This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft File: YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft (raw, json) Hash identifier: +gf7zGTOOnUADG65kdyoVwCHrJ3iSCc+bbRpPPcUMks= Subject key identifier: 4F:36:CF:1C:27:E9:56:E2:2E:03:43:CC:7C:FA:B3:4C:79:E5:4D:74 Authority key identifier: 60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98 Certificate issuer: /CN=607e5caff4f47b2b8dc81cc36c8e346662639898 Certificate serial: 019B2EF957D01CA7C9D52180892C81E5D5BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft Manifest number: 13DF Signing time: Thu 18 Dec 2025 01:00:51 +0000 Manifest this update: Thu 18 Dec 2025 01:00:51 +0000 Manifest next update: Fri 19 Dec 2025 01:00:51 +0000 Files and hashes: 1: Cr1GM2aFxsaZd-ImInN4uI7kXRc.roa (hash: PpfCM8zWq8dmU00l723EMPcIhVPj7pc1erECtwg1IFw=) 2: YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl (hash: clsgcB/jHGgIdP/ClqI7ba2PRcYQ+PSTCTC2XpHO5dQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:57:d0:1c:a7:c9:d5:21:80:89:2c:81:e5:d5:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=607e5caff4f47b2b8dc81cc36c8e346662639898 Validity Not Before: Dec 18 01:00:51 2025 GMT Not After : Dec 19 01:00:51 2025 GMT Subject: CN=4f36cf1c27e956e22e0343cc7cfab34c79e54d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d0:73:d2:8b:28:da:bd:27:b7:dc:e1:ac:37: f0:4d:71:c6:36:79:aa:bf:db:02:45:bd:9f:44:8b: 37:27:78:08:0b:b7:e4:75:dc:56:79:d1:99:b5:d8: 3e:17:e4:d6:b5:a0:3e:b2:f2:6f:c1:34:a8:39:e0: e6:fd:0e:57:79:2d:c7:22:20:bb:6b:3a:de:a9:0e: 62:bf:7f:7c:0d:1a:74:04:e2:4e:42:f1:02:d3:7c: 95:32:3c:3b:29:94:4f:27:fd:8a:52:33:7d:5a:ca: 44:8c:4c:e6:0d:75:ba:7e:69:e1:7f:c7:c6:9f:5f: 60:55:1e:f5:92:aa:60:7f:07:75:87:0c:2b:85:f7: d7:ff:b7:56:04:68:06:29:8f:fc:1b:d8:ae:0f:e3: 61:f2:b5:45:69:0a:25:d6:47:86:ff:8f:1e:c1:1b: 60:fc:be:f9:a7:21:01:07:d8:54:68:b9:ef:a2:5b: b5:d7:da:e8:76:74:ad:a7:e4:80:c4:03:fa:49:9c: dd:f0:fc:86:6a:69:52:86:5b:2c:d4:dd:d6:c1:58: bb:6a:d4:48:07:20:23:ed:c7:c3:18:de:7d:6f:9d: af:de:1e:bc:1a:db:7c:f1:1b:83:db:d3:d6:57:57: 93:bf:70:7c:9f:9f:97:fd:81:db:57:be:bc:d0:ec: 82:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:36:CF:1C:27:E9:56:E2:2E:03:43:CC:7C:FA:B3:4C:79:E5:4D:74 X509v3 Authority Key Identifier: keyid:60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:b4:fe:fe:42:a3:da:33:6a:e3:7b:e8:0e:0a:81:79:66:b3: e2:92:d5:67:6e:c2:43:1d:16:48:5d:27:88:09:d8:68:00:98: a4:f8:03:b5:21:78:7c:61:de:fa:47:a9:9a:eb:1d:12:60:84: b7:66:a9:fd:9f:a1:9d:4d:ca:00:51:6c:81:93:3e:66:8e:e8: da:20:33:ad:1f:25:0e:04:ad:75:c4:3c:8a:c3:60:74:64:b0: e9:43:2a:17:1b:36:c1:4f:c3:3a:16:50:8f:88:2f:37:5d:8e: c9:2d:09:ef:d4:80:83:41:b9:e2:ef:34:16:15:5d:54:92:72: ed:48:d4:87:f5:bf:4f:03:16:d7:93:9b:e7:1d:0a:f1:de:a2: 94:76:02:ca:34:e8:64:43:6c:fc:0d:81:49:c3:b6:de:2a:33: f1:56:6e:94:d2:05:06:64:e8:de:70:90:b6:69:ed:59:43:84: da:aa:48:64:53:35:88:68:41:af:92:59:89:a6:55:56:ca:e3: 32:33:42:05:95:a1:50:d6:15:01:1a:14:31:6e:d1:32:54:26: 3d:e6:4e:84:17:ca:b2:c8:a2:cb:2a:f1:41:c1:04:c1:c5:18: 5a:32:ae:42:1f:20:61:dd:23:d3:6c:45:c9:58:00:bc:71:9b: 26:4f:af:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+VfQHKfJ1SGAiSyB5dW/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwN2U1Y2FmZjRmNDdiMmI4ZGM4MWNjMzZjOGUzNDY2NjI2 Mzk4OTgwHhcNMjUxMjE4MDEwMDUxWhcNMjUxMjE5MDEwMDUxWjAzMTEwLwYDVQQD Eyg0ZjM2Y2YxYzI3ZTk1NmUyMmUwMzQzY2M3Y2ZhYjM0Yzc5ZTU0ZDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdBz0oso2r0nt9zhrDfwTXHGNnmq v9sCRb2fRIs3J3gIC7fkddxWedGZtdg+F+TWtaA+svJvwTSoOeDm/Q5XeS3HIiC7 azreqQ5iv398DRp0BOJOQvEC03yVMjw7KZRPJ/2KUjN9WspEjEzmDXW6fmnhf8fG n19gVR71kqpgfwd1hwwrhffX/7dWBGgGKY/8G9iuD+Nh8rVFaQol1keG/48ewRtg /L75pyEBB9hUaLnvolu119rodnStp+SAxAP6SZzd8PyGamlShlss1N3WwVi7atRI ByAj7cfDGN59b52v3h68Gtt88RuD29PWV1eTv3B8n5+X/YHbV7680OyCJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE82zxwn6VbiLgNDzHz6s0x55U10MB8GA1UdIwQY MBaAFGB+XK/09Hsrjcgcw2yONGZiY5iYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUg1Y3JfVDBleXVOeUJ6RGJJNDBabUpqbUpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi83ZDY2ZGUtNWYwYy00NzY1LWEwZjYt NjdmYmYyMTU1ZTRlLzEvWUg1Y3JfVDBleXVOeUJ6RGJJNDBabUpqbUpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi83ZDY2ZGUtNWYwYy00NzY1LWEwZjYtNjdmYmYyMTU1ZTRl LzEvWUg1Y3JfVDBleXVOeUJ6RGJJNDBabUpqbUpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7T+/kKj 2jNq43voDgqBeWaz4pLVZ27CQx0WSF0niAnYaACYpPgDtSF4fGHe+kepmusdEmCE t2ap/Z+hnU3KAFFsgZM+Zo7o2iAzrR8lDgStdcQ8isNgdGSw6UMqFxs2wU/DOhZQ j4gvN12OyS0J79SAg0G54u80FhVdVJJy7UjUh/W/TwMW15Ob5x0K8d6ilHYCyjTo ZENs/A2BScO23ioz8VZulNIFBmTo3nCQtmntWUOE2qpIZFM1iGhBr5JZiaZVVsrj MjNCBZWhUNYVARoUMW7RMlQmPeZOhBfKssiiyyrxQcEEwcUYWjKuQh8gYd0j02xF yVgAvHGbJk+vmQ== -----END CERTIFICATE-----Generated at Thu Dec 18 04:08:16 2025 by rpki-client