This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft File: YYhVY15HlPWHjjuYX-2JNa4GxaE.mft (raw, json) Hash identifier: HezNfhpY1r6MI2kzi+oYQBOSq7Fgt0czREveB6YyO/0= Subject key identifier: 4A:C8:EE:07:F3:F1:D0:45:4A:1A:A8:0C:BF:64:13:58:CB:A1:ED:C3 Authority key identifier: 61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1 Certificate issuer: /CN=618855635e4794f5878e3b985fed8935ae06c5a1 Certificate serial: 019B4CCCA8D12EA636DA673B73403F3E74E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft Manifest number: 1792 Signing time: Tue 23 Dec 2025 20:00:39 +0000 Manifest this update: Tue 23 Dec 2025 20:00:39 +0000 Manifest next update: Wed 24 Dec 2025 20:00:39 +0000 Files and hashes: 1: 4G6PC7r1jLJaKqLvKiHJfqhR1e4.roa (hash: qfv1dvU9Pa4JA9Wl519haLOz9gG/Vfn4EhOnWCbqEOg=) 2: YYhVY15HlPWHjjuYX-2JNa4GxaE.crl (hash: IKvdGO7DpEvLdwWmbPhD/n8Kbwec/7QqqCXtArPhGeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:cc:a8:d1:2e:a6:36:da:67:3b:73:40:3f:3e:74:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618855635e4794f5878e3b985fed8935ae06c5a1 Validity Not Before: Dec 23 20:00:39 2025 GMT Not After : Dec 24 20:00:39 2025 GMT Subject: CN=4ac8ee07f3f1d0454a1aa80cbf641358cba1edc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:15:6d:23:cc:13:51:8c:89:fc:4e:aa:24:8f: 12:ce:66:ce:5d:cc:27:cf:91:10:0f:a2:6a:ca:e9: 93:4b:72:aa:8f:f5:0a:37:b4:a5:b7:55:74:53:09: 2f:ac:9d:2a:49:7d:08:a1:16:c7:dd:6f:8e:f6:f7: 07:d5:e3:19:cf:40:14:56:0f:1d:89:11:87:d3:2c: 60:43:2d:82:37:04:cf:b6:a6:c3:b9:52:61:f7:9f: be:d1:79:cb:a3:e8:2b:6b:ef:73:29:22:4c:ff:48: 62:4b:12:62:4d:04:c9:94:2b:32:f3:4f:1c:73:c8: 00:b4:d5:da:79:f1:b3:50:69:ce:79:53:39:66:49: a3:90:3f:c1:05:27:b1:7a:2b:c8:0d:5d:82:0f:4f: 6c:d8:03:91:06:8d:ff:76:a5:05:00:5f:29:26:fe: 67:d6:19:02:26:09:bc:b0:ea:55:aa:b5:57:56:73: 18:c2:9a:c6:f4:f2:bd:c5:04:d0:b9:86:27:ee:bb: cb:d3:4f:c5:17:89:91:2d:04:ff:3a:f9:a4:2d:bc: 78:89:ae:16:a9:b3:8e:e7:b8:56:70:66:0e:be:97: b8:fa:65:d1:f8:f4:25:b5:de:bd:05:e8:59:0c:d8: 1e:c0:50:fc:f0:ff:d2:e6:ec:71:14:8d:bf:73:81: c5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C8:EE:07:F3:F1:D0:45:4A:1A:A8:0C:BF:64:13:58:CB:A1:ED:C3 X509v3 Authority Key Identifier: keyid:61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:a0:22:2d:c9:fa:80:99:6c:7f:a7:7a:b6:30:a2:ed:1f:79: ee:35:59:f9:1c:2a:96:cf:af:d0:b7:5f:8f:2c:24:f8:7d:d5: 01:12:da:79:fa:9c:e9:cb:2b:bd:03:24:93:ec:8f:e0:06:29: 61:f9:ee:65:11:f1:10:ee:08:1e:62:c8:19:b1:c7:a9:0b:38: 83:87:6a:94:dd:61:55:91:d7:eb:fb:28:e1:23:7c:41:10:f4: 32:82:6c:84:46:78:67:07:6a:d6:42:db:a2:5f:bc:e1:10:08: 25:74:64:9a:fb:21:e8:98:2f:40:5a:3b:8b:ce:3a:54:11:d8: 97:93:da:13:3c:55:a3:71:0d:6d:fc:2e:af:14:21:74:f4:e1: a9:aa:72:28:7f:59:66:27:4b:e2:2b:e0:ed:56:46:24:d4:88: 41:46:27:9a:a9:e3:12:45:a7:17:57:46:85:25:6c:d1:8c:31: 94:1b:85:37:0d:8d:60:14:3e:6c:8d:54:62:96:30:47:0a:01: 13:bf:64:97:2d:c8:f5:53:c7:a2:df:4e:5d:22:5c:75:fc:a1: 86:1e:40:6f:81:58:42:3c:db:f7:1d:f8:bb:d8:b2:bf:ba:b2: 84:b3:04:fa:a2:6c:9f:b1:77:d2:02:d4:3d:f1:d8:24:94:c2: 7c:cd:df:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMzKjRLqY22mc7c0A/PnThMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODg1NTYzNWU0Nzk0ZjU4NzhlM2I5ODVmZWQ4OTM1YWUw NmM1YTEwHhcNMjUxMjIzMjAwMDM5WhcNMjUxMjI0MjAwMDM5WjAzMTEwLwYDVQQD Eyg0YWM4ZWUwN2YzZjFkMDQ1NGExYWE4MGNiZjY0MTM1OGNiYTFlZGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshVtI8wTUYyJ/E6qJI8SzmbOXcwn z5EQD6JqyumTS3Kqj/UKN7Slt1V0UwkvrJ0qSX0IoRbH3W+O9vcH1eMZz0AUVg8d iRGH0yxgQy2CNwTPtqbDuVJh95++0XnLo+gra+9zKSJM/0hiSxJiTQTJlCsy808c c8gAtNXaefGzUGnOeVM5ZkmjkD/BBSexeivIDV2CD09s2AORBo3/dqUFAF8pJv5n 1hkCJgm8sOpVqrVXVnMYwprG9PK9xQTQuYYn7rvL00/FF4mRLQT/OvmkLbx4ia4W qbOO57hWcGYOvpe4+mXR+PQltd69BehZDNgewFD88P/S5uxxFI2/c4HF8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFErI7gfz8dBFShqoDL9kE1jLoe3DMB8GA1UdIwQY MBaAFGGIVWNeR5T1h447mF/tiTWuBsWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVloVlkxNUhsUFdIamp1WVgtMkpOYTRHeGFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iZjhiY2EtYzRhMC00MjlkLTlmNGQt MGViNmJiZjY1YjFmLzEvWVloVlkxNUhsUFdIamp1WVgtMkpOYTRHeGFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9iZjhiY2EtYzRhMC00MjlkLTlmNGQtMGViNmJiZjY1YjFm LzEvWVloVlkxNUhsUFdIamp1WVgtMkpOYTRHeGFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq6AiLcn6 gJlsf6d6tjCi7R957jVZ+Rwqls+v0Ldfjywk+H3VARLaefqc6csrvQMkk+yP4AYp YfnuZRHxEO4IHmLIGbHHqQs4g4dqlN1hVZHX6/so4SN8QRD0MoJshEZ4Zwdq1kLb ol+84RAIJXRkmvsh6JgvQFo7i846VBHYl5PaEzxVo3ENbfwurxQhdPThqapyKH9Z ZidL4ivg7VZGJNSIQUYnmqnjEkWnF1dGhSVs0YwxlBuFNw2NYBQ+bI1UYpYwRwoB E79kly3I9VPHot9OXSJcdfyhhh5Ab4FYQjzb9x34u9iyv7qyhLME+qJsn7F30gLU PfHYJJTCfM3fJQ== -----END CERTIFICATE-----Generated at Wed Dec 24 03:00:38 2025 by rpki-client