This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft File: YWAUEB_7zmdROc1MAroAY0rYbgI.mft (raw, json) Hash identifier: 8+mCDUhN2wE5TpylcA1bFJTs8Hcnuwq1gKR0PO+zabY= Subject key identifier: 5B:2B:58:99:E1:E4:7D:97:FC:B8:7E:21:59:0B:07:72:C0:87:01:06 Authority key identifier: 61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02 Certificate issuer: /CN=616014101ffbce675139cd4c02ba00634ad86e02 Certificate serial: 019B311F266606B917C147F3D8226118791A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft Manifest number: 1715 Signing time: Thu 18 Dec 2025 11:01:23 +0000 Manifest this update: Thu 18 Dec 2025 11:01:23 +0000 Manifest next update: Fri 19 Dec 2025 11:01:23 +0000 Files and hashes: 1: 7vWonm9bF5IcZc4b_JwarXdqm9s.roa (hash: hJURA5qklA/bOkBC37NwKVvc+QzGI8iekbBVx5yVdVA=) 2: YWAUEB_7zmdROc1MAroAY0rYbgI.crl (hash: lU+maT8gxKehE1+0nP8ApyRi1ZJX75Xzhod32brHPVA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 11:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:1f:26:66:06:b9:17:c1:47:f3:d8:22:61:18:79:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=616014101ffbce675139cd4c02ba00634ad86e02 Validity Not Before: Dec 18 11:01:23 2025 GMT Not After : Dec 19 11:01:23 2025 GMT Subject: CN=5b2b5899e1e47d97fcb87e21590b0772c0870106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8f:9b:d2:52:e0:25:f2:89:f8:2c:3f:c2:30: db:6f:cb:77:51:d4:36:3c:9d:32:52:1e:bf:92:f0: 57:30:6a:e6:93:6e:b0:27:ac:96:07:c7:9f:39:64: 7e:53:53:68:20:1c:d2:98:a0:97:91:47:d8:76:f5: 80:64:16:93:d5:3c:f7:68:38:61:99:ea:a9:19:b6: 87:4c:75:55:e1:09:40:37:77:e1:3a:9f:91:d6:7f: 9e:3c:2e:8f:45:6e:5a:fd:d9:89:fc:1c:77:bf:9f: ac:b7:b7:6a:54:22:a2:68:28:ca:5a:02:4e:05:4a: 78:2e:f1:01:d8:0f:89:5a:bf:a4:30:26:18:62:66: 1c:fe:42:52:99:b8:bc:31:7a:8e:f9:d9:e7:e4:13: 0f:20:ed:c3:06:17:41:77:15:68:69:8a:ef:ca:ed: 9f:ab:a8:2a:ef:19:82:14:a1:f8:fa:76:71:52:23: 2a:9c:10:3b:57:97:68:28:8f:e1:a5:d7:8f:06:2c: 48:4e:9d:20:5b:9f:45:90:b9:51:bc:10:a3:14:b1: 03:e4:5f:f4:4b:2d:e0:38:0a:e0:1e:30:7d:62:6e: 42:61:0e:bd:13:86:78:74:e1:e3:76:37:d8:04:fa: 0a:c6:93:b4:a1:1d:0b:de:9f:c0:78:57:e0:52:30: c0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:2B:58:99:E1:E4:7D:97:FC:B8:7E:21:59:0B:07:72:C0:87:01:06 X509v3 Authority Key Identifier: keyid:61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:86:d8:89:96:cd:ae:d7:76:d2:32:9f:a9:12:dd:ae:78:1d: 25:3e:4b:59:ab:d3:5a:af:f7:27:00:f1:58:38:9c:36:24:80: a4:d9:cb:1d:33:51:60:e0:cf:ee:25:de:26:e3:86:8a:bc:66: f6:0f:fb:e6:c7:11:f7:c0:97:e5:7c:5c:58:bc:19:df:d7:4f: 0c:8f:e7:33:3d:f7:0d:86:86:fb:fd:ff:b8:3d:b1:d8:c7:d6: 86:ef:e3:7a:e1:6a:1c:35:5b:db:e3:6c:71:9b:dc:5b:7f:5b: 7d:85:ef:f4:55:e4:59:41:4b:26:76:6a:d2:a2:62:53:3f:45: 3a:b9:0d:10:d4:ee:50:ff:1b:05:69:d5:c6:04:76:8b:1d:bc: 5b:03:81:d4:bc:24:29:d9:20:07:2a:a9:8b:76:5c:82:c6:cd: f5:0f:3a:a9:8c:ad:39:c2:e4:f1:98:19:02:ca:3a:b7:db:c8: 95:eb:35:d6:d0:8f:3a:39:d4:41:d0:ee:11:a9:7c:eb:85:40: 4e:9c:37:a8:97:22:d7:d9:15:10:27:cc:32:f7:72:92:53:91: 1c:2a:a4:c2:6e:bd:d4:ed:f8:09:42:85:16:9d:9b:9a:1a:39: 1c:d7:48:f0:56:11:03:32:0a:73:ff:73:25:40:96:25:bb:de: 08:86:42:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxHyZmBrkXwUfz2CJhGHkaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNjAxNDEwMWZmYmNlNjc1MTM5Y2Q0YzAyYmEwMDYzNGFk ODZlMDIwHhcNMjUxMjE4MTEwMTIzWhcNMjUxMjE5MTEwMTIzWjAzMTEwLwYDVQQD Eyg1YjJiNTg5OWUxZTQ3ZDk3ZmNiODdlMjE1OTBiMDc3MmMwODcwMTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo+b0lLgJfKJ+Cw/wjDbb8t3UdQ2 PJ0yUh6/kvBXMGrmk26wJ6yWB8efOWR+U1NoIBzSmKCXkUfYdvWAZBaT1Tz3aDhh meqpGbaHTHVV4QlAN3fhOp+R1n+ePC6PRW5a/dmJ/Bx3v5+st7dqVCKiaCjKWgJO BUp4LvEB2A+JWr+kMCYYYmYc/kJSmbi8MXqO+dnn5BMPIO3DBhdBdxVoaYrvyu2f q6gq7xmCFKH4+nZxUiMqnBA7V5doKI/hpdePBixITp0gW59FkLlRvBCjFLED5F/0 Sy3gOArgHjB9Ym5CYQ69E4Z4dOHjdjfYBPoKxpO0oR0L3p/AeFfgUjDAYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsrWJnh5H2X/Lh+IVkLB3LAhwEGMB8GA1UdIwQY MBaAFGFgFBAf+85nUTnNTAK6AGNK2G4CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVdBVUVCXzd6bWRST2MxTUFyb0FZMHJZYmdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9jYzg0NDEtZGRiNi00Nzk1LTkwMzAt NTljZGRiYTE3NmVmLzEvWVdBVUVCXzd6bWRST2MxTUFyb0FZMHJZYmdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9jYzg0NDEtZGRiNi00Nzk1LTkwMzAtNTljZGRiYTE3NmVm LzEvWVdBVUVCXzd6bWRST2MxTUFyb0FZMHJZYmdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARIbYiZbN rtd20jKfqRLdrngdJT5LWavTWq/3JwDxWDicNiSApNnLHTNRYODP7iXeJuOGirxm 9g/75scR98CX5XxcWLwZ39dPDI/nMz33DYaG+/3/uD2x2MfWhu/jeuFqHDVb2+Ns cZvcW39bfYXv9FXkWUFLJnZq0qJiUz9FOrkNENTuUP8bBWnVxgR2ix28WwOB1Lwk KdkgByqpi3ZcgsbN9Q86qYytOcLk8ZgZAso6t9vIles11tCPOjnUQdDuEal864VA Tpw3qJci19kVECfMMvdyklORHCqkwm691O34CUKFFp2bmho5HNdI8FYRAzIKc/9z JUCWJbveCIZCOQ== -----END CERTIFICATE-----Generated at Thu Dec 18 14:51:31 2025 by rpki-client