This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft File: YT0j8hITJ9kX1wjY_hUzgkVZWag.mft (raw, json) Hash identifier: DjLlElDeu7ApbZpDoBX9Je5rK0VrTOXoc65vN5yfVog= Subject key identifier: 0C:F9:7A:DA:38:FF:51:8B:17:3A:82:4C:D2:D1:B0:1C:8A:0A:59:4E Authority key identifier: 61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8 Certificate issuer: /CN=613d23f2121327d917d708d8fe153382455959a8 Certificate serial: 019B38A15FBBC3A01F0CAB3F7AF8A8DCBEF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft Manifest number: 137A Signing time: Fri 19 Dec 2025 22:00:58 +0000 Manifest this update: Fri 19 Dec 2025 22:00:58 +0000 Manifest next update: Sat 20 Dec 2025 22:00:58 +0000 Files and hashes: 1: DWd1OJAlcB2kSAEMao72mBJOdXY.roa (hash: AUWrMkI+mL2Ml+jd7sUK/SrRZUJ6V8L3ibna7HmKGhM=) 2: TCWMAcVIf1XmxOwoevTUCYxUQM0.roa (hash: /HDY0JXfbE0ZuzLTJcC22r4Z292oLlEe3+9pLUhfZL0=) 3: YT0j8hITJ9kX1wjY_hUzgkVZWag.crl (hash: cyQAcC0ZNyKXvoVTOeYkfvTkYZf08Ir2WBBESFLFwt0=) 4: iBynxkBNgbzstPi8YjTQg23GPp8.roa (hash: 1ul4Px7X5BB0Iif+/FHz4HFwB9Mu3DthKPuzgZoc0E0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:5f:bb:c3:a0:1f:0c:ab:3f:7a:f8:a8:dc:be:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=613d23f2121327d917d708d8fe153382455959a8 Validity Not Before: Dec 19 22:00:58 2025 GMT Not After : Dec 20 22:00:58 2025 GMT Subject: CN=0cf97ada38ff518b173a824cd2d1b01c8a0a594e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fe:16:5c:e8:a0:92:ed:2c:ae:af:33:59:ce: c9:b7:b4:45:28:59:b0:1d:5b:86:e6:e5:b4:c8:4c: f4:bc:d8:5f:7b:52:a3:be:cd:59:33:2b:63:89:cc: 9a:7b:1c:7c:a9:50:40:ac:aa:c6:ff:c4:51:96:45: ab:d1:60:20:7b:14:20:7c:02:44:57:5a:2b:26:36: 67:20:fc:ef:58:27:02:af:9c:22:6a:c4:ea:a0:20: 5b:9f:bf:54:b2:a5:43:33:ba:4a:b0:96:02:2a:e9: 55:1f:4c:fa:1e:7b:ef:40:3b:3a:1f:1b:84:5b:d7: fd:f3:d2:36:64:00:82:8c:8e:e5:8b:26:bf:0e:9a: 60:b7:52:ad:06:dd:be:c6:d5:cc:4b:d6:f5:f3:75: 97:04:ed:74:fd:b6:4f:f6:1e:c3:7a:c9:43:54:36: ee:64:af:cd:0f:fb:a5:84:5b:25:12:2f:3a:6d:c7: 82:84:2a:59:3d:8f:d6:7d:ed:c6:f8:36:ee:7e:9d: 05:88:5d:ba:d8:16:3a:60:75:37:5d:ea:f9:77:cb: 8b:a4:76:f7:af:71:c4:0f:cc:38:96:c6:46:99:cc: 0d:bf:ff:3a:4b:19:cd:d5:f0:69:d9:ab:f0:36:22: 02:c3:c4:de:70:02:f2:3d:4a:a9:63:ab:f9:79:2a: ad:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F9:7A:DA:38:FF:51:8B:17:3A:82:4C:D2:D1:B0:1C:8A:0A:59:4E X509v3 Authority Key Identifier: keyid:61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b3:31:44:8a:2a:b5:06:31:f7:fa:7c:fb:2d:f2:34:28:03: 71:8e:e0:75:86:7f:9e:04:ff:b2:8a:8a:7b:cf:85:84:df:fc: 47:40:c9:6b:8d:10:78:79:41:74:d4:79:10:17:c7:b4:cd:a1: 5f:52:51:53:cc:1b:17:47:ef:9d:c3:3f:b1:2d:86:b5:72:e0: 87:d2:b2:d7:5a:1d:85:e3:ce:15:9a:c5:b5:da:1e:7d:e6:87: 37:17:a4:68:ac:38:3e:c8:a2:e2:04:70:82:1d:26:60:09:aa: c7:21:22:88:0a:61:6f:34:4c:d7:3f:7c:3b:c3:1e:4b:f8:0f: c6:82:18:7b:8e:ea:55:d6:cb:ca:d7:f5:23:2d:96:37:dc:d4: 3f:dc:b7:ad:21:89:73:3f:67:2a:1b:f3:83:c5:ca:04:70:1a: 39:8f:d6:92:1b:62:17:ce:7e:cf:0f:72:0f:84:1c:79:87:04: 09:b9:7f:ec:cd:a7:41:84:74:06:d8:e7:5f:42:0f:35:fc:37: b4:08:6b:7b:e1:fc:7f:81:c4:62:12:5a:5c:4e:ed:97:61:da: 5d:61:c2:28:fa:60:bc:37:b7:4e:87:19:93:13:97:29:d2:32: f8:8d:11:26:f6:50:d8:6b:c0:7e:fc:95:8d:5a:1d:18:bd:cb: 2e:9b:7c:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oV+7w6AfDKs/evio3L74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxM2QyM2YyMTIxMzI3ZDkxN2Q3MDhkOGZlMTUzMzgyNDU1 OTU5YTgwHhcNMjUxMjE5MjIwMDU4WhcNMjUxMjIwMjIwMDU4WjAzMTEwLwYDVQQD EygwY2Y5N2FkYTM4ZmY1MThiMTczYTgyNGNkMmQxYjAxYzhhMGE1OTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/4WXOigku0srq8zWc7Jt7RFKFmw HVuG5uW0yEz0vNhfe1Kjvs1ZMytjicyaexx8qVBArKrG/8RRlkWr0WAgexQgfAJE V1orJjZnIPzvWCcCr5wiasTqoCBbn79UsqVDM7pKsJYCKulVH0z6HnvvQDs6HxuE W9f989I2ZACCjI7liya/Dppgt1KtBt2+xtXMS9b183WXBO10/bZP9h7DeslDVDbu ZK/ND/ulhFslEi86bceChCpZPY/Wfe3G+Dbufp0FiF262BY6YHU3Xer5d8uLpHb3 r3HED8w4lsZGmcwNv/86SxnN1fBp2avwNiICw8TecALyPUqpY6v5eSqtJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAz5eto4/1GLFzqCTNLRsByKCllOMB8GA1UdIwQY MBaAFGE9I/ISEyfZF9cI2P4VM4JFWVmoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVQwajhoSVRKOWtYMXdqWV9oVXpna1ZaV2FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mY2U2YmUtMDg5Ni00NDg3LWFhMzQt N2E2MDViYTQwYzFlLzEvWVQwajhoSVRKOWtYMXdqWV9oVXpna1ZaV2FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mY2U2YmUtMDg5Ni00NDg3LWFhMzQtN2E2MDViYTQwYzFl LzEvWVQwajhoSVRKOWtYMXdqWV9oVXpna1ZaV2FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLMxRIoq tQYx9/p8+y3yNCgDcY7gdYZ/ngT/soqKe8+FhN/8R0DJa40QeHlBdNR5EBfHtM2h X1JRU8wbF0fvncM/sS2GtXLgh9Ky11odhePOFZrFtdoefeaHNxekaKw4Psii4gRw gh0mYAmqxyEiiAphbzRM1z98O8MeS/gPxoIYe47qVdbLytf1Iy2WN9zUP9y3rSGJ cz9nKhvzg8XKBHAaOY/WkhtiF85+zw9yD4QceYcECbl/7M2nQYR0BtjnX0IPNfw3 tAhre+H8f4HEYhJaXE7tl2HaXWHCKPpgvDe3TocZkxOXKdIy+I0RJvZQ2GvAfvyV jVodGL3LLpt8yQ== -----END CERTIFICATE-----Generated at Sat Dec 20 04:51:08 2025 by rpki-client