This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json) Hash identifier: +g9ksT78zCO26T+veSdOlkBsDx7WauKCSuqk1vuaBsw= Subject key identifier: D9:92:31:4D:BB:45:10:84:CC:16:4B:F7:C3:D8:EB:5B:95:4E:E8:06 Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25 Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25 Certificate serial: 019B0E9256EB55B90035EB69B01EF3AE406C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft Manifest number: 169D Signing time: Thu 11 Dec 2025 18:00:29 +0000 Manifest this update: Thu 11 Dec 2025 18:00:29 +0000 Manifest next update: Fri 12 Dec 2025 18:00:29 +0000 Files and hashes: 1: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: T2TnV+rUe68xA7e92c3mP31YY/+31LRfxPiSNazm6Qk=) 2: _wocLw8I_D0bWM_gydbHP3YBnWM.roa (hash: ipZCy+v8LxPOj8oL+HxTUZYzmJcHqr9rYLmV463tU+U=) 3: jP1IuFeYqRVYzU2ZxiYcMgwYBwo.roa (hash: 8tUnk9Rc0BoFNUvYX8+NZuDnDdmkv70Pafdtm7lPIM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:56:eb:55:b9:00:35:eb:69:b0:1e:f3:ae:40:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61a14553cacf103274d433e6b268066e01541b25 Validity Not Before: Dec 11 18:00:29 2025 GMT Not After : Dec 12 18:00:29 2025 GMT Subject: CN=d992314dbb451084cc164bf7c3d8eb5b954ee806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ce:62:33:28:86:0d:d7:d9:fb:93:b4:7e:68: ce:8e:17:86:5e:b2:df:01:34:85:ef:e3:a9:4c:60: 5b:d9:ef:9b:64:4f:9d:78:e4:19:dc:ff:2d:64:5f: e1:47:04:21:65:44:bf:86:2c:ab:bc:20:a1:d0:0e: 60:05:ae:30:b9:51:2e:8c:ae:10:10:e3:d9:a2:80: f2:9f:ce:ec:ba:55:0b:59:ff:22:c9:3a:1e:14:89: f7:54:f3:5c:25:71:77:94:55:86:35:67:10:69:6a: d7:8d:fa:ea:65:b2:31:52:13:6b:c5:3e:2c:82:53: 81:8b:53:65:21:1b:9c:53:7c:16:71:4c:d6:a8:fb: 35:a7:d8:2a:d2:a9:7e:e6:03:7b:15:8a:df:9b:e6: 25:4d:23:6a:72:0c:88:47:94:e9:9d:55:ea:f6:66: 75:5f:d9:3a:e6:c0:05:78:1f:bf:5b:b1:5b:65:69: 30:18:dd:63:63:e9:97:98:ea:de:72:61:42:eb:69: 9d:9a:2e:30:08:63:0f:37:34:12:76:f1:ae:67:7f: 4a:69:ae:2d:1b:7d:49:5d:9b:a9:08:31:e3:c4:1c: 6b:37:e9:ed:76:22:04:4b:c3:40:ea:ec:56:8c:d9: 72:06:3f:c8:a5:a5:5d:95:6c:77:01:75:79:6a:04: 5e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:92:31:4D:BB:45:10:84:CC:16:4B:F7:C3:D8:EB:5B:95:4E:E8:06 X509v3 Authority Key Identifier: keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:69:a9:2e:f4:db:99:7e:68:e6:01:16:df:bd:93:28:52:d0: a0:d8:83:c2:4a:c1:02:8e:ce:40:c7:ba:3c:1b:4c:3a:35:b3: 7e:d1:d1:be:86:25:20:ab:dc:7f:e4:c0:05:72:87:48:f3:4d: 25:fd:10:f5:87:db:0c:3d:9d:b5:67:a6:01:77:a5:b9:02:be: e8:c7:4b:26:f0:bb:99:ec:b4:52:fd:5c:f9:10:0f:ee:30:29: 34:48:08:ed:c5:64:b8:34:dc:7b:67:24:0c:ea:ca:0e:1b:ec: 35:89:30:04:61:70:5e:b3:a3:eb:5c:ab:50:58:7c:fe:38:78: 0c:c6:c4:b8:1d:00:4c:ad:2f:ff:43:6b:40:8f:70:a7:3d:ca: 10:3d:2e:90:58:e3:82:ca:14:69:f6:e2:af:59:ec:79:14:41: 2d:63:9b:7d:3e:b5:42:6f:2a:a1:2d:00:18:f8:f5:ce:d8:a3: 21:63:7a:85:0b:70:8c:11:57:21:d4:c6:6b:e1:82:0e:02:8b: f7:87:43:5b:7c:ee:72:44:9d:1c:a0:3a:a3:bb:d8:ee:9d:1b: 9d:a0:b3:b4:e4:66:63:c3:7e:79:fb:2a:0d:14:b0:7a:7d:16: 26:c9:2e:79:b8:80:80:e1:cb:03:4c:92:aa:a8:bf:c1:9e:10: bd:36:a7:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOklbrVbkANetpsB7zrkBsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYTE0NTUzY2FjZjEwMzI3NGQ0MzNlNmIyNjgwNjZlMDE1 NDFiMjUwHhcNMjUxMjExMTgwMDI5WhcNMjUxMjEyMTgwMDI5WjAzMTEwLwYDVQQD EyhkOTkyMzE0ZGJiNDUxMDg0Y2MxNjRiZjdjM2Q4ZWI1Yjk1NGVlODA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc5iMyiGDdfZ+5O0fmjOjheGXrLf ATSF7+OpTGBb2e+bZE+deOQZ3P8tZF/hRwQhZUS/hiyrvCCh0A5gBa4wuVEujK4Q EOPZooDyn87sulULWf8iyToeFIn3VPNcJXF3lFWGNWcQaWrXjfrqZbIxUhNrxT4s glOBi1NlIRucU3wWcUzWqPs1p9gq0ql+5gN7FYrfm+YlTSNqcgyIR5TpnVXq9mZ1 X9k65sAFeB+/W7FbZWkwGN1jY+mXmOrecmFC62mdmi4wCGMPNzQSdvGuZ39Kaa4t G31JXZupCDHjxBxrN+ntdiIES8NA6uxWjNlyBj/IpaVdlWx3AXV5agResQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNmSMU27RRCEzBZL98PY61uVTugGMB8GA1UdIwQY MBaAFGGhRVPKzxAydNQz5rJoBm4BVBslMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC84ZGQwNTEtZTJlNy00OTZjLWE5ZDAt ZmEyNjZiYjcyZjczLzEvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC84ZGQwNTEtZTJlNy00OTZjLWE5ZDAtZmEyNjZiYjcyZjcz LzEvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFmmpLvTb mX5o5gEW372TKFLQoNiDwkrBAo7OQMe6PBtMOjWzftHRvoYlIKvcf+TABXKHSPNN Jf0Q9YfbDD2dtWemAXeluQK+6MdLJvC7mey0Uv1c+RAP7jApNEgI7cVkuDTce2ck DOrKDhvsNYkwBGFwXrOj61yrUFh8/jh4DMbEuB0ATK0v/0NrQI9wpz3KED0ukFjj gsoUafbir1nseRRBLWObfT61Qm8qoS0AGPj1ztijIWN6hQtwjBFXIdTGa+GCDgKL 94dDW3zuckSdHKA6o7vY7p0bnaCztORmY8N+efsqDRSwen0WJskuebiAgOHLA0yS qqi/wZ4QvTanvg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:00:00 2025 by rpki-client