This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft File: YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft (raw, json) Hash identifier: qFbDw2/mnGJ4wBCxJWHg1WhkBvSc66G9zWpyFhQzsJE= Subject key identifier: D8:AB:CF:69:60:68:BF:90:E9:34:F7:49:50:AF:04:10:1B:BB:8D:0C Authority key identifier: 61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5 Certificate issuer: /CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5 Certificate serial: 019B37217D0F144DB92AF6F68F82DC5147FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft Manifest number: 0F1F Signing time: Fri 19 Dec 2025 15:01:40 +0000 Manifest this update: Fri 19 Dec 2025 15:01:40 +0000 Manifest next update: Sat 20 Dec 2025 15:01:40 +0000 Files and hashes: 1: 02GOfZbMNICRgOj9G0mIGs2I4vI.roa (hash: 7F9bn3m0UkAUH0crYUw2LxUKO5iFZMnEUQvddNdyyzY=) 2: 1wktyXo13sUHT1rATESg5FNiuyk.roa (hash: hCP3ZMMgaFh8n4sim6mqZazNXZKLtUNK2izenZ+UBc4=) 3: YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl (hash: L1rQ7/64BQtL2KtyTpAj2sQgtWSwk4cVcLmMEr4co+E=) 4: yxSHMNq1K4qzrK8RBcry_vpRL0Y.roa (hash: ES8XPk3Ggq1Zs2KaMQwv/Lx7ybdkBhCiefUow9lLBOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:7d:0f:14:4d:b9:2a:f6:f6:8f:82:dc:51:47:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5 Validity Not Before: Dec 19 15:01:40 2025 GMT Not After : Dec 20 15:01:40 2025 GMT Subject: CN=d8abcf696068bf90e934f74950af04101bbb8d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6b:fa:39:d2:6e:9d:f7:10:1c:72:4d:84:a4: 46:81:92:42:12:93:1b:63:93:f3:28:61:f8:5f:ad: 81:7a:41:68:a3:fd:43:d7:fc:67:31:ba:21:d0:17: b0:d7:d0:fe:cf:81:81:50:16:35:31:57:3d:ac:bd: 30:ff:84:68:49:6b:80:94:f8:7a:85:44:69:84:11: 30:8e:ee:91:e7:54:f4:da:ed:24:62:fe:c5:77:73: f1:94:91:05:7e:4b:8e:1e:49:36:6c:8d:07:b7:25: b3:97:95:b9:18:c6:b6:27:6a:99:92:e3:d5:8f:71: e0:a7:90:c0:8d:d8:14:79:03:7d:45:9e:8d:ab:7e: bf:e4:91:6a:ff:47:d0:94:59:ed:28:da:2d:da:55: ee:fd:70:c5:77:84:89:42:a4:68:41:49:61:3a:32: 9b:84:8f:8f:e3:f2:8f:2e:be:4d:eb:aa:41:e4:ef: 1c:97:e0:02:f0:54:94:d0:5f:ce:78:68:cf:c1:80: 13:8b:aa:04:c9:0b:0e:c6:21:fc:d9:fa:99:17:ca: e6:d8:75:44:95:81:7c:27:38:6f:b8:fd:3b:d3:3e: 2d:a7:49:ae:41:53:0f:2a:48:a9:65:37:4c:ca:11: 4d:b5:62:10:c0:8d:74:87:51:52:00:61:80:9d:99: b1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AB:CF:69:60:68:BF:90:E9:34:F7:49:50:AF:04:10:1B:BB:8D:0C X509v3 Authority Key Identifier: keyid:61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:7f:e2:7c:d1:ba:6f:8f:74:77:ff:4f:10:5e:df:04:e8:13: 28:ea:34:4c:ae:89:6b:c5:f8:a2:b9:c5:5b:cf:57:02:9e:63: 3b:31:4f:68:86:bc:2d:9f:42:9f:29:87:77:68:d2:a2:55:7d: 24:0f:f2:b8:96:5b:b6:75:79:ad:0a:cc:6d:94:f8:10:62:f5: 0a:f1:f1:26:e9:a1:16:4d:25:25:0d:c0:f5:3e:91:98:50:17: 9f:d6:80:84:19:46:fe:52:85:14:25:ce:e1:67:26:c1:f8:5f: 1f:34:d7:72:bd:e0:a4:31:92:11:9d:5f:64:d6:72:b7:f5:3e: 66:4d:23:4a:0b:8c:8b:42:58:d1:50:48:bf:30:67:0c:70:fd: 2d:88:ef:30:53:db:a3:00:ac:90:a9:9a:94:c2:32:6c:e5:74: 0d:22:41:44:bd:34:9f:8c:60:e1:78:c8:1f:01:32:73:7a:0a: 0b:81:5c:6b:09:46:88:08:bc:b7:20:42:a4:b7:9d:ac:d7:86: f1:8d:32:39:d6:fe:d0:f5:49:08:30:37:bf:6b:d1:54:27:82: aa:07:e1:3b:b0:6b:fe:1b:73:0e:68:77:60:3a:e9:e3:47:a4: 07:85:e5:2e:6b:8a:62:e5:0d:1e:f2:66:3a:cd:33:fe:1b:a7: b8:8b:94:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IX0PFE25Kvb2j4LcUUf6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNGUxOWEyMjc1ODE2YTI4ZTVlODBjOGY5YTI4Y2M1YTFk OWMwZDUwHhcNMjUxMjE5MTUwMTQwWhcNMjUxMjIwMTUwMTQwWjAzMTEwLwYDVQQD EyhkOGFiY2Y2OTYwNjhiZjkwZTkzNGY3NDk1MGFmMDQxMDFiYmI4ZDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2v6OdJunfcQHHJNhKRGgZJCEpMb Y5PzKGH4X62BekFoo/1D1/xnMboh0Bew19D+z4GBUBY1MVc9rL0w/4RoSWuAlPh6 hURphBEwju6R51T02u0kYv7Fd3PxlJEFfkuOHkk2bI0HtyWzl5W5GMa2J2qZkuPV j3Hgp5DAjdgUeQN9RZ6Nq36/5JFq/0fQlFntKNot2lXu/XDFd4SJQqRoQUlhOjKb hI+P4/KPLr5N66pB5O8cl+AC8FSU0F/OeGjPwYATi6oEyQsOxiH82fqZF8rm2HVE lYF8JzhvuP070z4tp0muQVMPKkipZTdMyhFNtWIQwI10h1FSAGGAnZmxRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNirz2lgaL+Q6TT3SVCvBBAbu40MMB8GA1UdIwQY MBaAFGFOGaInWBaijl6AyPmijMWh2cDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVU0Wm9pZFlGcUtPWG9ESS1hS014YUhad05VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lNThlMjctY2FmZC00MTdjLTk1ZDAt ODcwNTQ0Y2FhZmFiLzEvWVU0Wm9pZFlGcUtPWG9ESS1hS014YUhad05VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9lNThlMjctY2FmZC00MTdjLTk1ZDAtODcwNTQ0Y2FhZmFi LzEvWVU0Wm9pZFlGcUtPWG9ESS1hS014YUhad05VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMX/ifNG6 b490d/9PEF7fBOgTKOo0TK6Ja8X4ornFW89XAp5jOzFPaIa8LZ9CnymHd2jSolV9 JA/yuJZbtnV5rQrMbZT4EGL1CvHxJumhFk0lJQ3A9T6RmFAXn9aAhBlG/lKFFCXO 4WcmwfhfHzTXcr3gpDGSEZ1fZNZyt/U+Zk0jSguMi0JY0VBIvzBnDHD9LYjvMFPb owCskKmalMIybOV0DSJBRL00n4xg4XjIHwEyc3oKC4FcawlGiAi8tyBCpLedrNeG 8Y0yOdb+0PVJCDA3v2vRVCeCqgfhO7Br/htzDmh3YDrp40ekB4XlLmuKYuUNHvJm Os0z/hunuIuUhg== -----END CERTIFICATE-----Generated at Fri Dec 19 22:10:22 2025 by rpki-client