This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft File: YQfi4ugXHTGdobxks2w8mF5kbCo.mft (raw, json) Hash identifier: dGUosesigFQyeAxRt1JqTzGVWNj8N2Ww8q2UkD40OKc= Subject key identifier: D2:2D:57:41:59:91:6B:1C:9F:01:52:2C:33:CD:CC:78:15:17:74:EC Authority key identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A Certificate issuer: /CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a Certificate serial: 019B20D034F38CB760ACE61DD1E0EF077AC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft Manifest number: 1780 Signing time: Mon 15 Dec 2025 07:01:14 +0000 Manifest this update: Mon 15 Dec 2025 07:01:14 +0000 Manifest next update: Tue 16 Dec 2025 07:01:14 +0000 Files and hashes: 1: 2lOhAzlC5K0mMI8bchXi_D9R3Rw.roa (hash: wULZZ92mny/AlScu8gAC9jEDmMKs+7xfe1mY5oB7zrA=) 2: Djx6QNMoJb-cW9yeKmXUOuLZGxc.roa (hash: kSdS/jX6rRQff6lKohOcXS4NIaspZuS+tTFddGQqIfY=) 3: YQfi4ugXHTGdobxks2w8mF5kbCo.crl (hash: KE4dQQcizRgxLctb4BpvgOgWkcKfOT/9NgkiT5QAL24=) 4: n7FqNgB42yMNZn9HsllZdTK6BM4.roa (hash: El5LuNO8gbAy7J9nIaZ/6jvlxDskopE6EQQyObfppsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:d0:34:f3:8c:b7:60:ac:e6:1d:d1:e0:ef:07:7a:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a Validity Not Before: Dec 15 07:01:14 2025 GMT Not After : Dec 16 07:01:14 2025 GMT Subject: CN=d22d574159916b1c9f01522c33cdcc78151774ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fd:17:fb:a3:e0:14:80:57:43:81:5f:d6:a3: 08:e5:ac:33:54:ca:e0:b4:f9:42:36:aa:e9:b9:be: bc:88:11:15:25:a4:fa:a2:2a:f2:01:e8:0a:90:46: 34:79:8c:2e:54:18:38:08:63:35:1e:76:b6:b6:36: 77:9c:ef:19:c3:13:13:71:fe:46:86:ab:eb:04:9a: a6:63:c9:59:b1:97:52:2a:e5:8b:14:0d:95:db:df: 8b:c5:bd:49:cd:f2:40:8e:e8:a3:f5:56:7b:cc:90: 71:e4:28:e5:ce:eb:9c:61:82:66:69:f0:88:32:e3: b7:72:e2:fd:b0:97:0a:19:0c:43:0f:87:44:04:67: e7:ab:6d:cd:16:61:70:91:22:5e:fc:6f:42:e6:d9: 22:21:1e:b2:38:93:28:5a:13:5e:00:70:7b:0a:a5: 97:b7:58:83:03:af:9a:ac:f4:e7:4b:4b:ad:08:32: af:76:76:12:a2:6d:84:5c:d2:8f:91:3a:2d:b1:c4: 46:a4:a0:e6:b0:ef:eb:69:a2:a8:f3:ff:8f:57:6d: fe:bb:c7:57:85:82:1e:41:26:7a:6d:b5:c4:97:50: 88:f1:f5:98:fe:3c:56:f6:57:42:91:a8:1d:86:ec: 4e:21:e9:53:05:9e:2e:ca:12:b2:8d:f7:57:73:4e: ee:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2D:57:41:59:91:6B:1C:9F:01:52:2C:33:CD:CC:78:15:17:74:EC X509v3 Authority Key Identifier: keyid:61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:9d:ed:92:f9:57:25:a6:3b:3d:78:14:43:87:d0:f4:68:c6: 7d:1c:7c:82:13:27:80:4d:83:f4:a5:7c:19:af:be:d3:8e:13: 87:70:b7:aa:91:ac:6c:ec:76:97:7a:ec:b6:df:ec:ca:34:40: a2:ff:79:b1:39:1e:69:0d:d5:53:06:0d:eb:3e:a0:56:8b:c9: b7:46:59:77:23:a4:0b:8a:da:13:24:d8:45:b8:92:d1:e8:3e: af:c2:99:73:0f:ca:ab:b0:fe:e2:38:da:70:dc:c3:30:d7:57: ae:ac:88:0b:17:b7:79:fc:da:06:80:13:90:29:63:44:2b:bb: eb:08:bc:89:24:aa:3f:51:27:13:9c:0a:fe:5b:fa:e9:74:36: b2:40:3f:64:ec:88:6b:09:53:04:55:2d:73:05:a6:81:13:e3: 95:27:2b:5a:1a:4d:7d:74:03:3c:31:52:f6:a2:db:6f:d5:e4: 6f:a9:23:a3:eb:8f:b6:5a:39:fa:1f:38:20:42:45:64:91:a1: d7:b2:b5:da:06:c1:2e:30:74:4f:d7:79:8b:6d:46:a8:2b:0c: 95:2d:b0:3d:8d:fe:1a:21:cb:60:24:f2:e1:2f:1b:4e:97:9e: 74:57:4d:73:97:59:36:f8:0a:35:fd:97:d7:3c:47:55:1f:b5: c2:6b:fe:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsg0DTzjLdgrOYd0eDvB3rBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMDdlMmUyZTgxNzFkMzE5ZGExYmM2NGIzNmMzYzk4NWU2 NDZjMmEwHhcNMjUxMjE1MDcwMTE0WhcNMjUxMjE2MDcwMTE0WjAzMTEwLwYDVQQD EyhkMjJkNTc0MTU5OTE2YjFjOWYwMTUyMmMzM2NkY2M3ODE1MTc3NGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof0X+6PgFIBXQ4Ff1qMI5awzVMrg tPlCNqrpub68iBEVJaT6oiryAegKkEY0eYwuVBg4CGM1Hna2tjZ3nO8ZwxMTcf5G hqvrBJqmY8lZsZdSKuWLFA2V29+Lxb1JzfJAjuij9VZ7zJBx5CjlzuucYYJmafCI MuO3cuL9sJcKGQxDD4dEBGfnq23NFmFwkSJe/G9C5tkiIR6yOJMoWhNeAHB7CqWX t1iDA6+arPTnS0utCDKvdnYSom2EXNKPkTotscRGpKDmsO/raaKo8/+PV23+u8dX hYIeQSZ6bbXEl1CI8fWY/jxW9ldCkagdhuxOIelTBZ4uyhKyjfdXc07upwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNItV0FZkWscnwFSLDPNzHgVF3TsMB8GA1UdIwQY MBaAFGEH4uLoFx0xnaG8ZLNsPJheZGwqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVFmaTR1Z1hIVEdkb2J4a3MydzhtRjVrYkNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iMDdlNTgtZjkzYS00ZDVmLWI5MmQt NjAxNmQ1YzA1ZjMwLzEvWVFmaTR1Z1hIVEdkb2J4a3MydzhtRjVrYkNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9iMDdlNTgtZjkzYS00ZDVmLWI5MmQtNjAxNmQ1YzA1ZjMw LzEvWVFmaTR1Z1hIVEdkb2J4a3MydzhtRjVrYkNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJ3tkvlX JaY7PXgUQ4fQ9GjGfRx8ghMngE2D9KV8Ga++044Th3C3qpGsbOx2l3rstt/syjRA ov95sTkeaQ3VUwYN6z6gVovJt0ZZdyOkC4raEyTYRbiS0eg+r8KZcw/Kq7D+4jja cNzDMNdXrqyICxe3efzaBoATkCljRCu76wi8iSSqP1EnE5wK/lv66XQ2skA/ZOyI awlTBFUtcwWmgRPjlScrWhpNfXQDPDFS9qLbb9Xkb6kjo+uPtlo5+h84IEJFZJGh 17K12gbBLjB0T9d5i21GqCsMlS2wPY3+GiHLYCTy4S8bTpeedFdNc5dZNvgKNf2X 1zxHVR+1wmv+zQ== -----END CERTIFICATE-----Generated at Mon Dec 15 16:52:15 2025 by rpki-client