This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft File: YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft (raw, json) Hash identifier: Va7HhDtme/0sWuCCtjlceDiUHSDZ33y6kVQPqmEK/bc= Subject key identifier: 61:39:A9:46:89:A7:3C:01:70:EB:A9:E7:0F:27:D8:DF:71:A4:FD:64 Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2 Certificate issuer: /CN=63082d6d3a1dc501795737537ca74d27a80265a2 Certificate serial: 019B10EEBBE8BD00B627E098A18063B66F55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft Manifest number: 07D8 Signing time: Fri 12 Dec 2025 05:00:39 +0000 Manifest this update: Fri 12 Dec 2025 05:00:39 +0000 Manifest next update: Sat 13 Dec 2025 05:00:39 +0000 Files and hashes: 1: A5EznUVEP4Si0TCm7JP0g-fJ2zA.roa (hash: P87warA/sxgPpSILGT3rzWqyvJsB40eA4IbxWKqMVaU=) 2: YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl (hash: SLAVsuz8sXhscK4KCtTv0tdCyFJkuA1mDrkV/Pan0Yk=) 3: fPNzH31qX0DZ8V4rij7Xo2sRGO8.roa (hash: fPCz6t8saFe/YCV6Ne6vHfZKosVB2msyYYqQELy/A2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 05:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:ee:bb:e8:bd:00:b6:27:e0:98:a1:80:63:b6:6f:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2 Validity Not Before: Dec 12 05:00:39 2025 GMT Not After : Dec 13 05:00:39 2025 GMT Subject: CN=6139a94689a73c0170eba9e70f27d8df71a4fd64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ea:c9:24:f6:2d:dc:91:b7:fb:86:5d:82:a2: 0c:3f:50:64:cc:e3:7c:6a:37:01:54:7e:6b:40:93: d9:9b:3d:5e:20:f2:31:36:70:3e:2a:06:2a:88:1b: ae:c0:90:93:58:fa:44:e6:b3:4a:9b:e0:9d:d0:50: 61:d9:e2:7d:df:39:15:8f:2a:57:2f:c5:1b:6e:40: eb:2b:82:1b:aa:ac:77:fe:83:a5:f0:4f:dc:a8:2f: 52:1a:d3:4f:eb:4c:94:e7:87:a3:09:ae:13:1a:66: 8f:63:72:a7:bb:1b:d8:74:3c:ac:29:fc:93:4e:4d: 74:38:82:6c:26:6a:a5:7a:b8:9a:31:c1:88:eb:1e: b2:0f:84:0c:52:1a:93:ec:c9:0e:e6:09:be:67:0d: b1:18:71:92:44:ab:3e:62:b4:3d:ed:5a:a7:23:62: c7:84:0f:29:9c:1c:97:17:a2:0a:02:5e:ff:bf:64: f0:e4:d3:19:27:52:31:76:d6:69:9a:41:3a:f3:87: 0b:0c:d5:7d:65:d3:87:a2:57:dc:c0:e8:5e:e7:8c: ff:80:81:43:4c:09:43:4e:3a:26:a9:1a:a6:cc:76: d9:43:cc:05:9e:7d:97:b4:0d:8c:21:fd:ce:4a:6c: 81:3a:2e:88:b3:06:00:c0:d6:9b:ff:0b:3a:b5:2f: 3d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:39:A9:46:89:A7:3C:01:70:EB:A9:E7:0F:27:D8:DF:71:A4:FD:64 X509v3 Authority Key Identifier: keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:a8:03:76:6c:e2:bf:93:cd:d0:1c:60:17:d8:23:7b:b9:1c: b8:ec:72:8e:e7:5a:40:d4:d1:f6:c9:b2:18:eb:0b:6b:21:e0: ff:c7:c4:b0:2f:46:82:f1:dd:06:07:ba:49:05:9c:e3:9b:0d: 22:0c:cd:0e:2e:65:c2:ee:7f:26:be:17:21:0f:80:e6:07:89: 7f:9b:9b:d8:95:c9:f4:8a:2e:1e:e2:16:9b:39:b0:7b:b7:98: ab:f5:36:b5:a0:d9:d9:3a:f2:3e:d0:ee:10:46:5d:19:0f:82: e0:99:f5:14:d6:35:9d:df:87:bb:b0:01:61:7b:ad:5d:fb:14: 05:a1:54:39:86:18:1b:54:5b:67:49:66:6c:03:cd:f0:b2:5c: e4:f5:20:53:71:a8:f7:e5:08:d4:e9:d3:07:6c:20:7e:7d:ea: ad:eb:24:7c:cb:6e:2a:0b:e8:83:94:0f:76:44:d5:02:b2:b4: d6:da:05:7c:48:a7:79:7e:bd:d7:ac:8e:8d:77:52:ea:56:89: dd:97:30:01:70:d4:10:e9:47:c6:0a:f1:32:2a:cd:a3:55:c5: d9:25:f6:9e:c2:56:40:f0:aa:8f:22:f0:85:ad:68:55:dc:de: c5:5c:63:06:ff:63:80:37:6d:32:fe:50:af:ea:c6:c9:78:6e: 28:aa:53:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQ7rvovQC2J+CYoYBjtm9VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMDgyZDZkM2ExZGM1MDE3OTU3Mzc1MzdjYTc0ZDI3YTgw MjY1YTIwHhcNMjUxMjEyMDUwMDM5WhcNMjUxMjEzMDUwMDM5WjAzMTEwLwYDVQQD Eyg2MTM5YTk0Njg5YTczYzAxNzBlYmE5ZTcwZjI3ZDhkZjcxYTRmZDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiurJJPYt3JG3+4ZdgqIMP1BkzON8 ajcBVH5rQJPZmz1eIPIxNnA+KgYqiBuuwJCTWPpE5rNKm+Cd0FBh2eJ93zkVjypX L8UbbkDrK4Ibqqx3/oOl8E/cqC9SGtNP60yU54ejCa4TGmaPY3KnuxvYdDysKfyT Tk10OIJsJmqleriaMcGI6x6yD4QMUhqT7MkO5gm+Zw2xGHGSRKs+YrQ97VqnI2LH hA8pnByXF6IKAl7/v2Tw5NMZJ1IxdtZpmkE684cLDNV9ZdOHolfcwOhe54z/gIFD TAlDTjomqRqmzHbZQ8wFnn2XtA2MIf3OSmyBOi6IswYAwNab/ws6tS89dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGE5qUaJpzwBcOup5w8n2N9xpP1kMB8GA1UdIwQY MBaAFGMILW06HcUBeVc3U3ynTSeoAmWiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85N2UxZTItNTY3Zi00MTRlLTliMDMt YzE4YWQzNmE3YjMwLzEvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85N2UxZTItNTY3Zi00MTRlLTliMDMtYzE4YWQzNmE3YjMw LzEvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIqgDdmzi v5PN0BxgF9gje7kcuOxyjudaQNTR9smyGOsLayHg/8fEsC9GgvHdBge6SQWc45sN IgzNDi5lwu5/Jr4XIQ+A5geJf5ub2JXJ9IouHuIWmzmwe7eYq/U2taDZ2TryPtDu EEZdGQ+C4Jn1FNY1nd+Hu7ABYXutXfsUBaFUOYYYG1RbZ0lmbAPN8LJc5PUgU3Go 9+UI1OnTB2wgfn3qreskfMtuKgvog5QPdkTVArK01toFfEineX6916yOjXdS6laJ 3ZcwAXDUEOlHxgrxMirNo1XF2SX2nsJWQPCqjyLwha1oVdzexVxjBv9jgDdtMv5Q r+rGyXhuKKpTYw== -----END CERTIFICATE-----Generated at Fri Dec 12 11:11:38 2025 by rpki-client