This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft File: YdnzrFCGTRj_Jokzx04qia7GEJ0.mft (raw, json) Hash identifier: IYSo/32iQDYu+n1O+3ejTQSP+o6CQZQl8cDDHMvy4bQ= Subject key identifier: 01:9F:7E:9F:17:D4:46:D4:0A:75:2E:A1:7F:10:63:2C:69:E1:ED:5F Authority key identifier: 61:D9:F3:AC:50:86:4D:18:FF:26:89:33:C7:4E:2A:89:AE:C6:10:9D Certificate issuer: /CN=61d9f3ac50864d18ff268933c74e2a89aec6109d Certificate serial: 019B4BF224487EFAC7A48EEC60CFACB731CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft Manifest number: 04CB Signing time: Tue 23 Dec 2025 16:01:58 +0000 Manifest this update: Tue 23 Dec 2025 16:01:58 +0000 Manifest next update: Wed 24 Dec 2025 16:01:58 +0000 Files and hashes: 1: Q0gUuxATATDf6JEQ9fzt1u3IZsc.roa (hash: 3y/S39XmNPx0DoVA3l0EHWQrU4S+Z88s+G6ph2XRAwc=) 2: YdnzrFCGTRj_Jokzx04qia7GEJ0.crl (hash: B3gR24WUVv+Q/FqvjxItUm3PxpyGHxzvrWSlXVtaecE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f2:24:48:7e:fa:c7:a4:8e:ec:60:cf:ac:b7:31:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61d9f3ac50864d18ff268933c74e2a89aec6109d Validity Not Before: Dec 23 16:01:58 2025 GMT Not After : Dec 24 16:01:58 2025 GMT Subject: CN=019f7e9f17d446d40a752ea17f10632c69e1ed5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d4:15:52:1c:de:30:a6:25:5b:cf:6e:10:67: ef:7b:ce:e4:b4:84:0a:ce:3b:ad:e5:58:d7:df:84: 87:3c:36:5c:33:45:57:67:92:96:1e:71:a7:68:26: a2:c7:d4:6f:2c:dc:f0:c0:08:1b:fd:98:b2:30:37: fa:a5:8c:6d:1a:6d:40:18:51:b9:91:45:85:62:bc: 15:0a:35:7f:c4:1f:41:f8:9b:5a:e5:38:53:d0:9c: d3:40:ba:63:0e:b2:ba:98:dc:7a:0b:e5:c4:f9:8e: 32:fd:05:75:aa:3e:85:5e:df:14:c8:42:62:d8:b6: 2c:09:ef:1a:20:a3:37:c0:73:21:ef:e6:fe:1b:31: c4:f1:94:ee:a7:aa:70:39:b2:a2:67:56:5b:96:17: 79:98:7c:16:96:72:5c:e7:c5:ec:4c:ec:ad:3a:5b: 7d:79:f7:a5:47:26:3b:f5:f4:21:7e:48:0c:d5:cc: 9e:23:98:35:94:bd:e4:d6:8c:d3:8b:fd:1d:57:5c: de:da:53:df:e0:97:26:bb:f7:69:31:e9:4a:78:1b: 94:ee:3a:98:1a:2f:50:67:8d:53:51:56:95:f7:f7: ac:7c:41:16:43:7d:38:49:0e:78:2e:fb:4a:66:fa: d7:20:bd:da:79:30:b3:0a:32:85:a3:40:9d:ea:b8: 13:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:9F:7E:9F:17:D4:46:D4:0A:75:2E:A1:7F:10:63:2C:69:E1:ED:5F X509v3 Authority Key Identifier: keyid:61:D9:F3:AC:50:86:4D:18:FF:26:89:33:C7:4E:2A:89:AE:C6:10:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:0b:d1:51:0a:66:4c:3f:f2:a7:ae:f4:80:43:3e:85:c4:d5: 6e:66:a3:90:7c:6d:92:3e:6b:12:dd:36:bb:a2:3f:69:ec:5b: 93:d5:e0:7a:90:fa:f5:7e:1c:6b:bb:2f:88:f8:02:6e:3d:82: 6f:68:c4:40:e9:30:ac:5e:93:be:65:ad:28:e8:6d:16:47:61: 33:e9:a6:b4:01:58:f8:9c:0b:76:ec:e8:1e:0c:0c:a5:69:72: e9:94:a3:e3:f1:82:da:d9:96:bf:5d:5d:45:5c:e1:6f:b9:3f: a0:fb:f1:9b:3c:a7:d5:0f:d6:6c:f6:02:ec:9c:aa:1e:cd:c3: e0:b7:78:ec:44:78:d8:0e:cc:92:ea:35:86:92:d8:7a:0f:1b: 56:f2:77:b2:e7:39:e2:fd:3a:7e:4c:88:d3:05:f9:41:f9:2e: 8f:cb:b6:ce:1a:b4:e4:5d:c0:d1:8b:fc:ce:bd:06:e0:b8:06: 1c:54:46:eb:04:31:2f:4e:41:98:5b:6b:9e:ce:4e:70:68:e2: 5c:90:4a:d6:bc:56:e8:8b:1b:06:81:0d:6d:d3:19:80:ea:11: 7a:a3:8c:94:10:0d:f0:e2:33:ce:1a:fe:79:32:81:56:e0:73: 54:4d:a5:c3:b3:ca:3b:b0:04:42:74:6e:80:49:f7:f2:85:64: bb:90:64:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8iRIfvrHpI7sYM+stzHPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxZDlmM2FjNTA4NjRkMThmZjI2ODkzM2M3NGUyYTg5YWVj NjEwOWQwHhcNMjUxMjIzMTYwMTU4WhcNMjUxMjI0MTYwMTU4WjAzMTEwLwYDVQQD EygwMTlmN2U5ZjE3ZDQ0NmQ0MGE3NTJlYTE3ZjEwNjMyYzY5ZTFlZDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdQVUhzeMKYlW89uEGfve87ktIQK zjut5VjX34SHPDZcM0VXZ5KWHnGnaCaix9RvLNzwwAgb/ZiyMDf6pYxtGm1AGFG5 kUWFYrwVCjV/xB9B+Jta5ThT0JzTQLpjDrK6mNx6C+XE+Y4y/QV1qj6FXt8UyEJi 2LYsCe8aIKM3wHMh7+b+GzHE8ZTup6pwObKiZ1Zblhd5mHwWlnJc58XsTOytOlt9 efelRyY79fQhfkgM1cyeI5g1lL3k1ozTi/0dV1ze2lPf4Jcmu/dpMelKeBuU7jqY Gi9QZ41TUVaV9/esfEEWQ304SQ54LvtKZvrXIL3aeTCzCjKFo0Cd6rgTzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGffp8X1EbUCnUuoX8QYyxp4e1fMB8GA1UdIwQY MBaAFGHZ86xQhk0Y/yaJM8dOKomuxhCdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWRuenJGQ0dUUmpfSm9rengwNHFpYTdHRUowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8zMmM4MDctMzBhZS00YjIyLTkwNWYt ZGMzM2VhYTEwZDI4LzEvWWRuenJGQ0dUUmpfSm9rengwNHFpYTdHRUowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8zMmM4MDctMzBhZS00YjIyLTkwNWYtZGMzM2VhYTEwZDI4 LzEvWWRuenJGQ0dUUmpfSm9rengwNHFpYTdHRUowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQvRUQpm TD/yp670gEM+hcTVbmajkHxtkj5rEt02u6I/aexbk9XgepD69X4ca7sviPgCbj2C b2jEQOkwrF6TvmWtKOhtFkdhM+mmtAFY+JwLduzoHgwMpWly6ZSj4/GC2tmWv11d RVzhb7k/oPvxmzyn1Q/WbPYC7JyqHs3D4Ld47ER42A7Mkuo1hpLYeg8bVvJ3suc5 4v06fkyI0wX5Qfkuj8u2zhq05F3A0Yv8zr0G4LgGHFRG6wQxL05BmFtrns5OcGji XJBK1rxW6IsbBoENbdMZgOoReqOMlBAN8OIzzhr+eTKBVuBzVE2lw7PKO7AEQnRu gEn38oVku5BkzQ== -----END CERTIFICATE-----Generated at Tue Dec 23 20:39:37 2025 by rpki-client