This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft File: YfvYiH2oRHExjYOISsAF8BtE_Uk.mft (raw, json) Hash identifier: IUkhl8/nLa58UQ8FXyxhZhA4BuZxz5F4PkoY2Mqf8x4= Subject key identifier: 75:87:0F:97:8D:1D:4D:29:7D:D5:36:B6:9C:7F:DC:C1:AD:D5:B3:D2 Authority key identifier: 61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49 Certificate issuer: /CN=61fbd8887da84471318d83884ac005f01b44fd49 Certificate serial: 019B5ABF7C98BCBEA7CE841B20784F1375D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft Manifest number: 10BA Signing time: Fri 26 Dec 2025 13:00:57 +0000 Manifest this update: Fri 26 Dec 2025 13:00:57 +0000 Manifest next update: Sat 27 Dec 2025 13:00:57 +0000 Files and hashes: 1: VqIWjBWlYBceSFr-zqKzJgNUIvM.roa (hash: Goyl+zMBt9K8bsmInK/tMhspP8k2k8ODxJhJDONQhxk=) 2: YfvYiH2oRHExjYOISsAF8BtE_Uk.crl (hash: W8/McmJEH+F+ZjRMvjEdrFWYYPIiaqIKRsn5mhlhzoc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:7c:98:bc:be:a7:ce:84:1b:20:78:4f:13:75:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61fbd8887da84471318d83884ac005f01b44fd49 Validity Not Before: Dec 26 13:00:57 2025 GMT Not After : Dec 27 13:00:57 2025 GMT Subject: CN=75870f978d1d4d297dd536b69c7fdcc1add5b3d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:32:e6:eb:94:95:b4:03:1d:0a:95:50:4c:2b: e1:d8:af:be:a0:06:13:1e:e5:60:2d:1d:36:8f:96: 89:b8:7b:c1:e5:ee:d1:d0:ec:b2:57:b9:5a:ff:36: fa:2c:62:a3:83:80:bc:d2:4b:10:6e:0c:8a:d7:55: 84:91:cc:fd:a1:e0:10:9c:8d:54:11:fe:24:26:bb: 65:26:5a:25:2c:31:2c:86:94:fe:3f:44:17:57:56: 9f:77:ba:da:b1:02:ad:48:35:b5:50:90:3b:97:06: 16:56:2e:3c:21:81:53:fa:35:a9:d3:76:8d:d5:6c: 81:bd:65:81:9b:54:6e:bb:fa:7a:ac:d4:00:0a:c1: 23:c8:15:0c:21:27:ec:31:08:0c:72:0b:71:33:e4: 84:4c:eb:36:e9:d9:33:ac:54:c7:17:26:fa:ab:b7: a3:d0:02:8a:7c:22:73:ab:26:4f:5f:a3:d2:0e:2e: 9d:29:7b:3d:ed:be:70:aa:d4:c9:45:b4:f2:af:54: 90:d5:78:97:7f:bd:57:4d:61:41:72:51:86:8a:0a: d2:01:41:16:e7:46:16:4f:d6:0d:e0:e0:21:d2:89: 3f:89:24:91:cd:35:dc:b3:8a:97:ef:55:7f:1d:bb: 8d:50:c9:5c:50:96:10:8e:f3:5c:40:4f:33:a4:ec: b9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:87:0F:97:8D:1D:4D:29:7D:D5:36:B6:9C:7F:DC:C1:AD:D5:B3:D2 X509v3 Authority Key Identifier: keyid:61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:4a:a0:e0:a7:3a:0f:70:61:c3:2d:26:c4:ee:8c:86:7d:b8: aa:a6:a0:98:ec:7b:eb:0f:29:e7:43:6e:7c:09:5b:b8:28:73: 56:fe:28:2b:2c:fd:69:7f:64:cb:6b:68:13:4f:12:f2:07:c0: ad:7f:af:74:cd:ef:ae:6b:18:5a:62:bf:fc:5a:97:75:04:56: af:f8:b1:56:23:3b:47:20:32:d4:03:36:cb:54:88:64:40:17: 44:e9:30:9d:53:77:fb:b9:45:83:84:2b:2b:b4:56:34:1d:3f: 9c:35:23:3f:da:1c:8c:03:00:45:9e:68:ec:24:6a:e5:a1:e5: 8e:6d:88:9c:17:8b:f2:30:5a:e3:c8:17:5c:2b:85:4c:c6:44: 43:29:93:61:92:96:2f:60:81:81:9d:69:61:04:1f:bf:e4:3a: 46:a2:9c:42:7e:11:70:46:12:39:6c:3c:f5:2d:45:15:fa:93: aa:18:1e:d0:6e:af:76:38:7b:79:80:63:94:87:6a:80:34:ca: e6:9f:13:4c:e9:a3:75:6f:20:d7:e8:ed:44:1f:0a:8b:15:01: 40:43:7e:7b:ce:5e:48:60:15:01:cd:07:13:ce:8a:36:da:11: b4:fb:a4:12:6f:fd:45:79:c8:c0:31:7a:c3:8b:d8:36:3e:75: 75:91:7e:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav3yYvL6nzoQbIHhPE3XWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxZmJkODg4N2RhODQ0NzEzMThkODM4ODRhYzAwNWYwMWI0 NGZkNDkwHhcNMjUxMjI2MTMwMDU3WhcNMjUxMjI3MTMwMDU3WjAzMTEwLwYDVQQD Eyg3NTg3MGY5NzhkMWQ0ZDI5N2RkNTM2YjY5YzdmZGNjMWFkZDViM2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzLm65SVtAMdCpVQTCvh2K++oAYT HuVgLR02j5aJuHvB5e7R0OyyV7la/zb6LGKjg4C80ksQbgyK11WEkcz9oeAQnI1U Ef4kJrtlJlolLDEshpT+P0QXV1afd7rasQKtSDW1UJA7lwYWVi48IYFT+jWp03aN 1WyBvWWBm1Ruu/p6rNQACsEjyBUMISfsMQgMcgtxM+SETOs26dkzrFTHFyb6q7ej 0AKKfCJzqyZPX6PSDi6dKXs97b5wqtTJRbTyr1SQ1XiXf71XTWFBclGGigrSAUEW 50YWT9YN4OAh0ok/iSSRzTXcs4qX71V/HbuNUMlcUJYQjvNcQE8zpOy5VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHWHD5eNHU0pfdU2tpx/3MGt1bPSMB8GA1UdIwQY MBaAFGH72Ih9qERxMY2DiErABfAbRP1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWZ2WWlIMm9SSEV4allPSVNzQUY4QnRFX1VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8wY2U1NjktYWI4ZS00NzEyLTk0OWEt Y2VjOWUxN2Y1MDRiLzEvWWZ2WWlIMm9SSEV4allPSVNzQUY4QnRFX1VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8wY2U1NjktYWI4ZS00NzEyLTk0OWEtY2VjOWUxN2Y1MDRi LzEvWWZ2WWlIMm9SSEV4allPSVNzQUY4QnRFX1VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKEqg4Kc6 D3Bhwy0mxO6Mhn24qqagmOx76w8p50NufAlbuChzVv4oKyz9aX9ky2toE08S8gfA rX+vdM3vrmsYWmK//FqXdQRWr/ixViM7RyAy1AM2y1SIZEAXROkwnVN3+7lFg4Qr K7RWNB0/nDUjP9ocjAMARZ5o7CRq5aHljm2InBeL8jBa48gXXCuFTMZEQymTYZKW L2CBgZ1pYQQfv+Q6RqKcQn4RcEYSOWw89S1FFfqTqhge0G6vdjh7eYBjlIdqgDTK 5p8TTOmjdW8g1+jtRB8KixUBQEN+e85eSGAVAc0HE86KNtoRtPukEm/9RXnIwDF6 w4vYNj51dZF+Bw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:05 2025 by rpki-client