This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft File: YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft (raw, json) Hash identifier: +konSiror6Sx24ubquqqJlofFQcKtOCRx1ZyrmLrel0= Subject key identifier: 81:7B:C8:7A:9E:57:DF:0F:16:F4:33:A1:C9:EB:B3:BC:5B:C0:82:FE Authority key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53 Certificate issuer: /CN=62117a1e6f699c322b6b983494f42c2209127553 Certificate serial: 019B5A1AD708E843FA091EC48F6A7264C456 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 10:01:06 +0000 Manifest this update: Fri 26 Dec 2025 10:01:06 +0000 Manifest next update: Sat 27 Dec 2025 10:01:06 +0000 Files and hashes: 1: IwNnMumHuRi32I7ksfRxTLj5SGU.roa (hash: CRwLwpZrZ0WbgGxRhGmhgHh8+Fm0a0d8zmfWAizQF84=) 2: X1s8zvuHJ81hdIgP19R2zatnWy0.roa (hash: zIp2gzAGnioL2V7YTZ/nOIwk4pKLhlEEq3/Z8mzK0KQ=) 3: YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl (hash: 3YCfGDYAVpWR7hTUa46envAXoFc2jiqfs1zLlkrGuUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:d7:08:e8:43:fa:09:1e:c4:8f:6a:72:64:c4:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62117a1e6f699c322b6b983494f42c2209127553 Validity Not Before: Dec 26 10:01:06 2025 GMT Not After : Dec 27 10:01:06 2025 GMT Subject: CN=817bc87a9e57df0f16f433a1c9ebb3bc5bc082fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4a:88:3f:95:38:85:f7:6e:d6:ef:40:15:40: a5:db:2e:d4:f2:24:93:9d:0b:75:45:da:21:43:d5: 43:2a:65:e7:15:0b:2b:3e:e2:b3:16:10:f2:50:d1: 92:3b:f7:b4:ae:05:fc:a5:7a:cd:ca:99:23:5b:20: bb:8a:35:5d:66:d3:15:56:da:57:13:a2:64:6a:cc: a4:8a:7b:32:82:e2:52:85:28:01:fc:bf:3b:8b:58: 0c:05:b6:ce:18:ac:37:26:4d:d6:e9:38:72:f3:e1: 74:a4:80:90:43:0d:34:f3:05:b9:8c:86:1d:c4:da: a3:05:23:1b:5c:27:49:a0:89:aa:e9:fb:fa:14:f0: 21:06:6a:6f:bb:fb:54:3b:9e:2f:2c:fd:d6:e5:cf: 03:81:bd:2d:5f:6f:5b:e6:65:51:42:c1:78:4a:e7: 4a:10:fa:cc:e2:5f:71:2f:88:c0:00:f1:26:a7:7a: 90:dd:23:7f:a0:55:02:cf:23:c8:06:e1:f3:f9:93: cc:87:f4:a5:d6:b0:bc:f2:78:e8:47:c6:71:a2:f2: df:bf:d6:7a:de:d7:11:ce:ac:74:53:08:ab:79:dc: d4:21:58:ec:31:9a:08:c8:9c:57:29:8b:20:ae:c7: d5:47:b6:06:94:0b:aa:28:c7:40:a1:73:d7:72:0e: 82:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7B:C8:7A:9E:57:DF:0F:16:F4:33:A1:C9:EB:B3:BC:5B:C0:82:FE X509v3 Authority Key Identifier: keyid:62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:f1:8e:42:ea:67:de:c5:1c:4f:03:66:9a:62:6f:b4:5a:0b: 07:9c:54:d8:4c:d2:d0:62:ea:ab:ea:5f:43:d5:84:dd:8b:6f: 16:76:28:ac:9b:2c:fe:85:f8:37:ca:73:73:6c:22:3a:6f:c6: e3:97:9b:c8:d8:c5:8e:c0:9b:9f:a5:67:35:86:63:99:f4:5e: 43:bc:52:c5:ba:06:23:8a:d3:31:dd:8b:e9:4c:eb:2f:07:20: a9:94:05:41:01:15:32:00:7b:8f:15:93:c3:36:1e:f9:73:62: a3:89:be:36:e5:74:4a:a2:e8:98:86:2c:ad:0d:bf:f2:87:a4: d2:4e:e5:a3:c0:a9:7b:60:26:bd:82:f4:20:d9:c5:2b:da:7a: 34:46:95:ce:c2:81:0a:c5:46:a6:69:4f:05:23:b7:90:29:21: 4a:88:a6:2f:fb:62:7f:2d:3a:b0:49:5b:59:25:85:8e:11:dc: f0:c0:97:3f:13:f7:b4:3e:17:2b:39:2b:f9:d8:b8:69:cb:b6: 13:01:21:8e:d0:42:a1:f3:2d:fa:2d:14:27:c2:2e:16:4b:8d: e0:f0:a0:bd:73:a0:6e:82:5c:3b:55:ad:b2:77:75:b8:72:7c: d1:97:fb:c7:c7:9f:fa:06:81:be:bc:15:3c:4d:fb:a8:2f:31: 71:30:e5:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGtcI6EP6CR7Ej2pyZMRWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMTE3YTFlNmY2OTljMzIyYjZiOTgzNDk0ZjQyYzIyMDkx Mjc1NTMwHhcNMjUxMjI2MTAwMTA2WhcNMjUxMjI3MTAwMTA2WjAzMTEwLwYDVQQD Eyg4MTdiYzg3YTllNTdkZjBmMTZmNDMzYTFjOWViYjNiYzViYzA4MmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkqIP5U4hfdu1u9AFUCl2y7U8iST nQt1RdohQ9VDKmXnFQsrPuKzFhDyUNGSO/e0rgX8pXrNypkjWyC7ijVdZtMVVtpX E6JkasykinsyguJShSgB/L87i1gMBbbOGKw3Jk3W6Thy8+F0pICQQw008wW5jIYd xNqjBSMbXCdJoImq6fv6FPAhBmpvu/tUO54vLP3W5c8Dgb0tX29b5mVRQsF4SudK EPrM4l9xL4jAAPEmp3qQ3SN/oFUCzyPIBuHz+ZPMh/Sl1rC88njoR8ZxovLfv9Z6 3tcRzqx0UwiredzUIVjsMZoIyJxXKYsgrsfVR7YGlAuqKMdAoXPXcg6CfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIF7yHqeV98PFvQzocnrs7xbwIL+MB8GA1UdIwQY MBaAFGIReh5vaZwyK2uYNJT0LCIJEnVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWhGNkhtOXBuRElyYTVnMGxQUXNJZ2tTZFZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83MGVlMjEtZDkzZi00YTcxLTg0NzQt NWJjYzg0NThhYTJjLzEvWWhGNkhtOXBuRElyYTVnMGxQUXNJZ2tTZFZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS83MGVlMjEtZDkzZi00YTcxLTg0NzQtNWJjYzg0NThhYTJj LzEvWWhGNkhtOXBuRElyYTVnMGxQUXNJZ2tTZFZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/GOQupn 3sUcTwNmmmJvtFoLB5xU2EzS0GLqq+pfQ9WE3YtvFnYorJss/oX4N8pzc2wiOm/G 45ebyNjFjsCbn6VnNYZjmfReQ7xSxboGI4rTMd2L6UzrLwcgqZQFQQEVMgB7jxWT wzYe+XNio4m+NuV0SqLomIYsrQ2/8oek0k7lo8Cpe2AmvYL0INnFK9p6NEaVzsKB CsVGpmlPBSO3kCkhSoimL/tify06sElbWSWFjhHc8MCXPxP3tD4XKzkr+di4acu2 EwEhjtBCofMt+i0UJ8IuFkuN4PCgvXOgboJcO1Wtsnd1uHJ80Zf7x8ef+gaBvrwV PE37qC8xcTDl+w== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:58 2025 by rpki-client