This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft File: YZz5qeC2RhrYM4dawRaPiSP9VQs.mft (raw, json) Hash identifier: b13d2nPEkGb41/QuX7z4KmhwLe6BjDAWhqAc2yjcOsk= Subject key identifier: 76:03:A7:9B:7D:DB:7A:38:95:65:8C:AF:21:94:76:D6:2C:85:C0:45 Authority key identifier: 61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B Certificate issuer: /CN=619cf9a9e0b6461ad833875ac1168f8923fd550b Certificate serial: 019B4ADF3C50C46082D9644A2C9D49CA7B4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft Manifest number: 0410 Signing time: Tue 23 Dec 2025 11:01:42 +0000 Manifest this update: Tue 23 Dec 2025 11:01:42 +0000 Manifest next update: Wed 24 Dec 2025 11:01:42 +0000 Files and hashes: 1: YZz5qeC2RhrYM4dawRaPiSP9VQs.crl (hash: xYI8+QXxlYmOJXVdxjuH/otIqTut1cGwV7AaMjn5a10=) 2: huRseKKMZ6MrEbEtnTidADNp1Qk.roa (hash: 2Cpw72DhJ+0Co4QK9K/ptsbGLArKbkMx0RKaT4rzilY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:df:3c:50:c4:60:82:d9:64:4a:2c:9d:49:ca:7b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=619cf9a9e0b6461ad833875ac1168f8923fd550b Validity Not Before: Dec 23 11:01:42 2025 GMT Not After : Dec 24 11:01:42 2025 GMT Subject: CN=7603a79b7ddb7a3895658caf219476d62c85c045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6e:f1:a2:61:75:29:14:07:52:eb:b2:36:a5: f2:23:41:99:51:2e:09:d5:a2:62:6c:56:37:67:78: d7:91:67:1b:f4:07:e8:78:4d:44:78:29:f2:3d:bc: eb:d3:96:f5:e2:f2:9b:78:29:a9:4e:24:c3:86:f1: 88:e4:d6:7c:d2:b0:2e:8b:b0:14:c9:cd:05:c3:73: 17:0a:ae:53:57:f8:5a:fe:fd:d0:cc:b3:70:da:fe: 16:04:21:25:1b:99:8e:92:d2:57:1c:29:85:1b:80: 44:e5:42:40:83:1b:03:4b:de:0b:1f:c8:50:a5:a1: b4:3a:26:c7:59:49:a3:08:d6:ba:f4:63:26:85:a3: 3d:fa:5e:51:1f:9b:7d:64:c9:58:33:60:6e:8e:2b: b2:1b:64:ad:f4:70:9d:8a:a3:47:38:f8:70:4a:aa: 00:54:ce:8b:7f:81:9b:89:bf:4c:3b:b6:14:66:53: 5c:0c:23:df:89:95:f9:26:84:12:3b:b7:05:34:4c: 8d:55:77:5b:63:41:4b:b0:e8:1e:31:c5:b2:47:27: f8:dd:07:c1:a1:19:52:ab:8f:99:df:f3:01:57:ed: f0:9e:7f:99:63:f2:52:b3:ed:e9:77:07:e6:d8:ea: f2:c2:57:1e:16:00:f9:81:12:4a:63:6b:66:8d:02: 04:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:03:A7:9B:7D:DB:7A:38:95:65:8C:AF:21:94:76:D6:2C:85:C0:45 X509v3 Authority Key Identifier: keyid:61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:0a:41:a4:cd:9f:35:b3:eb:3e:ce:74:79:5e:69:68:56:7c: 96:e9:cd:c0:9d:bc:93:c1:93:89:b4:ab:b2:e9:17:14:77:db: 84:59:98:f7:8c:81:4b:9f:d6:b0:28:db:e4:c8:90:73:48:34: 55:99:ab:9b:4a:e2:64:10:82:f8:8c:a3:ea:ac:ec:bc:fb:ad: f1:fc:c3:b5:69:35:86:3d:6d:68:f8:a2:36:f0:f4:4e:8f:a2: 3f:03:6a:c6:a6:89:88:bd:93:fe:75:50:85:07:f8:d4:5d:99: 36:f8:a2:fb:a1:51:75:55:cb:ef:eb:bc:26:33:48:6a:ab:7c: 32:c9:49:43:04:ca:37:80:7f:69:bd:f5:4e:6e:95:6e:0b:d0: 0f:14:ee:25:d8:5f:d9:72:a2:be:fc:16:ca:ec:44:bc:c8:85: d4:2c:4f:ee:27:ee:43:55:b4:50:2a:04:5a:ae:d9:51:dd:10: 12:c9:f4:d3:95:60:77:19:62:cf:7b:60:cc:5e:05:87:3f:c1: 46:89:0a:a6:ca:e9:cb:4a:82:9f:5c:f9:ce:56:22:cc:83:4e: b8:36:ba:83:2e:7b:07:73:ae:f4:60:6c:77:3f:77:02:1c:b7: fd:f9:28:3b:f6:1b:0d:9f:ee:14:a5:f4:e2:c9:ef:4f:7c:57: 45:c4:2b:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3zxQxGCC2WRKLJ1JyntNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxOWNmOWE5ZTBiNjQ2MWFkODMzODc1YWMxMTY4Zjg5MjNm ZDU1MGIwHhcNMjUxMjIzMTEwMTQyWhcNMjUxMjI0MTEwMTQyWjAzMTEwLwYDVQQD Eyg3NjAzYTc5YjdkZGI3YTM4OTU2NThjYWYyMTk0NzZkNjJjODVjMDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW7xomF1KRQHUuuyNqXyI0GZUS4J 1aJibFY3Z3jXkWcb9AfoeE1EeCnyPbzr05b14vKbeCmpTiTDhvGI5NZ80rAui7AU yc0Fw3MXCq5TV/ha/v3QzLNw2v4WBCElG5mOktJXHCmFG4BE5UJAgxsDS94LH8hQ paG0OibHWUmjCNa69GMmhaM9+l5RH5t9ZMlYM2BujiuyG2St9HCdiqNHOPhwSqoA VM6Lf4Gbib9MO7YUZlNcDCPfiZX5JoQSO7cFNEyNVXdbY0FLsOgeMcWyRyf43QfB oRlSq4+Z3/MBV+3wnn+ZY/JSs+3pdwfm2OrywlceFgD5gRJKY2tmjQIEpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYDp5t923o4lWWMryGUdtYshcBFMB8GA1UdIwQY MBaAFGGc+angtkYa2DOHWsEWj4kj/VULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVp6NXFlQzJSaHJZTTRkYXdSYVBpU1A5VlFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kNmJmYWItZWFjNi00YTQyLTg4NzIt MTRhZmFlOTEzMzZkLzEvWVp6NXFlQzJSaHJZTTRkYXdSYVBpU1A5VlFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9kNmJmYWItZWFjNi00YTQyLTg4NzItMTRhZmFlOTEzMzZk LzEvWVp6NXFlQzJSaHJZTTRkYXdSYVBpU1A5VlFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAApBpM2f NbPrPs50eV5paFZ8lunNwJ28k8GTibSrsukXFHfbhFmY94yBS5/WsCjb5MiQc0g0 VZmrm0riZBCC+Iyj6qzsvPut8fzDtWk1hj1taPiiNvD0To+iPwNqxqaJiL2T/nVQ hQf41F2ZNvii+6FRdVXL7+u8JjNIaqt8MslJQwTKN4B/ab31Tm6VbgvQDxTuJdhf 2XKivvwWyuxEvMiF1CxP7ifuQ1W0UCoEWq7ZUd0QEsn005Vgdxliz3tgzF4Fhz/B RokKpsrpy0qCn1z5zlYizINOuDa6gy57B3Ou9GBsdz93Ahy3/fkoO/YbDZ/uFKX0 4snvT3xXRcQr4A== -----END CERTIFICATE-----Generated at Tue Dec 23 12:38:53 2025 by rpki-client