This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft File: YH4TV4xoDumP2q0gI3DxDjwoKvw.mft (raw, json) Hash identifier: Rmdc/Lm7YW66DOhAuZhZ12G9JsbqpM4mDAqTte1ks4k= Subject key identifier: D2:AD:DA:68:88:BA:2E:C3:4E:D9:30:9E:22:73:A9:28:B8:C8:28:09 Authority key identifier: 60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC Certificate issuer: /CN=607e13578c680ee98fdaad202370f10e3c282afc Certificate serial: 019B19F21E31AED741108A8AA0251319B0F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft Manifest number: 105E Signing time: Sat 13 Dec 2025 23:00:56 +0000 Manifest this update: Sat 13 Dec 2025 23:00:56 +0000 Manifest next update: Sun 14 Dec 2025 23:00:56 +0000 Files and hashes: 1: YH4TV4xoDumP2q0gI3DxDjwoKvw.crl (hash: q8JzpTkPJMC05J/F7Umh2+unxQHnwaBcFx4KnrZohsQ=) 2: wjF-boaSBdJpFX21HtXG9GjSpyA.roa (hash: AbHr9ss+TI1KskPrNJWukMpmmelIuYFTcEXRCT6a0es=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.crl rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f2:1e:31:ae:d7:41:10:8a:8a:a0:25:13:19:b0:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=607e13578c680ee98fdaad202370f10e3c282afc Validity Not Before: Dec 13 23:00:56 2025 GMT Not After : Dec 14 23:00:56 2025 GMT Subject: CN=d2adda6888ba2ec34ed9309e2273a928b8c82809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:02:ff:7d:26:ff:31:a4:78:7b:92:c8:b1:d5: 54:1d:59:f4:11:32:38:eb:31:c4:dd:08:98:ce:c4: 6d:8d:f4:12:4a:ef:e9:0c:f0:64:7d:3b:46:69:ef: 5d:e2:21:81:c9:a3:8b:df:31:02:d0:ec:78:36:19: bf:b0:45:70:77:f9:b3:7f:91:cd:9a:12:15:85:a3: 42:a5:b3:2f:21:fc:8b:2f:35:96:88:61:56:cf:9d: 65:31:42:31:b4:ff:59:6b:5a:81:41:b3:52:44:8b: 66:7c:0f:00:6e:a1:7c:a6:6f:49:dc:da:73:03:6b: cc:8a:ff:ae:dd:f6:e6:25:c5:3a:76:99:2b:38:17: 0d:a0:20:ea:59:0d:33:0e:47:30:9d:46:d7:3a:c9: e9:c9:88:95:18:47:a1:97:50:b4:4d:1e:5e:79:bd: 62:d0:eb:86:a6:c8:d1:36:8c:af:e8:8d:45:5b:a3: ad:38:ba:23:18:df:2e:c6:76:a6:91:0a:ef:70:8e: e6:d5:33:f4:d9:1c:07:2b:d6:bd:b2:e1:8c:41:c5: 36:e8:8f:e0:58:70:28:90:78:d7:fe:cb:9f:6b:80: 03:c4:bb:65:78:ea:fb:7a:b9:d7:9f:15:a5:a4:6f: 95:d0:1a:b4:41:e8:57:af:01:fc:d3:b6:63:36:55: 22:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AD:DA:68:88:BA:2E:C3:4E:D9:30:9E:22:73:A9:28:B8:C8:28:09 X509v3 Authority Key Identifier: keyid:60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:1e:d3:22:e0:4b:11:7f:a8:4f:60:6c:11:63:f5:68:1c:fe: ce:0c:f4:bf:ff:50:74:75:50:40:f9:78:79:25:39:cd:da:be: be:b5:00:19:8c:d0:31:5e:2c:04:0a:80:06:73:ba:8e:5e:a1: 49:2d:cd:fc:47:1f:91:a8:29:c6:34:c5:66:10:79:53:55:df: 2d:e1:00:78:3c:90:a5:18:1f:60:65:cb:e2:8a:d0:00:2f:17: 91:74:f7:9a:c4:2e:ac:c3:96:07:fb:ae:5c:fd:dc:dc:c7:ff: e3:8f:1d:c7:7a:1b:a9:34:84:8a:0e:ef:f2:08:da:f7:a9:d4: 5d:5a:3b:a1:87:f5:ed:19:c0:33:2d:7a:99:69:3f:d5:2d:d6: f4:a2:f2:f2:f5:49:ec:2d:8c:9a:73:a9:1f:fa:1a:12:b0:d0: f5:0f:c8:a0:52:67:f7:04:a5:3a:20:58:e0:f4:18:d7:e9:c6: ff:e1:01:9f:e1:15:de:ef:57:fb:f1:4c:4c:e7:b2:05:e7:ad: b9:7f:98:1d:04:e3:2a:15:17:6f:48:c3:6e:03:e0:de:58:6d: 5a:37:5f:89:43:1b:cd:5a:ac:4c:59:0f:fe:dc:70:a8:06:0c: 3c:f8:ea:12:b7:42:80:b0:d5:1d:3e:af:31:a9:1b:34:e1:d5: 15:14:a2:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8h4xrtdBEIqKoCUTGbD0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwN2UxMzU3OGM2ODBlZTk4ZmRhYWQyMDIzNzBmMTBlM2My ODJhZmMwHhcNMjUxMjEzMjMwMDU2WhcNMjUxMjE0MjMwMDU2WjAzMTEwLwYDVQQD EyhkMmFkZGE2ODg4YmEyZWMzNGVkOTMwOWUyMjczYTkyOGI4YzgyODA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AL/fSb/MaR4e5LIsdVUHVn0ETI4 6zHE3QiYzsRtjfQSSu/pDPBkfTtGae9d4iGByaOL3zEC0Ox4Nhm/sEVwd/mzf5HN mhIVhaNCpbMvIfyLLzWWiGFWz51lMUIxtP9Za1qBQbNSRItmfA8AbqF8pm9J3Npz A2vMiv+u3fbmJcU6dpkrOBcNoCDqWQ0zDkcwnUbXOsnpyYiVGEehl1C0TR5eeb1i 0OuGpsjRNoyv6I1FW6OtOLojGN8uxnamkQrvcI7m1TP02RwHK9a9suGMQcU26I/g WHAokHjX/sufa4ADxLtleOr7ernXnxWlpG+V0Bq0QehXrwH807ZjNlUi/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKt2miIui7DTtkwniJzqSi4yCgJMB8GA1UdIwQY MBaAFGB+E1eMaA7pj9qtICNw8Q48KCr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUg0VFY0eG9EdW1QMnEwZ0kzRHhEandvS3Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9hMjFiYmUtYmE0ZC00ZTAzLWJlZjgt YmFmZmUzYjY3N2RmLzEvWUg0VFY0eG9EdW1QMnEwZ0kzRHhEandvS3Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9hMjFiYmUtYmE0ZC00ZTAzLWJlZjgtYmFmZmUzYjY3N2Rm LzEvWUg0VFY0eG9EdW1QMnEwZ0kzRHhEandvS3Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUR7TIuBL EX+oT2BsEWP1aBz+zgz0v/9QdHVQQPl4eSU5zdq+vrUAGYzQMV4sBAqABnO6jl6h SS3N/EcfkagpxjTFZhB5U1XfLeEAeDyQpRgfYGXL4orQAC8XkXT3msQurMOWB/uu XP3c3Mf/448dx3obqTSEig7v8gja96nUXVo7oYf17RnAMy16mWk/1S3W9KLy8vVJ 7C2MmnOpH/oaErDQ9Q/IoFJn9wSlOiBY4PQY1+nG/+EBn+EV3u9X+/FMTOeyBeet uX+YHQTjKhUXb0jDbgPg3lhtWjdfiUMbzVqsTFkP/txwqAYMPPjqErdCgLDVHT6v MakbNOHVFRSi1g== -----END CERTIFICATE-----Generated at Sun Dec 14 01:04:10 2025 by rpki-client