This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft File: YAG5U8a-H5GDHWilwBFcIODNf5o.mft (raw, json) Hash identifier: 1/+ooERTH8B/CSvs0ujA8B31BE/CN2EQXZVc9CnzfsE= Subject key identifier: F4:A4:8B:BD:3A:FB:03:0F:6C:C7:27:07:88:D4:D4:A2:A8:2E:5F:FD Authority key identifier: 60:01:B9:53:C6:BE:1F:91:83:1D:68:A5:C0:11:5C:20:E0:CD:7F:9A Certificate issuer: /CN=6001b953c6be1f91831d68a5c0115c20e0cd7f9a Certificate serial: 019B5ABFF6164D018D8F7758205CD1D918DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft Manifest number: 077B Signing time: Fri 26 Dec 2025 13:01:28 +0000 Manifest this update: Fri 26 Dec 2025 13:01:28 +0000 Manifest next update: Sat 27 Dec 2025 13:01:28 +0000 Files and hashes: 1: QQlxlfhA9BwLpxAQMkShfHqNuQ8.roa (hash: J1jtN5BQZROl/8dEYO5qeCL3b90fBYd6l0TNzemkVxs=) 2: YAG5U8a-H5GDHWilwBFcIODNf5o.crl (hash: 2qJoOkwERRyT4XmIrLUg1ZuIDWYMzxZskLJISToUaJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft rsync://rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:f6:16:4d:01:8d:8f:77:58:20:5c:d1:d9:18:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6001b953c6be1f91831d68a5c0115c20e0cd7f9a Validity Not Before: Dec 26 13:01:28 2025 GMT Not After : Dec 27 13:01:28 2025 GMT Subject: CN=f4a48bbd3afb030f6cc7270788d4d4a2a82e5ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:70:5b:3b:f5:49:59:63:d3:19:4c:e9:5f:e1: 97:6a:5d:e2:e7:e3:cd:24:e6:ce:15:1c:ef:f2:4e: 13:67:b7:4d:2a:36:aa:47:4f:78:17:c8:b0:f0:34: 0a:bc:97:4c:02:6a:be:2b:60:97:0a:1f:34:95:c3: 6b:42:3c:a9:79:3c:36:ad:64:bc:60:23:bb:da:9a: 84:8a:18:a6:68:02:3c:6a:97:78:86:0c:b8:3e:52: bd:e0:b1:12:74:0c:10:25:a0:ea:3e:5e:bb:c7:c1: 26:0e:b3:7c:24:22:01:76:64:c3:87:60:6d:c6:84: 09:71:2e:0c:0a:77:b3:30:63:78:42:38:c8:38:5a: 0d:49:02:32:e9:4c:d5:01:50:66:9c:f1:f8:a9:a8: b2:f0:db:17:dc:ea:8c:65:18:3e:a1:2d:f0:1a:9d: 44:a0:14:b8:d9:7e:7e:c0:2c:6c:0b:64:02:f6:a8: 69:d9:95:cd:6c:cc:35:e6:2a:b7:10:f4:31:5d:7a: 29:6d:4f:be:8f:d0:8e:3d:8e:ea:8e:ca:bd:04:1b: 0c:0f:1d:c8:1d:74:f1:21:2e:6a:39:cf:bf:f1:ed: 89:7b:3b:1d:2d:37:f1:c8:8e:6e:9c:00:0e:0e:67: 67:37:fe:63:44:c8:2a:87:e3:48:59:32:b2:92:b5: 74:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A4:8B:BD:3A:FB:03:0F:6C:C7:27:07:88:D4:D4:A2:A8:2E:5F:FD X509v3 Authority Key Identifier: keyid:60:01:B9:53:C6:BE:1F:91:83:1D:68:A5:C0:11:5C:20:E0:CD:7F:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:5f:65:8a:77:11:76:39:92:77:b3:b4:57:6a:26:bd:4c:65: 3b:31:36:7f:87:11:66:0a:8f:cb:67:c9:2b:53:75:7a:ca:88: a3:85:e2:a5:75:d2:9b:cb:af:d9:8b:ce:09:e9:65:70:dc:82: 3c:93:f2:95:fd:46:2e:33:58:49:a7:ff:03:7e:f0:10:a2:c6: 20:79:71:98:24:bf:73:49:d2:8d:88:38:21:f3:de:89:29:ba: a4:3a:91:ec:3e:29:08:6f:85:b5:4d:9d:85:f7:cb:29:f5:9d: f2:ab:1d:2e:02:ed:fc:d1:fe:b0:57:e3:56:e5:cb:73:2c:7a: 9d:61:86:6f:f9:97:25:87:b1:d0:66:81:2c:6f:de:50:3f:23: a7:53:a6:b6:2d:3c:c2:bd:62:66:86:08:58:15:db:a0:a0:d9: 39:d0:fb:39:72:1e:20:ba:3e:ab:e1:44:4d:c7:29:c5:26:9d: 7d:c1:2b:1c:b7:d6:9c:16:dd:d7:dc:ed:bd:d1:65:84:c2:d8: b9:f8:5a:83:e0:a1:55:41:34:e4:10:27:db:ac:90:84:1f:57: d5:57:d2:ea:39:6d:04:66:0c:0a:c9:6e:3b:9d:6d:f6:dc:82: 37:17:75:76:39:34:22:cd:40:72:97:5e:e7:f6:57:50:8d:cd: 41:16:e9:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav/YWTQGNj3dYIFzR2RjfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMDFiOTUzYzZiZTFmOTE4MzFkNjhhNWMwMTE1YzIwZTBj ZDdmOWEwHhcNMjUxMjI2MTMwMTI4WhcNMjUxMjI3MTMwMTI4WjAzMTEwLwYDVQQD EyhmNGE0OGJiZDNhZmIwMzBmNmNjNzI3MDc4OGQ0ZDRhMmE4MmU1ZmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3BbO/VJWWPTGUzpX+GXal3i5+PN JObOFRzv8k4TZ7dNKjaqR094F8iw8DQKvJdMAmq+K2CXCh80lcNrQjypeTw2rWS8 YCO72pqEihimaAI8apd4hgy4PlK94LESdAwQJaDqPl67x8EmDrN8JCIBdmTDh2Bt xoQJcS4MCnezMGN4QjjIOFoNSQIy6UzVAVBmnPH4qaiy8NsX3OqMZRg+oS3wGp1E oBS42X5+wCxsC2QC9qhp2ZXNbMw15iq3EPQxXXopbU++j9COPY7qjsq9BBsMDx3I HXTxIS5qOc+/8e2JezsdLTfxyI5unAAODmdnN/5jRMgqh+NIWTKykrV05wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSki706+wMPbMcnB4jU1KKoLl/9MB8GA1UdIwQY MBaAFGABuVPGvh+Rgx1opcARXCDgzX+aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUFHNVU4YS1INUdESFdpbHdCRmNJT0ROZjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8yMTNiZTYtZWNiOS00MzAwLTgzNDYt YTY0NzY3NWY0NmI2LzEvWUFHNVU4YS1INUdESFdpbHdCRmNJT0ROZjVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8yMTNiZTYtZWNiOS00MzAwLTgzNDYtYTY0NzY3NWY0NmI2 LzEvWUFHNVU4YS1INUdESFdpbHdCRmNJT0ROZjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFV9lincR djmSd7O0V2omvUxlOzE2f4cRZgqPy2fJK1N1esqIo4XipXXSm8uv2YvOCellcNyC PJPylf1GLjNYSaf/A37wEKLGIHlxmCS/c0nSjYg4IfPeiSm6pDqR7D4pCG+FtU2d hffLKfWd8qsdLgLt/NH+sFfjVuXLcyx6nWGGb/mXJYex0GaBLG/eUD8jp1Omti08 wr1iZoYIWBXboKDZOdD7OXIeILo+q+FETccpxSadfcErHLfWnBbd19ztvdFlhMLY ufhag+ChVUE05BAn26yQhB9X1VfS6jltBGYMCsluO51t9tyCNxd1djk0Is1Acpde 5/ZXUI3NQRbpiQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:16 2025 by rpki-client