This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft File: yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft (raw, json) Hash identifier: 2BUGR+gNF9jjIpkP6vzdpjQDJ+nLh/7dgDIXGERWMso= Subject key identifier: 73:16:AB:04:7A:C4:86:E5:80:27:86:63:DA:0A:6F:E6:67:75:BD:CE Authority key identifier: CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76 Certificate issuer: /CN=cab11f493b31a5a2c1f23ce0e3004647a3242576 Certificate serial: 019B473906A7D67E2C3EF2A15C6881DFFD30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft Manifest number: 04A9 Signing time: Mon 22 Dec 2025 18:01:17 +0000 Manifest this update: Mon 22 Dec 2025 18:01:17 +0000 Manifest next update: Tue 23 Dec 2025 18:01:17 +0000 Files and hashes: 1: iO6OOltzYSW2yZ_5E85X-P4mF_0.roa (hash: 2XDE+mCyZurCdSAHCb4+FLC8SwOf/SeiDXoheU8dhOI=) 2: yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl (hash: OW9pX/hbPtt5aW8QcyzkGHOV4Rrbg1VpXQ09QCJgb98=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 18:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:39:06:a7:d6:7e:2c:3e:f2:a1:5c:68:81:df:fd:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cab11f493b31a5a2c1f23ce0e3004647a3242576 Validity Not Before: Dec 22 18:01:17 2025 GMT Not After : Dec 23 18:01:17 2025 GMT Subject: CN=7316ab047ac486e580278663da0a6fe66775bdce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:be:ea:09:ef:7e:ad:b1:ed:e2:3f:40:1c:37: 9d:16:70:54:17:e5:23:52:6e:55:2e:73:5f:e2:fa: 37:23:60:20:04:56:d0:3b:a9:13:e6:df:25:86:38: 42:d2:85:ae:c9:2c:63:8a:5f:a1:3a:ea:78:92:ff: e3:c7:aa:13:70:c0:18:23:d8:3a:b0:53:41:07:65: 69:4b:b8:f0:36:d5:d5:95:95:03:7f:71:b3:a7:6d: 2d:3e:f4:d0:a6:5b:4b:09:0e:6d:46:b7:d3:cd:00: 29:b5:3f:11:d9:77:1f:26:90:e6:26:da:c4:7b:07: 82:e5:f1:7b:99:a7:58:09:36:95:db:ad:36:72:6f: d8:2d:eb:eb:97:9e:73:d3:94:a1:91:9d:d7:37:35: be:b6:e3:49:ab:75:90:87:17:d9:b9:ac:38:a0:ca: 36:9f:5a:fb:6f:a8:de:0f:92:01:c5:02:f9:de:fa: e5:9e:dd:4b:0e:cc:a3:b4:5a:d5:e5:3b:1a:a5:d7: 60:39:e2:ab:5b:43:26:43:97:52:fa:0b:ca:28:88: ca:b8:a6:43:91:3e:a4:b3:f7:f1:99:16:1d:ae:87: 50:b9:fd:bc:ad:e4:a7:ae:80:3c:ad:cc:c9:f3:ec: 77:cf:ba:48:94:e3:af:cf:56:36:70:dd:44:fa:5d: b8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:16:AB:04:7A:C4:86:E5:80:27:86:63:DA:0A:6F:E6:67:75:BD:CE X509v3 Authority Key Identifier: keyid:CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:ed:b1:d0:28:c5:7d:b2:53:e8:86:2f:64:f5:08:2d:0d:83: 13:16:21:b4:40:19:bd:3b:39:29:c9:e4:18:d8:b1:eb:51:62: ff:9e:d7:06:5f:c4:fb:8c:bb:03:e6:7d:37:b7:d4:b7:fd:bf: 62:1e:7a:47:74:ab:3f:a6:4b:19:cc:f2:f8:58:9e:4f:cf:b3: d1:8c:41:ec:0b:55:6f:8b:1a:e7:a4:14:6d:2c:f8:c3:d0:ef: 06:f4:5f:be:8e:af:40:0f:69:97:64:ba:c1:e8:b2:d3:cc:b9: 1f:9c:40:a1:ef:f1:e0:97:6d:5f:4e:e0:67:04:ec:1b:f5:90: a6:92:1c:d5:85:4f:dd:5d:8a:2c:a0:1c:c8:01:c5:d1:99:0c: 42:63:65:6c:85:12:13:17:54:d1:2d:ec:7a:b3:b8:5f:cd:d9: 03:b6:83:b7:61:56:d1:0c:df:91:e9:af:c1:32:81:7f:84:a0: 46:af:e8:92:77:f4:dd:91:5c:dd:7d:15:fd:cc:bf:61:a6:f2: 35:8a:3f:ba:01:8d:2f:38:6b:bf:ff:25:54:15:e1:a4:11:87: bf:91:45:11:e9:32:28:f1:69:28:fb:65:cf:98:f0:45:d3:80: 82:4e:84:9b:98:e1:e3:65:6c:cc:ba:4c:b0:7a:55:e7:18:15: 16:fc:58:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHOQan1n4sPvKhXGiB3/0wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYjExZjQ5M2IzMWE1YTJjMWYyM2NlMGUzMDA0NjQ3YTMy NDI1NzYwHhcNMjUxMjIyMTgwMTE3WhcNMjUxMjIzMTgwMTE3WjAzMTEwLwYDVQQD Eyg3MzE2YWIwNDdhYzQ4NmU1ODAyNzg2NjNkYTBhNmZlNjY3NzViZGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb7qCe9+rbHt4j9AHDedFnBUF+Uj Um5VLnNf4vo3I2AgBFbQO6kT5t8lhjhC0oWuySxjil+hOup4kv/jx6oTcMAYI9g6 sFNBB2VpS7jwNtXVlZUDf3Gzp20tPvTQpltLCQ5tRrfTzQAptT8R2XcfJpDmJtrE eweC5fF7madYCTaV2602cm/YLevrl55z05ShkZ3XNzW+tuNJq3WQhxfZuaw4oMo2 n1r7b6jeD5IBxQL53vrlnt1LDsyjtFrV5TsapddgOeKrW0MmQ5dS+gvKKIjKuKZD kT6ks/fxmRYdrodQuf28reSnroA8rczJ8+x3z7pIlOOvz1Y2cN1E+l24vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMWqwR6xIblgCeGY9oKb+Zndb3OMB8GA1UdIwQY MBaAFMqxH0k7MaWiwfI84OMARkejJCV2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXJFZlNUc3hwYUxCOGp6ZzR3QkdSNk1rSlhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83NGQyZWEtNmU2MC00MGFmLWE1NmEt MTUxZjZlZDE3NjkxLzEveXJFZlNUc3hwYUxCOGp6ZzR3QkdSNk1rSlhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83NGQyZWEtNmU2MC00MGFmLWE1NmEtMTUxZjZlZDE3Njkx LzEveXJFZlNUc3hwYUxCOGp6ZzR3QkdSNk1rSlhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+2x0CjF fbJT6IYvZPUILQ2DExYhtEAZvTs5KcnkGNix61Fi/57XBl/E+4y7A+Z9N7fUt/2/ Yh56R3SrP6ZLGczy+FieT8+z0YxB7AtVb4sa56QUbSz4w9DvBvRfvo6vQA9pl2S6 weiy08y5H5xAoe/x4JdtX07gZwTsG/WQppIc1YVP3V2KLKAcyAHF0ZkMQmNlbIUS ExdU0S3serO4X83ZA7aDt2FW0QzfkemvwTKBf4SgRq/oknf03ZFc3X0V/cy/Yaby NYo/ugGNLzhrv/8lVBXhpBGHv5FFEekyKPFpKPtlz5jwRdOAgk6Em5jh42VszLpM sHpV5xgVFvxYlw== -----END CERTIFICATE-----Generated at Tue Dec 23 04:16:48 2025 by rpki-client