This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft File: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft (raw, json) Hash identifier: XZ7rFXyrqV2nn+ScGhO91/jeGxMcZH/JvrqAGT0Iq8Q= Subject key identifier: 2E:8D:95:DE:04:5A:84:AB:2B:55:8B:94:48:DE:CF:2C:22:F7:A0:00 Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e Certificate serial: 019B0935C2089483AA52E1ECA195ED8D6BE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft Manifest number: 17CE Signing time: Wed 10 Dec 2025 17:01:16 +0000 Manifest this update: Wed 10 Dec 2025 17:01:16 +0000 Manifest next update: Thu 11 Dec 2025 17:01:16 +0000 Files and hashes: 1: B4fPhGrpI2pg0XWKOyPE09oH6uw.roa (hash: B5g9LB9sai8M83rndIElqRt2j/OPCWFzHO4n+DMUF8M=) 2: BH4JiNSau-Drbx1LaCjE1x1v30A.roa (hash: TbmERc+CgiPXJOmSpqLjpiM3C2RIrXoRaOqYGrV/7rc=) 3: J2m2ISQHz5hJjKyZkS2pJF0KRqI.roa (hash: 6G3IQ5SdI2eYbxPznkHPeUYzIj1Gq0tlz/lJz4R+v2c=) 4: RtQKuKnTGi_65CSqe6vNMA17298.roa (hash: Lxi0kacqGh/qYSrtEzV02WDcRK48WVJ5UFgCKphFMbA=) 5: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl (hash: 27WrS6IYNN1fVpc2LO2jJgOL0MsuY/C1cOHCg8WpH8M=) 6: bePIOwHo2yd_SzOvruKwF9356uc.roa (hash: AE/WNLdQCiM+hKgplC+GUSqytNFuyhj+98knbmTnMvA=) 7: fj1r2eQRURbfHzLqz1r8LUH9mVA.roa (hash: RTFZ5yGadIatm8cDgVUSamVjEv2odxS8PZJ1SetFXHU=) 8: v3x5iNNrmiatDTviLrTJBlnNTao.roa (hash: y4jZmJDEPRDwVYIDs+oTsrk+QPXd/ySPMMJZ/R51xOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:35:c2:08:94:83:aa:52:e1:ec:a1:95:ed:8d:6b:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e Validity Not Before: Dec 10 17:01:16 2025 GMT Not After : Dec 11 17:01:16 2025 GMT Subject: CN=2e8d95de045a84ab2b558b9448decf2c22f7a000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:44:5d:93:6d:df:78:d5:30:80:88:38:1b:5b: 72:bf:16:49:a2:84:a8:e7:5b:03:54:09:5d:18:a9: da:b4:14:00:39:9c:ce:1b:13:51:53:4d:7c:9d:cb: 47:ef:ec:87:50:40:2f:a2:31:3b:99:d2:b7:64:c1: 42:fc:7a:58:05:e5:e1:21:f2:86:96:29:a3:be:bc: 09:0b:23:7f:0c:cc:0a:5c:0d:44:b3:11:4a:69:01: 74:89:5a:76:cc:ed:e3:fe:ef:18:93:ee:1c:86:d2: 0b:0f:b2:f8:48:95:8d:37:d9:bc:60:32:7c:30:96: 18:8b:aa:08:53:73:0f:3d:46:b9:22:36:22:62:05: d3:28:59:48:03:7c:91:fc:cf:80:0f:f1:6b:68:e5: a4:28:67:38:6a:0f:93:b6:c5:cc:28:35:6f:4b:87: e9:15:c6:69:8f:25:89:a7:31:55:2b:4b:71:c6:30: fd:0a:57:eb:97:31:cf:4d:c6:01:1f:74:d6:9c:79: da:5b:c5:f6:bc:df:cc:23:29:87:b1:e4:20:1c:f3: b5:02:a4:0e:b8:05:75:1a:28:98:48:2f:e7:00:01: 3b:6d:58:33:cb:b4:55:c9:25:0a:d2:6f:6c:6c:32: 7e:86:f5:13:23:f6:cc:d3:42:58:3f:31:5e:42:7f: f1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8D:95:DE:04:5A:84:AB:2B:55:8B:94:48:DE:CF:2C:22:F7:A0:00 X509v3 Authority Key Identifier: keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:43:66:cd:2b:d2:10:2b:df:c3:25:a9:66:aa:f4:4e:3d:cc: fd:13:50:9f:e3:60:a6:9c:57:63:6d:5d:bb:1f:84:39:30:7f: 34:d7:38:0e:b4:c5:f6:69:44:af:8c:3a:1f:cc:8e:8e:30:80: a6:60:0e:a3:02:de:7f:44:5f:fe:4d:13:4d:1b:7b:94:01:42: ba:ba:71:dd:3f:98:59:8f:98:44:7c:8e:03:0e:aa:1a:50:0f: af:b2:30:57:6c:c9:4e:42:7c:2c:8a:7b:fb:31:a9:eb:7e:b9: a1:67:8e:f8:79:19:cd:51:40:d4:bd:42:d7:74:e1:f2:25:95: a1:58:74:91:4f:3a:b8:3e:37:e2:3e:c5:3b:0d:45:3b:ff:fb: 64:a9:50:43:3e:7f:ea:bc:3d:04:85:fe:d8:97:c4:5f:44:70: 77:b5:ab:53:ec:a4:ba:fc:7e:2f:1f:a7:cd:9f:28:d3:46:11: 14:56:f5:38:03:48:04:4d:dc:c6:dc:b5:9d:03:7b:f1:a0:1f: d8:27:5f:14:81:9d:02:ca:cb:5f:e6:ec:94:d7:8c:07:74:88: 17:12:dc:52:47:c5:34:79:1d:18:73:ad:8e:72:06:72:bf:09: 27:a7:57:99:3d:92:bb:3f:99:bf:f4:e7:67:a3:c0:1e:02:59: 9e:a8:6e:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsJNcIIlIOqUuHsoZXtjWvkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNGFkNDUzNWFjODhkZDUzNDE5OWYyYTcyNjA5NWFmNzFh ZmU0NGUwHhcNMjUxMjEwMTcwMTE2WhcNMjUxMjExMTcwMTE2WjAzMTEwLwYDVQQD EygyZThkOTVkZTA0NWE4NGFiMmI1NThiOTQ0OGRlY2YyYzIyZjdhMDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmERdk23feNUwgIg4G1tyvxZJooSo 51sDVAldGKnatBQAOZzOGxNRU018nctH7+yHUEAvojE7mdK3ZMFC/HpYBeXhIfKG limjvrwJCyN/DMwKXA1EsxFKaQF0iVp2zO3j/u8Yk+4chtILD7L4SJWNN9m8YDJ8 MJYYi6oIU3MPPUa5IjYiYgXTKFlIA3yR/M+AD/FraOWkKGc4ag+TtsXMKDVvS4fp FcZpjyWJpzFVK0txxjD9ClfrlzHPTcYBH3TWnHnaW8X2vN/MIymHseQgHPO1AqQO uAV1GiiYSC/nAAE7bVgzy7RVySUK0m9sbDJ+hvUTI/bM00JYPzFeQn/xxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6Nld4EWoSrK1WLlEjezywi96AAMB8GA1UdIwQY MBaAFGJK1FNayI3VNBmfKnJgla9xr+ROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTct ZmI1OTQ5ODA4ZGRjLzEvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTctZmI1OTQ5ODA4ZGRj LzEvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATkNmzSvS ECvfwyWpZqr0Tj3M/RNQn+NgppxXY21dux+EOTB/NNc4DrTF9mlEr4w6H8yOjjCA pmAOowLef0Rf/k0TTRt7lAFCurpx3T+YWY+YRHyOAw6qGlAPr7IwV2zJTkJ8LIp7 +zGp6365oWeO+HkZzVFA1L1C13Th8iWVoVh0kU86uD434j7FOw1FO//7ZKlQQz5/ 6rw9BIX+2JfEX0Rwd7WrU+ykuvx+Lx+nzZ8o00YRFFb1OANIBE3cxty1nQN78aAf 2CdfFIGdAsrLX+bslNeMB3SIFxLcUkfFNHkdGHOtjnIGcr8JJ6dXmT2Suz+Zv/Tn Z6PAHgJZnqhuAg== -----END CERTIFICATE-----Generated at Wed Dec 10 19:57:54 2025 by rpki-client