This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft File: YjUmrZ--xXT6TsPZuttUM_2qyns.mft (raw, json) Hash identifier: E/SooayhbgIcA9Pw77bdiCYzXxaChQbG7xJRUh1o1Xw= Subject key identifier: D4:48:64:6D:91:DC:D0:23:CF:FA:61:A9:F3:34:D8:FF:17:18:6E:FA Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b Certificate serial: 019B348D6E6BD3FE681AD7F4BE63BE710262 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft Manifest number: 0D9A Signing time: Fri 19 Dec 2025 03:00:42 +0000 Manifest this update: Fri 19 Dec 2025 03:00:42 +0000 Manifest next update: Sat 20 Dec 2025 03:00:42 +0000 Files and hashes: 1: Ccywd-EFb-47zGXwVvm1HK3gD5g.roa (hash: tofGggOpzVU4QpBRLmwlmpDY705qfzw44/NrLhvXC/s=) 2: I8Tt-Zu-4KuSLBycV3-omKCgA2k.roa (hash: Zd+eY+EVCzF5gjwTJThQ6dJvOjSgC7ThbQkI/3E4k6Q=) 3: YjUmrZ--xXT6TsPZuttUM_2qyns.crl (hash: HYWICBItdA1E9r7P4zBf38so/CZtsf+pOw9kljsxB7s=) 4: hqQDTg86IXDCJKqDxF4L3S5iCf8.roa (hash: H2Wy84IqHXcbFRYxZCEIcsyGOCDB08MT81RQd+tDuH4=) 5: sDw4_lTU4iQJOaN0yUvzocqZ23c.roa (hash: 9muZnI3+r+Noi3k3hRSo6GnSQDK9o1ZrpIfj14cPaHM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 03:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:8d:6e:6b:d3:fe:68:1a:d7:f4:be:63:be:71:02:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b Validity Not Before: Dec 19 03:00:42 2025 GMT Not After : Dec 20 03:00:42 2025 GMT Subject: CN=d448646d91dcd023cffa61a9f334d8ff17186efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e6:6f:37:b3:c3:a4:f0:ee:0d:0a:79:47:06: b5:b7:1d:b5:7c:6d:89:06:e5:32:4c:06:65:56:37: 70:05:07:68:df:19:ce:e3:c6:ae:fd:e5:2f:df:45: 87:da:2b:7d:3a:32:f2:18:4b:99:d5:e7:bc:60:ad: 50:c3:36:d5:6c:76:49:ac:d9:aa:7c:90:7a:41:21: f5:81:65:62:65:72:fb:65:e5:79:95:3b:d6:b8:5e: c5:21:5d:fd:13:8f:3d:f9:f0:a2:e9:e9:fb:26:da: 9d:4e:b4:e7:31:5d:28:ff:e8:94:72:7d:33:f9:93: 40:fd:ab:b8:1c:a3:2d:88:0a:7e:bf:5d:4d:b2:52: a8:95:52:96:b3:7c:a7:b1:07:1c:da:2a:1a:b1:9e: 4b:45:6f:f2:ce:02:6b:fd:bd:94:69:c5:72:bf:f4: 21:5b:17:3c:5e:e0:7f:0b:12:d7:53:df:91:87:8d: fd:ec:91:5c:67:76:4e:04:d4:fa:1e:01:28:4e:3d: f4:4c:45:6a:25:b3:38:4f:6a:f9:16:6a:13:31:a5: c8:a1:11:68:9e:9b:8b:ef:80:d7:50:a9:39:6b:73: 7f:6d:1c:65:e5:b8:b3:1c:46:f0:9d:cc:73:5e:cf: aa:d3:82:22:39:9d:6b:7e:e5:1d:94:56:66:34:70: f2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:48:64:6D:91:DC:D0:23:CF:FA:61:A9:F3:34:D8:FF:17:18:6E:FA X509v3 Authority Key Identifier: keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:5f:ff:f6:59:bd:84:26:3f:9c:b2:eb:da:9f:79:e8:eb:ea: b4:d0:10:7d:6d:4d:e3:9b:35:95:14:4e:18:e5:d0:94:91:31: cc:47:87:c1:cd:53:0f:9b:72:0a:b3:6b:e1:c2:1a:1a:78:ef: af:1c:df:59:b1:9e:5e:71:ef:23:29:a9:f2:ff:a8:8e:10:6f: 6d:be:6b:df:2b:38:b0:de:e7:13:ea:39:e9:9d:7e:4f:e7:88: c6:c6:2e:44:84:10:12:3b:0a:5b:57:59:fc:b0:5e:10:86:1f: ea:d5:4e:2d:f2:d6:61:17:b8:e4:0a:6b:65:49:2f:a7:93:db: 82:f3:53:e7:b5:b2:b7:16:24:37:f4:a9:7d:9e:7a:5b:d3:98: a8:fa:9a:a3:82:91:b9:fb:d7:83:ff:90:fc:a7:67:e6:b9:2a: 91:4c:93:3b:48:6e:22:41:d1:23:5e:20:a8:28:ef:d1:5d:d9: 46:4d:9f:66:f3:d4:5d:d1:51:e2:24:48:b8:54:42:3b:7b:70: 7c:9c:0c:ea:81:89:46:7a:05:db:09:88:5b:e8:e1:e6:78:ad: 33:3c:c2:57:60:92:36:64:4f:1e:c6:a5:16:56:5e:c5:a4:9a: 29:16:61:ce:72:45:b0:d3:49:40:ae:ab:2e:58:6e:bb:68:cf: bf:ec:a3:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0jW5r0/5oGtf0vmO+cQJiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMzUyNmFkOWZiZWM1NzRmYTRlYzNkOWJhZGI1NDMzZmRh YWNhN2IwHhcNMjUxMjE5MDMwMDQyWhcNMjUxMjIwMDMwMDQyWjAzMTEwLwYDVQQD EyhkNDQ4NjQ2ZDkxZGNkMDIzY2ZmYTYxYTlmMzM0ZDhmZjE3MTg2ZWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuZvN7PDpPDuDQp5Rwa1tx21fG2J BuUyTAZlVjdwBQdo3xnO48au/eUv30WH2it9OjLyGEuZ1ee8YK1QwzbVbHZJrNmq fJB6QSH1gWViZXL7ZeV5lTvWuF7FIV39E489+fCi6en7JtqdTrTnMV0o/+iUcn0z +ZNA/au4HKMtiAp+v11NslKolVKWs3ynsQcc2ioasZ5LRW/yzgJr/b2UacVyv/Qh Wxc8XuB/CxLXU9+Rh4397JFcZ3ZOBNT6HgEoTj30TEVqJbM4T2r5FmoTMaXIoRFo npuL74DXUKk5a3N/bRxl5bizHEbwncxzXs+q04IiOZ1rfuUdlFZmNHDy8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRIZG2R3NAjz/phqfM02P8XGG76MB8GA1UdIwQY MBaAFGI1Jq2fvsV0+k7D2brbVDP9qsp7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xZDhmYzktYjIxYi00ZGI1LTk1Y2Yt ODFjOGNlNzUwMTI0LzEvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8xZDhmYzktYjIxYi00ZGI1LTk1Y2YtODFjOGNlNzUwMTI0 LzEvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdF//9lm9 hCY/nLLr2p956OvqtNAQfW1N45s1lRROGOXQlJExzEeHwc1TD5tyCrNr4cIaGnjv rxzfWbGeXnHvIymp8v+ojhBvbb5r3ys4sN7nE+o56Z1+T+eIxsYuRIQQEjsKW1dZ /LBeEIYf6tVOLfLWYRe45AprZUkvp5PbgvNT57WytxYkN/SpfZ56W9OYqPqao4KR ufvXg/+Q/Kdn5rkqkUyTO0huIkHRI14gqCjv0V3ZRk2fZvPUXdFR4iRIuFRCO3tw fJwM6oGJRnoF2wmIW+jh5nitMzzCV2CSNmRPHsalFlZexaSaKRZhznJFsNNJQK6r Llhuu2jPv+yj9Q== -----END CERTIFICATE-----Generated at Fri Dec 19 09:45:04 2025 by rpki-client