This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft File: YRBtLf9xFvNat_oQJ1pF44O85SM.mft (raw, json) Hash identifier: Zl/7rW6RUDk7WsxkbGg7PPhfD9GjxBmRzDRkUs83j8c= Subject key identifier: D9:FD:21:40:D3:AE:97:FA:7D:90:D8:D4:13:36:B6:0A:B9:BC:1D:05 Authority key identifier: 61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23 Certificate issuer: /CN=61106d2dff7116f35ab7fa10275a45e383bce523 Certificate serial: 019B0E9280DE910548CF7930B59459E92F49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft Manifest number: 1645 Signing time: Thu 11 Dec 2025 18:00:40 +0000 Manifest this update: Thu 11 Dec 2025 18:00:40 +0000 Manifest next update: Fri 12 Dec 2025 18:00:40 +0000 Files and hashes: 1: 0TtFz6wVP0jqaQNw01V55drmS3k.roa (hash: TMVD5m2P0IJi74IF8JJhCFdWfhDxP8MQCO9QQGNNZr4=) 2: YRBtLf9xFvNat_oQJ1pF44O85SM.crl (hash: tX43Y06vqJHjKCBa4Yt6jh9hOnsPLTpkfCbDdTeacRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:80:de:91:05:48:cf:79:30:b5:94:59:e9:2f:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61106d2dff7116f35ab7fa10275a45e383bce523 Validity Not Before: Dec 11 18:00:40 2025 GMT Not After : Dec 12 18:00:40 2025 GMT Subject: CN=d9fd2140d3ae97fa7d90d8d41336b60ab9bc1d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a8:5f:f3:e1:f3:b6:06:fa:84:d0:77:03:7f: ab:6f:e1:4f:85:26:09:73:db:f5:a8:c6:db:1e:36: e6:df:7b:7d:e7:7c:a2:00:91:c2:20:7e:a4:53:07: 1f:5c:74:02:9a:8e:73:8a:50:30:1b:d0:63:bf:c9: f7:51:ef:3c:2c:1f:e9:fe:06:9b:42:e8:f3:2a:db: 05:10:a1:bd:cc:0e:ea:47:7f:11:17:fc:ed:9c:cb: 11:d3:66:f6:70:df:93:94:26:8b:5a:af:f8:24:0f: de:0a:5b:71:da:90:72:f1:13:dc:bb:39:fd:7b:ff: 8c:ba:02:9d:72:74:62:7e:c4:5b:70:1e:67:17:c3: 56:52:45:c2:a3:5d:5b:62:38:be:da:9e:b7:a0:c5: 7d:45:b8:6a:00:66:41:80:fa:cd:eb:1b:17:87:94: 84:d9:fe:13:62:37:29:3c:92:aa:3a:b6:19:88:bc: 32:f1:da:06:7e:40:7e:5a:9a:25:4f:d1:6f:34:f6: 46:c2:3b:5b:94:bd:53:1e:6d:ca:dd:e5:8e:f1:89: 73:9f:75:b8:47:06:39:88:71:b7:92:21:4a:0e:78: 14:04:32:57:4c:08:77:4a:97:ea:3d:13:fc:a1:e0: 9f:15:74:c1:f3:19:c8:a4:72:c0:00:6f:0c:4b:17: 68:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FD:21:40:D3:AE:97:FA:7D:90:D8:D4:13:36:B6:0A:B9:BC:1D:05 X509v3 Authority Key Identifier: keyid:61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:e5:d5:b4:fe:b7:b6:4a:7f:04:e9:52:cc:bb:e6:d6:32:e1: dc:ec:e0:fd:50:0a:b1:99:1c:08:cf:f9:ee:7e:70:f7:89:44: 5c:d1:55:3a:c6:e5:66:07:67:05:43:7e:fa:74:9d:c2:38:ff: 62:9b:1c:9e:82:5b:0a:d8:a8:09:ff:ff:5d:34:9d:0b:36:42: 9b:03:3f:d1:89:24:36:01:a1:b8:8f:58:01:82:80:99:49:74: 94:2c:68:03:80:a4:3e:50:ba:92:41:d6:a5:b4:24:fe:fa:e9: 66:f1:19:5e:e3:7d:6a:c4:cf:db:89:1e:d8:03:b4:af:87:ff: 79:15:7d:38:0f:0d:35:eb:22:b1:f5:8f:a9:45:8b:f8:4d:e1: 0a:12:f4:3c:04:09:14:d6:b0:ce:a8:55:fe:4b:fa:19:46:32: 7e:91:26:61:f3:48:84:74:5d:70:73:1b:26:97:35:b1:29:4f: 25:3e:64:4f:82:63:83:1c:e1:e5:66:37:e3:30:5e:b8:75:84: 0c:15:41:0f:62:95:93:4d:c1:f0:2c:75:ea:63:60:d1:0b:ed: 70:e2:71:08:99:6d:b8:6f:ad:b2:df:0e:da:b5:51:29:3d:98: 34:4b:4c:4b:9b:58:b8:da:c7:3e:96:65:df:d4:04:10:7f:12: 27:bf:81:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkoDekQVIz3kwtZRZ6S9JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMTA2ZDJkZmY3MTE2ZjM1YWI3ZmExMDI3NWE0NWUzODNi Y2U1MjMwHhcNMjUxMjExMTgwMDQwWhcNMjUxMjEyMTgwMDQwWjAzMTEwLwYDVQQD EyhkOWZkMjE0MGQzYWU5N2ZhN2Q5MGQ4ZDQxMzM2YjYwYWI5YmMxZDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKhf8+Hztgb6hNB3A3+rb+FPhSYJ c9v1qMbbHjbm33t953yiAJHCIH6kUwcfXHQCmo5zilAwG9Bjv8n3Ue88LB/p/gab QujzKtsFEKG9zA7qR38RF/ztnMsR02b2cN+TlCaLWq/4JA/eCltx2pBy8RPcuzn9 e/+MugKdcnRifsRbcB5nF8NWUkXCo11bYji+2p63oMV9RbhqAGZBgPrN6xsXh5SE 2f4TYjcpPJKqOrYZiLwy8doGfkB+WpolT9FvNPZGwjtblL1THm3K3eWO8Ylzn3W4 RwY5iHG3kiFKDngUBDJXTAh3SpfqPRP8oeCfFXTB8xnIpHLAAG8MSxdovwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNn9IUDTrpf6fZDY1BM2tgq5vB0FMB8GA1UdIwQY MBaAFGEQbS3/cRbzWrf6ECdaReODvOUjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVJCdExmOXhGdk5hdF9vUUoxcEY0NE84NVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hMTZlYTUtMzg2Ny00NDA2LTlmMmEt YTQ5NDRlOTYyNWMwLzEvWVJCdExmOXhGdk5hdF9vUUoxcEY0NE84NVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9hMTZlYTUtMzg2Ny00NDA2LTlmMmEtYTQ5NDRlOTYyNWMw LzEvWVJCdExmOXhGdk5hdF9vUUoxcEY0NE84NVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKeXVtP63 tkp/BOlSzLvm1jLh3Ozg/VAKsZkcCM/57n5w94lEXNFVOsblZgdnBUN++nSdwjj/ YpscnoJbCtioCf//XTSdCzZCmwM/0YkkNgGhuI9YAYKAmUl0lCxoA4CkPlC6kkHW pbQk/vrpZvEZXuN9asTP24ke2AO0r4f/eRV9OA8NNesisfWPqUWL+E3hChL0PAQJ FNawzqhV/kv6GUYyfpEmYfNIhHRdcHMbJpc1sSlPJT5kT4Jjgxzh5WY34zBeuHWE DBVBD2KVk03B8Cx16mNg0QvtcOJxCJltuG+tst8O2rVRKT2YNEtMS5tYuNrHPpZl 39QEEH8SJ7+Bxw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:13:30 2025 by rpki-client