This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft File: YuXsnfTdA7n1AKaglH0Ue27SFmY.mft (raw, json) Hash identifier: 2QpIfvIMZmUToNW4rIhtZk3Hf5USvMtW5kwKL77v5ZU= Subject key identifier: D4:0E:AA:9E:00:6C:1B:03:1E:9C:1B:25:63:A3:DB:70:02:77:13:5B Authority key identifier: 62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66 Certificate issuer: /CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666 Certificate serial: 019B20D03B301C65F9BB299BA1DA597F9F12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft Manifest number: 11E0 Signing time: Mon 15 Dec 2025 07:01:16 +0000 Manifest this update: Mon 15 Dec 2025 07:01:16 +0000 Manifest next update: Tue 16 Dec 2025 07:01:16 +0000 Files and hashes: 1: YuXsnfTdA7n1AKaglH0Ue27SFmY.crl (hash: Ky5uyQdNd7gl70A1QjueeiBOMuZ+qps3m6FlJdjvJng=) 2: kJgRBYW8FH_KB9BmG0zuAtDHIt4.roa (hash: bRkMoYbDThsAekovmWN3M4u7dfA1wfKmJ7fIKIUCTN4=) 3: v525Sv1tFND5v2x1n4f6uRe4GHA.roa (hash: 9QaN1qqDjE/05U+XFuEbIUEXZMx4HBelPUj6nwrRoso=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:d0:3b:30:1c:65:f9:bb:29:9b:a1:da:59:7f:9f:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666 Validity Not Before: Dec 15 07:01:16 2025 GMT Not After : Dec 16 07:01:16 2025 GMT Subject: CN=d40eaa9e006c1b031e9c1b2563a3db700277135b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bd:99:7a:60:04:d7:09:48:b9:09:c1:5e:1b: e9:4f:3d:dc:03:2e:56:c3:1b:2e:70:f5:63:6b:82: 3e:6d:d0:68:ae:c0:1d:36:e5:bf:c2:ac:df:f8:49: 4c:91:1d:ad:9d:25:a3:1f:8d:62:25:eb:bd:66:46: d6:d9:65:23:7f:59:fe:b2:a2:75:00:0e:4c:9e:27: 88:3c:8e:6a:6c:9a:0f:02:1d:e1:8c:22:50:bc:78: 13:07:8d:e3:fb:3c:59:56:fd:6f:7c:e0:2e:ea:76: 0e:c6:fe:da:60:19:b5:ea:c5:97:da:1b:8b:5a:aa: ec:49:2f:84:af:35:91:d8:c6:c2:a4:4d:30:65:37: 9f:57:88:04:1b:1a:6c:5b:15:ff:ef:cc:9e:ac:41: b8:8b:12:a4:ea:2f:e6:59:a0:84:4b:ee:ea:27:b6: df:d9:9c:34:5a:fc:67:78:8b:20:2b:12:2a:b9:a1: 89:5c:ec:15:63:8d:e4:72:63:03:40:88:2f:96:5c: 5b:fd:f4:a3:57:80:43:e8:5e:0b:4f:89:17:30:63: 77:c9:cd:0e:62:f1:f1:b7:44:cb:2e:0f:07:e2:63: 4e:f2:d5:b4:df:32:34:21:05:5f:f6:85:b6:13:a4: 21:24:8e:87:3c:f1:ec:c1:e2:3c:f9:c3:a0:3f:5a: 6f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0E:AA:9E:00:6C:1B:03:1E:9C:1B:25:63:A3:DB:70:02:77:13:5B X509v3 Authority Key Identifier: keyid:62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:82:66:5b:de:99:df:31:c1:94:f1:1d:55:bf:cf:bf:73:e8: d5:14:96:6c:e9:a6:78:4a:5b:ea:b4:8e:3c:5b:ca:4b:02:c7: 89:e3:31:25:c6:d3:04:af:2b:4e:bb:b3:08:44:2f:4d:c8:61: 5a:15:21:54:17:de:75:86:a4:a1:90:9e:0c:2e:0d:15:da:ee: 2d:6c:00:ec:a9:2a:44:99:61:6b:17:8c:7c:3b:47:d3:87:94: 36:08:a9:52:8b:98:55:a6:c2:26:35:f2:69:7d:ff:e3:8a:aa: 22:9a:2a:9f:01:a3:57:09:21:29:59:10:eb:e8:55:34:d1:18: 3f:b5:24:f0:64:55:3d:58:fa:20:39:86:aa:84:87:1d:9e:73: da:6b:87:c1:78:0e:62:b8:1f:ec:5f:05:b8:2d:07:80:38:74: cd:b4:9c:b8:01:56:23:36:95:dd:b0:7d:0d:c4:99:64:80:f2: 1c:b5:6a:6e:68:06:b7:52:3f:98:37:7b:68:26:b5:71:36:d3: f0:a8:dd:fe:7f:10:23:56:db:fc:54:a9:d3:f1:3d:96:d5:f5: e1:f2:83:a8:71:00:40:ef:73:d9:ce:64:3f:c3:ef:d0:dc:19: e1:c0:e0:8e:fb:db:4d:d1:fd:69:97:13:c0:e3:c9:96:cb:77: 66:34:57:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsg0DswHGX5uymbodpZf58SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZTVlYzlkZjRkZDAzYjlmNTAwYTZhMDk0N2QxNDdiNmVk MjE2NjYwHhcNMjUxMjE1MDcwMTE2WhcNMjUxMjE2MDcwMTE2WjAzMTEwLwYDVQQD EyhkNDBlYWE5ZTAwNmMxYjAzMWU5YzFiMjU2M2EzZGI3MDAyNzcxMzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzr2ZemAE1wlIuQnBXhvpTz3cAy5W wxsucPVja4I+bdBorsAdNuW/wqzf+ElMkR2tnSWjH41iJeu9ZkbW2WUjf1n+sqJ1 AA5MnieIPI5qbJoPAh3hjCJQvHgTB43j+zxZVv1vfOAu6nYOxv7aYBm16sWX2huL WqrsSS+ErzWR2MbCpE0wZTefV4gEGxpsWxX/78yerEG4ixKk6i/mWaCES+7qJ7bf 2Zw0WvxneIsgKxIquaGJXOwVY43kcmMDQIgvllxb/fSjV4BD6F4LT4kXMGN3yc0O YvHxt0TLLg8H4mNO8tW03zI0IQVf9oW2E6QhJI6HPPHsweI8+cOgP1pviQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQOqp4AbBsDHpwbJWOj23ACdxNbMB8GA1UdIwQY MBaAFGLl7J303QO59QCmoJR9FHtu0hZmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXVYc25mVGRBN24xQUthZ2xIMFVlMjdTRm1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hN2NlMDMtMWYxNS00ZGJjLTlhOGQt YTgxNTQ0ZWE1YjY3LzEvWXVYc25mVGRBN24xQUthZ2xIMFVlMjdTRm1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9hN2NlMDMtMWYxNS00ZGJjLTlhOGQtYTgxNTQ0ZWE1YjY3 LzEvWXVYc25mVGRBN24xQUthZ2xIMFVlMjdTRm1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIJmW96Z 3zHBlPEdVb/Pv3Po1RSWbOmmeEpb6rSOPFvKSwLHieMxJcbTBK8rTruzCEQvTchh WhUhVBfedYakoZCeDC4NFdruLWwA7KkqRJlhaxeMfDtH04eUNgipUouYVabCJjXy aX3/44qqIpoqnwGjVwkhKVkQ6+hVNNEYP7Uk8GRVPVj6IDmGqoSHHZ5z2muHwXgO Yrgf7F8FuC0HgDh0zbScuAFWIzaV3bB9DcSZZIDyHLVqbmgGt1I/mDd7aCa1cTbT 8Kjd/n8QI1bb/FSp0/E9ltX14fKDqHEAQO9z2c5kP8Pv0NwZ4cDgjvvbTdH9aZcT wOPJlst3ZjRXeQ== -----END CERTIFICATE-----Generated at Mon Dec 15 14:38:52 2025 by rpki-client