This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft File: YzkukpMXrmveCKWjuYorcB3biTo.mft (raw, json) Hash identifier: KgPHN72WMvPkOH9CD5qJB3vHYuvMYEQ9jy9MpVDga3c= Subject key identifier: AC:1B:33:BC:EA:48:A3:AF:04:4B:19:EF:18:41:B5:D2:5C:B7:45:88 Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Certificate serial: 019B1EE12594ACDE43BF09AFCEAE611DD65D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft Manifest number: 05F3 Signing time: Sun 14 Dec 2025 22:00:30 +0000 Manifest this update: Sun 14 Dec 2025 22:00:30 +0000 Manifest next update: Mon 15 Dec 2025 22:00:30 +0000 Files and hashes: 1: 3Tq13WIcjE4wrF9fmJGXuJJ3EA0.roa (hash: GyLSfZMIbW5GjQFGTgFakvct5lf6SBp5gMlZA4ZRfho=) 2: 7t0ruCwwheWDY1iuc2ABz5OkuLU.roa (hash: Wsc9jgqPgNqZ76JLps6IqRa7nxD3XGEuiy4WXzWnIxU=) 3: ImvsPyGjqHzil2zJhiiakufkk1I.roa (hash: 29vZWJ1xOkBr4giAfRXD6EraUbozMao9ed7L/bRqJaU=) 4: OBYQZDQ1ObRE7hokU9D4Av8auQ0.roa (hash: rilwxKs37kLhwVeNVD/MIAohgiQxYvRftQXfpAgpDb0=) 5: Qf3xuPjCoTEQLfLo_UoAbyihOBg.roa (hash: upxdgtTwbpkR0XgQ85zaD7BvaiRt7M2499aUCky2ako=) 6: Smlnej5n6B69IkLJuHE_uEPKvkM.roa (hash: ZGTm9kLyb+TVFfvRl0Z+2C+98Be3iA8+F42uOm7E6Cg=) 7: YzkukpMXrmveCKWjuYorcB3biTo.crl (hash: xgdaaMThXFrd4XL72q2VcSD3GKmffbrO7oS4IrXmEcc=) 8: ZtBVD_gU9JHOidmFecie_EQftRo.roa (hash: TATv9KEl0G9zS/KJs9wWiYzEnpI8uOZdyHODf/h2Zv8=) 9: fY9Iy2JY1E_TXtYJ0FV4aeZ6v-Y.roa (hash: eNIrQiQ2SfuQFshYez06LL23c6mQrj9GfYgkzxup5Xw=) 10: w-kDsP50J75PL4Ya6eQkdiS7MmA.roa (hash: e/heTB6HI2crd/P6O3UvBg+yFEyLCizumo10MAmv0a0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:e1:25:94:ac:de:43:bf:09:af:ce:ae:61:1d:d6:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Validity Not Before: Dec 14 22:00:30 2025 GMT Not After : Dec 15 22:00:30 2025 GMT Subject: CN=ac1b33bcea48a3af044b19ef1841b5d25cb74588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c5:96:53:c2:fc:87:b5:58:70:39:e9:e3:13: fb:5a:89:ed:87:e5:4e:13:73:33:71:f4:f2:36:f7: d3:d6:22:57:36:39:68:8d:6c:c7:1d:5a:3c:9b:df: 60:f1:02:78:cf:e5:47:65:7a:53:d6:4f:00:48:e5: d3:e1:17:8d:ce:ee:cc:10:d4:7e:4b:cc:c7:8a:eb: 04:96:6a:4a:b8:7d:d2:f6:99:df:0f:79:c9:08:70: 5d:fa:c4:00:1b:e6:75:1b:e4:0e:54:41:82:14:8b: 18:2d:ff:4d:b7:4b:21:0d:03:0e:67:58:79:47:9f: dc:f2:92:e9:65:64:1e:cd:de:90:88:09:37:44:80: ed:1f:ac:06:fd:69:53:fd:34:36:ed:87:2f:34:a1: cc:ca:98:ab:eb:3c:89:ea:ed:d4:d6:47:b2:9d:66: 6f:f2:bc:9e:cd:56:22:53:f1:dc:af:fa:c2:cb:2b: ae:96:d5:f6:e1:da:30:38:28:01:97:26:b0:36:87: 24:73:40:f6:06:2f:e7:b8:30:70:f2:62:11:d1:79: aa:00:6e:c4:28:43:3c:6c:ec:cf:34:34:53:b2:70: 53:2c:d5:b8:65:89:e0:c0:53:ba:1a:6a:d1:e2:0e: 20:8b:e0:08:e7:49:85:2c:a0:b3:3a:ae:08:7d:c7: 2b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1B:33:BC:EA:48:A3:AF:04:4B:19:EF:18:41:B5:D2:5C:B7:45:88 X509v3 Authority Key Identifier: keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:fe:46:5e:18:8e:20:54:a8:69:21:d8:56:21:df:bc:7e:77: 8a:7f:16:88:b4:d2:b8:3b:a3:d6:7e:f0:6c:11:e5:d4:6b:a5: df:d1:19:73:df:ba:22:ea:40:d5:66:e1:05:5c:16:6c:c7:aa: ad:10:4f:8a:c1:af:28:8c:99:48:19:de:37:90:09:28:0e:9f: b4:c9:f7:1e:45:49:b2:49:cc:71:31:71:d0:70:3f:76:9f:37: 83:62:0a:e8:eb:08:3a:6f:e4:24:ce:0e:d7:60:5c:43:23:77: 75:33:89:e4:57:bd:43:76:88:8c:83:d9:44:4b:9b:ec:3c:c2: 7f:cb:7e:94:c9:28:35:6e:77:3c:62:81:c3:7b:be:77:39:49: 71:b4:e6:f6:27:9a:8b:48:ae:54:e8:7b:8f:ab:58:81:0c:82: 38:39:92:b4:8b:0f:a2:eb:68:62:dc:5d:73:e9:2d:ba:30:bc: 53:59:13:81:c2:d3:f0:40:89:af:fb:2f:87:6f:84:f3:93:78: 05:d1:71:ce:52:fc:12:c5:d5:bd:b1:cd:6c:c9:9d:7f:b1:be: 1d:e5:2b:1c:55:70:9b:e8:e5:8f:62:e1:ae:10:99:cb:53:d4: 18:8b:9d:ff:a4:b8:0c:be:20:c7:e2:7c:9c:7b:1a:e2:7e:79: c1:9a:2b:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZse4SWUrN5Dvwmvzq5hHdZdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk Yjg5M2EwHhcNMjUxMjE0MjIwMDMwWhcNMjUxMjE1MjIwMDMwWjAzMTEwLwYDVQQD EyhhYzFiMzNiY2VhNDhhM2FmMDQ0YjE5ZWYxODQxYjVkMjVjYjc0NTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMWWU8L8h7VYcDnp4xP7Wonth+VO E3MzcfTyNvfT1iJXNjlojWzHHVo8m99g8QJ4z+VHZXpT1k8ASOXT4ReNzu7MENR+ S8zHiusElmpKuH3S9pnfD3nJCHBd+sQAG+Z1G+QOVEGCFIsYLf9Nt0shDQMOZ1h5 R5/c8pLpZWQezd6QiAk3RIDtH6wG/WlT/TQ27YcvNKHMypir6zyJ6u3U1keynWZv 8ryezVYiU/Hcr/rCyyuultX24dowOCgBlyawNockc0D2Bi/nuDBw8mIR0XmqAG7E KEM8bOzPNDRTsnBTLNW4ZYngwFO6GmrR4g4gi+AI50mFLKCzOq4IfccrEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwbM7zqSKOvBEsZ7xhBtdJct0WIMB8GA1UdIwQY MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt ODcyNTBmNWEwN2NjLzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcv5GXhiO IFSoaSHYViHfvH53in8WiLTSuDuj1n7wbBHl1Gul39EZc9+6IupA1WbhBVwWbMeq rRBPisGvKIyZSBneN5AJKA6ftMn3HkVJsknMcTFx0HA/dp83g2IK6OsIOm/kJM4O 12BcQyN3dTOJ5Fe9Q3aIjIPZREub7DzCf8t+lMkoNW53PGKBw3u+dzlJcbTm9iea i0iuVOh7j6tYgQyCODmStIsPoutoYtxdc+ktujC8U1kTgcLT8ECJr/svh2+E85N4 BdFxzlL8EsXVvbHNbMmdf7G+HeUrHFVwm+jlj2LhrhCZy1PUGIud/6S4DL4gx+J8 nHsa4n55wZorsQ== -----END CERTIFICATE-----Generated at Mon Dec 15 06:33:17 2025 by rpki-client