This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft File: YzkukpMXrmveCKWjuYorcB3biTo.mft (raw, json) Hash identifier: dIxDkYRuml3xw9x9LSUtOBfvWw/l1FWOI25RAUUeEA0= Subject key identifier: A9:C3:D6:B4:8B:D4:56:4C:6D:C6:CA:94:05:0D:06:39:0B:44:88:F1 Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Certificate serial: 019B3231F98D499335E3B83A853CBE2F89B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft Manifest number: 05FD Signing time: Thu 18 Dec 2025 16:01:34 +0000 Manifest this update: Thu 18 Dec 2025 16:01:34 +0000 Manifest next update: Fri 19 Dec 2025 16:01:34 +0000 Files and hashes: 1: 3Tq13WIcjE4wrF9fmJGXuJJ3EA0.roa (hash: GyLSfZMIbW5GjQFGTgFakvct5lf6SBp5gMlZA4ZRfho=) 2: 7t0ruCwwheWDY1iuc2ABz5OkuLU.roa (hash: Wsc9jgqPgNqZ76JLps6IqRa7nxD3XGEuiy4WXzWnIxU=) 3: ImvsPyGjqHzil2zJhiiakufkk1I.roa (hash: 29vZWJ1xOkBr4giAfRXD6EraUbozMao9ed7L/bRqJaU=) 4: OBYQZDQ1ObRE7hokU9D4Av8auQ0.roa (hash: rilwxKs37kLhwVeNVD/MIAohgiQxYvRftQXfpAgpDb0=) 5: Qf3xuPjCoTEQLfLo_UoAbyihOBg.roa (hash: upxdgtTwbpkR0XgQ85zaD7BvaiRt7M2499aUCky2ako=) 6: Smlnej5n6B69IkLJuHE_uEPKvkM.roa (hash: ZGTm9kLyb+TVFfvRl0Z+2C+98Be3iA8+F42uOm7E6Cg=) 7: YzkukpMXrmveCKWjuYorcB3biTo.crl (hash: +GsXKZbxislmFSogHB4/sKvyv6Wk0zM+KfjQJvhgC3I=) 8: ZtBVD_gU9JHOidmFecie_EQftRo.roa (hash: TATv9KEl0G9zS/KJs9wWiYzEnpI8uOZdyHODf/h2Zv8=) 9: fY9Iy2JY1E_TXtYJ0FV4aeZ6v-Y.roa (hash: eNIrQiQ2SfuQFshYez06LL23c6mQrj9GfYgkzxup5Xw=) 10: w-kDsP50J75PL4Ya6eQkdiS7MmA.roa (hash: e/heTB6HI2crd/P6O3UvBg+yFEyLCizumo10MAmv0a0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:f9:8d:49:93:35:e3:b8:3a:85:3c:be:2f:89:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Validity Not Before: Dec 18 16:01:34 2025 GMT Not After : Dec 19 16:01:34 2025 GMT Subject: CN=a9c3d6b48bd4564c6dc6ca94050d06390b4488f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a3:84:dd:f2:e7:03:76:f4:89:72:31:b3:78: 62:bc:b6:58:1a:a9:a3:59:54:eb:2f:ae:60:0f:4c: d0:92:45:5b:fd:3a:59:e4:eb:ab:ad:36:c8:ef:33: b7:cb:f8:3b:03:c3:69:f7:c1:2d:1a:57:ec:b6:1a: 55:e6:22:53:3a:28:cf:60:7d:e5:ae:c4:96:44:8b: 59:a5:37:a9:49:6c:4c:cb:c5:bb:e1:5f:5a:34:1d: cd:1e:59:b2:03:f8:02:28:8b:7a:12:f2:42:bb:83: c7:4e:97:da:ef:d2:96:0c:6a:5e:d4:88:c1:00:90: 81:45:ed:cf:50:80:2f:59:ce:ba:89:1b:78:3e:ff: 45:c7:41:bf:4b:82:ed:33:8a:c4:3d:22:b8:b7:5e: df:d4:86:fa:17:fe:0f:73:83:d7:9b:e2:70:53:25: 5a:ae:3c:4d:c0:1d:c4:ea:73:95:77:03:e8:02:a4: 0d:ca:8c:6f:19:72:a5:bd:40:c0:ff:69:3f:a0:2a: 5c:8e:4f:51:f7:34:5e:8a:cf:dd:1a:a0:81:8f:38: 21:fd:63:3a:2b:e0:05:9e:e8:16:f9:d5:fa:4c:c9: 99:a1:1f:66:0e:3e:44:d6:21:b4:39:d6:52:9f:9e: cf:58:38:1c:f5:3a:4b:a9:b1:6a:a4:14:02:f5:ac: 36:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C3:D6:B4:8B:D4:56:4C:6D:C6:CA:94:05:0D:06:39:0B:44:88:F1 X509v3 Authority Key Identifier: keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:07:c0:eb:f9:6d:55:02:06:ae:92:67:09:d7:53:22:ee:da: a1:25:46:7d:5f:f6:8a:54:0d:30:06:dc:bc:b0:36:72:3f:79: 52:c4:8a:35:44:ef:07:8f:32:6e:69:ef:37:dc:27:81:c2:6f: ee:3b:9c:f9:8d:0f:46:9f:b2:f8:6a:9b:60:0b:b4:6a:b1:26: 53:eb:d1:96:83:c7:4d:e0:2f:85:a8:36:7a:ce:15:27:0e:75: 22:25:25:e7:31:2c:df:f8:69:17:8b:3e:cf:d5:55:14:cf:61: 42:a2:4f:1c:c8:d3:64:d6:20:d5:67:08:a8:29:92:9f:d7:93: 3b:71:48:96:d3:37:bb:e1:b1:61:18:07:85:b8:6e:c9:b9:e5: 91:c0:cc:84:e8:4e:3b:86:2a:67:0b:33:3c:bc:6d:15:51:29: cf:e0:cf:39:9c:9c:07:01:03:b4:f3:2a:3d:49:5a:93:44:b1: b8:77:fe:b4:2e:a9:89:f7:c8:29:52:0c:59:87:98:59:79:13: 71:75:23:c7:89:18:35:0c:e6:ed:af:5e:c3:76:97:4b:bf:28: 67:e1:fb:b5:97:dc:19:84:33:c3:59:c6:33:90:73:06:1a:b8: 2a:b2:35:25:0d:37:da:df:60:8f:01:65:9f:ed:e6:8a:09:8f: 5d:dd:14:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMfmNSZM147g6hTy+L4m3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk Yjg5M2EwHhcNMjUxMjE4MTYwMTM0WhcNMjUxMjE5MTYwMTM0WjAzMTEwLwYDVQQD EyhhOWMzZDZiNDhiZDQ1NjRjNmRjNmNhOTQwNTBkMDYzOTBiNDQ4OGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KOE3fLnA3b0iXIxs3hivLZYGqmj WVTrL65gD0zQkkVb/TpZ5OurrTbI7zO3y/g7A8Np98EtGlfsthpV5iJTOijPYH3l rsSWRItZpTepSWxMy8W74V9aNB3NHlmyA/gCKIt6EvJCu4PHTpfa79KWDGpe1IjB AJCBRe3PUIAvWc66iRt4Pv9Fx0G/S4LtM4rEPSK4t17f1Ib6F/4Pc4PXm+JwUyVa rjxNwB3E6nOVdwPoAqQNyoxvGXKlvUDA/2k/oCpcjk9R9zReis/dGqCBjzgh/WM6 K+AFnugW+dX6TMmZoR9mDj5E1iG0OdZSn57PWDgc9TpLqbFqpBQC9aw2cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnD1rSL1FZMbcbKlAUNBjkLRIjxMB8GA1UdIwQY MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt ODcyNTBmNWEwN2NjLzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgfA6/lt VQIGrpJnCddTIu7aoSVGfV/2ilQNMAbcvLA2cj95UsSKNUTvB48ybmnvN9wngcJv 7juc+Y0PRp+y+GqbYAu0arEmU+vRloPHTeAvhag2es4VJw51IiUl5zEs3/hpF4s+ z9VVFM9hQqJPHMjTZNYg1WcIqCmSn9eTO3FIltM3u+GxYRgHhbhuybnlkcDMhOhO O4YqZwszPLxtFVEpz+DPOZycBwEDtPMqPUlak0SxuHf+tC6piffIKVIMWYeYWXkT cXUjx4kYNQzm7a9ew3aXS78oZ+H7tZfcGYQzw1nGM5BzBhq4KrI1JQ032t9gjwFl n+3migmPXd0UPg== -----END CERTIFICATE-----Generated at Fri Dec 19 00:55:04 2025 by rpki-client