This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft File: YYd_TODTYWF3JNSyiaiRjFxtci0.mft (raw, json) Hash identifier: /WRL0/a6ygsmncamsD1+jHg6THBoihK5pCa73S7dEc4= Subject key identifier: 37:1A:50:C1:D1:C7:C7:59:EF:66:7F:E3:E3:7A:80:E4:35:8D:CA:DA Authority key identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D Certificate issuer: /CN=61877f4ce0d361617724d4b289a8918c5c6d722d Certificate serial: 019B0F377C3D9B5A8689C48C7C85EA1ECD1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft Manifest number: 0C58 Signing time: Thu 11 Dec 2025 21:00:53 +0000 Manifest this update: Thu 11 Dec 2025 21:00:53 +0000 Manifest next update: Fri 12 Dec 2025 21:00:53 +0000 Files and hashes: 1: 1pfflrWL-bwxSYtCoyCJ-yY9sDg.roa (hash: GQomu/TYWDDZCVUe6xLQFaU9+r7oU6WwcMu5JseyRnc=) 2: YYd_TODTYWF3JNSyiaiRjFxtci0.crl (hash: v7YeTazQ4sX2C6Koomkbk+agFoK2TLQ6qf62Z+smvtU=) 3: gGh1amzB-Jk0RfzueDLNl64yqE4.roa (hash: 38qHDRBSH9mSj8MHcmispF3MzSiDWYpbmwEncu1yUrc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:7c:3d:9b:5a:86:89:c4:8c:7c:85:ea:1e:cd:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61877f4ce0d361617724d4b289a8918c5c6d722d Validity Not Before: Dec 11 21:00:53 2025 GMT Not After : Dec 12 21:00:53 2025 GMT Subject: CN=371a50c1d1c7c759ef667fe3e37a80e4358dcada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a6:4b:10:f5:90:de:1e:ae:39:75:36:ad:cc: c8:b8:63:6d:d3:d6:d4:f2:45:ee:d2:88:33:d0:b2: 66:40:e5:ed:5b:8f:b7:ab:cd:5e:cf:20:50:2f:d8: 58:e5:4d:c6:72:dd:84:2d:b8:ef:fe:14:8a:97:ce: 37:36:5b:df:e8:73:fa:68:80:da:31:82:b4:d5:f4: 59:20:2b:cd:ba:c2:55:63:14:92:d3:1a:b2:c2:a0: 2f:84:27:8c:3c:10:cc:71:ec:ce:06:47:e2:1c:f7: 06:44:d1:2b:e5:d6:8a:3a:26:32:26:24:68:38:4c: 59:84:ba:81:1e:d5:a1:45:e8:51:9f:bc:17:32:ea: e5:33:44:ac:b8:f6:7d:da:23:32:b7:48:76:9f:75: ed:af:5e:90:24:b2:7f:28:64:ca:43:a9:1b:c9:94: 16:aa:9c:9b:22:8d:f2:a2:5d:ef:ee:32:ed:0f:90: 07:6a:ca:22:8d:43:f3:8e:70:91:4f:53:ae:fc:58: 88:51:11:9d:30:b5:e4:97:45:70:57:0e:68:ea:81: 34:48:94:dc:6a:5d:1e:10:b6:66:84:54:2b:d2:cc: 6c:ca:8b:4b:cf:21:eb:cb:f9:86:af:6a:15:e6:45: ac:ed:e8:c3:e4:d9:72:ac:c4:aa:97:31:e7:1e:4e: c4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1A:50:C1:D1:C7:C7:59:EF:66:7F:E3:E3:7A:80:E4:35:8D:CA:DA X509v3 Authority Key Identifier: keyid:61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:69:a2:0d:46:c1:b0:ee:54:e2:5a:4a:69:e7:aa:0e:87:6a: 10:bf:62:c1:84:b3:a7:01:2d:64:12:c7:7d:a9:c9:84:8f:38: cf:4b:9b:11:e5:cf:98:da:22:c8:5a:da:d1:6c:8e:f0:6d:9c: 4e:bf:57:13:3b:07:86:9c:50:f0:76:a9:2c:23:c0:88:14:12: 82:98:b8:d5:c9:22:03:ae:f6:37:c6:c0:45:11:68:4a:26:be: 6b:a4:f7:a2:c3:96:6c:f1:18:b9:79:36:da:0f:de:02:bb:2e: b1:d8:b4:c3:31:51:6d:a4:4b:ad:11:86:95:7d:f1:cf:ea:e7: 81:0b:dc:41:39:31:25:b2:33:a1:cd:7f:e6:55:a4:88:ba:80: 6b:c9:c0:c0:c9:75:c7:58:fd:52:2c:fc:58:25:c4:30:e1:50: 02:d6:53:93:5c:90:b8:5b:8b:da:c9:3f:a5:50:cb:f1:d9:28: 7c:3d:74:9e:fb:ee:da:e2:ae:b2:23:3e:29:44:85:a7:2b:60: 96:48:cd:9c:c1:9e:df:65:64:73:95:2b:3a:6e:bf:a3:c6:07: 6a:e3:70:80:e4:93:84:c5:c9:1f:53:07:6a:60:d4:9f:7e:15: 68:d5:92:38:2b:37:11:b0:7d:d3:91:77:70:b5:9d:06:de:2f: b0:72:82:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN3w9m1qGicSMfIXqHs0cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODc3ZjRjZTBkMzYxNjE3NzI0ZDRiMjg5YTg5MThjNWM2 ZDcyMmQwHhcNMjUxMjExMjEwMDUzWhcNMjUxMjEyMjEwMDUzWjAzMTEwLwYDVQQD EygzNzFhNTBjMWQxYzdjNzU5ZWY2NjdmZTNlMzdhODBlNDM1OGRjYWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6ZLEPWQ3h6uOXU2rczIuGNt09bU 8kXu0ogz0LJmQOXtW4+3q81ezyBQL9hY5U3Gct2ELbjv/hSKl843Nlvf6HP6aIDa MYK01fRZICvNusJVYxSS0xqywqAvhCeMPBDMcezOBkfiHPcGRNEr5daKOiYyJiRo OExZhLqBHtWhRehRn7wXMurlM0SsuPZ92iMyt0h2n3Xtr16QJLJ/KGTKQ6kbyZQW qpybIo3yol3v7jLtD5AHasoijUPzjnCRT1Ou/FiIURGdMLXkl0VwVw5o6oE0SJTc al0eELZmhFQr0sxsyotLzyHry/mGr2oV5kWs7ejD5NlyrMSqlzHnHk7EhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcaUMHRx8dZ72Z/4+N6gOQ1jcraMB8GA1UdIwQY MBaAFGGHf0zg02FhdyTUsomokYxcbXItMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlkX1RPRFRZV0YzSk5TeWlhaVJqRnh0Y2kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9jNDNiMmYtMTBiYS00MTcwLWI1MjEt YzcyMjIxN2U1M2I2LzEvWVlkX1RPRFRZV0YzSk5TeWlhaVJqRnh0Y2kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9jNDNiMmYtMTBiYS00MTcwLWI1MjEtYzcyMjIxN2U1M2I2 LzEvWVlkX1RPRFRZV0YzSk5TeWlhaVJqRnh0Y2kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2miDUbB sO5U4lpKaeeqDodqEL9iwYSzpwEtZBLHfanJhI84z0ubEeXPmNoiyFra0WyO8G2c Tr9XEzsHhpxQ8HapLCPAiBQSgpi41ckiA672N8bARRFoSia+a6T3osOWbPEYuXk2 2g/eArsusdi0wzFRbaRLrRGGlX3xz+rngQvcQTkxJbIzoc1/5lWkiLqAa8nAwMl1 x1j9Uiz8WCXEMOFQAtZTk1yQuFuL2sk/pVDL8dkofD10nvvu2uKusiM+KUSFpytg lkjNnMGe32Vkc5UrOm6/o8YHauNwgOSThMXJH1MHamDUn34VaNWSOCs3EbB905F3 cLWdBt4vsHKC9g== -----END CERTIFICATE-----Generated at Fri Dec 12 03:22:37 2025 by rpki-client