVX3COBiHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxM2QyM2YyMTIxMzI3ZDkxN2Q3MDhkOGZlMTUzMzgyNDU1 OTU5YTgwHhcNMjUxMjI4MDQwMTAyWhcNMjUxMjI5MDQwMTAyWjAzMTEwLwYDVQQD Eyg5NGY1OWEzYTM1NGJhZjVjMzNiN2RmNGVmZjI4ODIxYzE4ZjQ1OTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD75RDlHSOvwckrk3/hbPs/njUjf 4mj65P5C76zBJ7sQMr44CEYa4KYmtL3zKNNgUicBqKLrAhGnREK+NorWzvR8J3tM bjyya44fxdkLVlw7x6pCmm3nVUFQFKwOP+MPCYAS6ZMvsTGQgDfzrXAKV8/LNOyr p7Dyd7Jogc98PlRU4WvxxkWg6inaeAoeiLjdZ+7VRwleeYtXHpeA85zLDBo5Thej GpX0vNo9yZqKzm5It19E7uipZFqiz8YEtl6bech0S1bKRdO0SFp+wlYQ/DbRlYSq XIBmCC05ZXHSeUFZqGp/X3GOREjKClzT5PebgHBgROzn8S39iEkEilB2/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJT1mjo1S69cM7ffTv8oghwY9FmXMB8GA1UdIwQY MBaAFGE9I/ISEyfZF9cI2P4VM4JFWVmoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVQwajhoSVRKOWtYMXdqWV9oVXpna1ZaV2FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mY2U2YmUtMDg5Ni00NDg3LWFhMzQt N2E2MDViYTQwYzFlLzEvWVQwajhoSVRKOWtYMXdqWV9oVXpna1ZaV2FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mY2U2YmUtMDg5Ni00NDg3LWFhMzQtN2E2MDViYTQwYzFl LzEvWVQwajhoSVRKOWtYMXdqWV9oVXpna1ZaV2FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCiTjrCy IOL5p6C57mE/++dVtAW5Qm5uB+VLOVmKlW23GAC7RZ+GvJ5ejpUqL6tMziR2ScIv iXIH6zvmHn9hQJ5b6MfrbCMUJiSKMZmV/3UEoVC2jnns1kZJHWRrf/gdxrzFi0Hj ClBUFBWVNgjYQVHnxk7kE5drD1CoYdSODS+9+uzwZM9D12Cr2d1RyJN57dGcluwo W4jMw/FZGgRUHRtdF1sqjD35YuFBt+oHgTM2/KbvobMjtIrw+Qz5P+GkVj8sTcPg aWMFRVzXwg2RlSmuJ1AggMmRIuCH/O5BLYdfscHAx4chO5lWFEvQYTa/OmAGbkCL a3wH/k713vgDWw== -----END CERTIFICATE-----Generated at Sun Dec 28 06:26:42 2025 by rpki-client