This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft File: YTeJ5zx1yrbYOradoyj8Lf-8kII.mft (raw, json) Hash identifier: g0S0wnIX+3SYdZkfObiqrIqFpnc11xmaEKw/F1Nm4wk= Subject key identifier: EB:76:A6:92:62:D8:94:5D:59:70:94:74:B3:E5:86:F9:26:10:3E:77 Authority key identifier: 61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82 Certificate issuer: /CN=613789e73c75cab6d83ab69da328fc2dffbc9082 Certificate serial: 019B3F4899E62F2010761474DD9831CD679E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft Manifest number: 148B Signing time: Sun 21 Dec 2025 05:01:21 +0000 Manifest this update: Sun 21 Dec 2025 05:01:21 +0000 Manifest next update: Mon 22 Dec 2025 05:01:21 +0000 Files and hashes: 1: YTeJ5zx1yrbYOradoyj8Lf-8kII.crl (hash: VOM5/OxfGLbsUiurfmxo8zZUXkyLlSMzaK3D2PnKAdw=) 2: ZrBT-LTKncMhVmd9eNZtlw1O86k.roa (hash: tAbiS/EvHuSlDvoKxib2aD63z2PVHysvpp62xqOjuZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:99:e6:2f:20:10:76:14:74:dd:98:31:cd:67:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=613789e73c75cab6d83ab69da328fc2dffbc9082 Validity Not Before: Dec 21 05:01:21 2025 GMT Not After : Dec 22 05:01:21 2025 GMT Subject: CN=eb76a69262d8945d59709474b3e586f926103e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:69:7e:98:d2:c7:fd:07:93:bd:16:4f:a4:63: d5:1b:56:27:fa:e2:74:5e:ba:c7:aa:6d:f7:c3:1a: 8b:6c:60:70:2a:d6:c9:a0:04:02:d0:51:d6:7b:74: cf:3d:3d:73:36:8d:73:b5:16:b4:f2:3b:59:14:85: bb:2e:d6:52:84:48:36:f9:30:66:07:c7:1d:3a:dd: 9a:1e:73:1d:8f:55:0f:1e:0e:0c:16:b9:30:be:76: a7:10:3c:ae:ab:2e:07:89:fb:e4:03:59:43:f3:d9: bc:6e:a5:7f:92:09:ed:d5:f9:df:ac:37:36:05:14: 75:c1:84:31:c1:3e:e8:fd:f1:a7:73:7b:d5:61:56: 6e:e6:65:39:c1:65:0a:d3:0a:95:ef:e4:47:93:a5: 8e:97:2d:7f:cf:56:f0:c3:46:06:b5:72:ff:16:16: 39:cf:a0:7c:c0:0e:68:ef:4f:16:b6:e8:b5:48:ea: f1:02:00:84:f2:a4:5b:86:30:06:93:d9:24:dc:39: 9d:ed:99:eb:7d:e1:5b:d5:84:a7:9f:96:56:1d:bd: 67:d8:ee:a1:ec:2a:6d:e0:48:8d:dc:6b:7f:bc:c6: 89:59:48:e3:91:ad:49:71:8b:11:0c:b7:21:4e:99: ff:6e:94:16:af:36:af:e3:5b:95:ec:b7:d0:59:0b: bf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:76:A6:92:62:D8:94:5D:59:70:94:74:B3:E5:86:F9:26:10:3E:77 X509v3 Authority Key Identifier: keyid:61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:cc:c3:e9:b2:0f:27:5a:0e:9b:dd:03:b8:7b:d9:9e:1b:bf: 1a:ce:bb:52:9d:2f:7d:12:5a:29:b1:60:57:61:7a:98:b9:05: 73:f7:44:6c:4c:9f:a8:f6:df:ee:ff:c5:4d:75:bf:48:6c:c1: a7:43:cd:8a:d8:b7:f4:8c:c9:aa:5c:b1:05:f1:9c:66:1a:90: b2:fc:20:d0:b1:53:d5:95:90:ab:24:bc:f1:17:9e:a4:65:6c: 5e:21:c9:c3:be:ba:da:e8:e5:61:1b:70:c9:91:a7:ff:cc:0e: 16:8a:70:e3:51:7f:6d:d3:13:84:f8:d7:c4:0c:95:9e:85:78: 26:11:94:05:d9:31:1d:5e:3c:67:e3:02:f1:d2:ba:34:d6:bc: 41:34:a8:2b:b6:ae:f6:1b:6e:d9:5c:4f:f9:c7:f9:ac:28:b5: 64:b3:ff:1e:92:5e:26:80:d4:d3:60:d8:8d:b0:60:dc:11:03: 08:e9:36:6e:c9:5c:04:36:8f:58:bb:8b:e8:b6:c9:a2:13:44: b4:1f:86:19:23:28:6e:46:f9:db:d3:9e:f3:af:02:cd:a9:81: 4b:2d:b8:83:b6:f9:29:7b:ea:3b:8a:35:be:1e:6a:13:9f:c6: db:2b:df:12:1e:c5:6f:a9:d4:e4:0a:fa:a0:bb:44:33:b9:2d: 9d:d8:91:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SJnmLyAQdhR03ZgxzWeeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMzc4OWU3M2M3NWNhYjZkODNhYjY5ZGEzMjhmYzJkZmZi YzkwODIwHhcNMjUxMjIxMDUwMTIxWhcNMjUxMjIyMDUwMTIxWjAzMTEwLwYDVQQD EyhlYjc2YTY5MjYyZDg5NDVkNTk3MDk0NzRiM2U1ODZmOTI2MTAzZTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGl+mNLH/QeTvRZPpGPVG1Yn+uJ0 XrrHqm33wxqLbGBwKtbJoAQC0FHWe3TPPT1zNo1ztRa08jtZFIW7LtZShEg2+TBm B8cdOt2aHnMdj1UPHg4MFrkwvnanEDyuqy4HifvkA1lD89m8bqV/kgnt1fnfrDc2 BRR1wYQxwT7o/fGnc3vVYVZu5mU5wWUK0wqV7+RHk6WOly1/z1bww0YGtXL/FhY5 z6B8wA5o708Wtui1SOrxAgCE8qRbhjAGk9kk3Dmd7ZnrfeFb1YSnn5ZWHb1n2O6h 7Cpt4EiN3Gt/vMaJWUjjka1JcYsRDLchTpn/bpQWrzav41uV7LfQWQu/SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOt2ppJi2JRdWXCUdLPlhvkmED53MB8GA1UdIwQY MBaAFGE3iec8dcq22Dq2naMo/C3/vJCCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVRlSjV6eDF5cmJZT3JhZG95ajhMZi04a0lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zYmFkNTItOTI0Ni00NzA5LWE2MTct YmQ5NDIzNzFjODZhLzEvWVRlSjV6eDF5cmJZT3JhZG95ajhMZi04a0lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8zYmFkNTItOTI0Ni00NzA5LWE2MTctYmQ5NDIzNzFjODZh LzEvWVRlSjV6eDF5cmJZT3JhZG95ajhMZi04a0lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADszD6bIP J1oOm90DuHvZnhu/Gs67Up0vfRJaKbFgV2F6mLkFc/dEbEyfqPbf7v/FTXW/SGzB p0PNiti39IzJqlyxBfGcZhqQsvwg0LFT1ZWQqyS88ReepGVsXiHJw7662ujlYRtw yZGn/8wOFopw41F/bdMThPjXxAyVnoV4JhGUBdkxHV48Z+MC8dK6NNa8QTSoK7au 9htu2VxP+cf5rCi1ZLP/HpJeJoDU02DYjbBg3BEDCOk2bslcBDaPWLuL6LbJohNE tB+GGSMobkb529Oe868CzamBSy24g7b5KXvqO4o1vh5qE5/G2yvfEh7Fb6nU5Ar6 oLtEM7ktndiR7g== -----END CERTIFICATE-----Generated at Sun Dec 21 07:24:28 2025 by rpki-client