This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft File: YVDKG6-fn2_hPYniZkRwST_mXmU.mft (raw, json) Hash identifier: nZBURuyqKQuuwebFttHoeJJAc/vjzoPA9rVPWJYlIlY= Subject key identifier: 5C:53:E7:F2:7B:EE:55:ED:3C:11:A4:1F:F9:06:F8:24:97:92:B2:B9 Authority key identifier: 61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65 Certificate issuer: /CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65 Certificate serial: 019B4438E46B69737333C5442DBF526D3E92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft Manifest number: 1791 Signing time: Mon 22 Dec 2025 04:02:17 +0000 Manifest this update: Mon 22 Dec 2025 04:02:17 +0000 Manifest next update: Tue 23 Dec 2025 04:02:17 +0000 Files and hashes: 1: K1-fBiboHS-GQ6ErDJdUiH-rY_I.roa (hash: AOJaEckufNSu4V7SdBMyiCpYmSZ+CDZ6Okor58DXN7s=) 2: YVDKG6-fn2_hPYniZkRwST_mXmU.crl (hash: sAfN8p9Smlm/edxTwglr5eJXceLT/K/pXNMIVVLLGMo=) 3: nfREQDaYK_u_RRzhJTauvf2Y8ak.roa (hash: NLnHR9EroQCyhWmQwjRMOzrKCez85XwXecl2W6KaGHY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:e4:6b:69:73:73:33:c5:44:2d:bf:52:6d:3e:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65 Validity Not Before: Dec 22 04:02:17 2025 GMT Not After : Dec 23 04:02:17 2025 GMT Subject: CN=5c53e7f27bee55ed3c11a41ff906f8249792b2b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f2:36:ec:ee:4d:d1:a6:63:7b:2f:f6:c1:d6: c4:47:f6:a7:17:a6:f2:a8:e7:6f:b6:74:1d:7b:3f: 7c:23:d6:9e:94:42:bd:82:40:73:9d:69:5d:70:aa: 46:cf:72:fe:ac:ce:8e:a1:7e:3c:ad:10:96:75:96: 31:b1:d9:12:bf:1e:5a:76:29:45:91:04:90:67:56: 09:54:f3:40:e7:c2:1d:29:57:4f:f9:0f:70:fe:19: 67:3c:35:48:40:86:5e:37:83:df:d4:d1:78:16:ae: d5:4f:f6:83:7b:87:27:d5:bc:ae:a9:75:95:ec:53: 5c:f9:a8:62:e8:58:e8:9d:7f:98:98:fc:aa:df:a1: 2a:66:5f:23:20:df:69:15:8a:64:15:af:52:88:de: d4:e6:06:f2:68:25:8d:ef:50:42:11:36:07:33:cf: bd:4b:e2:d0:c0:af:34:e2:a1:48:f2:33:a3:70:51: f3:d1:98:a4:85:ef:7a:f0:b9:63:df:ea:9c:be:1a: 19:c8:12:b0:58:f7:c3:9f:2f:e3:3e:1d:27:e8:44: 19:3f:c7:0c:b9:ad:50:69:5c:a6:c9:4c:0c:50:ed: 07:2c:f1:84:0a:50:d1:55:69:8f:fc:c0:ff:c6:25: 10:db:02:ff:20:6e:7d:47:4f:77:dc:4c:11:cc:70: b5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:53:E7:F2:7B:EE:55:ED:3C:11:A4:1F:F9:06:F8:24:97:92:B2:B9 X509v3 Authority Key Identifier: keyid:61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d2:ad:52:60:c0:df:9f:fa:d2:eb:d5:e5:4b:ef:6f:e3:9c: e8:b7:51:cb:a2:d5:e3:03:dd:45:5b:07:2d:69:82:db:a3:14: 41:e0:52:e1:94:66:ea:56:92:7e:2e:69:06:e7:17:79:fa:78: 41:49:32:aa:50:26:f1:ca:b3:b5:39:ff:2d:69:fc:fa:ad:50: e6:d2:c4:2d:e3:56:15:56:ad:f8:3a:bd:fa:23:8d:df:3c:68: 5d:18:96:b5:9e:31:bf:07:eb:53:b3:ee:8c:2f:12:6e:ee:c2: c2:26:f9:5d:9b:98:a6:cf:85:f9:49:c8:67:3d:c0:6a:e7:6f: 13:92:36:b7:15:ac:b6:59:03:b3:a2:b3:78:ba:20:d2:e4:ef: 5f:ef:8b:33:00:87:ff:30:e1:7b:91:b5:96:4e:db:cd:55:f4: c4:07:52:49:8c:93:90:c8:dd:e0:30:73:d1:82:07:51:3e:65: a7:b7:ce:06:ad:69:dd:66:23:e0:31:a4:0e:8d:09:b0:a3:5f: 23:de:6d:6a:0b:80:3b:c5:48:5e:48:c0:73:9c:11:5c:8a:af: f4:25:f2:d0:6f:33:6b:93:c9:f8:52:7d:76:e2:35:56:d4:96: f6:d5:6f:f1:4a:98:1e:5a:74:93:f8:bb:48:75:a7:cf:37:8d: 68:e3:19:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOORraXNzM8VELb9SbT6SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNTBjYTFiYWY5ZjlmNmZlMTNkODllMjY2NDQ3MDQ5M2Zl NjVlNjUwHhcNMjUxMjIyMDQwMjE3WhcNMjUxMjIzMDQwMjE3WjAzMTEwLwYDVQQD Eyg1YzUzZTdmMjdiZWU1NWVkM2MxMWE0MWZmOTA2ZjgyNDk3OTJiMmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvI27O5N0aZjey/2wdbER/anF6by qOdvtnQdez98I9aelEK9gkBznWldcKpGz3L+rM6OoX48rRCWdZYxsdkSvx5adilF kQSQZ1YJVPNA58IdKVdP+Q9w/hlnPDVIQIZeN4Pf1NF4Fq7VT/aDe4cn1byuqXWV 7FNc+ahi6FjonX+YmPyq36EqZl8jIN9pFYpkFa9SiN7U5gbyaCWN71BCETYHM8+9 S+LQwK804qFI8jOjcFHz0Zikhe968Llj3+qcvhoZyBKwWPfDny/jPh0n6EQZP8cM ua1QaVymyUwMUO0HLPGEClDRVWmP/MD/xiUQ2wL/IG59R0933EwRzHC1OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFxT5/J77lXtPBGkH/kG+CSXkrK5MB8GA1UdIwQY MBaAFGFQyhuvn59v4T2J4mZEcEk/5l5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVZES0c2LWZuMl9oUFluaVprUndTVF9tWG1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC81NTE0MzctOTg3Zi00OGQ0LWFhMGUt OTQ3ZWFkOWYxNGVkLzEvWVZES0c2LWZuMl9oUFluaVprUndTVF9tWG1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC81NTE0MzctOTg3Zi00OGQ0LWFhMGUtOTQ3ZWFkOWYxNGVk LzEvWVZES0c2LWZuMl9oUFluaVprUndTVF9tWG1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfNKtUmDA 35/60uvV5Uvvb+Oc6LdRy6LV4wPdRVsHLWmC26MUQeBS4ZRm6laSfi5pBucXefp4 QUkyqlAm8cqztTn/LWn8+q1Q5tLELeNWFVat+Dq9+iON3zxoXRiWtZ4xvwfrU7Pu jC8Sbu7Cwib5XZuYps+F+UnIZz3AaudvE5I2txWstlkDs6KzeLog0uTvX++LMwCH /zDhe5G1lk7bzVX0xAdSSYyTkMjd4DBz0YIHUT5lp7fOBq1p3WYj4DGkDo0JsKNf I95taguAO8VIXkjAc5wRXIqv9CXy0G8za5PJ+FJ9duI1VtSW9tVv8UqYHlp0k/i7 SHWnzzeNaOMZ/A== -----END CERTIFICATE-----Generated at Mon Dec 22 14:13:19 2025 by rpki-client