This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft File: YUtw_5wi_-C3f0P0HAgHTebzbhs.mft (raw, json) Hash identifier: RexHFJbcJcKKmlTOrI86oy3tAQ+alUSBOiY4KLYg6c8= Subject key identifier: 24:12:35:74:43:04:44:EC:03:42:19:17:9A:F7:44:E2:2A:D5:C3:4E Authority key identifier: 61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B Certificate issuer: /CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b Certificate serial: 019B50731CAF258931A53A6AC466835DD149 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 13:01:19 +0000 Manifest this update: Wed 24 Dec 2025 13:01:19 +0000 Manifest next update: Thu 25 Dec 2025 13:01:19 +0000 Files and hashes: 1: 3CApeUyJD6bQwRWKiM1EMQF3kvY.roa (hash: ybH4Bx/zM0Uzd/7q3lf5ZQTsjL4RIUspa20ZvnQgIGU=) 2: YUtw_5wi_-C3f0P0HAgHTebzbhs.crl (hash: bL9GvAmTY4vgrNz8Nj1OjyyTXKTi9R+2v17AJmuUAo4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:73:1c:af:25:89:31:a5:3a:6a:c4:66:83:5d:d1:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b Validity Not Before: Dec 24 13:01:19 2025 GMT Not After : Dec 25 13:01:19 2025 GMT Subject: CN=24123574430444ec034219179af744e22ad5c34e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:78:ad:4c:79:80:df:47:1e:f2:f6:ab:e1:5e: c1:45:05:69:f7:9e:f9:43:1c:55:cd:15:45:0b:74: 53:f0:4f:a4:25:52:86:74:4f:25:50:b7:c9:80:d7: de:d1:f9:33:aa:47:54:f4:c2:58:8e:86:57:86:d5: ae:82:22:7b:c9:16:a8:08:1b:fb:c2:cb:f3:c0:14: 06:a9:e5:d6:6b:98:86:92:a5:0c:95:7c:e6:26:88: 30:a9:ef:d7:47:7e:e7:61:7d:92:fb:9c:18:a0:a5: 2b:a0:b1:9a:51:8e:33:98:6b:18:17:fd:90:6e:83: 18:2f:26:0d:5c:49:5b:6b:9b:c3:3c:ec:48:21:85: 5d:1a:31:6f:b3:79:34:32:e9:80:bb:c2:6b:7b:c6: 70:c0:40:37:55:c6:d1:4b:a9:ed:88:c8:a5:be:d9: ea:5c:ba:2c:04:b5:0c:4f:33:96:b3:4d:c9:07:0c: b1:bf:35:b7:ed:b4:36:85:8e:62:49:5c:bd:ad:54: 1a:1d:da:d1:35:71:92:9e:74:86:8c:39:01:28:73: 9e:d8:29:63:e9:7c:a3:52:20:bd:2c:43:f0:a8:8b: 32:81:b5:d9:85:95:1c:31:b6:43:aa:44:8b:d1:d0: e0:b7:ec:6d:f2:7b:7e:0d:26:2d:5f:e2:9a:fc:f5: 58:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:12:35:74:43:04:44:EC:03:42:19:17:9A:F7:44:E2:2A:D5:C3:4E X509v3 Authority Key Identifier: keyid:61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:ab:46:8e:83:67:f4:08:fb:16:dd:34:4a:b2:d4:f4:9f:11: ee:46:bc:45:3a:ba:a4:8a:14:54:02:c1:e5:3d:39:92:41:6a: 26:28:fd:e4:1d:4b:d6:99:d6:7f:05:f5:77:fd:1b:d6:ce:9d: 40:2e:3d:e8:78:58:c4:26:8c:f8:f5:56:b2:24:ff:ed:ad:6f: 4b:7a:8b:b7:4e:21:b9:dd:dd:29:46:34:fc:44:29:91:60:db: 03:62:b1:ca:96:3d:aa:44:42:23:87:bd:35:37:6e:50:f1:13: bd:1e:a8:9a:67:d0:b8:6b:b8:da:5b:0d:aa:ff:51:32:70:cc: 60:10:7d:55:ba:0b:e4:e6:cf:38:17:da:9b:fc:0c:38:92:9f: 52:1a:9c:a9:fb:83:a6:80:b6:25:9a:02:91:1f:9e:5a:0c:0c: 7e:3e:c4:35:37:6d:1d:0a:18:6d:51:f1:e9:9f:b1:5a:b3:88: d9:e5:be:9a:52:ae:8b:b7:0a:e5:46:4b:16:b5:59:0e:d6:55: b5:83:1d:71:08:c7:22:1c:e8:ce:ac:84:98:f1:02:be:62:96: 95:51:f9:ae:a2:1a:9d:09:cf:23:18:7a:ce:58:fe:f5:b4:67: 20:0e:8c:9d:00:d5:91:14:e9:fe:33:96:9f:a6:c0:2d:f7:e5: ad:fb:80:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcxyvJYkxpTpqxGaDXdFJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNGI3MGZmOWMyMmZmZTBiNzdmNDNmNDFjMDgwNzRkZTZm MzZlMWIwHhcNMjUxMjI0MTMwMTE5WhcNMjUxMjI1MTMwMTE5WjAzMTEwLwYDVQQD EygyNDEyMzU3NDQzMDQ0NGVjMDM0MjE5MTc5YWY3NDRlMjJhZDVjMzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3itTHmA30ce8var4V7BRQVp9575 QxxVzRVFC3RT8E+kJVKGdE8lULfJgNfe0fkzqkdU9MJYjoZXhtWugiJ7yRaoCBv7 wsvzwBQGqeXWa5iGkqUMlXzmJogwqe/XR37nYX2S+5wYoKUroLGaUY4zmGsYF/2Q boMYLyYNXElba5vDPOxIIYVdGjFvs3k0MumAu8Jre8ZwwEA3VcbRS6ntiMilvtnq XLosBLUMTzOWs03JBwyxvzW37bQ2hY5iSVy9rVQaHdrRNXGSnnSGjDkBKHOe2Clj 6XyjUiC9LEPwqIsygbXZhZUcMbZDqkSL0dDgt+xt8nt+DSYtX+Ka/PVYWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQSNXRDBETsA0IZF5r3ROIq1cNOMB8GA1UdIwQY MBaAFGFLcP+cIv/gt39D9BwIB03m824bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVV0d181d2lfLUMzZjBQMEhBZ0hUZWJ6YmhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NzFmMTctMGJmOC00YmExLWI3Njgt NTVmZWMxMjUyYWIwLzEvWVV0d181d2lfLUMzZjBQMEhBZ0hUZWJ6YmhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi85NzFmMTctMGJmOC00YmExLWI3NjgtNTVmZWMxMjUyYWIw LzEvWVV0d181d2lfLUMzZjBQMEhBZ0hUZWJ6YmhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlatGjoNn 9Aj7Ft00SrLU9J8R7ka8RTq6pIoUVALB5T05kkFqJij95B1L1pnWfwX1d/0b1s6d QC496HhYxCaM+PVWsiT/7a1vS3qLt04hud3dKUY0/EQpkWDbA2KxypY9qkRCI4e9 NTduUPETvR6ommfQuGu42lsNqv9RMnDMYBB9VboL5ObPOBfam/wMOJKfUhqcqfuD poC2JZoCkR+eWgwMfj7ENTdtHQoYbVHx6Z+xWrOI2eW+mlKui7cK5UZLFrVZDtZV tYMdcQjHIhzozqyEmPECvmKWlVH5rqIanQnPIxh6zlj+9bRnIA6MnQDVkRTp/jOW n6bALfflrfuAGA== -----END CERTIFICATE-----Generated at Wed Dec 24 18:06:51 2025 by rpki-client