This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft File: yliutBKfjiybxCzRkYXI1_Dm6vk.mft (raw, json) Hash identifier: NQpOkr3LHsRCk6X2/E672jDjHVrFXp1Oea5W0W6nD3I= Subject key identifier: 3E:4F:2A:60:12:D7:7D:71:5F:37:45:EF:F0:B8:68:21:6B:0F:48:4B Authority key identifier: CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9 Certificate issuer: /CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9 Certificate serial: 019AF2090EE43C3A7B4440FB6118A6350629 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft Manifest number: 0823 Signing time: Sat 06 Dec 2025 05:01:11 +0000 Manifest this update: Sat 06 Dec 2025 05:01:11 +0000 Manifest next update: Sun 07 Dec 2025 05:01:11 +0000 Files and hashes: 1: 0HTDBk5MYK2X7vH3zirTqZcpE2s.roa (hash: Sj1nNxaVvmVnP+tRZkLAz31ImmjJvQaxWp+RCkXDwnM=) 2: WfvC6123xfKENVd-zb3XlASAszo.roa (hash: 6SvW+m32iHXt+VqGMoFD6E0jUHXyHvqrZQ85os+ovbw=) 3: yliutBKfjiybxCzRkYXI1_Dm6vk.crl (hash: N9bqRAsCrEGZPn3UdZWk42J1cHX+sUi8KtwC6a2LkyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:0e:e4:3c:3a:7b:44:40:fb:61:18:a6:35:06:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9 Validity Not Before: Dec 6 05:01:11 2025 GMT Not After : Dec 7 05:01:11 2025 GMT Subject: CN=3e4f2a6012d77d715f3745eff0b868216b0f484b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:91:7f:da:d9:07:02:8d:ec:bd:de:30:22:81: 42:56:67:1f:f5:86:24:55:25:30:10:d5:0b:ae:98: 8c:19:07:bb:2c:70:4c:06:c7:81:c3:5a:f2:1b:ab: fa:b5:ab:b0:05:9f:c3:0b:17:e2:c5:a1:0d:82:95: bb:4a:78:5c:c7:6c:20:57:21:13:ba:18:07:93:07: 24:ea:08:89:8f:85:0e:e1:e7:9a:45:e8:f2:02:81: c9:b5:05:9f:3a:da:8c:bd:b7:d9:f3:a0:25:e8:6d: 3d:74:1e:9a:b4:a9:94:12:38:c9:9e:71:3d:70:62: c2:ff:f3:a3:27:8d:e2:fe:81:73:2b:8c:f9:5b:2b: e4:48:d1:5b:6d:d6:b2:77:10:aa:77:ef:be:8a:77: cd:92:24:f2:f3:49:4d:3c:4a:1c:51:f8:93:e9:a5: 27:10:d8:d3:d1:9e:ac:11:06:29:32:52:19:e0:93: 0f:1e:77:c9:10:e2:c0:37:58:35:bb:4b:11:3e:e6: de:d9:f3:c2:bf:5b:92:9e:88:dd:79:2e:2e:c6:43: 21:25:54:ef:2a:31:c4:44:6e:c0:b9:2c:10:0e:9c: f9:75:af:27:30:68:ba:3c:e9:0e:58:a6:3a:b7:78: 2a:fb:f1:e2:05:06:f2:22:aa:43:5f:90:82:40:47: de:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4F:2A:60:12:D7:7D:71:5F:37:45:EF:F0:B8:68:21:6B:0F:48:4B X509v3 Authority Key Identifier: keyid:CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:85:37:19:71:ec:ea:87:b4:5f:30:f2:30:1a:92:11:71:b0: 97:d2:04:99:dc:85:d3:c2:50:65:23:bf:3a:aa:5f:d9:77:71: 6a:66:57:38:f6:12:7b:39:ab:41:02:66:e9:d6:9a:97:01:ec: 26:aa:ac:8a:9b:84:3c:d2:c1:eb:99:91:8d:09:d7:44:70:da: c5:84:9b:1b:12:3f:d7:f1:14:98:b0:2e:b6:d1:39:8b:6d:ca: cf:df:57:00:a7:76:72:50:7d:36:f6:f8:c2:2e:9a:9e:69:6e: d5:5a:ec:9c:dc:30:45:ba:b6:42:4f:3f:cc:a7:c1:55:89:ce: 74:b0:ef:df:ed:3c:40:7d:7a:d8:04:21:55:78:ff:ec:f3:11: 15:73:87:58:f9:90:d5:59:cc:dd:61:cf:92:25:c7:93:72:a2: 3e:3c:b4:f4:e6:c5:62:a6:a5:c3:4c:45:38:cc:9e:33:2c:e0: 1e:6b:86:1d:20:68:69:50:d8:6c:77:58:36:29:f1:f5:b4:19: 12:6f:e8:2c:0b:9f:6c:14:81:e1:89:52:4e:7d:3c:77:3c:68: b1:a8:c3:55:dc:35:e7:2c:7f:de:d2:d5:3a:ff:64:99:1f:99: 83:bc:ce:f3:cd:3f:ce:4b:14:c4:c9:91:1c:fa:43:b2:77:41: 2e:fa:f9:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQ7kPDp7RED7YRimNQYpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNThhZWI0MTI5ZjhlMmM5YmM0MmNkMTkxODVjOGQ3ZjBl NmVhZjkwHhcNMjUxMjA2MDUwMTExWhcNMjUxMjA3MDUwMTExWjAzMTEwLwYDVQQD EygzZTRmMmE2MDEyZDc3ZDcxNWYzNzQ1ZWZmMGI4NjgyMTZiMGY0ODRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5F/2tkHAo3svd4wIoFCVmcf9YYk VSUwENULrpiMGQe7LHBMBseBw1ryG6v6tauwBZ/DCxfixaENgpW7Snhcx2wgVyET uhgHkwck6giJj4UO4eeaRejyAoHJtQWfOtqMvbfZ86Al6G09dB6atKmUEjjJnnE9 cGLC//OjJ43i/oFzK4z5WyvkSNFbbdaydxCqd+++infNkiTy80lNPEocUfiT6aUn ENjT0Z6sEQYpMlIZ4JMPHnfJEOLAN1g1u0sRPube2fPCv1uSnojdeS4uxkMhJVTv KjHERG7AuSwQDpz5da8nMGi6POkOWKY6t3gq+/HiBQbyIqpDX5CCQEfenwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5PKmAS131xXzdF7/C4aCFrD0hLMB8GA1UdIwQY MBaAFMpYrrQSn44sm8Qs0ZGFyNfw5ur5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWxpdXRCS2ZqaXlieEN6UmtZWEkxX0RtNnZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84ZjAyMTgtNTQzZC00OTQzLThlM2Mt YWVmMWIzNGEyODdkLzEveWxpdXRCS2ZqaXlieEN6UmtZWEkxX0RtNnZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84ZjAyMTgtNTQzZC00OTQzLThlM2MtYWVmMWIzNGEyODdk LzEveWxpdXRCS2ZqaXlieEN6UmtZWEkxX0RtNnZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZIU3GXHs 6oe0XzDyMBqSEXGwl9IEmdyF08JQZSO/Oqpf2XdxamZXOPYSezmrQQJm6daalwHs JqqsipuEPNLB65mRjQnXRHDaxYSbGxI/1/EUmLAuttE5i23Kz99XAKd2clB9Nvb4 wi6anmlu1VrsnNwwRbq2Qk8/zKfBVYnOdLDv3+08QH162AQhVXj/7PMRFXOHWPmQ 1VnM3WHPkiXHk3KiPjy09ObFYqalw0xFOMyeMyzgHmuGHSBoaVDYbHdYNinx9bQZ Em/oLAufbBSB4YlSTn08dzxosajDVdw15yx/3tLVOv9kmR+Zg7zO880/zksUxMmR HPpDsndBLvr55w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:56 2025 by rpki-client