This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft File: YRu24x7uO3Kt57GlkOLmKq9cPrA.mft (raw, json) Hash identifier: WilsiT0U3VPRB1gveqyWYXrZB31BTkzoiqtoTN9dgJo= Subject key identifier: 3C:D0:14:4F:64:BF:50:19:74:7C:C7:7C:AF:C9:59:EF:91:55:6C:5E Authority key identifier: 61:1B:B6:E3:1E:EE:3B:72:AD:E7:B1:A5:90:E2:E6:2A:AF:5C:3E:B0 Certificate issuer: /CN=611bb6e31eee3b72ade7b1a590e2e62aaf5c3eb0 Certificate serial: 019B59AC92209183F5B4FAFAB77734ABE6C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft Manifest number: 17 Signing time: Fri 26 Dec 2025 08:00:40 +0000 Manifest this update: Fri 26 Dec 2025 08:00:40 +0000 Manifest next update: Sat 27 Dec 2025 08:00:40 +0000 Files and hashes: 1: H5y8W3DjLSpPDDBPhCGT2Zyd0zQ.roa (hash: bIrNHA0Zr/4VPYN5nN8uLLN9SjreKStFG26DJGxbUGQ=) 2: YRu24x7uO3Kt57GlkOLmKq9cPrA.crl (hash: r3R0/s2Wnqliiu2S8HWAD8ZUNCZ0I3WZwUrS1TlxP0g=) 3: uzaLa-uqYXIrUCOp-hYMvroH9C8.roa (hash: 0tGwneleYfIKZjCZ24RtoFpENfk8W6beKulggGPp82A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.crl rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:92:20:91:83:f5:b4:fa:fa:b7:77:34:ab:e6:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=611bb6e31eee3b72ade7b1a590e2e62aaf5c3eb0 Validity Not Before: Dec 26 08:00:40 2025 GMT Not After : Dec 27 08:00:40 2025 GMT Subject: CN=3cd0144f64bf5019747cc77cafc959ef91556c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:63:7f:18:65:7d:27:eb:e8:09:bb:21:e6:2a: a8:8c:2c:f6:64:c0:ac:d7:98:4f:d2:f8:c2:42:b4: 4f:6e:c5:89:97:77:d5:c1:5b:25:68:31:c8:40:b3: 36:f1:89:cf:d5:a4:3f:8f:88:2f:39:61:be:c5:a3: 0c:53:ce:62:d4:97:63:4a:5d:52:c1:72:94:01:12: a1:47:16:4c:4c:ad:65:c5:06:75:a2:e2:6c:2f:7c: 5f:58:ec:d3:97:ec:c5:1e:f2:d9:01:3f:8b:43:a9: c4:45:da:06:17:01:1f:d2:38:be:dd:bd:40:3a:a3: 31:64:a5:d8:52:5a:ed:14:3c:4f:ca:9a:2a:51:10: ff:50:cd:d5:1b:19:b3:3f:fe:f4:89:00:7c:46:db: 69:3e:be:db:ec:2f:6c:af:5c:e4:6b:26:84:4e:2a: 32:5a:dd:33:66:f2:ee:25:c6:15:cd:71:0e:2c:3b: 11:20:93:90:c9:7c:6c:1c:86:3d:cf:cf:a6:59:87: 5f:aa:7a:78:37:0a:89:a2:66:27:e9:f1:be:6b:52: d3:b9:4b:23:3c:7c:2f:7d:9f:5a:82:3e:53:96:fb: 18:9a:80:1c:ce:97:1b:a6:03:3f:a3:c2:d6:b6:be: 5e:89:fe:c9:84:6f:be:b3:28:73:c0:3e:e4:24:e6: 29:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D0:14:4F:64:BF:50:19:74:7C:C7:7C:AF:C9:59:EF:91:55:6C:5E X509v3 Authority Key Identifier: keyid:61:1B:B6:E3:1E:EE:3B:72:AD:E7:B1:A5:90:E2:E6:2A:AF:5C:3E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:9e:6c:c8:29:95:dc:23:67:ea:c2:b8:71:b3:14:e5:a3:ef: 9f:2c:bc:04:07:5c:a1:8c:63:c1:ac:9a:6a:a3:61:56:6e:66: ad:54:94:ff:01:56:44:da:2c:da:26:41:3d:17:03:14:34:a5: 1b:6e:b5:db:0b:d6:fa:0f:ef:c8:63:61:10:a0:8e:02:a8:e8: 01:48:bd:85:df:3a:42:38:c5:b2:7a:e5:61:f8:dc:c3:10:64: b1:4d:5a:6b:17:a6:60:96:26:24:0e:41:e8:16:ff:ed:e5:08: 04:ff:69:24:8e:1b:2f:89:29:72:b7:d1:27:c5:40:1a:34:92: 1b:1f:71:39:37:3e:66:72:d7:51:d5:38:a3:f5:ec:45:2f:3b: 27:68:17:5f:76:48:ff:2b:02:30:14:fb:ce:d5:a5:bb:01:06: 84:f6:32:b2:06:48:ca:a0:1c:78:a4:31:5e:c4:7f:bc:57:c5: 43:d4:69:e9:a7:6c:3e:45:b4:ac:a6:2d:d3:7d:8d:9b:92:88: b3:38:3f:09:5f:69:ed:09:60:23:45:44:79:ee:df:75:ba:de: 44:af:31:dc:fa:48:3f:50:8e:86:b7:eb:bf:5f:84:69:c7:2d: 74:cb:ee:c6:2d:ce:13:f6:72:87:a3:f8:c9:92:eb:c2:47:db: d1:fe:5a:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrJIgkYP1tPr6t3c0q+bCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMWJiNmUzMWVlZTNiNzJhZGU3YjFhNTkwZTJlNjJhYWY1 YzNlYjAwHhcNMjUxMjI2MDgwMDQwWhcNMjUxMjI3MDgwMDQwWjAzMTEwLwYDVQQD EygzY2QwMTQ0ZjY0YmY1MDE5NzQ3Y2M3N2NhZmM5NTllZjkxNTU2YzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmN/GGV9J+voCbsh5iqojCz2ZMCs 15hP0vjCQrRPbsWJl3fVwVslaDHIQLM28YnP1aQ/j4gvOWG+xaMMU85i1JdjSl1S wXKUARKhRxZMTK1lxQZ1ouJsL3xfWOzTl+zFHvLZAT+LQ6nERdoGFwEf0ji+3b1A OqMxZKXYUlrtFDxPypoqURD/UM3VGxmzP/70iQB8RttpPr7b7C9sr1zkayaETioy Wt0zZvLuJcYVzXEOLDsRIJOQyXxsHIY9z8+mWYdfqnp4NwqJomYn6fG+a1LTuUsj PHwvfZ9agj5TlvsYmoAczpcbpgM/o8LWtr5eif7JhG++syhzwD7kJOYpRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzQFE9kv1AZdHzHfK/JWe+RVWxeMB8GA1UdIwQY MBaAFGEbtuMe7jtyreexpZDi5iqvXD6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVJ1MjR4N3VPM0t0NTdHbGtPTG1LcTljUHJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9kNjRiODMtYmI4Ny00OTU0LTg5NDMt NjNlZWI5ODFhM2JkLzEvWVJ1MjR4N3VPM0t0NTdHbGtPTG1LcTljUHJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9kNjRiODMtYmI4Ny00OTU0LTg5NDMtNjNlZWI5ODFhM2Jk LzEvWVJ1MjR4N3VPM0t0NTdHbGtPTG1LcTljUHJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbp5syCmV 3CNn6sK4cbMU5aPvnyy8BAdcoYxjwayaaqNhVm5mrVSU/wFWRNos2iZBPRcDFDSl G2612wvW+g/vyGNhEKCOAqjoAUi9hd86QjjFsnrlYfjcwxBksU1aaxemYJYmJA5B 6Bb/7eUIBP9pJI4bL4kpcrfRJ8VAGjSSGx9xOTc+ZnLXUdU4o/XsRS87J2gXX3ZI /ysCMBT7ztWluwEGhPYysgZIyqAceKQxXsR/vFfFQ9Rp6adsPkW0rKYt032Nm5KI szg/CV9p7QlgI0VEee7fdbreRK8x3PpIP1COhrfrv1+EacctdMvuxi3OE/Zyh6P4 yZLrwkfb0f5aWg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:37 2025 by rpki-client