This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft File: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft (raw, json) Hash identifier: UhZNjcNh1sJngmxAhvFp9vDD/fbZ4o3S7i0Tv4w3UZc= Subject key identifier: EF:1B:AF:83:00:32:49:F0:5F:2B:DA:86:CD:7A:A5:25:D4:81:BD:E0 Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e Certificate serial: 019B251A441781D6DA3826357A0791EEF75C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft Manifest number: 17DD Signing time: Tue 16 Dec 2025 03:00:36 +0000 Manifest this update: Tue 16 Dec 2025 03:00:36 +0000 Manifest next update: Wed 17 Dec 2025 03:00:36 +0000 Files and hashes: 1: BH4JiNSau-Drbx1LaCjE1x1v30A.roa (hash: TbmERc+CgiPXJOmSpqLjpiM3C2RIrXoRaOqYGrV/7rc=) 2: J2m2ISQHz5hJjKyZkS2pJF0KRqI.roa (hash: 6G3IQ5SdI2eYbxPznkHPeUYzIj1Gq0tlz/lJz4R+v2c=) 3: KomOW-f7nkXyA6zp9usghp6DZAI.roa (hash: Rlm5FL44HCYTCzeeRWFpNgyaz/17csui71bsmAvCmko=) 4: OVVGVOkQTuoF7N6T_CK7fdKH4AA.roa (hash: yfK0eZGByG4055Lr1MzGeMYuSR5WRcTowVu+x++4W0o=) 5: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl (hash: UN6g+c7VCHY0IOWxK0wgezybKaYw/zId1sykIvkk7pI=) 6: bePIOwHo2yd_SzOvruKwF9356uc.roa (hash: AE/WNLdQCiM+hKgplC+GUSqytNFuyhj+98knbmTnMvA=) 7: fj1r2eQRURbfHzLqz1r8LUH9mVA.roa (hash: RTFZ5yGadIatm8cDgVUSamVjEv2odxS8PZJ1SetFXHU=) 8: v3x5iNNrmiatDTviLrTJBlnNTao.roa (hash: y4jZmJDEPRDwVYIDs+oTsrk+QPXd/ySPMMJZ/R51xOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:1a:44:17:81:d6:da:38:26:35:7a:07:91:ee:f7:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e Validity Not Before: Dec 16 03:00:36 2025 GMT Not After : Dec 17 03:00:36 2025 GMT Subject: CN=ef1baf83003249f05f2bda86cd7aa525d481bde0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:77:6e:e6:08:b8:ef:59:f0:73:6f:0d:c6:70: 3f:24:f4:28:60:8e:3b:3a:9d:55:7c:4b:0b:0b:66: 8e:3f:59:c3:4d:73:52:40:30:29:0a:69:d4:a6:ce: 18:f4:3e:12:5f:44:73:34:12:fa:84:e6:7e:64:b9: 43:5b:cb:c2:fd:e6:8a:2b:1c:2f:86:81:84:89:6c: fa:bc:c8:72:63:84:60:65:87:c4:78:0d:af:80:13: ba:53:e2:f5:9d:80:11:3b:db:8c:f3:23:22:5e:49: b4:58:4a:a6:32:60:70:c8:a8:c9:84:34:b2:9f:6d: c7:fa:55:3b:bc:18:0d:d8:11:74:da:a4:10:97:7c: e2:0f:da:f3:62:8d:db:d8:ca:37:ae:54:02:b6:e9: 84:0a:8c:4b:91:c2:1f:47:5d:59:0f:30:1f:1d:c5: b2:67:bf:45:93:3b:98:80:4f:99:ad:41:3d:24:04: b4:c1:cd:25:a5:a1:80:4d:e9:e9:0a:e6:f9:6d:89: 58:ae:38:2b:8c:20:5d:f7:65:c0:ac:7d:af:5a:53: 44:0d:28:80:d4:1b:bd:55:0d:27:ea:a8:75:e8:16: 3f:8c:dc:92:2d:de:f7:45:91:2c:ee:a3:50:cb:b6: 59:97:ef:db:e1:8d:da:cf:25:8e:f2:73:59:31:15: 8e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1B:AF:83:00:32:49:F0:5F:2B:DA:86:CD:7A:A5:25:D4:81:BD:E0 X509v3 Authority Key Identifier: keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:55:8d:4b:4c:af:69:46:da:26:5a:61:40:df:1f:3b:28:5c: 04:44:69:ca:5b:df:5d:52:fb:a8:d1:f2:f6:72:c1:cd:80:3e: 64:ee:34:4d:e0:3e:ca:f1:ef:f4:af:30:a6:72:ae:b7:d7:ec: 8b:b7:bf:e3:4b:98:cb:63:a7:5b:76:d7:2c:e7:a7:76:a5:34: 70:2a:29:05:c4:b3:b9:92:06:95:f2:30:22:30:9a:79:5f:79: fc:28:66:54:38:4a:ac:8d:10:ce:32:1a:e7:b8:48:70:fe:79: 31:b7:29:75:f8:0f:1c:76:07:30:42:ee:58:99:c4:0a:e9:23: 15:f8:b3:5e:7c:de:f4:f6:81:cf:b1:a2:ee:89:e5:d6:b1:8f: 09:90:2a:c5:d4:22:b0:1d:05:bc:2d:dc:4c:53:32:f1:4d:5b: e2:24:fc:34:86:38:a4:26:b9:8f:1a:56:06:64:6a:ca:bf:83: 8a:9c:8e:3b:05:6c:a0:1e:16:0e:8d:b4:bb:be:da:2c:ca:fc: a5:cc:d9:a0:d7:94:18:63:8f:d7:8b:79:c9:38:da:b0:0a:9a: 65:f3:34:54:12:9c:ed:3c:78:35:1b:7e:3e:9a:a7:ba:89:39: 70:53:b0:6f:39:2c:65:97:d7:67:25:02:4c:f2:de:d9:57:66: e8:2e:d8:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslGkQXgdbaOCY1egeR7vdcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNGFkNDUzNWFjODhkZDUzNDE5OWYyYTcyNjA5NWFmNzFh ZmU0NGUwHhcNMjUxMjE2MDMwMDM2WhcNMjUxMjE3MDMwMDM2WjAzMTEwLwYDVQQD EyhlZjFiYWY4MzAwMzI0OWYwNWYyYmRhODZjZDdhYTUyNWQ0ODFiZGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHdu5gi471nwc28NxnA/JPQoYI47 Op1VfEsLC2aOP1nDTXNSQDApCmnUps4Y9D4SX0RzNBL6hOZ+ZLlDW8vC/eaKKxwv hoGEiWz6vMhyY4RgZYfEeA2vgBO6U+L1nYARO9uM8yMiXkm0WEqmMmBwyKjJhDSy n23H+lU7vBgN2BF02qQQl3ziD9rzYo3b2Mo3rlQCtumECoxLkcIfR11ZDzAfHcWy Z79FkzuYgE+ZrUE9JAS0wc0lpaGATenpCub5bYlYrjgrjCBd92XArH2vWlNEDSiA 1Bu9VQ0n6qh16BY/jNySLd73RZEs7qNQy7ZZl+/b4Y3azyWO8nNZMRWO/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8br4MAMknwXyvahs16pSXUgb3gMB8GA1UdIwQY MBaAFGJK1FNayI3VNBmfKnJgla9xr+ROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTct ZmI1OTQ5ODA4ZGRjLzEvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTctZmI1OTQ5ODA4ZGRj LzEvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAVWNS0yv aUbaJlphQN8fOyhcBERpylvfXVL7qNHy9nLBzYA+ZO40TeA+yvHv9K8wpnKut9fs i7e/40uYy2OnW3bXLOendqU0cCopBcSzuZIGlfIwIjCaeV95/ChmVDhKrI0QzjIa 57hIcP55MbcpdfgPHHYHMELuWJnECukjFfizXnze9PaBz7Gi7onl1rGPCZAqxdQi sB0FvC3cTFMy8U1b4iT8NIY4pCa5jxpWBmRqyr+DipyOOwVsoB4WDo20u77aLMr8 pczZoNeUGGOP14t5yTjasAqaZfM0VBKc7Tx4NRt+Ppqnuok5cFOwbzksZZfXZyUC TPLe2Vdm6C7YgA== -----END CERTIFICATE-----Generated at Tue Dec 16 10:39:03 2025 by rpki-client