This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft File: YhoTCpDLA344A_6gv0ZaoIL-NJg.mft (raw, json) Hash identifier: 0W/FrqkbDED+gfugsb3nRdd4QVo5R5t/BPTdW/2zyI4= Subject key identifier: 7D:AE:71:39:0F:98:54:C7:7A:22:23:96:AB:A1:90:20:BC:93:90:E8 Authority key identifier: 62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98 Certificate issuer: /CN=621a130a90cb037e3803fea0bf465aa082fe3498 Certificate serial: 019B378E9ED405B5159637686352C5730F0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft Manifest number: 05AD Signing time: Fri 19 Dec 2025 17:00:52 +0000 Manifest this update: Fri 19 Dec 2025 17:00:52 +0000 Manifest next update: Sat 20 Dec 2025 17:00:52 +0000 Files and hashes: 1: 8tq6vUxikXVafkdQNOumeQjFfpc.roa (hash: UpmsMokgr2OHdk8MVVsUZdaiVZYh5g21JKYfdCc4ZA8=) 2: YhoTCpDLA344A_6gv0ZaoIL-NJg.crl (hash: V9vYEia+hFjGu02pSX0TvFaqncZTh5dZcdMN68YHdI8=) 3: j89ASOslTb0sA8qPaNCnvdarbHI.roa (hash: pTH6+0WVaBMdNBqgh83yrPXmlHTEaPDbAotvSzt0CT4=) 4: vSrVfCiFhwuThaFge_HlQGTrHjk.roa (hash: Bc63krCzWLaf7LOD/k916HgQOiH2H7M6asbeefYBGos=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:9e:d4:05:b5:15:96:37:68:63:52:c5:73:0f:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=621a130a90cb037e3803fea0bf465aa082fe3498 Validity Not Before: Dec 19 17:00:52 2025 GMT Not After : Dec 20 17:00:52 2025 GMT Subject: CN=7dae71390f9854c77a222396aba19020bc9390e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:13:9d:8e:dc:8e:85:ff:96:e9:a2:14:8c:55: a1:97:d6:76:af:f8:3c:b7:34:8a:f9:e1:41:15:98: 6e:0c:8f:e4:b7:2d:09:af:b9:12:bf:05:9d:ad:ba: 9a:aa:04:f1:57:93:12:0e:3a:c4:79:c5:77:b6:a4: 61:da:ca:c7:90:98:a7:6a:44:25:93:62:16:ce:7d: cc:77:1f:b0:10:37:a4:1d:e4:fc:b4:b4:d6:ac:f1: 76:be:7e:91:81:3a:55:b3:03:62:d5:02:1b:30:4c: 21:f1:37:f6:ec:c2:13:c2:96:a5:57:81:07:35:84: 74:f6:cc:7a:a5:97:a5:8b:a1:56:aa:ac:39:de:18: 24:93:8d:83:be:c2:5c:c1:db:64:09:35:d3:33:27: 6d:2c:6d:57:bd:00:65:0f:a9:04:b0:0c:96:fc:94: 7f:ae:ce:27:ae:0f:06:0f:68:78:96:12:a2:90:bb: ab:44:1b:88:ca:1b:fb:4f:fa:ba:9a:be:00:9f:a3: 27:73:3c:67:d8:5c:21:9f:72:db:f8:cf:47:72:c2: 80:8e:e1:82:7c:4f:f4:cd:b0:57:42:57:d1:c1:11: 05:02:04:76:2b:04:02:dc:80:6b:75:31:0b:98:b6: 65:b9:83:88:0b:22:44:e0:c7:87:de:44:1d:94:9a: 25:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AE:71:39:0F:98:54:C7:7A:22:23:96:AB:A1:90:20:BC:93:90:E8 X509v3 Authority Key Identifier: keyid:62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b4:9c:47:35:64:be:ad:7b:d9:01:95:86:f2:a6:91:1c:8b: 1a:8f:ef:c0:8c:c1:99:b1:56:7d:20:a9:99:d4:86:7f:af:cd: 27:74:6c:e1:59:5f:2f:85:da:ff:af:82:3a:bd:c0:5d:57:ac: 3d:3f:9c:7e:de:a4:1b:9b:4d:61:7f:2d:83:41:e0:6a:3a:41: 97:42:fa:62:20:42:e7:8d:3a:d4:cb:1d:88:94:68:75:5e:de: 38:41:96:b2:02:d7:4a:02:17:59:83:26:fc:f3:43:96:07:e4: e5:2d:88:89:82:7a:0d:bf:a9:f7:06:3c:31:27:70:51:cb:4a: 44:66:40:cb:d4:d3:6e:c3:e5:4c:c2:5a:e3:05:07:93:47:67: c7:b8:3b:ec:61:91:d9:ca:97:ab:dd:8c:5c:91:92:c5:5d:81: 10:54:49:f1:fb:39:cc:82:97:83:1b:21:21:b7:1f:97:5a:13: a0:a9:5f:bd:98:aa:ae:ac:8a:98:8a:32:b1:ce:1a:84:fc:be: 0e:80:13:de:1e:bd:ee:cb:d7:15:e9:f2:18:14:c5:94:17:fd: d9:e2:8c:b9:12:58:c3:71:86:11:99:ee:6f:6f:78:0d:be:d0: f6:4a:f6:61:6a:0a:2a:1e:04:cf:41:e2:47:b6:04:58:a2:24: 1c:ad:19:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jp7UBbUVljdoY1LFcw8NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMWExMzBhOTBjYjAzN2UzODAzZmVhMGJmNDY1YWEwODJm ZTM0OTgwHhcNMjUxMjE5MTcwMDUyWhcNMjUxMjIwMTcwMDUyWjAzMTEwLwYDVQQD Eyg3ZGFlNzEzOTBmOTg1NGM3N2EyMjIzOTZhYmExOTAyMGJjOTM5MGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthOdjtyOhf+W6aIUjFWhl9Z2r/g8 tzSK+eFBFZhuDI/kty0Jr7kSvwWdrbqaqgTxV5MSDjrEecV3tqRh2srHkJinakQl k2IWzn3Mdx+wEDekHeT8tLTWrPF2vn6RgTpVswNi1QIbMEwh8Tf27MITwpalV4EH NYR09sx6pZeli6FWqqw53hgkk42DvsJcwdtkCTXTMydtLG1XvQBlD6kEsAyW/JR/ rs4nrg8GD2h4lhKikLurRBuIyhv7T/q6mr4An6Mnczxn2Fwhn3Lb+M9HcsKAjuGC fE/0zbBXQlfRwREFAgR2KwQC3IBrdTELmLZluYOICyJE4MeH3kQdlJoliwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2ucTkPmFTHeiIjlquhkCC8k5DoMB8GA1UdIwQY MBaAFGIaEwqQywN+OAP+oL9GWqCC/jSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWhvVENwRExBMzQ0QV82Z3YwWmFvSUwtTkpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yMTQ5MmYtMTY2My00MDlkLWJmYjIt NmEwNDUxYzQ5ZDRkLzEvWWhvVENwRExBMzQ0QV82Z3YwWmFvSUwtTkpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8yMTQ5MmYtMTY2My00MDlkLWJmYjItNmEwNDUxYzQ5ZDRk LzEvWWhvVENwRExBMzQ0QV82Z3YwWmFvSUwtTkpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbScRzVk vq172QGVhvKmkRyLGo/vwIzBmbFWfSCpmdSGf6/NJ3Rs4VlfL4Xa/6+COr3AXVes PT+cft6kG5tNYX8tg0HgajpBl0L6YiBC54061MsdiJRodV7eOEGWsgLXSgIXWYMm /PNDlgfk5S2IiYJ6Db+p9wY8MSdwUctKRGZAy9TTbsPlTMJa4wUHk0dnx7g77GGR 2cqXq92MXJGSxV2BEFRJ8fs5zIKXgxshIbcfl1oToKlfvZiqrqyKmIoysc4ahPy+ DoAT3h697svXFenyGBTFlBf92eKMuRJYw3GGEZnub294Db7Q9kr2YWoKKh4Ez0Hi R7YEWKIkHK0ZRQ== -----END CERTIFICATE-----Generated at Fri Dec 19 21:50:25 2025 by rpki-client