This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft File: YEEHLuGhscBoQS37A1XSdZkyxfU.mft (raw, json) Hash identifier: YUg+xBZgnTccFVtaqbQTEc+MdGiHtkkSYpAkyajGKLY= Subject key identifier: F6:16:CD:7D:79:66:82:75:F1:EC:D0:BA:E3:15:E0:D3:49:8C:00:37 Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5 Certificate issuer: /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5 Certificate serial: 019B650C7B00D9071E4889CE692D7CC573F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft Manifest number: 0FF7 Signing time: Sun 28 Dec 2025 13:01:15 +0000 Manifest this update: Sun 28 Dec 2025 13:01:15 +0000 Manifest next update: Mon 29 Dec 2025 13:01:15 +0000 Files and hashes: 1: Vfen33v1zrF1U4W1eWwhHEsbqGA.roa (hash: w3PxgtpxD6a285bTjcEiEC6QMtVVhaLBfzodaIOYwng=) 2: YEEHLuGhscBoQS37A1XSdZkyxfU.crl (hash: FocaCJksRdHmXFGYu6hwAc0ANzJK4IgRqoSp7yluv64=) 3: zDAAlCK7aNqx_xV31r_7I0TLQt8.roa (hash: wCsE2W/8Vmk86XbGn3m0t7wCPnTYvf+LtPGnsGB75Q8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:0c:7b:00:d9:07:1e:48:89:ce:69:2d:7c:c5:73:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5 Validity Not Before: Dec 28 13:01:15 2025 GMT Not After : Dec 29 13:01:15 2025 GMT Subject: CN=f616cd7d79668275f1ecd0bae315e0d3498c0037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2f:38:4d:68:b0:de:9e:84:49:28:f2:3a:e6: a2:fa:b6:26:fc:e8:65:2a:45:09:d2:1e:c8:95:90: d0:4e:1f:a6:af:9c:d2:15:26:66:45:09:7f:b7:ad: b5:10:24:b1:5b:7c:56:24:3a:39:5c:2e:be:6d:4a: 0e:e4:e4:af:18:f2:39:3d:1d:69:1e:74:07:5f:d6: b4:0c:bc:1b:9c:5d:9e:f3:45:63:06:8b:1f:22:cf: a2:7d:00:f2:12:5e:12:a0:43:c8:58:8d:8e:bb:42: de:2b:b4:9d:e2:21:df:54:2f:ee:41:f4:e9:1a:78: 75:be:36:52:b6:eb:12:b3:94:08:70:f2:bc:47:71: 4f:98:93:f9:11:36:72:cb:bf:8b:bd:2f:5e:5a:83: 76:74:68:ba:c5:f6:f0:a6:78:f5:7f:95:ad:f7:b5: cf:44:e6:b2:b5:cb:4c:6c:44:2d:44:14:a3:e4:79: 56:78:5e:6f:9c:fe:db:fd:ef:3e:ea:a0:5e:d1:76: 8a:79:63:5c:56:48:f9:3a:70:26:3a:cb:37:ff:28: 3f:20:5c:8c:aa:df:dd:b2:c7:55:71:7f:82:de:d8: e5:7f:42:e5:ce:91:62:c5:a7:ea:e7:c8:be:e4:ff: fe:b7:cb:89:71:78:85:fe:14:45:a7:66:df:2a:ff: fd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:16:CD:7D:79:66:82:75:F1:EC:D0:BA:E3:15:E0:D3:49:8C:00:37 X509v3 Authority Key Identifier: keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:fc:3e:04:89:66:2d:d6:4a:b1:2f:80:64:e4:ea:07:47:74: 9c:9d:5e:4c:50:51:b3:f3:86:95:5a:34:6a:b0:d1:74:8d:0b: 4a:e1:70:cd:56:45:df:3d:09:51:15:66:4c:cd:f5:7f:cd:f4: 26:f4:b1:57:37:de:8f:62:58:33:9f:36:50:33:96:69:ba:64: 97:f3:16:ac:04:3f:3a:3d:ac:7a:69:62:21:59:53:d3:a1:26: 2c:a0:8e:0f:63:fa:af:1f:56:2b:43:39:6c:6a:42:ab:4f:9d: 5b:02:83:a2:44:f7:3f:b0:c9:ee:9e:0a:de:7b:9e:67:50:29: 14:5d:31:77:09:7f:58:47:97:30:36:d4:a7:b8:6f:81:f0:bf: c5:63:c0:8e:a1:6c:ec:c2:a3:5a:4c:e7:79:50:e0:94:1c:f1: 50:5f:ec:f8:23:f8:7e:5b:c5:4e:88:21:14:8b:22:24:5c:db: 9f:f5:d1:d9:55:97:4a:68:d1:a1:f9:05:02:e4:45:12:04:36: 5d:fd:9e:76:10:1d:74:77:9c:b4:9d:b6:d1:fb:d9:84:22:fd: 0b:03:2b:34:88:52:86:2c:ee:40:90:af:0d:df:f1:e9:62:e1: 60:bb:8b:03:a6:2e:20:cd:c5:6e:f8:25:89:9b:27:48:ed:c7: b7:71:aa:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlDHsA2QceSInOaS18xXP2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNDEwNzJlZTFhMWIxYzA2ODQxMmRmYjAzNTVkMjc1OTkz MmM1ZjUwHhcNMjUxMjI4MTMwMTE1WhcNMjUxMjI5MTMwMTE1WjAzMTEwLwYDVQQD EyhmNjE2Y2Q3ZDc5NjY4Mjc1ZjFlY2QwYmFlMzE1ZTBkMzQ5OGMwMDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi84TWiw3p6ESSjyOuai+rYm/Ohl KkUJ0h7IlZDQTh+mr5zSFSZmRQl/t621ECSxW3xWJDo5XC6+bUoO5OSvGPI5PR1p HnQHX9a0DLwbnF2e80VjBosfIs+ifQDyEl4SoEPIWI2Ou0LeK7Sd4iHfVC/uQfTp Gnh1vjZStusSs5QIcPK8R3FPmJP5ETZyy7+LvS9eWoN2dGi6xfbwpnj1f5Wt97XP ROaytctMbEQtRBSj5HlWeF5vnP7b/e8+6qBe0XaKeWNcVkj5OnAmOss3/yg/IFyM qt/dssdVcX+C3tjlf0LlzpFixafq58i+5P/+t8uJcXiF/hRFp2bfKv/90wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPYWzX15ZoJ18ezQuuMV4NNJjAA3MB8GA1UdIwQY MBaAFGBBBy7hobHAaEEt+wNV0nWZMsX1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUVFSEx1R2hzY0JvUVMzN0ExWFNkWmt5eGZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84ZGZhMzAtMmE4NS00YjQ2LTk1MzMt NGQ1Zjc2MzdlZmNlLzEvWUVFSEx1R2hzY0JvUVMzN0ExWFNkWmt5eGZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84ZGZhMzAtMmE4NS00YjQ2LTk1MzMtNGQ1Zjc2MzdlZmNl LzEvWUVFSEx1R2hzY0JvUVMzN0ExWFNkWmt5eGZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvw+BIlm LdZKsS+AZOTqB0d0nJ1eTFBRs/OGlVo0arDRdI0LSuFwzVZF3z0JURVmTM31f830 JvSxVzfej2JYM582UDOWabpkl/MWrAQ/Oj2semliIVlT06EmLKCOD2P6rx9WK0M5 bGpCq0+dWwKDokT3P7DJ7p4K3nueZ1ApFF0xdwl/WEeXMDbUp7hvgfC/xWPAjqFs 7MKjWkzneVDglBzxUF/s+CP4flvFToghFIsiJFzbn/XR2VWXSmjRofkFAuRFEgQ2 Xf2edhAddHectJ220fvZhCL9CwMrNIhShizuQJCvDd/x6WLhYLuLA6YuIM3Fbvgl iZsnSO3Ht3Gq0A== -----END CERTIFICATE-----Generated at Sun Dec 28 20:15:13 2025 by rpki-client