This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft File: Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft (raw, json) Hash identifier: oZmIFbIfY5y3OjZB2RCes1mybmkh4nT4mJw14ZDaTlM= Subject key identifier: C0:CF:80:87:EB:4B:5F:ED:1E:1D:4E:53:8D:DB:72:D7:D6:10:53:78 Authority key identifier: 62:BD:6C:2B:DF:61:E2:3E:AF:E2:3D:DE:01:6D:B8:B3:E1:59:5F:76 Certificate issuer: /CN=62bd6c2bdf61e23eafe23dde016db8b3e1595f76 Certificate serial: 019B3C10379BE65F372AE554860952DA8792 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft Manifest number: 0F55 Signing time: Sat 20 Dec 2025 14:00:54 +0000 Manifest this update: Sat 20 Dec 2025 14:00:54 +0000 Manifest next update: Sun 21 Dec 2025 14:00:54 +0000 Files and hashes: 1: GymugnGNz9hZBNfCgZiljFXWNI4.roa (hash: UzztjdFS5VrTYMjssd7r9V+uU0SvLYHrn/O32cjxd5g=) 2: Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl (hash: p+GzozCFOeHXeFWWjoGlh++E0BfjkpOY4UE2y5mZ9c0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:37:9b:e6:5f:37:2a:e5:54:86:09:52:da:87:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62bd6c2bdf61e23eafe23dde016db8b3e1595f76 Validity Not Before: Dec 20 14:00:54 2025 GMT Not After : Dec 21 14:00:54 2025 GMT Subject: CN=c0cf8087eb4b5fed1e1d4e538ddb72d7d6105378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6b:21:3b:74:5b:0c:59:5b:9f:88:0e:0c:1d: 85:cd:ef:16:5a:42:56:87:8f:bd:22:bc:5a:d1:93: 0f:d9:0e:ce:11:d1:98:c8:81:8d:2c:c2:1f:2a:8c: c4:51:a9:18:43:cd:03:0e:50:d2:d9:b2:f2:ae:58: c1:2c:d7:0c:83:88:bb:90:25:2c:3e:d0:99:8a:21: a4:c4:e3:49:4d:ce:11:2a:68:69:f0:29:35:35:52: d9:4d:87:7f:ae:c5:88:e8:e0:26:40:4f:a0:6e:5b: d2:93:dd:80:8c:8b:19:e9:1f:82:36:6b:50:19:f2: d5:7d:22:1f:8e:d8:64:c3:7f:b5:34:6a:07:4f:df: d7:e7:f3:83:02:96:40:06:62:2b:e9:ad:65:af:1b: 83:21:7c:dd:69:58:c3:6b:cf:a5:c9:ce:c3:a3:3b: 7e:5b:8b:44:8a:36:22:ac:18:a9:ac:f7:b7:f4:e6: 2e:41:e9:33:85:ea:a8:c3:00:95:c0:47:2e:a2:ba: 64:c1:ea:89:e5:48:97:4c:28:d0:46:2c:e5:94:4d: 81:9b:22:c8:64:e1:fc:cc:be:90:e3:b8:f6:02:68: 08:37:5d:0a:55:eb:16:af:7f:4a:98:d3:d2:be:bf: 5a:80:9c:da:7a:73:b2:10:ad:fe:7e:18:f3:65:32: 93:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:CF:80:87:EB:4B:5F:ED:1E:1D:4E:53:8D:DB:72:D7:D6:10:53:78 X509v3 Authority Key Identifier: keyid:62:BD:6C:2B:DF:61:E2:3E:AF:E2:3D:DE:01:6D:B8:B3:E1:59:5F:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:b4:38:ce:4f:2f:96:da:00:24:02:18:bf:0d:51:89:ac:05: 20:c7:fe:0d:f4:3c:d5:37:f1:8a:bf:6a:b6:67:c9:a2:08:a5: 1a:d1:d8:48:ed:9b:7d:98:76:7a:c6:f4:18:b4:a1:5f:18:7a: 71:2e:da:71:14:f1:8a:a4:b9:cb:87:5b:f1:29:dd:17:45:48: 4e:2a:e6:9e:b5:e2:50:b8:2a:62:77:dd:4c:c4:6c:b6:71:34: 74:60:fe:8d:16:71:73:d6:93:ef:6a:e9:5b:17:7f:9a:ef:24: ff:7e:e3:e4:68:9d:d7:3b:ea:64:28:81:e7:f2:ee:bc:64:3b: 80:f4:1e:d6:a5:2d:84:bd:3c:b5:23:54:cc:88:bd:6b:4f:10: 52:ff:42:0d:d5:ff:bf:09:7e:6d:f7:a6:07:a7:6a:0d:e2:8e: 16:88:52:fe:3e:f3:16:90:99:91:6d:ee:74:be:95:ca:37:16: 03:52:2d:8d:75:b8:65:62:73:29:59:fd:da:3f:dc:54:39:b0: 28:a3:7f:68:e8:b5:4c:b1:f2:20:72:2b:65:67:c1:38:35:10: 17:fc:0a:f5:c2:53:fc:69:2f:cd:1a:9e:26:01:54:98:9b:96: ec:7f:69:1e:4f:18:21:a5:a9:ee:d7:f9:d1:43:38:48:ce:a5: 86:6c:14:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EDeb5l83KuVUhglS2oeSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYmQ2YzJiZGY2MWUyM2VhZmUyM2RkZTAxNmRiOGIzZTE1 OTVmNzYwHhcNMjUxMjIwMTQwMDU0WhcNMjUxMjIxMTQwMDU0WjAzMTEwLwYDVQQD EyhjMGNmODA4N2ViNGI1ZmVkMWUxZDRlNTM4ZGRiNzJkN2Q2MTA1Mzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2shO3RbDFlbn4gODB2Fze8WWkJW h4+9Irxa0ZMP2Q7OEdGYyIGNLMIfKozEUakYQ80DDlDS2bLyrljBLNcMg4i7kCUs PtCZiiGkxONJTc4RKmhp8Ck1NVLZTYd/rsWI6OAmQE+gblvSk92AjIsZ6R+CNmtQ GfLVfSIfjthkw3+1NGoHT9/X5/ODApZABmIr6a1lrxuDIXzdaVjDa8+lyc7Dozt+ W4tEijYirBiprPe39OYuQekzheqowwCVwEcuorpkweqJ5UiXTCjQRizllE2BmyLI ZOH8zL6Q47j2AmgIN10KVesWr39KmNPSvr9agJzaenOyEK3+fhjzZTKTYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDPgIfrS1/tHh1OU43bctfWEFN4MB8GA1UdIwQY MBaAFGK9bCvfYeI+r+I93gFtuLPhWV92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXIxc0s5OWg0ajZ2NGozZUFXMjRzLUZaWDNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80YzlkNzMtZjgwNS00ZDcyLThhMzct YjgyYjBlZDJkMzIzLzEvWXIxc0s5OWg0ajZ2NGozZUFXMjRzLUZaWDNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi80YzlkNzMtZjgwNS00ZDcyLThhMzctYjgyYjBlZDJkMzIz LzEvWXIxc0s5OWg0ajZ2NGozZUFXMjRzLUZaWDNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALbQ4zk8v ltoAJAIYvw1RiawFIMf+DfQ81Tfxir9qtmfJogilGtHYSO2bfZh2esb0GLShXxh6 cS7acRTxiqS5y4db8SndF0VITirmnrXiULgqYnfdTMRstnE0dGD+jRZxc9aT72rp Wxd/mu8k/37j5Gid1zvqZCiB5/LuvGQ7gPQe1qUthL08tSNUzIi9a08QUv9CDdX/ vwl+bfemB6dqDeKOFohS/j7zFpCZkW3udL6VyjcWA1ItjXW4ZWJzKVn92j/cVDmw KKN/aOi1TLHyIHIrZWfBODUQF/wK9cJT/GkvzRqeJgFUmJuW7H9pHk8YIaWp7tf5 0UM4SM6lhmwURA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:27:28 2025 by rpki-client