This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft File: YYd_TODTYWF3JNSyiaiRjFxtci0.mft (raw, json) Hash identifier: /UEjoA8xIxYABlM88OkrBnWi7GPysR5Vczl1Ty0sZh0= Subject key identifier: 69:9B:01:8E:5C:15:AA:B2:1D:AD:7D:19:50:9D:62:D0:F5:5C:B0:90 Authority key identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D Certificate issuer: /CN=61877f4ce0d361617724d4b289a8918c5c6d722d Certificate serial: 019B3D90A9C409F46D1F97EE6A5F19F5BF69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft Manifest number: 0C70 Signing time: Sat 20 Dec 2025 21:00:49 +0000 Manifest this update: Sat 20 Dec 2025 21:00:49 +0000 Manifest next update: Sun 21 Dec 2025 21:00:49 +0000 Files and hashes: 1: 1pfflrWL-bwxSYtCoyCJ-yY9sDg.roa (hash: GQomu/TYWDDZCVUe6xLQFaU9+r7oU6WwcMu5JseyRnc=) 2: YYd_TODTYWF3JNSyiaiRjFxtci0.crl (hash: FW3FYcgDa6DRZet5Y7pQIqqqa0xZHAkzBa+Dyz8oxzg=) 3: gGh1amzB-Jk0RfzueDLNl64yqE4.roa (hash: 38qHDRBSH9mSj8MHcmispF3MzSiDWYpbmwEncu1yUrc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:a9:c4:09:f4:6d:1f:97:ee:6a:5f:19:f5:bf:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61877f4ce0d361617724d4b289a8918c5c6d722d Validity Not Before: Dec 20 21:00:49 2025 GMT Not After : Dec 21 21:00:49 2025 GMT Subject: CN=699b018e5c15aab21dad7d19509d62d0f55cb090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5f:14:88:a7:f0:d5:df:03:26:3c:ac:3d:69: ec:2b:90:4a:55:48:c2:8b:8e:46:4e:a1:4d:11:04: 8b:b1:50:b1:bc:75:f5:c1:d3:7b:f4:e5:01:25:26: 6f:ad:6b:d8:34:ce:8f:e1:2d:ef:b7:71:a0:91:b4: 93:02:16:b4:a7:8f:b4:07:9a:be:8e:50:d5:c3:11: 9d:58:17:db:46:df:06:37:13:5d:da:df:82:66:9f: 9e:26:10:a9:7c:1a:7d:e1:e6:d5:33:24:a5:74:bf: c7:bc:ea:b2:3f:a7:41:31:c4:47:38:47:5b:64:65: a7:0e:9d:5a:45:27:bb:66:09:28:ec:01:b6:61:87: 2c:db:10:f4:c2:ef:18:4e:2e:18:7f:a4:ce:8f:3b: 25:0f:b8:50:d1:ba:0c:69:ae:9e:8f:6c:f9:db:8b: 06:9f:78:a0:50:0b:47:04:7c:f0:29:a4:c3:2b:99: 25:f8:ab:65:f4:06:33:70:40:ae:e7:fa:b3:01:fd: 30:53:32:cb:d7:91:d5:cb:95:5c:8d:fb:56:3f:12: 80:49:3b:81:a4:83:84:7b:db:fe:34:41:32:93:97: 92:3c:a3:5d:43:84:e3:71:eb:10:e2:86:a9:2e:5d: 7e:68:f3:44:8d:1d:21:e6:8f:79:90:db:36:ee:bd: c4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9B:01:8E:5C:15:AA:B2:1D:AD:7D:19:50:9D:62:D0:F5:5C:B0:90 X509v3 Authority Key Identifier: keyid:61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:3b:44:38:64:70:bd:4d:3c:61:56:78:97:82:04:c5:3b:b4: d6:2a:59:96:6b:7a:ee:07:1c:29:c9:01:e7:9c:1d:a9:2a:a8: ab:12:6c:bc:37:f6:f3:dd:a0:e9:f5:bf:d5:d7:bf:d6:ea:d3: 24:f0:8d:f4:9a:87:f0:1c:43:b2:cf:92:56:2a:cd:94:9c:bd: 5d:a1:23:12:2e:b4:0c:c7:76:84:d1:72:60:fe:e6:a2:45:f4: 0b:0f:3c:0b:b6:5f:ff:c1:65:df:51:d6:4f:5a:ac:46:e5:72: fe:a5:5d:7e:25:a9:86:ee:49:02:38:d1:45:06:6c:dc:5d:4f: 0c:fb:eb:31:88:24:31:98:20:0c:2a:ba:fa:a0:68:ad:d4:ff: c1:45:aa:cc:ae:5e:fa:83:17:40:95:e9:2c:6c:99:26:e0:10: 76:0c:c6:77:ce:a6:fc:79:e8:dc:6c:6d:7c:df:d1:21:30:f4: 59:87:5d:cf:fe:81:3c:52:a1:90:40:57:a7:52:5d:23:30:f7: d3:1b:f2:37:66:ab:6a:38:43:85:12:df:55:e2:ab:93:1a:57: 96:99:78:f7:d1:3d:77:8f:d4:dd:53:6c:93:77:9c:a5:dd:e9: d2:05:10:84:ae:d0:47:c8:3e:6e:42:14:7b:68:e1:c6:b2:34: e5:11:fb:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kKnECfRtH5fual8Z9b9pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODc3ZjRjZTBkMzYxNjE3NzI0ZDRiMjg5YTg5MThjNWM2 ZDcyMmQwHhcNMjUxMjIwMjEwMDQ5WhcNMjUxMjIxMjEwMDQ5WjAzMTEwLwYDVQQD Eyg2OTliMDE4ZTVjMTVhYWIyMWRhZDdkMTk1MDlkNjJkMGY1NWNiMDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl8UiKfw1d8DJjysPWnsK5BKVUjC i45GTqFNEQSLsVCxvHX1wdN79OUBJSZvrWvYNM6P4S3vt3GgkbSTAha0p4+0B5q+ jlDVwxGdWBfbRt8GNxNd2t+CZp+eJhCpfBp94ebVMySldL/HvOqyP6dBMcRHOEdb ZGWnDp1aRSe7Zgko7AG2YYcs2xD0wu8YTi4Yf6TOjzslD7hQ0boMaa6ej2z524sG n3igUAtHBHzwKaTDK5kl+Ktl9AYzcECu5/qzAf0wUzLL15HVy5VcjftWPxKASTuB pIOEe9v+NEEyk5eSPKNdQ4TjcesQ4oapLl1+aPNEjR0h5o95kNs27r3EDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmbAY5cFaqyHa19GVCdYtD1XLCQMB8GA1UdIwQY MBaAFGGHf0zg02FhdyTUsomokYxcbXItMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlkX1RPRFRZV0YzSk5TeWlhaVJqRnh0Y2kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9jNDNiMmYtMTBiYS00MTcwLWI1MjEt YzcyMjIxN2U1M2I2LzEvWVlkX1RPRFRZV0YzSk5TeWlhaVJqRnh0Y2kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9jNDNiMmYtMTBiYS00MTcwLWI1MjEtYzcyMjIxN2U1M2I2 LzEvWVlkX1RPRFRZV0YzSk5TeWlhaVJqRnh0Y2kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjtEOGRw vU08YVZ4l4IExTu01ipZlmt67gccKckB55wdqSqoqxJsvDf2892g6fW/1de/1urT JPCN9JqH8BxDss+SVirNlJy9XaEjEi60DMd2hNFyYP7mokX0Cw88C7Zf/8Fl31HW T1qsRuVy/qVdfiWphu5JAjjRRQZs3F1PDPvrMYgkMZggDCq6+qBordT/wUWqzK5e +oMXQJXpLGyZJuAQdgzGd86m/Hno3GxtfN/RITD0WYddz/6BPFKhkEBXp1JdIzD3 0xvyN2arajhDhRLfVeKrkxpXlpl499E9d4/U3VNsk3ecpd3p0gUQhK7QR8g+bkIU e2jhxrI05RH7WA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:42:43 2025 by rpki-client