This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft File: YTIzl9blKd_wbHzxTRdg1ucGqm8.mft (raw, json) Hash identifier: mfBHh0ggxuAIJ03FgZDihr9vxZIa6ZQ5LTlwo8HI2vg= Subject key identifier: 1D:C3:9B:88:3A:FD:86:3F:56:2E:6E:E2:07:85:3B:E9:B0:11:23:DE Authority key identifier: 61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F Certificate issuer: /CN=61323397d6e529dff06c7cf14d1760d6e706aa6f Certificate serial: 019AF540C1F5C5E819061B2A121FCE7EF8DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft Manifest number: 0421 Signing time: Sat 06 Dec 2025 20:00:53 +0000 Manifest this update: Sat 06 Dec 2025 20:00:53 +0000 Manifest next update: Sun 07 Dec 2025 20:00:53 +0000 Files and hashes: 1: YTIzl9blKd_wbHzxTRdg1ucGqm8.crl (hash: ovEkZDGjRa2XfW6+51cM1AxHAYc/kS8mcTc/QJNftOY=) 2: kGTMJp8YWdhCRnyfOKgxhKChBJQ.roa (hash: ZVU5RQX8MRgj32JsdxWQo2xXu6d3VcvuzIOlJ8aVzuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:c1:f5:c5:e8:19:06:1b:2a:12:1f:ce:7e:f8:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61323397d6e529dff06c7cf14d1760d6e706aa6f Validity Not Before: Dec 6 20:00:53 2025 GMT Not After : Dec 7 20:00:53 2025 GMT Subject: CN=1dc39b883afd863f562e6ee207853be9b01123de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:70:17:6b:d8:fa:2f:2e:9e:f2:d7:83:3d:13: 1c:d3:ec:96:c6:65:25:28:50:7b:8e:1c:92:45:cc: 8e:08:4e:70:31:c8:09:57:80:20:b1:24:c7:80:45: 34:57:4c:65:b4:bf:e9:4e:2d:53:3d:ed:45:45:b1: 3c:6b:85:06:27:6a:91:ab:6c:ce:67:fa:68:75:00: e3:80:05:e0:50:b6:79:68:be:1c:a8:0e:de:43:06: 12:f6:74:d9:b8:5e:f4:ec:37:e6:20:c9:81:7b:82: cb:a3:2e:2e:5e:9a:b4:e0:4b:a1:28:3f:37:11:36: cb:06:89:fc:85:06:46:fc:b9:c6:12:6d:bb:d1:e6: 60:71:55:7e:ac:df:75:9a:42:9a:04:02:6a:b9:6a: 1a:9b:b9:a2:13:11:00:7f:43:3a:a1:ec:ba:f8:86: f0:51:d7:bf:80:b0:97:72:75:29:93:cb:e4:05:ab: e2:6d:52:0e:99:00:9b:c5:43:a9:c0:da:c3:5c:a1: 71:22:36:1b:3b:b5:2f:c3:23:aa:8c:e1:19:e5:77: 2a:c5:1f:89:54:d2:26:ad:5d:9f:83:76:56:89:89: e5:5d:7a:45:d0:75:80:23:84:21:14:50:5d:be:b7: e2:ff:d3:80:b1:7e:69:b7:78:3a:65:b5:79:cb:e1: b7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C3:9B:88:3A:FD:86:3F:56:2E:6E:E2:07:85:3B:E9:B0:11:23:DE X509v3 Authority Key Identifier: keyid:61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:7e:a1:66:df:f0:f5:60:5a:a3:13:34:ae:bd:04:64:02:82: 83:94:4b:c2:c8:a6:92:73:30:9f:73:ba:45:62:6a:33:b9:b9: 2c:c3:79:38:34:3e:1b:9e:f5:41:9f:24:07:6f:75:17:8a:15: 09:20:8a:9c:c3:ab:48:55:64:cc:62:05:41:35:9d:13:48:6d: df:dc:e8:78:d5:c2:6c:b7:ce:fb:0e:d0:6f:34:fd:81:d9:e2: 2b:d2:39:2b:6e:cd:87:dd:dc:38:5b:e4:06:0e:fe:eb:13:12: 3a:3c:1b:1c:5a:9e:17:29:0f:1d:83:d7:70:47:2e:54:0b:48: f6:11:2f:3a:b5:99:44:22:23:66:23:0c:7f:db:b6:a8:88:7f: 7a:5d:5c:da:22:b1:ea:4d:0a:6b:04:40:54:e2:70:53:19:96: 15:64:e4:9b:f0:ac:d9:af:4c:5d:db:6f:a8:ed:de:92:ef:00: 9b:a3:15:f0:06:49:7f:99:b0:82:02:e6:27:43:93:f8:34:a8: d7:99:13:47:d4:65:6e:05:ca:c6:9e:12:46:65:62:e2:97:a7: 16:f6:d8:72:73:70:9f:cf:6c:64:d3:5d:0c:8c:79:6f:0d:b3: 93:2a:9f:ab:45:ef:80:83:db:0e:2c:c1:d9:bf:ed:f0:2f:ae: db:58:af:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QMH1xegZBhsqEh/OfvjaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMzIzMzk3ZDZlNTI5ZGZmMDZjN2NmMTRkMTc2MGQ2ZTcw NmFhNmYwHhcNMjUxMjA2MjAwMDUzWhcNMjUxMjA3MjAwMDUzWjAzMTEwLwYDVQQD EygxZGMzOWI4ODNhZmQ4NjNmNTYyZTZlZTIwNzg1M2JlOWIwMTEyM2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXAXa9j6Ly6e8teDPRMc0+yWxmUl KFB7jhySRcyOCE5wMcgJV4AgsSTHgEU0V0xltL/pTi1TPe1FRbE8a4UGJ2qRq2zO Z/podQDjgAXgULZ5aL4cqA7eQwYS9nTZuF707DfmIMmBe4LLoy4uXpq04EuhKD83 ETbLBon8hQZG/LnGEm270eZgcVV+rN91mkKaBAJquWoam7miExEAf0M6oey6+Ibw Ude/gLCXcnUpk8vkBavibVIOmQCbxUOpwNrDXKFxIjYbO7UvwyOqjOEZ5XcqxR+J VNImrV2fg3ZWiYnlXXpF0HWAI4QhFFBdvrfi/9OAsX5pt3g6ZbV5y+G3CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3Dm4g6/YY/Vi5u4geFO+mwESPeMB8GA1UdIwQY MBaAFGEyM5fW5Snf8Gx88U0XYNbnBqpvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVRJemw5YmxLZF93Ykh6eFRSZGcxdWNHcW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9iYTM5MWItY2I4OS00ZTIxLTk0NGEt ZWYzM2Q4NWE0YTg2LzEvWVRJemw5YmxLZF93Ykh6eFRSZGcxdWNHcW04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9iYTM5MWItY2I4OS00ZTIxLTk0NGEtZWYzM2Q4NWE0YTg2 LzEvWVRJemw5YmxLZF93Ykh6eFRSZGcxdWNHcW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPX6hZt/w 9WBaoxM0rr0EZAKCg5RLwsimknMwn3O6RWJqM7m5LMN5ODQ+G571QZ8kB291F4oV CSCKnMOrSFVkzGIFQTWdE0ht39zoeNXCbLfO+w7QbzT9gdniK9I5K27Nh93cOFvk Bg7+6xMSOjwbHFqeFykPHYPXcEcuVAtI9hEvOrWZRCIjZiMMf9u2qIh/el1c2iKx 6k0KawRAVOJwUxmWFWTkm/Cs2a9MXdtvqO3eku8Am6MV8AZJf5mwggLmJ0OT+DSo 15kTR9RlbgXKxp4SRmVi4penFvbYcnNwn89sZNNdDIx5bw2zkyqfq0XvgIPbDizB 2b/t8C+u21ivfw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:09:41 2025 by rpki-client