This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft File: YgTQ-JHcR16nA-be89bq0ej3wtY.mft (raw, json) Hash identifier: yJ1+GWlgrSfSLfcby6PQ57Vyxvsczy+m6uK3CU34C1M= Subject key identifier: C4:F9:09:3F:86:B8:36:AD:D6:86:43:3A:E0:49:38:0F:BD:3E:3E:D4 Authority key identifier: 62:04:D0:F8:91:DC:47:5E:A7:03:E6:DE:F3:D6:EA:D1:E8:F7:C2:D6 Certificate issuer: /CN=6204d0f891dc475ea703e6def3d6ead1e8f7c2d6 Certificate serial: 019B495DCF3DE99415C6A07CD556794FC2C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft Manifest number: 178D Signing time: Tue 23 Dec 2025 04:00:43 +0000 Manifest this update: Tue 23 Dec 2025 04:00:43 +0000 Manifest next update: Wed 24 Dec 2025 04:00:43 +0000 Files and hashes: 1: 0BbFW_BAMtuxhOMr7yakRiiM3nk.roa (hash: cNxaXLNhQqWeIbn1R3i1vPo3toGI8Ah5QnfkdRtrGsY=) 2: YgTQ-JHcR16nA-be89bq0ej3wtY.crl (hash: UDsxtwnpiyIMAvL9i49hE0ec1Il9dJlvRPzvEpJR2uw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5d:cf:3d:e9:94:15:c6:a0:7c:d5:56:79:4f:c2:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6204d0f891dc475ea703e6def3d6ead1e8f7c2d6 Validity Not Before: Dec 23 04:00:43 2025 GMT Not After : Dec 24 04:00:43 2025 GMT Subject: CN=c4f9093f86b836add686433ae049380fbd3e3ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7c:d4:da:56:d3:0f:e3:eb:cd:7b:e6:2f:f6: b1:19:85:0d:a5:4e:5d:e2:21:7d:86:5e:b4:7c:46: 45:7d:21:56:c2:84:15:05:31:a7:70:3f:eb:ed:61: 66:85:c5:d8:f2:70:c7:b5:82:9e:ae:c5:70:fa:ab: b8:30:1b:f6:f5:3d:9b:41:fe:87:f5:53:94:5b:7b: 46:5e:1e:29:cc:3d:c5:54:bd:71:0c:44:19:50:28: 6b:6e:d4:12:7a:3e:dd:36:4b:31:5f:98:81:cc:ed: ff:77:9f:37:f7:1a:56:e7:ba:6e:49:85:43:d1:a6: 30:60:66:29:c3:a9:3c:ae:c1:f0:6b:e1:7f:d4:5e: 3f:22:33:f1:b1:7f:6c:9f:8f:e3:36:31:15:2b:68: e1:1f:96:78:13:62:6d:3f:e8:21:2e:19:34:bf:ae: 29:34:c8:38:83:6c:0c:e1:80:d1:b2:27:9d:73:ad: 00:f6:bf:ab:20:ca:78:35:07:f4:08:fa:09:2c:34: fd:ba:eb:ac:d6:36:0b:20:ac:b4:4c:35:88:f1:52: 4d:a6:77:ca:8d:31:11:00:9a:3f:70:93:a4:cc:61: 72:8e:d7:a4:50:af:41:ea:01:eb:19:67:08:0f:bf: db:36:79:cd:59:71:71:4d:f0:c7:b9:a1:aa:20:40: d8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F9:09:3F:86:B8:36:AD:D6:86:43:3A:E0:49:38:0F:BD:3E:3E:D4 X509v3 Authority Key Identifier: keyid:62:04:D0:F8:91:DC:47:5E:A7:03:E6:DE:F3:D6:EA:D1:E8:F7:C2:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:26:dd:01:5f:1f:a8:4c:65:c3:6f:82:c9:b3:2a:94:5c:28: 81:2b:cc:ca:23:fc:42:cd:08:7d:8d:75:5c:94:78:ce:92:88: bd:c0:b1:5b:ed:4d:5b:62:bb:73:d6:da:3a:20:75:76:d4:e1: 20:31:00:45:29:56:52:9c:67:ab:3c:0f:fe:a4:42:9c:44:af: 79:62:7c:9f:b4:45:74:ac:b0:04:e7:00:f3:3b:f6:8a:05:5b: 3b:f2:cf:ee:00:e7:89:58:0d:7a:86:bd:e0:4e:b1:cc:e7:bf: 43:67:53:c6:28:51:08:5f:de:89:f6:04:d4:51:ab:74:e7:1f: ba:61:4c:9c:02:2a:3e:fc:65:84:78:e6:90:b8:b6:0a:de:a5: 5b:5e:9d:88:9c:6b:f7:4f:14:01:4e:4e:f0:03:04:61:4b:ac: 01:4e:15:40:6a:11:64:5b:5e:a1:4a:6b:bb:f0:d9:f2:13:65: 35:d3:7a:80:c0:d5:e0:5c:45:31:5e:59:c6:c9:3a:16:99:cd: 10:71:cb:79:14:be:1d:3a:f7:9a:97:bc:31:e1:a0:f7:b6:7a: ba:f2:73:5c:ea:30:f8:f0:27:42:15:da:e1:b7:21:ac:56:de: 80:9d:a0:c4:5d:80:f6:dc:de:81:7f:9c:fe:91:b1:b7:6a:f8: d2:7b:da:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXc896ZQVxqB81VZ5T8LHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMDRkMGY4OTFkYzQ3NWVhNzAzZTZkZWYzZDZlYWQxZThm N2MyZDYwHhcNMjUxMjIzMDQwMDQzWhcNMjUxMjI0MDQwMDQzWjAzMTEwLwYDVQQD EyhjNGY5MDkzZjg2YjgzNmFkZDY4NjQzM2FlMDQ5MzgwZmJkM2UzZWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHzU2lbTD+PrzXvmL/axGYUNpU5d 4iF9hl60fEZFfSFWwoQVBTGncD/r7WFmhcXY8nDHtYKersVw+qu4MBv29T2bQf6H 9VOUW3tGXh4pzD3FVL1xDEQZUChrbtQSej7dNksxX5iBzO3/d5839xpW57puSYVD 0aYwYGYpw6k8rsHwa+F/1F4/IjPxsX9sn4/jNjEVK2jhH5Z4E2JtP+ghLhk0v64p NMg4g2wM4YDRsiedc60A9r+rIMp4NQf0CPoJLDT9uuus1jYLIKy0TDWI8VJNpnfK jTERAJo/cJOkzGFyjtekUK9B6gHrGWcID7/bNnnNWXFxTfDHuaGqIEDYXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMT5CT+GuDat1oZDOuBJOA+9Pj7UMB8GA1UdIwQY MBaAFGIE0PiR3EdepwPm3vPW6tHo98LWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWdUUS1KSGNSMTZuQS1iZTg5YnEwZWozd3RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9mOTYxMjEtMDMzNS00MDJkLTg0OTEt NGQ4OGZjZTMyMzk5LzEvWWdUUS1KSGNSMTZuQS1iZTg5YnEwZWozd3RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9mOTYxMjEtMDMzNS00MDJkLTg0OTEtNGQ4OGZjZTMyMzk5 LzEvWWdUUS1KSGNSMTZuQS1iZTg5YnEwZWozd3RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMibdAV8f qExlw2+CybMqlFwogSvMyiP8Qs0IfY11XJR4zpKIvcCxW+1NW2K7c9baOiB1dtTh IDEARSlWUpxnqzwP/qRCnESveWJ8n7RFdKywBOcA8zv2igVbO/LP7gDniVgNeoa9 4E6xzOe/Q2dTxihRCF/eifYE1FGrdOcfumFMnAIqPvxlhHjmkLi2Ct6lW16diJxr 908UAU5O8AMEYUusAU4VQGoRZFteoUpru/DZ8hNlNdN6gMDV4FxFMV5Zxsk6FpnN EHHLeRS+HTr3mpe8MeGg97Z6uvJzXOow+PAnQhXa4bchrFbegJ2gxF2A9tzegX+c /pGxt2r40nvaNw== -----END CERTIFICATE-----Generated at Tue Dec 23 09:41:20 2025 by rpki-client