This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft File: YTXB97cUDIcufz_zRitO3GMddnQ.mft (raw, json) Hash identifier: O5DstxoLVyFGl343O07a/gWX9iYdDsaMaf/81s3jlVs= Subject key identifier: C3:7E:5F:0D:6F:72:BB:84:11:2F:A2:AF:97:B4:75:64:63:6F:18:D5 Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74 Certificate issuer: /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674 Certificate serial: 019B1A29061BC02E8D3341BB2E05E0951897 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft Manifest number: 1341 Signing time: Sun 14 Dec 2025 00:00:54 +0000 Manifest this update: Sun 14 Dec 2025 00:00:54 +0000 Manifest next update: Mon 15 Dec 2025 00:00:54 +0000 Files and hashes: 1: 63TdjH6W107on2R0OsWADBs0on8.roa (hash: Ncx3bdjsiwwzAHtwjbAlakIAyaghqw6YvVL5UElIrQk=) 2: YTXB97cUDIcufz_zRitO3GMddnQ.crl (hash: ahwjRg1bOtq2+HXGzLpas1RilvqcpvbrlFKiHaHOD6M=) 3: fWsFtqjlg1LQ_p_q5K_2GnL8QEw.roa (hash: CoDBOpj4/7ndyh9Jvl792nll1Mc+xm7ePsUPRUs36YE=) 4: rJW6voa1Wjy_FJWB-mYHdAKiSVs.roa (hash: vjUPxR8jUNlJ30WRpjQpZExmSVG2787XG5OfBnV64ZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:06:1b:c0:2e:8d:33:41:bb:2e:05:e0:95:18:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674 Validity Not Before: Dec 14 00:00:54 2025 GMT Not After : Dec 15 00:00:54 2025 GMT Subject: CN=c37e5f0d6f72bb84112fa2af97b47564636f18d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2d:0d:63:2b:7a:08:ea:39:4d:92:2b:f4:88: 07:f4:82:d9:f1:41:62:36:95:06:13:4a:d3:c0:37: ca:85:c2:80:13:a6:06:ef:31:da:80:95:f9:f1:a9: ab:7b:55:25:54:81:6b:22:52:9a:aa:4b:a8:4f:9a: 0e:99:24:9f:86:6f:e9:70:d6:d3:09:0b:00:8c:5b: e1:5e:8f:3e:4a:c3:23:12:60:64:48:90:d8:99:d8: d2:7d:de:bf:f8:cf:04:b4:c6:92:7d:43:48:a5:83: 2a:17:4a:06:0b:17:27:38:d0:76:36:25:20:ed:1a: 05:fb:5c:12:7c:ae:35:64:9f:66:e9:50:97:5d:79: 09:f8:95:d7:36:c9:73:e4:8c:2f:e3:8a:92:2c:36: 9b:4d:8a:c0:d9:6d:7a:2b:e8:07:3c:53:e7:f7:f7: 6f:09:80:ff:6f:60:9e:b1:26:34:ff:e3:1b:3d:e5: fb:eb:31:14:0f:d4:e9:aa:68:69:b6:51:6a:e6:c0: c9:32:dc:8e:20:bd:55:bb:e6:0d:47:0a:10:15:df: cd:08:54:5f:f0:46:96:a3:aa:54:80:33:4c:17:4a: b1:b0:9e:3f:c0:24:9e:87:9f:26:62:53:0c:46:f6: 07:cf:4a:8a:61:55:c2:f1:f3:fa:43:fc:b6:62:5a: 55:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7E:5F:0D:6F:72:BB:84:11:2F:A2:AF:97:B4:75:64:63:6F:18:D5 X509v3 Authority Key Identifier: keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:2e:0b:95:c4:f1:ea:6e:22:17:ee:ea:7d:cf:83:43:29:6b: 45:8d:ea:bd:f3:c2:20:cb:f9:02:42:1c:d5:7c:ac:ca:80:d8: 71:ba:b2:6e:08:cf:ff:de:0b:9b:86:58:a6:98:f5:df:c7:37: 8d:a4:34:ff:e9:87:3b:b7:56:ec:b6:22:59:f5:c9:75:25:56: c9:ff:59:e0:cd:a4:98:bb:ff:2d:9c:c7:5c:fd:7a:19:2f:57: b3:cb:5f:78:81:68:67:48:15:69:e1:42:15:0b:93:c4:cf:1b: 0b:7e:b9:e8:43:dc:31:ad:bf:8e:71:b4:b9:58:2b:7b:d4:57: 04:b4:22:91:06:66:c3:ff:aa:2b:1a:e2:68:36:a8:ab:ba:fd: 6f:ea:d6:d4:c0:e3:79:07:0b:68:7a:51:b9:9b:92:94:53:dc: 46:13:ac:da:bc:a0:41:98:07:f4:12:ca:41:d7:b2:30:c7:b0: e7:b9:05:6c:7b:bd:0f:b1:06:04:52:96:c7:fb:02:79:28:42: 25:55:d6:b0:70:60:f0:b0:5d:8d:be:71:9c:54:22:bf:df:87: a2:f9:21:ca:5f:41:c5:56:fb:88:7c:3f:2c:49:75:54:a7:57: 23:b1:d7:fd:33:0f:42:09:65:fd:3c:26:65:f3:c1:96:3d:61: b2:d6:b6:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKQYbwC6NM0G7LgXglRiXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMzVjMWY3YjcxNDBjODcyZTdmM2ZmMzQ2MmI0ZWRjNjMx ZDc2NzQwHhcNMjUxMjE0MDAwMDU0WhcNMjUxMjE1MDAwMDU0WjAzMTEwLwYDVQQD EyhjMzdlNWYwZDZmNzJiYjg0MTEyZmEyYWY5N2I0NzU2NDYzNmYxOGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS0NYyt6COo5TZIr9IgH9ILZ8UFi NpUGE0rTwDfKhcKAE6YG7zHagJX58amre1UlVIFrIlKaqkuoT5oOmSSfhm/pcNbT CQsAjFvhXo8+SsMjEmBkSJDYmdjSfd6/+M8EtMaSfUNIpYMqF0oGCxcnONB2NiUg 7RoF+1wSfK41ZJ9m6VCXXXkJ+JXXNslz5Iwv44qSLDabTYrA2W16K+gHPFPn9/dv CYD/b2CesSY0/+MbPeX76zEUD9TpqmhptlFq5sDJMtyOIL1Vu+YNRwoQFd/NCFRf 8EaWo6pUgDNMF0qxsJ4/wCSeh58mYlMMRvYHz0qKYVXC8fP6Q/y2YlpV/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMN+Xw1vcruEES+ir5e0dWRjbxjVMB8GA1UdIwQY MBaAFGE1wfe3FAyHLn8/80YrTtxjHXZ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVRYQjk3Y1VESWN1ZnpfelJpdE8zR01kZG5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80MzNlZGYtYWFmOC00NjY5LTg3N2Mt ZTM3ODFkOGZlNzRjLzEvWVRYQjk3Y1VESWN1ZnpfelJpdE8zR01kZG5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80MzNlZGYtYWFmOC00NjY5LTg3N2MtZTM3ODFkOGZlNzRj LzEvWVRYQjk3Y1VESWN1ZnpfelJpdE8zR01kZG5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYi4LlcTx 6m4iF+7qfc+DQylrRY3qvfPCIMv5AkIc1XysyoDYcbqybgjP/94Lm4ZYppj138c3 jaQ0/+mHO7dW7LYiWfXJdSVWyf9Z4M2kmLv/LZzHXP16GS9Xs8tfeIFoZ0gVaeFC FQuTxM8bC3656EPcMa2/jnG0uVgre9RXBLQikQZmw/+qKxriaDaoq7r9b+rW1MDj eQcLaHpRuZuSlFPcRhOs2rygQZgH9BLKQdeyMMew57kFbHu9D7EGBFKWx/sCeShC JVXWsHBg8LBdjb5xnFQiv9+Hovkhyl9BxVb7iHw/LEl1VKdXI7HX/TMPQgll/Twm ZfPBlj1hsta2UQ== -----END CERTIFICATE-----Generated at Sun Dec 14 01:58:51 2025 by rpki-client