This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft File: Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft (raw, json) Hash identifier: D/qnDZw+rZbB0Dp/O/agCkLw3iuN6ynGlYdRlPX0W48= Subject key identifier: 73:2C:C1:70:D7:3C:E7:52:83:BC:A8:B1:49:BE:40:CF:E4:A4:8E:80 Authority key identifier: 61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8 Certificate issuer: /CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8 Certificate serial: 019B35D6E546B7D23AE9FECCADEC379BF4F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft Manifest number: 0C15 Signing time: Fri 19 Dec 2025 09:00:34 +0000 Manifest this update: Fri 19 Dec 2025 09:00:34 +0000 Manifest next update: Sat 20 Dec 2025 09:00:34 +0000 Files and hashes: 1: Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl (hash: VvMAdyqavayH9EpRo7RG7J2IYpktTgatvfSQkklj3hg=) 2: vzcqP3LvlK_sQg8vPWTBe97Nav0.roa (hash: 3HGCRFI+BCpq9Cd0n6gj7Tnh3DZvLgpQucs3TlDSYJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d6:e5:46:b7:d2:3a:e9:fe:cc:ad:ec:37:9b:f4:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8 Validity Not Before: Dec 19 09:00:34 2025 GMT Not After : Dec 20 09:00:34 2025 GMT Subject: CN=732cc170d73ce75283bca8b149be40cfe4a48e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9d:72:03:fe:72:cf:fa:2d:37:bc:b7:4f:e5: 7e:67:7f:5b:41:96:69:f4:60:22:a6:79:3f:96:ed: d3:99:58:d2:c8:b3:b8:e8:42:e9:02:91:42:0f:6b: 12:58:11:8d:b7:d9:d1:15:5e:a7:9c:06:4e:6c:78: 79:a9:b8:50:c9:a1:39:e4:28:be:3b:2a:6c:c7:32: 38:7c:91:43:10:e6:b5:7e:a7:ab:20:ca:62:c3:90: ad:15:41:09:3b:8d:01:e1:5f:63:ef:69:5f:89:95: 5f:e6:b7:b0:fd:48:30:87:64:c2:9f:da:47:da:2a: 5e:48:25:6e:8d:75:22:b8:9d:81:4b:33:82:d9:f5: d2:2b:ca:85:fb:90:9e:49:4c:05:fb:b8:6a:da:34: 45:dc:1f:6d:9a:72:29:57:79:32:f6:d5:84:41:3e: 85:12:86:08:3e:bb:fa:ae:5a:d4:72:5c:77:4f:33: 0b:68:36:79:88:f3:4c:a9:8b:c5:ac:27:18:14:4d: a9:1c:4f:1c:6d:a2:b5:9a:0e:58:67:13:7b:4c:c1: 10:e7:89:68:95:f4:ad:e6:b8:df:44:bc:23:73:c2: d8:5a:10:d6:79:a1:fe:cd:29:ab:d1:e3:3b:87:00: ca:93:0b:85:2e:54:92:07:f2:39:e1:ed:ce:4b:f9: 2d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2C:C1:70:D7:3C:E7:52:83:BC:A8:B1:49:BE:40:CF:E4:A4:8E:80 X509v3 Authority Key Identifier: keyid:61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:7f:6c:40:3a:ad:21:12:c0:8e:26:d9:b3:74:4c:e1:6c:4b: ab:18:10:62:a6:58:49:98:b9:3a:5c:29:2e:62:cf:6e:99:20: 1e:4e:7a:74:53:45:59:7c:e3:af:cd:1d:fb:e0:dc:9b:c1:56: eb:41:23:a8:37:46:d2:3c:ce:9e:d2:08:3e:c6:79:10:79:1a: bf:e3:1e:1c:f1:f4:c1:30:7f:9f:5d:09:98:0e:60:1c:f2:44: 93:e4:6a:0f:12:af:c9:cc:da:a0:c2:d7:64:59:e2:60:73:b8: 5a:3b:55:24:fb:03:1e:0b:51:d1:f4:b4:f1:a7:41:3d:8b:e6: 1e:8d:61:95:33:ef:c2:20:86:c0:5b:8b:09:ff:1a:c3:30:d3: 17:54:3c:96:85:d9:ac:70:e9:bc:89:4f:77:de:5b:06:16:44: ad:60:11:de:45:8b:16:ad:d2:19:2d:b3:15:85:bb:fa:23:36: 57:f3:32:4a:77:80:dd:c1:67:ce:7e:0d:7a:ff:4e:07:67:d1: a0:d2:70:54:0e:66:6c:d3:db:e5:9a:e9:d6:36:04:a5:0b:7e: 4b:39:68:3e:f4:08:aa:f3:df:3a:0f:66:9a:2f:3a:5d:d5:e5: 18:17:1e:60:03:8d:ed:ae:40:ab:0b:93:91:c7:1d:5f:c4:ec: 55:e3:be:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11uVGt9I66f7Mrew3m/T4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxZWRmZTdhNGZjNjRkZTUyOWQxNjJkZjJmZWQwNzgwYzZl NWUxYTgwHhcNMjUxMjE5MDkwMDM0WhcNMjUxMjIwMDkwMDM0WjAzMTEwLwYDVQQD Eyg3MzJjYzE3MGQ3M2NlNzUyODNiY2E4YjE0OWJlNDBjZmU0YTQ4ZTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA151yA/5yz/otN7y3T+V+Z39bQZZp 9GAipnk/lu3TmVjSyLO46ELpApFCD2sSWBGNt9nRFV6nnAZObHh5qbhQyaE55Ci+ OypsxzI4fJFDEOa1fqerIMpiw5CtFUEJO40B4V9j72lfiZVf5rew/Ugwh2TCn9pH 2ipeSCVujXUiuJ2BSzOC2fXSK8qF+5CeSUwF+7hq2jRF3B9tmnIpV3ky9tWEQT6F EoYIPrv6rlrUclx3TzMLaDZ5iPNMqYvFrCcYFE2pHE8cbaK1mg5YZxN7TMEQ54lo lfSt5rjfRLwjc8LYWhDWeaH+zSmr0eM7hwDKkwuFLlSSB/I54e3OS/ktmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMswXDXPOdSg7yosUm+QM/kpI6AMB8GA1UdIwQY MBaAFGHt/npPxk3lKdFi3y/tB4DG5eGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWUzLWVrX0dUZVVwMFdMZkwtMEhnTWJsNGFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iODFkMDgtNjZjOS00YmU5LWEyMjEt YWZmODcxYjViNWY3LzEvWWUzLWVrX0dUZVVwMFdMZkwtMEhnTWJsNGFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9iODFkMDgtNjZjOS00YmU5LWEyMjEtYWZmODcxYjViNWY3 LzEvWWUzLWVrX0dUZVVwMFdMZkwtMEhnTWJsNGFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXn9sQDqt IRLAjibZs3RM4WxLqxgQYqZYSZi5OlwpLmLPbpkgHk56dFNFWXzjr80d++Dcm8FW 60EjqDdG0jzOntIIPsZ5EHkav+MeHPH0wTB/n10JmA5gHPJEk+RqDxKvyczaoMLX ZFniYHO4WjtVJPsDHgtR0fS08adBPYvmHo1hlTPvwiCGwFuLCf8awzDTF1Q8loXZ rHDpvIlPd95bBhZErWAR3kWLFq3SGS2zFYW7+iM2V/MySneA3cFnzn4Nev9OB2fR oNJwVA5mbNPb5Zrp1jYEpQt+SzloPvQIqvPfOg9mmi86XdXlGBceYAON7a5AqwuT kccdX8TsVeO+1A== -----END CERTIFICATE-----Generated at Fri Dec 19 15:59:12 2025 by rpki-client