This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft File: YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft (raw, json) Hash identifier: PpClZhNqxfPIbN8MIRtSz45Rshj25osQfntzjLP/ZWQ= Subject key identifier: 5A:40:38:18:9E:E3:EE:35:39:1A:C3:02:1D:FA:80:2E:79:2E:B3:DB Authority key identifier: 61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E Certificate issuer: /CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e Certificate serial: 019B2FD572659477FC759CF29E96DFEBE50D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 05:01:16 +0000 Manifest this update: Thu 18 Dec 2025 05:01:16 +0000 Manifest next update: Fri 19 Dec 2025 05:01:16 +0000 Files and hashes: 1: YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl (hash: N5++zdHPoali7uVlhSr5tRagzZ2Ugu+Gf1kU9tYLyGc=) 2: lpQpCVUUyuieF-my1hQ69F4PEZk.roa (hash: WA4/OyJVwgJx0ERp2sKecmZzmYmPwtki2xCkuF+SczM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:72:65:94:77:fc:75:9c:f2:9e:96:df:eb:e5:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e Validity Not Before: Dec 18 05:01:16 2025 GMT Not After : Dec 19 05:01:16 2025 GMT Subject: CN=5a4038189ee3ee35391ac3021dfa802e792eb3db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cd:c7:b5:68:9d:48:6c:de:b9:5c:f1:ec:65: 90:4f:c5:cf:07:a8:21:c9:ce:36:ea:ea:46:af:b3: be:8c:b0:4e:ad:a2:a8:fa:9b:3f:1f:e7:3a:65:65: 6b:8d:16:88:70:31:46:4b:97:9c:a4:4c:47:9e:b8: c7:0f:13:ae:5b:bc:32:3c:4a:ea:ea:5c:3c:21:93: 94:df:ec:10:ed:61:50:e2:e8:2e:bb:ee:72:28:e7: 9b:9d:6a:ab:d8:86:6a:67:cc:a1:d1:2a:33:e8:cf: 99:c8:bd:be:c9:4e:52:c6:85:0c:05:a1:08:bf:6b: c7:c0:02:7b:51:da:8b:63:3a:12:c2:0b:cb:8d:63: 75:65:b8:85:6b:e3:c5:f3:82:e7:60:fe:2f:e8:b5: a7:be:0e:94:22:96:d5:18:81:4b:c2:a0:01:06:23: b7:58:97:28:1a:3f:2d:3b:0a:48:73:93:ff:2b:5f: 50:dd:25:b4:3e:5e:8d:9b:92:39:c2:3f:ff:0c:9a: e4:c8:3f:d0:86:d5:a9:83:ba:8f:9e:00:b6:ef:35: d5:a9:0a:32:f6:58:44:9a:f5:f5:82:f9:2b:2f:1e: 4c:16:7f:10:fa:91:40:b9:76:2a:e0:74:05:da:ab: d3:1c:4f:65:36:58:63:5e:e5:4d:b9:dd:d3:43:02: c3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:40:38:18:9E:E3:EE:35:39:1A:C3:02:1D:FA:80:2E:79:2E:B3:DB X509v3 Authority Key Identifier: keyid:61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:1d:e9:70:93:4d:b6:aa:3b:7a:57:f2:44:df:41:19:0d:87: 99:34:63:c4:03:db:35:f0:83:3f:4d:af:22:a1:9e:db:98:80: 61:05:a8:a6:8f:4f:3a:0b:b2:a3:47:e8:80:b3:d5:e5:6a:0b: 67:8e:7d:0d:e8:a8:93:7a:dc:fa:7f:83:ba:8f:7a:71:ba:90: 12:93:2e:8f:da:69:f5:76:e1:49:c2:f5:58:e0:c3:e4:9e:5b: 9d:5f:c3:51:fa:7d:05:58:5c:a5:08:c5:5c:cc:96:fa:f0:42: f3:78:1c:e7:9c:b9:18:01:bd:46:da:fe:cb:1b:05:76:b9:36: 36:37:00:76:c7:bc:a2:14:7b:d7:65:11:5f:25:98:24:ae:ef: 79:8c:7d:77:70:fa:38:c9:83:a2:f4:2d:4c:17:bf:c8:52:95: ac:f0:58:c0:c9:58:c1:4a:c6:b9:a1:09:d1:c5:90:ba:30:07: 99:15:91:2c:15:26:0d:67:b6:e3:48:2e:a0:d3:a0:74:a2:1f: 5c:99:9c:c7:52:d2:03:89:c1:ed:a5:35:35:69:a9:49:7b:5a: a1:20:66:f8:0a:de:d0:1f:ce:7a:5e:05:c4:f4:22:78:82:bf: f7:c7:4e:6c:2d:2d:de:25:ac:6f:11:0e:a8:57:79:b0:57:40: d9:95:b4:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1XJllHf8dZzynpbf6+UNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMmFlZjRjN2JmZTdlMDcyZjYyZDJkZDUwNWFiNTdlMzdl YTM4NWUwHhcNMjUxMjE4MDUwMTE2WhcNMjUxMjE5MDUwMTE2WjAzMTEwLwYDVQQD Eyg1YTQwMzgxODllZTNlZTM1MzkxYWMzMDIxZGZhODAyZTc5MmViM2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM3HtWidSGzeuVzx7GWQT8XPB6gh yc426upGr7O+jLBOraKo+ps/H+c6ZWVrjRaIcDFGS5ecpExHnrjHDxOuW7wyPErq 6lw8IZOU3+wQ7WFQ4uguu+5yKOebnWqr2IZqZ8yh0Soz6M+ZyL2+yU5SxoUMBaEI v2vHwAJ7UdqLYzoSwgvLjWN1ZbiFa+PF84LnYP4v6LWnvg6UIpbVGIFLwqABBiO3 WJcoGj8tOwpIc5P/K19Q3SW0Pl6Nm5I5wj//DJrkyD/QhtWpg7qPngC27zXVqQoy 9lhEmvX1gvkrLx5MFn8Q+pFAuXYq4HQF2qvTHE9lNlhjXuVNud3TQwLDkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpAOBie4+41ORrDAh36gC55LrPbMB8GA1UdIwQY MBaAFGEq70x7/n4HL2LS3VBatX436jheMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVNydlRIdi1mZ2N2WXRMZFVGcTFmamZxT0Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83MjA3YTktMjdmNC00NGVjLWJmNzgt YTIwN2M3YTE5ZWQyLzEvWVNydlRIdi1mZ2N2WXRMZFVGcTFmamZxT0Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC83MjA3YTktMjdmNC00NGVjLWJmNzgtYTIwN2M3YTE5ZWQy LzEvWVNydlRIdi1mZ2N2WXRMZFVGcTFmamZxT0Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPx3pcJNN tqo7elfyRN9BGQ2HmTRjxAPbNfCDP02vIqGe25iAYQWopo9POguyo0fogLPV5WoL Z459Deiok3rc+n+Duo96cbqQEpMuj9pp9XbhScL1WODD5J5bnV/DUfp9BVhcpQjF XMyW+vBC83gc55y5GAG9Rtr+yxsFdrk2NjcAdse8ohR712URXyWYJK7veYx9d3D6 OMmDovQtTBe/yFKVrPBYwMlYwUrGuaEJ0cWQujAHmRWRLBUmDWe240guoNOgdKIf XJmcx1LSA4nB7aU1NWmpSXtaoSBm+Are0B/Oel4FxPQieIK/98dObC0t3iWsbxEO qFd5sFdA2ZW09Q== -----END CERTIFICATE-----Generated at Thu Dec 18 10:27:01 2025 by rpki-client