This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft File: yuzkHLwsMGJu8qKNGDny1sR1fz8.mft (raw, json) Hash identifier: nV3dlniNLTqPRfUSkc4t0TWxT9XLxtM7UWYSoDAmFCM= Subject key identifier: 5E:C1:A7:54:D7:80:23:CA:49:EC:5E:0A:FF:F9:45:13:41:78:99:05 Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f Certificate serial: 019B0E5B71575DC02CEAF8C3840E465E26E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft Manifest number: 177C Signing time: Thu 11 Dec 2025 17:00:32 +0000 Manifest this update: Thu 11 Dec 2025 17:00:32 +0000 Manifest next update: Fri 12 Dec 2025 17:00:32 +0000 Files and hashes: 1: 4e_esTadQCaE3n5sXcrWU4jOosk.roa (hash: 6WRB/tXZjMM79bwzWzJPIybrouf6h4CCu2BnZyX47DM=) 2: 6-71hsfN7Sg9SqcN7ij5Ydd4vxY.roa (hash: iJ+ODuzSS+eoKFDYbDz9e9c9YTvR+yNB1U32FzztfQg=) 3: HCBFWHPbguHhYNXyj3CYrDXYNWo.roa (hash: YWHjbWrm4zcEsBNnp7QDqMn1mBuhsTvb3ueYJ3IoUgs=) 4: V_-pi-_FRBXageOHGy8QNDeBiFk.roa (hash: VgqGvjscQM+9CLy4OZeK0OAAcSQ66x9VqqFHfhpG7Dw=) 5: YzdSzrn2g46QLg-Ab4yA5f8O1xU.roa (hash: juEIYlvSOfWVe6E6l6/j9UJcOILOSNhDvqnCdtQBLU0=) 6: hDp1-1e9H-OB_XxdhBwbZmZOjwU.roa (hash: RlVKHFwEDLlyQQzASoSjM9hIAoQIeVOrf1r1UW38OlQ=) 7: tTtHoX1wSZCp5whsaQk__p5Qj-c.roa (hash: XeNLM4ma2PLd2XIUXqACuWWh4dYsZ4F8oRpJO/BVSZc=) 8: yuzkHLwsMGJu8qKNGDny1sR1fz8.crl (hash: EQ6UXGyX+UGj9Se0ExMVaGTp2SOH2AMUtvN6HURaJSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:71:57:5d:c0:2c:ea:f8:c3:84:0e:46:5e:26:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f Validity Not Before: Dec 11 17:00:32 2025 GMT Not After : Dec 12 17:00:32 2025 GMT Subject: CN=5ec1a754d78023ca49ec5e0afff9451341789905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a7:e0:b4:9b:2d:72:62:8a:bc:ae:f2:25:db: 9d:85:9b:2d:ec:85:57:d0:64:ab:ec:47:be:c8:86: 7e:cb:8e:a5:ed:2f:00:c0:8b:ec:4a:83:fd:1a:30: 12:7a:40:58:e6:d1:1e:2e:e9:0e:06:db:ea:f7:78: c7:11:87:db:fb:ca:3f:e2:df:48:6d:92:37:39:92: 82:c4:20:87:48:42:42:10:e0:26:60:d2:1e:ab:24: 7e:4d:74:6f:c2:85:57:13:aa:60:73:2b:e0:4e:0d: a6:b1:f1:93:0b:e4:53:c3:20:b3:2b:54:dd:52:3d: 89:e1:74:78:6e:cf:c4:37:34:46:93:33:ef:98:ce: 23:7a:f1:25:11:b1:af:74:63:d9:0d:04:f6:d8:5f: 59:b0:29:fd:22:42:8d:42:0f:a4:73:90:fb:50:9d: ea:34:21:3b:91:4a:db:f9:15:c0:a2:b6:f3:0c:90: a1:fe:89:c4:ba:05:76:8f:21:03:d5:32:e9:48:ce: d7:51:c6:fe:ae:85:bc:6e:44:6b:76:c3:be:e4:31: cb:40:fe:6a:27:ae:88:73:e9:9a:ba:a9:8a:35:78: e4:41:93:be:d4:2d:28:81:7f:69:e4:a5:5f:53:b7: 24:59:27:26:69:c3:e6:68:26:64:9f:42:65:e4:01: a3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C1:A7:54:D7:80:23:CA:49:EC:5E:0A:FF:F9:45:13:41:78:99:05 X509v3 Authority Key Identifier: keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4d:6d:d6:91:0e:74:04:ba:77:0a:17:f0:56:b4:da:87:9d: 1e:e3:a2:4a:cc:f3:9e:fa:db:28:0f:3c:bd:cb:52:a0:96:18: b2:c8:a8:1f:b5:5a:26:89:f7:74:9d:be:75:a4:9e:4b:b6:a5: d6:a8:8f:c4:1e:12:87:1a:5d:ae:61:3e:5f:0e:d5:20:51:b5: b0:5b:05:df:1f:80:8b:9c:24:8e:60:3b:de:8d:bc:e7:25:36: 52:cb:5c:25:58:41:6b:5d:2d:e7:5d:d0:20:42:ce:a3:5e:61: 00:ab:e5:d9:a1:28:5c:51:b7:37:37:4c:81:d3:04:5d:32:b1: 58:6c:24:17:56:e6:af:42:0c:c5:24:4b:a5:13:57:b2:30:47: 80:08:0b:77:89:74:85:02:a9:d7:22:bd:08:ec:3e:94:69:0d: 61:c0:6d:e8:cc:b2:1d:94:a8:37:5c:b4:fd:bf:f2:38:3b:a9: 70:ef:41:35:ac:98:06:f6:ec:5b:04:71:14:4b:72:fc:08:73: d8:8b:5f:10:dc:34:0b:32:79:b2:3f:93:f3:c9:4e:91:cd:b7: 2a:03:57:3e:63:8f:57:f8:ee:e0:83:79:af:a5:23:44:84:51: c3:b7:1a:22:51:1c:dc:59:db:06:f1:b6:77:9a:c8:53:9c:fc: 17:96:e4:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW3FXXcAs6vjDhA5GXibiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZWNlNDFjYmMyYzMwNjI2ZWYyYTI4ZDE4MzlmMmQ2YzQ3 NTdmM2YwHhcNMjUxMjExMTcwMDMyWhcNMjUxMjEyMTcwMDMyWjAzMTEwLwYDVQQD Eyg1ZWMxYTc1NGQ3ODAyM2NhNDllYzVlMGFmZmY5NDUxMzQxNzg5OTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qfgtJstcmKKvK7yJdudhZst7IVX 0GSr7Ee+yIZ+y46l7S8AwIvsSoP9GjASekBY5tEeLukOBtvq93jHEYfb+8o/4t9I bZI3OZKCxCCHSEJCEOAmYNIeqyR+TXRvwoVXE6pgcyvgTg2msfGTC+RTwyCzK1Td Uj2J4XR4bs/ENzRGkzPvmM4jevElEbGvdGPZDQT22F9ZsCn9IkKNQg+kc5D7UJ3q NCE7kUrb+RXAorbzDJCh/onEugV2jyED1TLpSM7XUcb+roW8bkRrdsO+5DHLQP5q J66Ic+mauqmKNXjkQZO+1C0ogX9p5KVfU7ckWScmacPmaCZkn0Jl5AGj8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7Bp1TXgCPKSexeCv/5RRNBeJkFMB8GA1UdIwQY MBaAFMrs5By8LDBibvKijRg58tbEdX8/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MzBjYmUtY2UwMS00NjRkLTgyZWIt ZDg1MWU0MGQ1N2JmLzEveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82MzBjYmUtY2UwMS00NjRkLTgyZWItZDg1MWU0MGQ1N2Jm LzEveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC01t1pEO dAS6dwoX8Fa02oedHuOiSszznvrbKA88vctSoJYYssioH7VaJon3dJ2+daSeS7al 1qiPxB4ShxpdrmE+Xw7VIFG1sFsF3x+Ai5wkjmA73o285yU2UstcJVhBa10t513Q IELOo15hAKvl2aEoXFG3NzdMgdMEXTKxWGwkF1bmr0IMxSRLpRNXsjBHgAgLd4l0 hQKp1yK9COw+lGkNYcBt6MyyHZSoN1y0/b/yODupcO9BNayYBvbsWwRxFEty/Ahz 2ItfENw0CzJ5sj+T88lOkc23KgNXPmOPV/ju4IN5r6UjRIRRw7caIlEc3FnbBvG2 d5rIU5z8F5bk3A== -----END CERTIFICATE-----Generated at Fri Dec 12 02:49:54 2025 by rpki-client