This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft File: YgTQ-JHcR16nA-be89bq0ej3wtY.mft (raw, json) Hash identifier: el9W5HC7I6/zQTvyUAxoPHAkeVAEBI6g24HTi21mAcI= Subject key identifier: 28:63:90:5A:F6:61:A0:77:14:B0:73:0A:54:A8:68:12:3E:C6:A1:19 Authority key identifier: 62:04:D0:F8:91:DC:47:5E:A7:03:E6:DE:F3:D6:EA:D1:E8:F7:C2:D6 Certificate issuer: /CN=6204d0f891dc475ea703e6def3d6ead1e8f7c2d6 Certificate serial: 019B3DC82AA14270707942D0A2EC1BB0F835 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 22:01:26 +0000 Manifest this update: Sat 20 Dec 2025 22:01:26 +0000 Manifest next update: Sun 21 Dec 2025 22:01:26 +0000 Files and hashes: 1: 0BbFW_BAMtuxhOMr7yakRiiM3nk.roa (hash: cNxaXLNhQqWeIbn1R3i1vPo3toGI8Ah5QnfkdRtrGsY=) 2: YgTQ-JHcR16nA-be89bq0ej3wtY.crl (hash: daOz6S5nCdN+9pUgSxc+jA+E8ep78IVbiWOebOUDvoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c8:2a:a1:42:70:70:79:42:d0:a2:ec:1b:b0:f8:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6204d0f891dc475ea703e6def3d6ead1e8f7c2d6 Validity Not Before: Dec 20 22:01:26 2025 GMT Not After : Dec 21 22:01:26 2025 GMT Subject: CN=2863905af661a07714b0730a54a868123ec6a119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1f:1c:81:63:db:d5:a1:98:71:08:a0:8d:17: 08:c1:f1:f7:bf:c6:47:8d:b5:20:ea:eb:43:55:7e: 85:b7:c0:46:d2:77:c6:2d:5a:44:3b:bb:db:9d:9d: bf:05:21:43:4d:40:af:e7:f9:97:fc:2e:50:90:90: c9:d8:33:9f:6a:90:c6:ea:10:ca:8b:ca:ed:0c:1d: a1:ad:af:cc:5e:c9:66:92:e1:e4:f0:38:7c:71:be: 13:5a:91:46:64:25:11:03:d8:90:8a:0b:35:b2:24: d0:5f:38:01:66:6c:e5:bb:e9:df:69:68:0f:3c:6e: 06:fb:c5:b2:c0:ae:e4:cf:53:fd:ec:71:8d:f4:4c: 94:8f:2d:57:2d:4f:74:2f:6f:b0:cc:50:e0:09:f4: 6a:d6:21:ee:af:40:c0:e3:90:78:5b:17:d3:31:29: 3c:58:1c:41:73:0d:0c:ee:77:ec:5b:e8:3d:b7:a2: f6:79:ef:bd:57:34:74:28:ea:3f:a8:f2:98:d3:8a: 64:45:0f:0c:2a:8d:de:d7:a2:56:d4:72:e5:90:a6: b4:b7:28:90:80:d6:1d:11:cc:8d:44:3e:8a:f6:c7: b0:e0:85:68:e0:eb:94:89:48:a4:ff:c0:6f:be:4d: 36:e8:ce:26:d6:9c:a8:8b:f6:78:d7:b3:c6:f7:7c: bf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:63:90:5A:F6:61:A0:77:14:B0:73:0A:54:A8:68:12:3E:C6:A1:19 X509v3 Authority Key Identifier: keyid:62:04:D0:F8:91:DC:47:5E:A7:03:E6:DE:F3:D6:EA:D1:E8:F7:C2:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:c9:86:61:b6:d8:67:9c:50:f5:35:6a:d9:d1:35:3f:20:e4: a8:ce:3d:cf:c4:d2:ab:ad:a4:75:d2:f6:ee:d8:25:2d:6c:33: 0a:57:df:28:25:d0:cc:dd:e4:bd:98:dc:0b:55:5a:0d:5b:f8: cd:fd:a6:45:2b:c5:0d:c4:de:e3:68:38:01:b6:15:ac:6a:f3: 68:fb:eb:76:2d:1e:79:6a:80:e9:41:d5:c4:04:50:8c:a1:46: 7f:27:3f:3e:d2:8a:21:82:4a:65:26:a0:9f:76:1b:51:20:af: 20:dd:27:2c:52:1c:57:38:7f:8a:a2:d5:0e:c7:b2:ba:ab:b0: 39:1e:7a:01:6c:c1:0a:80:07:6a:c7:53:4d:dc:75:ac:e6:b8: 10:25:9f:57:8b:be:6a:c9:22:62:91:35:91:f9:e4:1a:ab:93: e7:f6:32:26:dc:d5:39:7d:c8:17:35:1d:ae:f8:8e:bd:90:49: de:65:0d:00:c0:01:85:5c:58:b6:d5:e7:16:12:7a:70:bf:29: af:ae:e0:57:9d:e1:97:0a:21:4f:f4:fa:75:e6:d4:11:41:7d: af:f5:9d:cd:cd:1e:0d:d6:4e:78:79:db:ee:0f:d0:f6:d1:83: 0a:4a:a4:39:dc:d6:de:4e:cc:76:92:36:44:df:8c:02:75:74: f5:c5:53:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9yCqhQnBweULQouwbsPg1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMDRkMGY4OTFkYzQ3NWVhNzAzZTZkZWYzZDZlYWQxZThm N2MyZDYwHhcNMjUxMjIwMjIwMTI2WhcNMjUxMjIxMjIwMTI2WjAzMTEwLwYDVQQD EygyODYzOTA1YWY2NjFhMDc3MTRiMDczMGE1NGE4NjgxMjNlYzZhMTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR8cgWPb1aGYcQigjRcIwfH3v8ZH jbUg6utDVX6Ft8BG0nfGLVpEO7vbnZ2/BSFDTUCv5/mX/C5QkJDJ2DOfapDG6hDK i8rtDB2hra/MXslmkuHk8Dh8cb4TWpFGZCURA9iQigs1siTQXzgBZmzlu+nfaWgP PG4G+8WywK7kz1P97HGN9EyUjy1XLU90L2+wzFDgCfRq1iHur0DA45B4WxfTMSk8 WBxBcw0M7nfsW+g9t6L2ee+9VzR0KOo/qPKY04pkRQ8MKo3e16JW1HLlkKa0tyiQ gNYdEcyNRD6K9sew4IVo4OuUiUik/8Bvvk026M4m1pyoi/Z417PG93y/YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChjkFr2YaB3FLBzClSoaBI+xqEZMB8GA1UdIwQY MBaAFGIE0PiR3EdepwPm3vPW6tHo98LWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWdUUS1KSGNSMTZuQS1iZTg5YnEwZWozd3RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9mOTYxMjEtMDMzNS00MDJkLTg0OTEt NGQ4OGZjZTMyMzk5LzEvWWdUUS1KSGNSMTZuQS1iZTg5YnEwZWozd3RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9mOTYxMjEtMDMzNS00MDJkLTg0OTEtNGQ4OGZjZTMyMzk5 LzEvWWdUUS1KSGNSMTZuQS1iZTg5YnEwZWozd3RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr8mGYbbY Z5xQ9TVq2dE1PyDkqM49z8TSq62kddL27tglLWwzClffKCXQzN3kvZjcC1VaDVv4 zf2mRSvFDcTe42g4AbYVrGrzaPvrdi0eeWqA6UHVxARQjKFGfyc/PtKKIYJKZSag n3YbUSCvIN0nLFIcVzh/iqLVDseyuquwOR56AWzBCoAHasdTTdx1rOa4ECWfV4u+ askiYpE1kfnkGquT5/YyJtzVOX3IFzUdrviOvZBJ3mUNAMABhVxYttXnFhJ6cL8p r67gV53hlwohT/T6debUEUF9r/Wdzc0eDdZOeHnb7g/Q9tGDCkqkOdzW3k7MdpI2 RN+MAnV09cVTuA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:58:59 2025 by rpki-client