This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft File: YTIzl9blKd_wbHzxTRdg1ucGqm8.mft (raw, json) Hash identifier: OLwWp5UAAGtSlFWdwvtswo027oAsh5DG+seEsBoocTw= Subject key identifier: B1:4D:E9:B0:FF:2E:E9:17:BE:AD:BB:82:C2:4A:F2:D8:67:34:FE:E8 Authority key identifier: 61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F Certificate issuer: /CN=61323397d6e529dff06c7cf14d1760d6e706aa6f Certificate serial: 019B484B614998D4DE34F718821C6B789B41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft Manifest number: 044C Signing time: Mon 22 Dec 2025 23:00:58 +0000 Manifest this update: Mon 22 Dec 2025 23:00:58 +0000 Manifest next update: Tue 23 Dec 2025 23:00:58 +0000 Files and hashes: 1: YTIzl9blKd_wbHzxTRdg1ucGqm8.crl (hash: 2n01bWESGDeRzpfJ45uGbq+nwWU2KEVS+XrXgdswoXQ=) 2: kGTMJp8YWdhCRnyfOKgxhKChBJQ.roa (hash: ZVU5RQX8MRgj32JsdxWQo2xXu6d3VcvuzIOlJ8aVzuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:61:49:98:d4:de:34:f7:18:82:1c:6b:78:9b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61323397d6e529dff06c7cf14d1760d6e706aa6f Validity Not Before: Dec 22 23:00:58 2025 GMT Not After : Dec 23 23:00:58 2025 GMT Subject: CN=b14de9b0ff2ee917beadbb82c24af2d86734fee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d0:18:e7:5a:48:ed:47:b3:1c:b8:33:13:6a: a5:0c:ff:7b:ef:9c:d4:65:65:95:a8:04:11:bc:4a: 5a:47:81:f3:35:05:93:a6:f7:87:11:16:66:47:60: 0a:5f:a5:89:6b:a7:23:ef:49:be:37:ff:3a:c3:09: 59:26:d0:51:5c:4c:b7:db:01:8c:6c:3b:e9:51:5b: 94:07:1f:ca:bd:a1:93:82:3b:c3:8a:7d:29:56:01: 5f:48:b1:58:14:ed:06:fd:58:23:42:ae:c9:ff:ee: eb:3c:f9:a0:6e:7d:51:4f:a7:61:54:c9:d7:47:59: 63:23:d7:1b:1d:05:3b:f4:0f:92:e7:56:f6:74:78: b3:f5:20:d8:29:98:f4:28:60:b6:c5:94:9f:19:30: d3:68:33:4c:20:4f:ac:29:f7:c4:ac:0e:16:d1:87: 7a:7f:49:28:f3:b9:61:7b:af:39:02:de:6b:6f:fc: 72:a1:7e:8d:03:0a:9a:ef:b9:3d:40:fe:38:a3:f9: be:fa:91:b9:91:91:dd:67:a5:d5:ed:2b:8f:4a:79: db:d0:07:ef:cc:7f:64:3b:67:73:71:38:7a:54:ab: f1:c5:2b:c3:7b:85:67:a1:3f:e6:09:8c:15:e1:47: 51:5b:da:9e:33:1e:d3:5c:b1:76:bd:a5:f7:ac:30: 4b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4D:E9:B0:FF:2E:E9:17:BE:AD:BB:82:C2:4A:F2:D8:67:34:FE:E8 X509v3 Authority Key Identifier: keyid:61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:4f:56:75:17:86:bb:39:65:ff:63:a5:c3:09:6e:fc:01:ad: 74:36:b9:c6:40:59:20:cf:c6:9c:73:a0:96:22:09:5b:3f:99: da:8f:2b:e9:e8:de:42:ac:86:b7:7d:65:03:92:f2:1e:f9:7f: f3:05:e2:f4:02:d4:fd:1f:6b:13:51:33:67:b7:71:4a:fb:6e: db:05:0e:d9:1a:48:63:fa:8f:22:49:58:73:7a:8f:47:a5:52: 8c:0b:38:54:7c:e9:df:bf:18:88:c6:65:02:4e:91:a3:d2:d8: b0:33:bd:7d:95:81:c6:62:52:90:6e:55:16:bb:db:43:0d:48: 52:91:ff:79:d1:53:01:ef:92:40:92:2f:26:e7:06:ee:49:ca: 5b:db:6d:a0:62:61:ba:26:12:56:2e:97:90:c8:e5:c9:34:e8: ec:4c:33:2c:a7:32:87:47:94:7e:4d:47:ee:79:77:98:d0:8b: cd:f5:83:ed:7e:cd:ac:3a:da:49:8c:08:fd:15:6c:25:1d:00: 1a:27:90:2c:18:20:b8:60:14:0c:2d:8c:88:78:9f:1a:31:79: 1c:a9:e8:23:c0:ff:6a:a5:d2:5f:44:8b:8e:45:2b:23:ad:71: a3:ab:6b:17:da:da:7f:64:ee:38:98:69:3f:32:e1:4b:c9:2c: ea:fe:50:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIS2FJmNTeNPcYghxreJtBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMzIzMzk3ZDZlNTI5ZGZmMDZjN2NmMTRkMTc2MGQ2ZTcw NmFhNmYwHhcNMjUxMjIyMjMwMDU4WhcNMjUxMjIzMjMwMDU4WjAzMTEwLwYDVQQD EyhiMTRkZTliMGZmMmVlOTE3YmVhZGJiODJjMjRhZjJkODY3MzRmZWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtAY51pI7UezHLgzE2qlDP9775zU ZWWVqAQRvEpaR4HzNQWTpveHERZmR2AKX6WJa6cj70m+N/86wwlZJtBRXEy32wGM bDvpUVuUBx/KvaGTgjvDin0pVgFfSLFYFO0G/VgjQq7J/+7rPPmgbn1RT6dhVMnX R1ljI9cbHQU79A+S51b2dHiz9SDYKZj0KGC2xZSfGTDTaDNMIE+sKffErA4W0Yd6 f0ko87lhe685At5rb/xyoX6NAwqa77k9QP44o/m++pG5kZHdZ6XV7SuPSnnb0Afv zH9kO2dzcTh6VKvxxSvDe4VnoT/mCYwV4UdRW9qeMx7TXLF2vaX3rDBL/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFN6bD/LukXvq27gsJK8thnNP7oMB8GA1UdIwQY MBaAFGEyM5fW5Snf8Gx88U0XYNbnBqpvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVRJemw5YmxLZF93Ykh6eFRSZGcxdWNHcW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9iYTM5MWItY2I4OS00ZTIxLTk0NGEt ZWYzM2Q4NWE0YTg2LzEvWVRJemw5YmxLZF93Ykh6eFRSZGcxdWNHcW04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9iYTM5MWItY2I4OS00ZTIxLTk0NGEtZWYzM2Q4NWE0YTg2 LzEvWVRJemw5YmxLZF93Ykh6eFRSZGcxdWNHcW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANk9WdReG uzll/2Olwwlu/AGtdDa5xkBZIM/GnHOgliIJWz+Z2o8r6ejeQqyGt31lA5LyHvl/ 8wXi9ALU/R9rE1EzZ7dxSvtu2wUO2RpIY/qPIklYc3qPR6VSjAs4VHzp378YiMZl Ak6Ro9LYsDO9fZWBxmJSkG5VFrvbQw1IUpH/edFTAe+SQJIvJucG7knKW9ttoGJh uiYSVi6XkMjlyTTo7EwzLKcyh0eUfk1H7nl3mNCLzfWD7X7NrDraSYwI/RVsJR0A GieQLBgguGAUDC2MiHifGjF5HKnoI8D/aqXSX0SLjkUrI61xo6trF9raf2TuOJhp PzLhS8ks6v5QxA== -----END CERTIFICATE-----Generated at Tue Dec 23 04:15:58 2025 by rpki-client