This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft File: YQfi4ugXHTGdobxks2w8mF5kbCo.mft (raw, json) Hash identifier: 3tY2Ydl32HdGkjN9GHWT9iDkdOyqo1zaIhd7EA7IW3A= Subject key identifier: 2F:FA:74:C0:8D:6D:03:C2:11:7B:E1:11:15:F3:17:A3:41:67:57:15 Authority key identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A Certificate issuer: /CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a Certificate serial: 019B05C6DAEE9931717DAED225BE70870E60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft Manifest number: 1772 Signing time: Wed 10 Dec 2025 01:01:16 +0000 Manifest this update: Wed 10 Dec 2025 01:01:16 +0000 Manifest next update: Thu 11 Dec 2025 01:01:16 +0000 Files and hashes: 1: 2lOhAzlC5K0mMI8bchXi_D9R3Rw.roa (hash: wULZZ92mny/AlScu8gAC9jEDmMKs+7xfe1mY5oB7zrA=) 2: Djx6QNMoJb-cW9yeKmXUOuLZGxc.roa (hash: kSdS/jX6rRQff6lKohOcXS4NIaspZuS+tTFddGQqIfY=) 3: YQfi4ugXHTGdobxks2w8mF5kbCo.crl (hash: EpgPiEJLOggsS1gj7KUKxitc0248l8S+HbA24AFFwxY=) 4: n7FqNgB42yMNZn9HsllZdTK6BM4.roa (hash: El5LuNO8gbAy7J9nIaZ/6jvlxDskopE6EQQyObfppsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:c6:da:ee:99:31:71:7d:ae:d2:25:be:70:87:0e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a Validity Not Before: Dec 10 01:01:16 2025 GMT Not After : Dec 11 01:01:16 2025 GMT Subject: CN=2ffa74c08d6d03c2117be11115f317a341675715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:db:a6:6f:5f:f5:11:18:00:65:cc:d3:56:77: 94:c0:73:eb:57:fc:97:44:bb:29:80:4f:8c:2d:1e: 28:28:5f:fd:fa:d6:7d:4c:b3:4d:24:f8:2f:cb:f8: d4:fa:5d:d7:5f:8d:61:39:7b:bd:bd:13:8d:ab:1f: 7c:00:68:c0:35:3a:70:93:3a:0f:4e:71:17:e8:19: 88:5d:d5:a4:2f:e0:f1:cc:07:f9:6e:a3:42:ef:4b: f4:74:42:45:5a:6e:96:76:ff:60:90:4a:8d:fc:c4: 3a:dd:cd:8e:6b:90:4b:f7:f8:d6:6b:63:0c:6e:13: a0:93:3d:5a:4b:5b:6b:a2:9c:72:02:b9:1f:b3:62: 0e:99:8d:83:5c:8e:e5:9a:78:51:13:3f:38:8d:1c: cb:36:d8:0f:66:d2:c5:31:4c:67:28:da:5d:3d:69: 11:2f:9e:79:29:1f:ef:45:c7:5e:7b:10:e2:10:3e: 35:93:0c:13:8a:c3:7e:69:f5:7c:23:52:3b:73:cc: 91:09:74:e7:4e:49:5d:6f:43:14:fc:ed:e5:11:d3: e0:ab:67:0d:33:6d:c7:74:26:b8:50:23:15:bb:32: f7:a9:a5:53:49:1d:81:e5:09:fb:45:0b:3b:7d:54: d2:d9:fe:3c:79:d2:13:f8:1d:73:d1:c2:fb:5a:70: be:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:FA:74:C0:8D:6D:03:C2:11:7B:E1:11:15:F3:17:A3:41:67:57:15 X509v3 Authority Key Identifier: keyid:61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:a2:17:ed:aa:11:1b:21:fe:fb:1c:85:83:8d:bf:9a:91:f2: ee:3c:a6:3d:24:3f:87:97:ef:de:cd:c4:88:c1:05:c7:f6:e0: 8e:36:17:91:37:76:32:cf:cf:a5:56:a2:4e:a2:70:9c:82:83: 72:ab:5a:8d:24:12:b5:49:33:bf:d9:6e:22:6a:d1:c6:41:79: 1e:b7:24:db:df:d7:40:01:3a:63:75:18:02:48:36:48:b7:33: 81:5c:fb:ba:d2:27:16:11:c7:49:10:39:cd:4d:64:a8:3d:57: e6:29:0d:29:91:77:d1:d3:ef:69:90:d6:03:ff:46:24:a9:a9: fa:e0:ad:ea:5e:6f:8c:27:b0:7c:c2:0a:08:87:13:c3:16:67: 88:e7:9e:69:43:27:5e:4a:d5:d5:03:80:7a:3b:03:e7:b8:50: d6:bc:9e:5a:a1:7a:d1:3e:f4:e9:5b:2d:c5:66:c0:0c:d8:27: ba:fb:a1:21:b1:b0:2b:55:6d:68:45:d5:19:ed:c1:26:fb:59: fc:20:ed:87:57:9a:a3:0f:f4:37:ed:a7:14:64:73:52:eb:b3: e3:87:5e:e2:1d:34:c9:72:40:9c:24:28:ca:78:8b:36:20:4a: 39:22:71:72:fb:2a:91:1c:dd:47:24:5c:74:1c:79:ff:80:42: 5d:bb:d4:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsFxtrumTFxfa7SJb5whw5gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMDdlMmUyZTgxNzFkMzE5ZGExYmM2NGIzNmMzYzk4NWU2 NDZjMmEwHhcNMjUxMjEwMDEwMTE2WhcNMjUxMjExMDEwMTE2WjAzMTEwLwYDVQQD EygyZmZhNzRjMDhkNmQwM2MyMTE3YmUxMTExNWYzMTdhMzQxNjc1NzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9umb1/1ERgAZczTVneUwHPrV/yX RLspgE+MLR4oKF/9+tZ9TLNNJPgvy/jU+l3XX41hOXu9vRONqx98AGjANTpwkzoP TnEX6BmIXdWkL+DxzAf5bqNC70v0dEJFWm6Wdv9gkEqN/MQ63c2Oa5BL9/jWa2MM bhOgkz1aS1tropxyArkfs2IOmY2DXI7lmnhREz84jRzLNtgPZtLFMUxnKNpdPWkR L555KR/vRcdeexDiED41kwwTisN+afV8I1I7c8yRCXTnTkldb0MU/O3lEdPgq2cN M23HdCa4UCMVuzL3qaVTSR2B5Qn7RQs7fVTS2f48edIT+B1z0cL7WnC+4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/6dMCNbQPCEXvhERXzF6NBZ1cVMB8GA1UdIwQY MBaAFGEH4uLoFx0xnaG8ZLNsPJheZGwqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVFmaTR1Z1hIVEdkb2J4a3MydzhtRjVrYkNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iMDdlNTgtZjkzYS00ZDVmLWI5MmQt NjAxNmQ1YzA1ZjMwLzEvWVFmaTR1Z1hIVEdkb2J4a3MydzhtRjVrYkNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9iMDdlNTgtZjkzYS00ZDVmLWI5MmQtNjAxNmQ1YzA1ZjMw LzEvWVFmaTR1Z1hIVEdkb2J4a3MydzhtRjVrYkNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKIX7aoR GyH++xyFg42/mpHy7jymPSQ/h5fv3s3EiMEFx/bgjjYXkTd2Ms/PpVaiTqJwnIKD cqtajSQStUkzv9luImrRxkF5Hrck29/XQAE6Y3UYAkg2SLczgVz7utInFhHHSRA5 zU1kqD1X5ikNKZF30dPvaZDWA/9GJKmp+uCt6l5vjCewfMIKCIcTwxZniOeeaUMn XkrV1QOAejsD57hQ1ryeWqF60T706VstxWbADNgnuvuhIbGwK1VtaEXVGe3BJvtZ /CDth1eaow/0N+2nFGRzUuuz44de4h00yXJAnCQoyniLNiBKOSJxcvsqkRzdRyRc dBx5/4BCXbvU0w== -----END CERTIFICATE-----Generated at Wed Dec 10 09:02:20 2025 by rpki-client