This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft File: Yf4ur6ZKzq8fz8-8phUKei01vko.mft (raw, json) Hash identifier: iMLO04hK49Wdst97rpp99SUCz7cCrc6dxGvLDYXxB10= Subject key identifier: 9B:11:F6:6E:EE:35:16:CC:D4:16:34:91:86:94:3D:4D:5D:22:B9:D7 Authority key identifier: 61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A Certificate issuer: /CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a Certificate serial: 019B46941E503D2946BDB1255B52A79BC173 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 15:01:10 +0000 Manifest this update: Mon 22 Dec 2025 15:01:10 +0000 Manifest next update: Tue 23 Dec 2025 15:01:10 +0000 Files and hashes: 1: Yf4ur6ZKzq8fz8-8phUKei01vko.crl (hash: v25un+rm16IrzAZBaTuDXDcLWjonzyuOUnttfDOi228=) 2: wsNRODSlq_nh1GDEKdmia3PTMko.roa (hash: oJgNuBgkHwRy1QBN/xCPFqgneU9FqbAO/DZOxkV4624=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:94:1e:50:3d:29:46:bd:b1:25:5b:52:a7:9b:c1:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a Validity Not Before: Dec 22 15:01:10 2025 GMT Not After : Dec 23 15:01:10 2025 GMT Subject: CN=9b11f66eee3516ccd416349186943d4d5d22b9d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b9:46:f1:9e:34:da:df:d0:73:41:74:fa:ba: aa:5a:75:c6:4a:e3:16:ec:85:db:37:58:8a:46:b7: f6:5d:e1:73:80:0e:8a:4c:60:ac:d6:6c:73:11:d1: df:b1:05:21:e5:5d:b5:05:aa:63:03:61:02:0e:15: 1f:7e:2b:a5:18:28:36:0b:1f:ee:e7:74:6e:ed:8d: b5:50:ed:b5:d3:67:71:41:25:d9:d7:6c:13:01:1f: 0d:1b:86:eb:35:15:b9:1c:12:14:b1:6c:cb:40:fc: 3d:51:28:18:0d:e2:9c:cc:0f:70:27:6e:4f:e0:04: 86:1e:e2:fd:58:78:30:b0:ce:7b:b6:43:48:2c:9d: 4e:32:cc:74:6f:be:11:ef:45:f7:a9:2e:47:2b:a3: 10:88:ea:77:67:e3:7c:25:55:b3:9c:48:f6:a2:75: e9:26:29:3a:b5:3d:b4:80:b2:9d:e3:fb:ed:3d:31: 8d:de:9c:70:ac:88:a1:bb:bf:59:79:39:e5:a3:b0: 36:3b:6c:8a:fc:af:e5:cb:16:c6:8e:16:fe:5c:cb: 6e:6e:33:04:b2:08:da:c3:ae:97:d8:d5:22:ce:bb: 08:7f:01:83:ad:83:2e:02:71:6c:e4:14:03:09:1d: e6:45:0c:0e:88:cd:ed:b5:d9:54:0d:16:6f:75:7d: ee:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:11:F6:6E:EE:35:16:CC:D4:16:34:91:86:94:3D:4D:5D:22:B9:D7 X509v3 Authority Key Identifier: keyid:61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:fc:9e:90:b9:a6:cd:2d:c6:7c:5d:98:c9:c0:69:4d:14:7f: 57:a5:01:73:df:79:db:0b:f4:21:34:e9:fb:90:55:7e:be:fd: df:e5:f5:01:93:db:a7:2f:4a:3f:c1:b9:cb:4d:4c:8a:36:ab: b8:ba:66:5c:d0:c7:a8:0b:c4:63:07:26:33:23:0e:7e:28:66: 29:81:c3:1b:a2:f8:4e:04:50:c1:58:27:ab:d6:70:53:eb:22: 42:a5:b4:64:18:fd:b1:63:9e:04:16:e5:a7:cb:e1:c9:40:fb: 6f:54:d3:a2:91:88:2b:ac:6a:36:e2:c2:68:b2:77:19:7c:49: f7:6d:1a:be:d6:7a:12:f1:cd:29:47:74:44:1c:77:5c:76:70: af:81:29:3e:c2:d0:49:a7:ac:be:9a:93:38:e2:74:9d:78:72: 0b:71:be:e5:af:6c:cd:b0:7c:a0:73:3d:0a:20:b8:9c:ab:cc: e0:65:ed:25:17:8d:fe:1d:af:39:d3:45:95:67:fd:e5:fc:55: b6:ca:dc:36:6f:03:c4:45:7c:96:24:8f:4f:d9:dd:63:9c:c2: d3:62:9a:4c:83:3c:8d:a3:09:a6:64:34:d4:f3:bc:0f:cd:a4: a3:d9:77:fb:75:71:44:86:ac:18:7a:b3:e3:7a:6b:6c:12:dc: 74:bd:45:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGlB5QPSlGvbElW1Knm8FzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxZmUyZWFmYTY0YWNlYWYxZmNmY2ZiY2E2MTUwYTdhMmQz NWJlNGEwHhcNMjUxMjIyMTUwMTEwWhcNMjUxMjIzMTUwMTEwWjAzMTEwLwYDVQQD Eyg5YjExZjY2ZWVlMzUxNmNjZDQxNjM0OTE4Njk0M2Q0ZDVkMjJiOWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxblG8Z402t/Qc0F0+rqqWnXGSuMW 7IXbN1iKRrf2XeFzgA6KTGCs1mxzEdHfsQUh5V21BapjA2ECDhUffiulGCg2Cx/u 53Ru7Y21UO2102dxQSXZ12wTAR8NG4brNRW5HBIUsWzLQPw9USgYDeKczA9wJ25P 4ASGHuL9WHgwsM57tkNILJ1OMsx0b74R70X3qS5HK6MQiOp3Z+N8JVWznEj2onXp Jik6tT20gLKd4/vtPTGN3pxwrIihu79ZeTnlo7A2O2yK/K/lyxbGjhb+XMtubjME sgjaw66X2NUizrsIfwGDrYMuAnFs5BQDCR3mRQwOiM3ttdlUDRZvdX3uIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsR9m7uNRbM1BY0kYaUPU1dIrnXMB8GA1UdIwQY MBaAFGH+Lq+mSs6vH8/PvKYVCnotNb5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8yMWNhNDMtZDNlMS00ZWMwLTlhOWQt MzlhZmQ5MzE2NTk4LzEvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8yMWNhNDMtZDNlMS00ZWMwLTlhOWQtMzlhZmQ5MzE2NTk4 LzEvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfyekLmm zS3GfF2YycBpTRR/V6UBc9952wv0ITTp+5BVfr793+X1AZPbpy9KP8G5y01Mijar uLpmXNDHqAvEYwcmMyMOfihmKYHDG6L4TgRQwVgnq9ZwU+siQqW0ZBj9sWOeBBbl p8vhyUD7b1TTopGIK6xqNuLCaLJ3GXxJ920avtZ6EvHNKUd0RBx3XHZwr4EpPsLQ SaesvpqTOOJ0nXhyC3G+5a9szbB8oHM9CiC4nKvM4GXtJReN/h2vOdNFlWf95fxV tsrcNm8DxEV8liSPT9ndY5zC02KaTIM8jaMJpmQ01PO8D82ko9l3+3VxRIasGHqz 43prbBLcdL1FGQ== -----END CERTIFICATE-----Generated at Mon Dec 22 20:49:25 2025 by rpki-client