This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft File: Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft (raw, json) Hash identifier: yGjbQnkdd3lCI5w3VD/j0Yxf5z8eqReDqd5amARDj6c= Subject key identifier: 4E:50:CD:E8:EF:7F:5B:AA:DD:34:B4:11:43:71:5A:6F:98:47:01:B3 Authority key identifier: 63:3B:68:95:FE:49:93:39:7B:66:23:2B:B0:A2:D3:E3:C6:25:CC:1B Certificate issuer: /CN=633b6895fe4993397b66232bb0a2d3e3c625cc1b Certificate serial: 019B53AB07941F4FF777518B7979F93262E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft Manifest number: 11AF Signing time: Thu 25 Dec 2025 04:01:16 +0000 Manifest this update: Thu 25 Dec 2025 04:01:16 +0000 Manifest next update: Fri 26 Dec 2025 04:01:16 +0000 Files and hashes: 1: YFIa0scc_xVUT5FKi7LKvASoEWc.roa (hash: V1CwEQLm9iXZGzptcaHc4LFmcOryBT2Kfmx1HSv4RTc=) 2: Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl (hash: d1+OXi+MYx/EKbtBS35zwdLuAsbHHUU5fa9/PhdZeS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:07:94:1f:4f:f7:77:51:8b:79:79:f9:32:62:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633b6895fe4993397b66232bb0a2d3e3c625cc1b Validity Not Before: Dec 25 04:01:16 2025 GMT Not After : Dec 26 04:01:16 2025 GMT Subject: CN=4e50cde8ef7f5baadd34b41143715a6f984701b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8f:6c:f0:bc:b9:8c:10:be:27:d9:05:ed:9f: ab:b2:8f:ab:7e:26:6e:bd:81:33:e7:4e:82:85:63: 20:10:12:8a:f1:0b:81:71:3e:76:eb:9d:12:8a:32: 52:71:83:d2:ac:e2:62:29:36:e6:b8:b9:0f:ed:34: 0c:f2:71:60:d7:75:9e:2f:1d:42:83:db:a3:d6:13: 6e:94:c6:f1:cb:81:9b:10:54:eb:95:c0:ef:5d:c4: ae:3a:78:a1:bc:b9:69:83:b5:cc:40:c5:2c:37:51: ec:da:75:e3:16:2b:64:de:18:e3:6b:e0:62:d7:99: 99:f5:f5:38:14:4e:73:7b:8a:53:8e:66:31:29:46: 02:ea:8c:59:1b:e7:30:a1:95:4e:d6:ee:28:3e:c5: fb:ba:1e:62:7e:15:c0:8d:32:4b:f5:2f:e5:49:a3: b4:ef:49:bc:39:9f:90:3e:3f:ff:c5:97:69:0e:01: df:18:94:0f:a5:9d:49:d7:06:e1:81:b5:fc:f2:90: f5:04:69:73:e1:91:85:2d:67:ae:23:0f:43:87:80: e5:78:61:47:d1:50:aa:83:7f:2d:fc:b0:d9:d4:a7: bd:4e:f8:e3:a8:ec:31:d4:be:d4:61:80:ad:93:a8: 1a:f3:07:a6:36:d7:e0:af:1d:99:1b:d4:52:ef:63: b3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:50:CD:E8:EF:7F:5B:AA:DD:34:B4:11:43:71:5A:6F:98:47:01:B3 X509v3 Authority Key Identifier: keyid:63:3B:68:95:FE:49:93:39:7B:66:23:2B:B0:A2:D3:E3:C6:25:CC:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:8d:0b:90:34:4a:01:65:ff:cf:ed:e1:cf:c0:ab:84:b2:ff: 77:03:93:52:72:d5:b5:68:db:2f:8f:7e:41:39:53:67:7a:51: 22:e4:51:bc:3a:b4:f1:53:e8:f9:ff:b1:de:c5:c4:02:74:04: 8e:2d:16:16:cf:6c:97:d5:4d:31:29:85:98:b3:6d:73:a2:50: c8:fc:d2:a4:85:5a:89:d8:35:b8:9e:28:b7:83:7e:83:2a:3d: c7:20:32:96:74:94:7d:ab:18:47:39:25:76:d1:09:5b:45:f9: cd:0b:ab:57:04:3c:7d:fb:af:86:5a:37:8b:c9:41:75:e0:9e: 39:0f:7c:a6:0c:5e:53:26:2d:58:09:3a:49:99:0b:f9:ac:3b: bf:b7:a8:4d:40:01:d6:8f:cb:36:ba:01:8b:0b:a2:06:bb:c8: fb:6d:d9:a7:f7:59:03:29:95:33:86:50:9b:85:90:06:37:28: 13:43:73:b7:42:47:2e:08:15:e2:d2:80:57:36:0a:48:ac:29: ba:bf:b9:50:e8:86:b1:4d:62:a6:32:87:b6:c9:2e:86:e9:f7: 99:cf:a9:f6:ce:0b:eb:bf:26:3c:6d:cb:46:dd:91:b7:66:2b: f0:43:5e:f1:3e:6c:9a:66:ff:42:f7:a8:92:17:13:a5:e1:ad: e5:85:f1:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqweUH0/3d1GLeXn5MmLhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzM2I2ODk1ZmU0OTkzMzk3YjY2MjMyYmIwYTJkM2UzYzYy NWNjMWIwHhcNMjUxMjI1MDQwMTE2WhcNMjUxMjI2MDQwMTE2WjAzMTEwLwYDVQQD Eyg0ZTUwY2RlOGVmN2Y1YmFhZGQzNGI0MTE0MzcxNWE2Zjk4NDcwMWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Y9s8Ly5jBC+J9kF7Z+rso+rfiZu vYEz506ChWMgEBKK8QuBcT52650SijJScYPSrOJiKTbmuLkP7TQM8nFg13WeLx1C g9uj1hNulMbxy4GbEFTrlcDvXcSuOnihvLlpg7XMQMUsN1Hs2nXjFitk3hjja+Bi 15mZ9fU4FE5ze4pTjmYxKUYC6oxZG+cwoZVO1u4oPsX7uh5ifhXAjTJL9S/lSaO0 70m8OZ+QPj//xZdpDgHfGJQPpZ1J1wbhgbX88pD1BGlz4ZGFLWeuIw9Dh4DleGFH 0VCqg38t/LDZ1Ke9TvjjqOwx1L7UYYCtk6ga8wemNtfgrx2ZG9RS72OzxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE5Qzejvf1uq3TS0EUNxWm+YRwGzMB8GA1UdIwQY MBaAFGM7aJX+SZM5e2YjK7Ci0+PGJcwbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXp0b2xmNUpremw3WmlNcnNLTFQ0OFlsekJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yZmM0MGEtNTVlMy00YWJhLTkxYjUt NzBiODg3MWI4ZTIwLzEvWXp0b2xmNUpremw3WmlNcnNLTFQ0OFlsekJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yZmM0MGEtNTVlMy00YWJhLTkxYjUtNzBiODg3MWI4ZTIw LzEvWXp0b2xmNUpremw3WmlNcnNLTFQ0OFlsekJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsI0LkDRK AWX/z+3hz8CrhLL/dwOTUnLVtWjbL49+QTlTZ3pRIuRRvDq08VPo+f+x3sXEAnQE ji0WFs9sl9VNMSmFmLNtc6JQyPzSpIVaidg1uJ4ot4N+gyo9xyAylnSUfasYRzkl dtEJW0X5zQurVwQ8ffuvhlo3i8lBdeCeOQ98pgxeUyYtWAk6SZkL+aw7v7eoTUAB 1o/LNroBiwuiBrvI+23Zp/dZAymVM4ZQm4WQBjcoE0Nzt0JHLggV4tKAVzYKSKwp ur+5UOiGsU1ipjKHtskuhun3mc+p9s4L678mPG3LRt2Rt2Yr8ENe8T5smmb/Qveo khcTpeGt5YXxLw== -----END CERTIFICATE-----Generated at Thu Dec 25 11:04:14 2025 by rpki-client