This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft File: YtGQsjjZeveQC9y9AjBLeC_8ryo.mft (raw, json) Hash identifier: CRExnBtJm+Omw1ewtS8aTDZ71WwUetxB0+FeTXTE0rI= Subject key identifier: BA:52:8C:82:45:5A:8B:C2:CE:FC:FA:45:14:AC:3B:4E:B2:2A:0A:7E Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A Certificate issuer: /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a Certificate serial: 019B38A23FD87A34ABCA61564B7D885DD176 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft Manifest number: 166D Signing time: Fri 19 Dec 2025 22:01:55 +0000 Manifest this update: Fri 19 Dec 2025 22:01:55 +0000 Manifest next update: Sat 20 Dec 2025 22:01:55 +0000 Files and hashes: 1: 1FirROPNrkHN2m5M_tWz9W6Qht8.roa (hash: 7SXTMAkSE5AfqMQSsA8zWzP5U/YDv2PQW+l2GzbvIPY=) 2: BZgRuxw6XN5JK6FOhunyeY0a9Fc.roa (hash: yKRC8CuGjayGobPtwmCDX6ktnCZk3RWj3tDYbdA547A=) 3: KidBmSJQC90WWlzzX6-raLlPkBk.roa (hash: UjIj4BCKN2Yzl+7rl6tYpEx3eAYndxpux9jsq4JXQKM=) 4: YtGQsjjZeveQC9y9AjBLeC_8ryo.crl (hash: rNsSKNVVWtNGiN+uxer4Qrwj9fw5ZZIOdfkIYO6yuc0=) 5: bx89FLLhw7rAJUcSgyNM_2tR5NI.roa (hash: 9wF6NZeg8HWtL76RaAClvvi0zdCvUo8Of7MZ27hlf8k=) 6: cx-i-vioDiOrCAaf4O-H6J9IkI4.roa (hash: H7gfl8SrS8e2GfxlOJQWxhYqdIi+GK6qhediZVZeGXM=) 7: nsMUpYJUmKjCVWCxid0cbuzTzZw.roa (hash: FEv6X45pgppY2d5V8cAE7teEJNJCVmO5qOmeqCJTHkc=) 8: oeInBg5Rwvy0Usw7V77XPYFf_kU.roa (hash: J6YiElEmKWUh1A4dZVJ86YSCT+nX2n83GfNXACazcC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:3f:d8:7a:34:ab:ca:61:56:4b:7d:88:5d:d1:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a Validity Not Before: Dec 19 22:01:55 2025 GMT Not After : Dec 20 22:01:55 2025 GMT Subject: CN=ba528c82455a8bc2cefcfa4514ac3b4eb22a0a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a5:66:09:a9:61:fc:4d:93:70:20:e9:a1:78: cd:42:e9:c8:64:06:e2:38:55:7f:bf:58:f7:30:85: 05:e0:c0:62:62:ce:a7:d0:9d:e5:32:a5:c5:72:da: 15:79:6c:c4:62:39:e1:e6:f1:e5:38:fc:d4:f5:33: 9e:8f:cc:97:d2:a2:8a:b2:e7:c5:10:9f:06:96:22: 03:14:ec:a8:70:f2:ca:cf:2b:d2:69:1e:29:a8:4f: 51:0a:7a:35:83:81:dd:28:18:f1:01:e5:ff:56:5b: 4a:5d:61:1f:b8:e1:b1:5b:8a:3e:a6:05:9e:f0:f5: cc:27:21:00:ba:e4:b0:51:05:95:1c:76:f3:44:ae: 92:4b:4d:db:91:6f:1b:5b:91:fd:95:c2:c2:ff:20: 4d:fb:dd:2b:ee:39:8c:27:bc:4d:d4:13:6f:46:71: b3:cc:1d:3c:39:0e:a0:79:f7:61:e5:44:80:39:ab: c8:07:d4:21:7c:b1:7a:27:36:8c:f6:ed:c9:de:ae: a9:c6:88:54:3b:f3:87:6b:83:7a:f8:e9:2d:bc:96: 31:b3:4e:2e:fe:b1:6c:90:35:d5:97:9f:0c:90:dc: 22:51:fd:f7:77:61:16:33:77:a4:ae:23:14:7a:33: ae:d1:a1:c5:3f:e5:0a:64:ec:4d:14:00:7a:e0:24: e5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:52:8C:82:45:5A:8B:C2:CE:FC:FA:45:14:AC:3B:4E:B2:2A:0A:7E X509v3 Authority Key Identifier: keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:e5:fa:6a:c5:4c:bd:88:9b:d2:8d:d2:0c:ba:d0:48:33:c9: 5a:07:d8:6d:a6:e3:fe:5c:34:7d:5c:1e:10:be:f4:93:b4:e8: 8e:d7:1d:16:45:de:f4:00:f0:d0:42:cb:98:ba:86:e2:b8:08: 98:c8:51:47:8d:b6:5c:e7:75:c3:de:33:a8:11:be:ab:c3:82: d9:f3:ac:df:68:58:0d:14:fb:c6:b2:58:25:43:51:59:db:aa: 95:9e:ff:5c:e4:7b:0f:58:0b:65:56:a9:5b:da:f9:20:2c:b9: 95:43:38:43:cd:04:01:12:34:24:9c:e3:e7:be:81:a9:38:5e: bd:b3:0a:36:fa:ed:a8:85:d0:01:79:5f:72:95:8e:46:14:ad: bd:20:a1:0b:63:40:9b:ec:f2:8b:88:45:c5:76:15:6d:0b:df: f6:0b:35:60:13:39:03:5e:0a:51:bc:d8:10:14:5b:89:61:c1: cf:c1:b8:69:24:47:b1:76:70:49:41:66:2e:93:cd:af:12:8b: 35:cb:53:99:38:fa:75:0b:d5:9a:75:c5:e0:dc:68:7d:7d:9e: dc:5f:08:e3:c1:8f:70:f0:7f:46:94:2d:d8:84:a3:4a:17:fa: 15:93:0d:d0:73:56:71:bc:2c:24:c2:fe:b3:40:df:77:14:72: 84:d1:b7:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oj/YejSrymFWS32IXdF2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZDE5MGIyMzhkOTdhZjc5MDBiZGNiZDAyMzA0Yjc4MmZm Y2FmMmEwHhcNMjUxMjE5MjIwMTU1WhcNMjUxMjIwMjIwMTU1WjAzMTEwLwYDVQQD EyhiYTUyOGM4MjQ1NWE4YmMyY2VmY2ZhNDUxNGFjM2I0ZWIyMmEwYTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6VmCalh/E2TcCDpoXjNQunIZAbi OFV/v1j3MIUF4MBiYs6n0J3lMqXFctoVeWzEYjnh5vHlOPzU9TOej8yX0qKKsufF EJ8GliIDFOyocPLKzyvSaR4pqE9RCno1g4HdKBjxAeX/VltKXWEfuOGxW4o+pgWe 8PXMJyEAuuSwUQWVHHbzRK6SS03bkW8bW5H9lcLC/yBN+90r7jmMJ7xN1BNvRnGz zB08OQ6gefdh5USAOavIB9QhfLF6JzaM9u3J3q6pxohUO/OHa4N6+OktvJYxs04u /rFskDXVl58MkNwiUf33d2EWM3ekriMUejOu0aHFP+UKZOxNFAB64CTlQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpSjIJFWovCzvz6RRSsO06yKgp+MB8GA1UdIwQY MBaAFGLRkLI42Xr3kAvcvQIwS3gv/K8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXRHUXNqalpldmVRQzl5OUFqQkxlQ184cnlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81YTMzN2YtYzg0My00NWY0LThkOTkt MTYzZmI3MDAzZTVkLzEvWXRHUXNqalpldmVRQzl5OUFqQkxlQ184cnlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi81YTMzN2YtYzg0My00NWY0LThkOTktMTYzZmI3MDAzZTVk LzEvWXRHUXNqalpldmVRQzl5OUFqQkxlQ184cnlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwuX6asVM vYib0o3SDLrQSDPJWgfYbabj/lw0fVweEL70k7TojtcdFkXe9ADw0ELLmLqG4rgI mMhRR422XOd1w94zqBG+q8OC2fOs32hYDRT7xrJYJUNRWduqlZ7/XOR7D1gLZVap W9r5ICy5lUM4Q80EARI0JJzj576BqThevbMKNvrtqIXQAXlfcpWORhStvSChC2NA m+zyi4hFxXYVbQvf9gs1YBM5A14KUbzYEBRbiWHBz8G4aSRHsXZwSUFmLpPNrxKL NctTmTj6dQvVmnXF4NxofX2e3F8I48GPcPB/RpQt2ISjShf6FZMN0HNWcbwsJML+ s0DfdxRyhNG35w== -----END CERTIFICATE-----Generated at Sat Dec 20 00:30:08 2025 by rpki-client