This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft File: YvYD86VaKeZhfwlrOmm_8KOSqSg.mft (raw, json) Hash identifier: RgPMBXcQXQVdtD+I8cDyiH7cG5sVM7EEL26qhRGOVN0= Subject key identifier: F8:6D:97:C0:81:84:AD:E0:15:F4:A2:24:F2:09:23:A1:E3:BC:D9:E1 Authority key identifier: 62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28 Certificate issuer: /CN=62f603f3a55a29e6617f096b3a69bff0a392a928 Certificate serial: 019B32D6DE0785D1781170F1FF3AC022BFBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 19:01:40 +0000 Manifest this update: Thu 18 Dec 2025 19:01:40 +0000 Manifest next update: Fri 19 Dec 2025 19:01:40 +0000 Files and hashes: 1: CdAs9uXPdWzwOsn5f3_VQNLvlMY.roa (hash: z23dSOm4EWMwCPY/rIYDaKhlW5ucCmgZPFZkayJaxA8=) 2: YvYD86VaKeZhfwlrOmm_8KOSqSg.crl (hash: du24nVDtyrKyZPBaj8k4Z/YGKL1JnuoqhZ3qCM6nN10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:de:07:85:d1:78:11:70:f1:ff:3a:c0:22:bf:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62f603f3a55a29e6617f096b3a69bff0a392a928 Validity Not Before: Dec 18 19:01:40 2025 GMT Not After : Dec 19 19:01:40 2025 GMT Subject: CN=f86d97c08184ade015f4a224f20923a1e3bcd9e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:01:37:7d:e1:97:c3:6a:d7:81:88:da:61:3f: 92:17:b1:53:d7:ee:5f:b6:25:af:67:f8:47:35:64: d5:0e:61:b9:89:76:42:c7:92:f9:6d:20:56:3a:65: d5:5d:15:b5:bb:4f:01:ef:c4:b5:b1:6f:21:e4:3d: ec:19:5e:77:7b:3c:c4:ec:1b:7b:34:f7:94:7b:cc: ca:f8:dc:5c:a5:23:7e:36:2e:8f:37:96:79:eb:f7: b9:19:40:78:6e:ec:16:05:6e:f7:85:2c:c1:e4:9c: 30:f0:fe:21:2e:9d:9e:ff:1e:ac:61:96:ea:2d:e1: dd:6a:4a:f6:ff:2b:89:ef:83:f0:eb:42:38:31:57: 0e:eb:13:c0:f2:76:fd:0f:7f:09:29:26:dc:22:0c: fd:db:64:ee:58:bf:79:27:72:f5:47:aa:f7:a7:f9: 00:c0:b9:73:22:14:32:22:82:a9:16:9e:47:cd:9c: 79:1b:26:f6:9a:87:c6:7d:d8:17:3b:5d:61:6c:15: e2:ee:d3:fd:4f:4d:31:a7:b0:76:2f:e3:c0:6a:f6: 84:88:b8:65:7b:59:8f:c5:7c:92:c7:95:7b:d3:99: 7e:05:34:a8:a4:fc:72:fc:ce:9f:40:3e:77:56:97: 14:01:7e:bb:d5:f8:c2:81:e1:1c:c8:b3:84:75:97: d1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6D:97:C0:81:84:AD:E0:15:F4:A2:24:F2:09:23:A1:E3:BC:D9:E1 X509v3 Authority Key Identifier: keyid:62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:5e:df:a9:71:46:e5:05:7e:5a:76:26:0f:26:5c:d9:3d:ec: e7:e0:fd:32:fb:99:cd:44:1b:38:3d:96:1f:cf:73:c4:ef:69: a7:2c:4a:da:23:b2:7f:e9:19:e7:36:6a:2b:93:95:50:c1:4b: b6:d7:d3:95:4a:b5:4f:3f:a2:db:a0:87:b2:ca:15:01:b4:a7: bc:99:df:22:da:77:dd:45:b3:80:a5:47:1f:ec:a5:61:eb:68: ed:ed:5e:f1:82:f2:08:63:ca:1d:3a:db:7d:21:60:14:15:68: 24:e2:23:0a:32:11:41:a5:fd:1e:ab:0a:f8:f6:01:d0:1c:81: 5a:d5:b7:e0:13:b2:5a:4c:39:d3:59:f9:14:11:6b:ea:97:42: 38:86:88:85:33:b6:7f:91:42:c5:33:48:4a:de:44:92:2a:64: 90:51:84:c8:15:db:85:8d:ec:24:8f:e7:98:0b:8c:75:a2:a7: a0:ac:87:73:dc:a2:3d:5a:97:9e:14:5a:ab:23:b9:23:0c:1f: a5:f1:53:c9:1a:e7:62:b7:e9:7b:f1:76:35:f6:36:b1:2d:7e: 82:34:91:3b:55:93:d4:1c:17:b4:af:0e:5e:7b:df:c2:61:09: 4a:dc:2d:36:c1:9e:c8:c1:fd:81:dc:b7:c5:cc:3e:e3:1b:f4: fd:16:49:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1t4HhdF4EXDx/zrAIr++MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZjYwM2YzYTU1YTI5ZTY2MTdmMDk2YjNhNjliZmYwYTM5 MmE5MjgwHhcNMjUxMjE4MTkwMTQwWhcNMjUxMjE5MTkwMTQwWjAzMTEwLwYDVQQD EyhmODZkOTdjMDgxODRhZGUwMTVmNGEyMjRmMjA5MjNhMWUzYmNkOWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQE3feGXw2rXgYjaYT+SF7FT1+5f tiWvZ/hHNWTVDmG5iXZCx5L5bSBWOmXVXRW1u08B78S1sW8h5D3sGV53ezzE7Bt7 NPeUe8zK+NxcpSN+Ni6PN5Z56/e5GUB4buwWBW73hSzB5Jww8P4hLp2e/x6sYZbq LeHdakr2/yuJ74Pw60I4MVcO6xPA8nb9D38JKSbcIgz922TuWL95J3L1R6r3p/kA wLlzIhQyIoKpFp5HzZx5Gyb2mofGfdgXO11hbBXi7tP9T00xp7B2L+PAavaEiLhl e1mPxXySx5V705l+BTSopPxy/M6fQD53VpcUAX671fjCgeEcyLOEdZfRcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhtl8CBhK3gFfSiJPIJI6HjvNnhMB8GA1UdIwQY MBaAFGL2A/OlWinmYX8Jazppv/CjkqkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXZZRDg2VmFLZVpoZndsck9tbV84S09TcVNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS80NzA2NWQtMmQ4My00NjQxLTgyMjMt NDFmMzlhOGMwOWRkLzEvWXZZRDg2VmFLZVpoZndsck9tbV84S09TcVNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS80NzA2NWQtMmQ4My00NjQxLTgyMjMtNDFmMzlhOGMwOWRk LzEvWXZZRDg2VmFLZVpoZndsck9tbV84S09TcVNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAul7fqXFG 5QV+WnYmDyZc2T3s5+D9MvuZzUQbOD2WH89zxO9ppyxK2iOyf+kZ5zZqK5OVUMFL ttfTlUq1Tz+i26CHssoVAbSnvJnfItp33UWzgKVHH+ylYeto7e1e8YLyCGPKHTrb fSFgFBVoJOIjCjIRQaX9HqsK+PYB0ByBWtW34BOyWkw501n5FBFr6pdCOIaIhTO2 f5FCxTNISt5EkipkkFGEyBXbhY3sJI/nmAuMdaKnoKyHc9yiPVqXnhRaqyO5Iwwf pfFTyRrnYrfpe/F2NfY2sS1+gjSRO1WT1BwXtK8OXnvfwmEJStwtNsGeyMH9gdy3 xcw+4xv0/RZJYA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:51:24 2025 by rpki-client