This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft File: Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft (raw, json) Hash identifier: z7HnErMkdEnMnmkE6Bz3X44HVm9cIVRKJJPXM/Iem/8= Subject key identifier: 2B:7A:85:E3:C8:92:4B:F0:26:90:67:C3:CA:53:9B:7F:D5:F7:B1:C5 Authority key identifier: 61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01 Certificate issuer: /CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401 Certificate serial: 019B5298429DE63ABB40457D9D818661CF15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft Manifest number: 1057 Signing time: Wed 24 Dec 2025 23:01:08 +0000 Manifest this update: Wed 24 Dec 2025 23:01:08 +0000 Manifest next update: Thu 25 Dec 2025 23:01:08 +0000 Files and hashes: 1: LjdJyg2i9vGZpm7VXPwBOMCSEiw.roa (hash: MZ/fbmAB50oT4J+U1xzh08P+Raln/5z9YHMJGvIm1Zg=) 2: Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl (hash: NN+gHlFpgGge+Ju38cSdfvLbiVFIP1IvuIwcQrqPSCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:42:9d:e6:3a:bb:40:45:7d:9d:81:86:61:cf:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401 Validity Not Before: Dec 24 23:01:08 2025 GMT Not After : Dec 25 23:01:08 2025 GMT Subject: CN=2b7a85e3c8924bf0269067c3ca539b7fd5f7b1c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:47:4e:98:76:1d:14:45:4d:1d:ae:76:22:e4: ac:52:8d:45:77:ae:66:cb:c8:c2:71:d8:82:bc:cc: bd:31:47:4b:7f:ed:82:f3:4d:e3:e0:b5:cc:49:b4: 54:76:e7:10:2a:73:e3:3b:64:a7:42:19:b4:a0:fd: 78:3a:1b:e3:19:7e:f3:97:2d:f3:a0:ce:d0:31:65: 4b:3c:26:b7:c1:32:57:57:f2:10:b6:9c:5e:9c:2d: 86:e4:05:24:bb:01:4c:94:35:b0:0b:0d:6e:05:19: 72:67:09:5a:a3:4d:ca:cc:a2:ea:44:9e:79:9d:ae: 0f:e6:26:32:1c:71:7c:06:d4:ec:fe:36:11:92:f9: ff:43:15:13:04:43:50:5d:21:13:39:0b:32:6c:c6: 5e:c9:49:b8:f9:e4:d3:2c:90:62:6e:15:fc:ce:f2: 84:fe:40:0a:f1:31:cb:42:b3:69:a1:26:bd:7e:d3: 30:e8:91:c8:89:9b:64:94:b4:4a:0e:52:4d:15:36: 98:b9:8d:57:8b:35:c4:b0:6d:47:f7:e1:ca:cb:d9: 7f:1c:c8:2e:9e:8a:69:a9:4d:89:28:ad:7e:c4:78: 82:ef:7a:ae:35:13:30:b9:b0:83:95:f7:46:d4:30: 46:74:42:26:da:a8:7e:b5:55:73:86:96:21:97:41: 77:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7A:85:E3:C8:92:4B:F0:26:90:67:C3:CA:53:9B:7F:D5:F7:B1:C5 X509v3 Authority Key Identifier: keyid:61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:89:0e:a2:61:14:b7:55:a4:4d:47:68:9c:bb:40:ce:c5:e8: 48:8c:73:97:f8:55:87:08:d1:f4:40:e8:bb:0c:5c:fc:93:77: 1e:2e:81:92:52:af:8d:bf:d3:33:c0:f3:9a:96:f4:a5:69:43: f3:b2:5f:39:3a:6f:de:45:f9:00:6b:eb:fd:de:b9:41:a0:2f: 8a:06:57:fa:d0:48:17:51:06:7a:29:62:7d:cf:c5:db:17:00: 68:06:e2:54:d1:41:68:ee:21:2a:c6:1b:c9:c5:3f:d3:4e:1d: 73:38:64:0e:ca:64:6c:85:55:f2:f4:32:2a:71:af:4d:2e:78: ec:0b:88:41:9d:d4:76:9d:89:49:b6:80:bb:67:09:65:67:3f: 0d:a6:0f:17:e1:a1:f8:30:c5:45:aa:a3:61:53:ac:33:de:2c: da:0a:4f:13:a9:b8:0c:f0:0e:7a:01:25:44:2a:a3:32:2d:52: 28:f0:93:85:75:4f:1b:b8:ec:1e:5d:a1:ba:74:71:0d:27:72: 46:26:fd:e3:23:51:3e:63:5d:7c:87:0d:20:a0:e8:88:8a:80: 43:a7:84:50:b1:f0:e2:38:46:dc:02:8f:7b:4b:35:7f:55:b6: 8e:3c:f2:be:28:60:c9:12:1f:ae:f5:60:6f:7c:9a:99:ac:f3: e5:9d:a7:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmEKd5jq7QEV9nYGGYc8VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxY2UyZTU3ZjZmODYyY2EzMDU2ZTVmZDViM2U2ZWFjMzU1 NDA0MDEwHhcNMjUxMjI0MjMwMTA4WhcNMjUxMjI1MjMwMTA4WjAzMTEwLwYDVQQD EygyYjdhODVlM2M4OTI0YmYwMjY5MDY3YzNjYTUzOWI3ZmQ1ZjdiMWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0dOmHYdFEVNHa52IuSsUo1Fd65m y8jCcdiCvMy9MUdLf+2C803j4LXMSbRUducQKnPjO2SnQhm0oP14OhvjGX7zly3z oM7QMWVLPCa3wTJXV/IQtpxenC2G5AUkuwFMlDWwCw1uBRlyZwlao03KzKLqRJ55 na4P5iYyHHF8BtTs/jYRkvn/QxUTBENQXSETOQsybMZeyUm4+eTTLJBibhX8zvKE /kAK8THLQrNpoSa9ftMw6JHIiZtklLRKDlJNFTaYuY1XizXEsG1H9+HKy9l/HMgu noppqU2JKK1+xHiC73quNRMwubCDlfdG1DBGdEIm2qh+tVVzhpYhl0F3xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCt6hePIkkvwJpBnw8pTm3/V97HFMB8GA1UdIwQY MBaAFGHOLlf2+GLKMFbl/Vs+bqw1VAQBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWM0dVZfYjRZc293VnVYOVd6NXVyRFZVQkFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84NzYyMDMtZThmZC00NzJmLWFmYzIt OTkwMzg1NTU5ZDFjLzEvWWM0dVZfYjRZc293VnVYOVd6NXVyRFZVQkFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC84NzYyMDMtZThmZC00NzJmLWFmYzItOTkwMzg1NTU5ZDFj LzEvWWM0dVZfYjRZc293VnVYOVd6NXVyRFZVQkFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4kOomEU t1WkTUdonLtAzsXoSIxzl/hVhwjR9EDouwxc/JN3Hi6BklKvjb/TM8Dzmpb0pWlD 87JfOTpv3kX5AGvr/d65QaAvigZX+tBIF1EGeilifc/F2xcAaAbiVNFBaO4hKsYb ycU/004dczhkDspkbIVV8vQyKnGvTS547AuIQZ3Udp2JSbaAu2cJZWc/DaYPF+Gh +DDFRaqjYVOsM94s2gpPE6m4DPAOegElRCqjMi1SKPCThXVPG7jsHl2hunRxDSdy Rib94yNRPmNdfIcNIKDoiIqAQ6eEULHw4jhG3AKPe0s1f1W2jjzyvihgyRIfrvVg b3yamazz5Z2npg== -----END CERTIFICATE-----Generated at Thu Dec 25 03:24:54 2025 by rpki-client