This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft File: Yf4ur6ZKzq8fz8-8phUKei01vko.mft (raw, json) Hash identifier: QXSy6bM4og4kMi4zkLzb+J5+BbH3Q9Z4xlYM7gUn3cU= Subject key identifier: 8D:38:CC:43:7C:1E:D4:03:EF:02:51:AD:30:D8:D0:94:FA:E4:10:3A Authority key identifier: 61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A Certificate issuer: /CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a Certificate serial: 019B4C5F5701CF70FB2F86ED34C58A650056 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft Manifest number: 1792 Signing time: Tue 23 Dec 2025 18:01:15 +0000 Manifest this update: Tue 23 Dec 2025 18:01:15 +0000 Manifest next update: Wed 24 Dec 2025 18:01:15 +0000 Files and hashes: 1: Yf4ur6ZKzq8fz8-8phUKei01vko.crl (hash: QAPFIM4eUbduVVCrl/B0Gbr+Sc3oDX9Ly//kHhFA/hA=) 2: wsNRODSlq_nh1GDEKdmia3PTMko.roa (hash: oJgNuBgkHwRy1QBN/xCPFqgneU9FqbAO/DZOxkV4624=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5f:57:01:cf:70:fb:2f:86:ed:34:c5:8a:65:00:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a Validity Not Before: Dec 23 18:01:15 2025 GMT Not After : Dec 24 18:01:15 2025 GMT Subject: CN=8d38cc437c1ed403ef0251ad30d8d094fae4103a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0a:21:7a:28:91:bb:41:63:48:6e:99:8b:a1: 69:a8:7b:1d:82:a0:a2:6a:9c:e5:ce:c2:b8:0a:ea: 56:0f:07:dd:5e:fa:fa:9e:2c:c1:ab:9e:2c:1f:ab: 43:61:ce:67:98:18:77:d0:ec:32:58:3e:a7:b7:7b: 5f:f4:bf:5c:0a:f5:ab:0c:7a:53:4e:74:68:0a:8f: 01:ad:92:b1:50:b1:02:48:74:50:c2:bf:fd:ea:a0: d4:3b:fd:74:e7:69:1a:a8:06:78:e5:3c:a1:9b:6f: a2:37:d7:38:06:d9:13:6b:8b:ee:b6:55:4e:b4:34: ac:62:10:14:9e:f6:e0:0a:b4:93:72:91:72:34:b1: 47:43:8d:9a:91:b3:67:a8:6b:b1:f4:11:61:e9:bc: 0d:a9:e8:48:fe:e3:3f:6f:be:71:49:bc:d8:9a:29: dc:64:11:7d:6f:27:bd:44:fc:4c:b5:b5:46:a2:5f: cb:d2:c9:a2:61:62:7b:02:0b:8f:91:77:ff:f6:4e: e7:e6:f2:64:6d:1e:85:b7:e1:a9:55:ed:fe:62:c4: ed:21:d4:87:07:80:4e:fe:ae:e9:ca:36:1c:36:f7: f5:7a:a6:85:41:8a:8c:a6:bb:96:dd:b9:24:8b:10: 87:5c:35:e9:68:b1:36:df:89:ac:86:7a:68:2a:2c: 6e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:38:CC:43:7C:1E:D4:03:EF:02:51:AD:30:D8:D0:94:FA:E4:10:3A X509v3 Authority Key Identifier: keyid:61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:bd:14:ee:d7:83:41:6b:5f:7c:52:3a:93:c4:b6:49:2e:0c: 75:2b:02:fc:f9:9a:36:bf:54:1f:39:c0:ba:50:35:72:ec:2d: d2:05:bf:2a:2a:38:7e:a1:e0:93:f8:35:03:f0:9e:9e:74:6b: 8b:ae:76:e7:c2:c0:98:1f:38:d9:9f:b4:13:ab:e6:50:d9:11: 5f:a7:69:a2:1f:48:13:ec:46:46:fb:39:b1:72:6a:27:07:05: c0:6f:d7:83:9f:f1:7e:5c:a4:22:67:40:14:24:d9:19:8d:1c: 76:f0:2a:af:02:d6:e6:f5:ed:13:7c:29:5d:d1:87:d3:14:07: 5b:dc:17:56:fe:84:5b:c5:50:6f:c4:e0:ad:bf:23:45:29:9c: 89:5c:37:7d:e9:1b:fc:1e:b8:a9:b7:77:7a:ff:f8:cd:26:0f: a6:4f:17:dd:6f:3f:cd:e1:a0:5c:58:4f:49:f8:9e:f6:42:0c: 79:82:09:64:73:43:51:80:ea:e4:db:d3:11:58:a9:5d:34:2d: e4:3c:ab:83:9b:ec:1d:f6:9e:85:f6:a1:d7:9f:8c:ff:ff:a3: 9e:1b:a0:ee:d2:ec:0a:98:28:8c:de:61:08:78:ef:90:01:e4: 2c:71:31:89:be:24:57:20:db:73:c3:6c:d3:3d:41:81:7c:cc: bf:82:10:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMX1cBz3D7L4btNMWKZQBWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxZmUyZWFmYTY0YWNlYWYxZmNmY2ZiY2E2MTUwYTdhMmQz NWJlNGEwHhcNMjUxMjIzMTgwMTE1WhcNMjUxMjI0MTgwMTE1WjAzMTEwLwYDVQQD Eyg4ZDM4Y2M0MzdjMWVkNDAzZWYwMjUxYWQzMGQ4ZDA5NGZhZTQxMDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AoheiiRu0FjSG6Zi6FpqHsdgqCi apzlzsK4CupWDwfdXvr6nizBq54sH6tDYc5nmBh30OwyWD6nt3tf9L9cCvWrDHpT TnRoCo8BrZKxULECSHRQwr/96qDUO/1052kaqAZ45Tyhm2+iN9c4BtkTa4vutlVO tDSsYhAUnvbgCrSTcpFyNLFHQ42akbNnqGux9BFh6bwNqehI/uM/b75xSbzYminc ZBF9bye9RPxMtbVGol/L0smiYWJ7AguPkXf/9k7n5vJkbR6Ft+GpVe3+YsTtIdSH B4BO/q7pyjYcNvf1eqaFQYqMpruW3bkkixCHXDXpaLE234mshnpoKixuaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI04zEN8HtQD7wJRrTDY0JT65BA6MB8GA1UdIwQY MBaAFGH+Lq+mSs6vH8/PvKYVCnotNb5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8yMWNhNDMtZDNlMS00ZWMwLTlhOWQt MzlhZmQ5MzE2NTk4LzEvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8yMWNhNDMtZDNlMS00ZWMwLTlhOWQtMzlhZmQ5MzE2NTk4 LzEvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtb0U7teD QWtffFI6k8S2SS4MdSsC/PmaNr9UHznAulA1cuwt0gW/Kio4fqHgk/g1A/CennRr i65258LAmB842Z+0E6vmUNkRX6dpoh9IE+xGRvs5sXJqJwcFwG/Xg5/xflykImdA FCTZGY0cdvAqrwLW5vXtE3wpXdGH0xQHW9wXVv6EW8VQb8Tgrb8jRSmciVw3fekb /B64qbd3ev/4zSYPpk8X3W8/zeGgXFhPSfie9kIMeYIJZHNDUYDq5NvTEVipXTQt 5Dyrg5vsHfaehfah15+M//+jnhug7tLsCpgojN5hCHjvkAHkLHExib4kVyDbc8Ns 0z1BgXzMv4IQYw== -----END CERTIFICATE-----Generated at Tue Dec 23 22:27:38 2025 by rpki-client