This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft File: YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft (raw, json) Hash identifier: ubZHG4IqV2JzClvaioWXITHkemscjsLZ8my97iv3Lkk= Subject key identifier: 6B:00:4A:AE:08:D0:F7:6B:80:83:0A:0F:92:A9:9E:36:11:D0:FF:05 Authority key identifier: 60:7C:0E:94:2B:F8:0A:7D:57:49:0C:C7:BB:04:28:5B:02:AE:FF:7A Certificate issuer: /CN=607c0e942bf80a7d57490cc7bb04285b02aeff7a Certificate serial: 019B41DBB56D4E46851E61125F10E42DB860 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 17:01:16 +0000 Manifest this update: Sun 21 Dec 2025 17:01:16 +0000 Manifest next update: Mon 22 Dec 2025 17:01:16 +0000 Files and hashes: 1: YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl (hash: 8ZU7j4WSOHAgCedWGwXat0PN3hT+WJGAjV697vJUs1g=) 2: YP_ojssdziwcanJcHJab_qTOmuY.roa (hash: U3A2fg6Wi6oAAnLmfskViTy7rAEB6sn2k8/iuWaNKoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:b5:6d:4e:46:85:1e:61:12:5f:10:e4:2d:b8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=607c0e942bf80a7d57490cc7bb04285b02aeff7a Validity Not Before: Dec 21 17:01:16 2025 GMT Not After : Dec 22 17:01:16 2025 GMT Subject: CN=6b004aae08d0f76b80830a0f92a99e3611d0ff05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c4:e7:04:9b:6c:61:30:6e:01:e5:ae:b6:00: 87:8a:41:5e:79:f8:2a:c1:cd:6b:16:4a:fd:31:7c: 6f:e4:5f:c3:88:e9:6c:d3:ba:1c:8b:55:b1:ce:5c: d6:59:b5:c1:30:6a:bb:f7:49:2a:d1:66:b9:51:59: 8d:05:7c:13:2e:ea:10:0c:4e:ac:96:11:05:f8:0d: 3f:79:21:ec:c4:84:9c:c6:34:10:a3:4b:ea:ba:c7: cc:46:4c:7d:39:20:32:05:a5:e0:f9:96:0d:ac:11: b1:3e:8e:cd:28:bd:bd:ef:38:cc:20:6f:d1:b6:d3: 35:d9:ba:59:cb:5c:84:6b:fa:0b:4b:01:7b:2d:e8: c6:28:09:c6:21:0a:ea:4d:16:b8:5f:9d:df:d6:26: da:f7:35:fb:05:f8:5f:4a:78:e3:75:79:b2:a5:2f: 10:8a:ee:02:9d:37:fe:13:65:f7:f5:03:86:d6:a1: 93:ac:1c:c9:5a:b4:94:60:19:bf:be:ce:0e:d4:f3: 1a:c8:df:cc:ae:92:60:16:bb:9f:87:2d:94:f8:b8: b5:06:55:55:4b:71:04:ad:64:5f:71:e9:f9:14:33: 26:16:8f:f8:26:a8:9d:98:87:ce:e0:35:56:ae:17: 4b:d3:1b:53:9e:d0:c5:fd:45:26:30:0c:01:9c:2e: 5b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:00:4A:AE:08:D0:F7:6B:80:83:0A:0F:92:A9:9E:36:11:D0:FF:05 X509v3 Authority Key Identifier: keyid:60:7C:0E:94:2B:F8:0A:7D:57:49:0C:C7:BB:04:28:5B:02:AE:FF:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:09:3a:bd:33:a5:d9:fc:97:80:6b:13:5b:36:10:9d:71:16: f3:b5:aa:cd:d9:15:ea:c3:51:67:97:a2:a1:f4:d4:7e:1f:cc: 5c:32:67:cf:de:70:9a:57:6f:9d:bb:dc:d7:43:34:50:0e:55: 85:44:eb:9b:68:5c:d8:f4:98:f3:57:6b:ef:6d:45:eb:36:3f: 15:98:ec:26:a4:9e:8c:87:86:28:c9:4d:b3:b0:bd:40:23:b0: e1:c0:83:f9:24:12:d1:12:fd:ce:15:25:e0:7c:7e:23:1e:d8: a1:b5:26:4b:42:27:a0:e9:34:13:48:fb:1f:e2:4d:51:97:0d: bf:ce:d1:1f:5f:78:cf:73:32:ee:ac:62:80:85:22:1e:53:65: 20:b5:c1:99:28:7b:16:97:ed:7e:2e:b5:e2:ce:bf:6e:8d:5b: 82:2e:85:57:96:1e:95:dc:c1:4a:6e:8f:3d:fa:90:51:9e:7e: c6:72:19:67:4c:89:d1:3f:61:f8:f9:3a:cc:38:e8:c1:b9:fa: 8f:f2:64:7a:b0:5d:f6:32:a5:69:42:34:9f:9a:88:db:d0:a8: 22:ef:8a:73:da:b3:ca:18:12:c6:b6:1e:d1:b1:18:1a:39:a9: 37:f9:e9:84:8d:3a:18:c4:0d:db:f7:37:50:b8:db:78:b7:5a: 0c:e8:da:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB27VtTkaFHmESXxDkLbhgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwN2MwZTk0MmJmODBhN2Q1NzQ5MGNjN2JiMDQyODViMDJh ZWZmN2EwHhcNMjUxMjIxMTcwMTE2WhcNMjUxMjIyMTcwMTE2WjAzMTEwLwYDVQQD Eyg2YjAwNGFhZTA4ZDBmNzZiODA4MzBhMGY5MmE5OWUzNjExZDBmZjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sTnBJtsYTBuAeWutgCHikFeefgq wc1rFkr9MXxv5F/DiOls07oci1WxzlzWWbXBMGq790kq0Wa5UVmNBXwTLuoQDE6s lhEF+A0/eSHsxIScxjQQo0vqusfMRkx9OSAyBaXg+ZYNrBGxPo7NKL297zjMIG/R ttM12bpZy1yEa/oLSwF7LejGKAnGIQrqTRa4X53f1iba9zX7BfhfSnjjdXmypS8Q iu4CnTf+E2X39QOG1qGTrBzJWrSUYBm/vs4O1PMayN/MrpJgFrufhy2U+Li1BlVV S3EErWRfcen5FDMmFo/4JqidmIfO4DVWrhdL0xtTntDF/UUmMAwBnC5bCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsASq4I0PdrgIMKD5KpnjYR0P8FMB8GA1UdIwQY MBaAFGB8DpQr+Ap9V0kMx7sEKFsCrv96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUh3T2xDdjRDbjFYU1F6SHV3UW9Xd0t1XzNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kZjE1MTItM2ZhNC00MGZjLThkY2Et NjQzN2FjZDhhM2NmLzEvWUh3T2xDdjRDbjFYU1F6SHV3UW9Xd0t1XzNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9kZjE1MTItM2ZhNC00MGZjLThkY2EtNjQzN2FjZDhhM2Nm LzEvWUh3T2xDdjRDbjFYU1F6SHV3UW9Xd0t1XzNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQk6vTOl 2fyXgGsTWzYQnXEW87WqzdkV6sNRZ5eiofTUfh/MXDJnz95wmldvnbvc10M0UA5V hUTrm2hc2PSY81dr721F6zY/FZjsJqSejIeGKMlNs7C9QCOw4cCD+SQS0RL9zhUl 4Hx+Ix7YobUmS0InoOk0E0j7H+JNUZcNv87RH194z3My7qxigIUiHlNlILXBmSh7 Fpftfi614s6/bo1bgi6FV5YeldzBSm6PPfqQUZ5+xnIZZ0yJ0T9h+Pk6zDjowbn6 j/JkerBd9jKlaUI0n5qI29CoIu+Kc9qzyhgSxrYe0bEYGjmpN/nphI06GMQN2/c3 ULjbeLdaDOja+Q== -----END CERTIFICATE-----Generated at Sun Dec 21 19:27:57 2025 by rpki-client