This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft File: Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft (raw, json) Hash identifier: mnwLRFjyOlNIsZ5A0HTa6UkiS5AaJNvWt/ByW/B7SUk= Subject key identifier: DA:8C:3F:C4:05:BA:28:D8:92:94:30:BF:FE:FA:AB:6A:D9:AC:2D:56 Authority key identifier: 61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01 Certificate issuer: /CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401 Certificate serial: 019B4136D8D3583B2985530042833E0AE42E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft Manifest number: 104E Signing time: Sun 21 Dec 2025 14:01:11 +0000 Manifest this update: Sun 21 Dec 2025 14:01:11 +0000 Manifest next update: Mon 22 Dec 2025 14:01:11 +0000 Files and hashes: 1: LjdJyg2i9vGZpm7VXPwBOMCSEiw.roa (hash: MZ/fbmAB50oT4J+U1xzh08P+Raln/5z9YHMJGvIm1Zg=) 2: Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl (hash: Njow6LSu46m9dX/LSQkoTepXn2p7NX8czpdZBYgvXfc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:d8:d3:58:3b:29:85:53:00:42:83:3e:0a:e4:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401 Validity Not Before: Dec 21 14:01:11 2025 GMT Not After : Dec 22 14:01:11 2025 GMT Subject: CN=da8c3fc405ba28d8929430bffefaab6ad9ac2d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:49:09:5c:1b:55:03:9b:e2:0d:31:7c:93:74: a5:65:8b:6d:73:a0:21:06:1a:a4:f1:48:4e:c3:7e: 21:45:f5:08:e8:c5:43:37:a6:a6:eb:79:0f:9d:ac: 36:30:f1:5c:b5:a7:26:0f:c3:9b:cc:00:86:8d:a7: 3d:6d:a4:9a:ee:6f:4a:06:5a:fa:7e:d1:bc:71:5b: f1:c4:c8:52:b3:6f:a5:7d:da:28:bc:d1:81:b6:1f: 75:e8:41:55:29:76:e3:e3:6a:81:5e:d0:68:d1:d5: 08:68:f1:c3:7f:c5:99:ed:62:bf:6e:4c:26:11:e9: ed:8f:66:30:ee:2f:06:7c:df:b1:5e:62:6a:6b:ef: ff:92:72:db:fd:6d:8a:c0:9c:e2:b5:82:01:65:78: 37:31:d4:fe:1e:fb:ff:87:be:85:98:2f:d0:16:d3: 7f:ae:7c:d7:46:56:05:f3:de:2f:8e:44:b9:e0:1f: 95:60:9f:6d:59:f7:43:84:6c:cd:ae:e2:4c:a0:7c: e0:8b:4c:03:a1:3c:39:37:91:cb:ab:de:8e:60:c5: 05:f6:01:52:71:2a:42:21:87:3c:d9:ec:04:b8:30: ca:f5:5a:ed:aa:6a:c5:04:c1:19:90:ac:4a:83:5e: e1:f6:ec:2e:66:55:55:75:36:87:1c:eb:e8:fe:df: 8f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8C:3F:C4:05:BA:28:D8:92:94:30:BF:FE:FA:AB:6A:D9:AC:2D:56 X509v3 Authority Key Identifier: keyid:61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:7f:94:66:5c:d4:4b:3c:d2:28:e4:31:7f:97:89:ea:c9:ff: ba:6a:57:f9:89:a3:86:17:69:7b:24:ee:5d:c3:7a:94:02:4e: 8d:ff:72:de:53:08:c7:2b:b5:76:7a:47:f7:19:2f:fb:62:3f: 71:75:40:c1:ab:7b:1c:bf:de:fd:83:2a:78:e8:93:60:da:ed: a3:f8:d1:95:07:35:f5:f9:86:08:07:fd:a9:d9:2e:fc:4b:1e: c2:ae:2e:1e:32:ea:c4:c3:3c:2d:ed:5e:99:56:56:a9:82:54: ff:2b:f6:4c:be:1c:21:82:c0:07:7a:85:a6:b0:9c:b0:37:c1: 95:93:8b:ab:50:15:a0:a1:7d:f8:92:27:df:54:b0:42:18:0a: 2c:45:93:84:9d:5a:b1:ce:e6:08:10:99:b6:21:b5:48:0e:d9: 81:8f:cb:fb:08:16:4b:03:cb:c1:a2:a6:70:ba:4f:fe:fb:88: ba:b5:5a:75:d4:9a:08:73:ee:eb:74:c6:56:d5:30:09:42:79: 72:34:77:e9:a2:cb:a9:59:b5:72:c6:3b:e7:34:8c:4c:9b:1f: 13:78:23:9a:bd:2a:46:ef:63:30:73:a0:7e:9e:f4:02:ba:fb: ad:c3:3b:d3:da:99:9b:64:93:0f:5e:36:8c:44:0c:e5:34:e8: 22:ac:84:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNtjTWDsphVMAQoM+CuQuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxY2UyZTU3ZjZmODYyY2EzMDU2ZTVmZDViM2U2ZWFjMzU1 NDA0MDEwHhcNMjUxMjIxMTQwMTExWhcNMjUxMjIyMTQwMTExWjAzMTEwLwYDVQQD EyhkYThjM2ZjNDA1YmEyOGQ4OTI5NDMwYmZmZWZhYWI2YWQ5YWMyZDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEkJXBtVA5viDTF8k3SlZYttc6Ah Bhqk8UhOw34hRfUI6MVDN6am63kPnaw2MPFctacmD8ObzACGjac9baSa7m9KBlr6 ftG8cVvxxMhSs2+lfdoovNGBth916EFVKXbj42qBXtBo0dUIaPHDf8WZ7WK/bkwm Eentj2Yw7i8GfN+xXmJqa+//knLb/W2KwJzitYIBZXg3MdT+Hvv/h76FmC/QFtN/ rnzXRlYF894vjkS54B+VYJ9tWfdDhGzNruJMoHzgi0wDoTw5N5HLq96OYMUF9gFS cSpCIYc82ewEuDDK9VrtqmrFBMEZkKxKg17h9uwuZlVVdTaHHOvo/t+P9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqMP8QFuijYkpQwv/76q2rZrC1WMB8GA1UdIwQY MBaAFGHOLlf2+GLKMFbl/Vs+bqw1VAQBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWM0dVZfYjRZc293VnVYOVd6NXVyRFZVQkFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84NzYyMDMtZThmZC00NzJmLWFmYzIt OTkwMzg1NTU5ZDFjLzEvWWM0dVZfYjRZc293VnVYOVd6NXVyRFZVQkFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC84NzYyMDMtZThmZC00NzJmLWFmYzItOTkwMzg1NTU5ZDFj LzEvWWM0dVZfYjRZc293VnVYOVd6NXVyRFZVQkFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3X+UZlzU SzzSKOQxf5eJ6sn/umpX+YmjhhdpeyTuXcN6lAJOjf9y3lMIxyu1dnpH9xkv+2I/ cXVAwat7HL/e/YMqeOiTYNrto/jRlQc19fmGCAf9qdku/Esewq4uHjLqxMM8Le1e mVZWqYJU/yv2TL4cIYLAB3qFprCcsDfBlZOLq1AVoKF9+JIn31SwQhgKLEWThJ1a sc7mCBCZtiG1SA7ZgY/L+wgWSwPLwaKmcLpP/vuIurVaddSaCHPu63TGVtUwCUJ5 cjR36aLLqVm1csY75zSMTJsfE3gjmr0qRu9jMHOgfp70Arr7rcM709qZm2STD142 jEQM5TToIqyEEA== -----END CERTIFICATE-----Generated at Sun Dec 21 19:26:50 2025 by rpki-client