This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft File: YuJWVsULslT1gHfRuWbkdLFjR68.mft (raw, json) Hash identifier: zZJ+MDUo9STEDIXsY8WNFyXWVLsMjqmaLU8ziMQiEx4= Subject key identifier: 27:7E:5A:5F:CD:7C:47:DF:6F:39:D4:AE:25:88:92:3C:FB:40:A9:44 Authority key identifier: 62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF Certificate issuer: /CN=62e25656c50bb254f58077d1b966e474b16347af Certificate serial: 019B26D26858E9BD79290DB314048AC0956F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft Manifest number: 177C Signing time: Tue 16 Dec 2025 11:01:21 +0000 Manifest this update: Tue 16 Dec 2025 11:01:21 +0000 Manifest next update: Wed 17 Dec 2025 11:01:21 +0000 Files and hashes: 1: 8gQzPchz9vCwdjVN_ZBPueH3G6Y.roa (hash: Z7w2/N0mbKOYhB3ua7HBgoWG65DoIXePIy8hWS+i+vg=) 2: YuJWVsULslT1gHfRuWbkdLFjR68.crl (hash: MraOzUUA5S2TB9oLDDWwIeFT+xIyA2kmAJ5KZSop1OM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 11:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:d2:68:58:e9:bd:79:29:0d:b3:14:04:8a:c0:95:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62e25656c50bb254f58077d1b966e474b16347af Validity Not Before: Dec 16 11:01:21 2025 GMT Not After : Dec 17 11:01:21 2025 GMT Subject: CN=277e5a5fcd7c47df6f39d4ae2588923cfb40a944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:36:12:53:5a:23:34:4b:b2:36:4a:d7:3a:7f: 84:cc:1c:22:fc:fd:4b:b1:b2:a5:b5:1d:14:4b:ad: d4:f4:a3:9e:19:ca:8f:8c:19:bf:73:06:39:d2:63: f0:42:1a:f3:85:79:59:dc:9c:80:21:43:34:d3:04: df:07:0e:da:5e:2a:80:e7:be:f2:b5:35:23:10:4c: f2:60:e6:2e:1b:ee:41:1e:bc:7e:85:fe:5e:32:1e: d6:d2:af:c4:65:4b:6f:3f:c8:51:a4:2e:86:58:2c: 10:c3:45:c2:34:81:80:bc:92:65:4f:b9:57:f8:95: 25:fb:f7:6d:40:24:a9:24:0b:c7:d5:4f:d7:b2:d1: b4:c3:68:5d:46:17:7c:ff:41:af:92:df:58:7e:de: 81:96:d3:02:f2:91:9b:f1:b6:68:fd:1e:13:5d:57: 60:3d:6f:45:dd:ce:03:4d:84:38:92:2e:0c:1c:e9: 24:d2:82:50:24:5d:3b:d8:ee:3f:1d:cc:90:17:95: b4:48:dc:b4:30:13:ae:e6:fc:52:20:53:45:85:85: 11:e3:74:2c:af:95:2e:31:a1:ec:fd:fa:69:35:97: aa:b4:53:b9:cc:60:02:ae:45:d7:10:c9:ce:4e:4b: f7:5f:6a:9c:12:d8:03:51:85:7d:d1:27:55:e6:78: 11:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7E:5A:5F:CD:7C:47:DF:6F:39:D4:AE:25:88:92:3C:FB:40:A9:44 X509v3 Authority Key Identifier: keyid:62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:1a:00:ec:c3:12:de:e3:f6:40:af:65:36:b1:78:1d:9d:79: 22:c5:62:7b:52:6c:8d:7c:44:f8:60:8c:00:ff:68:2a:3f:fd: 83:2c:7a:bb:cf:be:ac:22:24:f0:b8:9a:9a:93:7d:d4:dc:d5: e2:68:c5:a0:43:3f:ff:8d:b9:b9:87:15:4d:f7:0b:41:ba:16: c3:71:84:5b:27:d8:90:e0:3d:38:11:b3:0c:02:f7:d2:dd:bd: 70:4f:2f:a0:3e:26:2b:6f:3f:06:4f:be:f8:27:e4:2d:8c:0e: e1:15:54:35:18:1c:ad:ed:5f:63:23:48:14:35:10:9e:ff:c0: 7d:74:ac:d0:50:8d:a1:27:b5:57:b6:7b:90:5b:36:fd:55:63: b2:8d:b0:60:dd:18:f9:6e:53:d9:29:c6:80:23:27:99:da:ba: ab:7c:5c:ab:3e:19:ab:d8:8a:3d:ea:bc:c7:ed:76:ac:be:6b: b8:8a:7e:24:c7:0e:e0:62:b4:0f:02:04:cf:19:2c:ce:57:c5: 29:d3:33:b5:1f:7a:dc:23:17:d0:aa:df:3d:6d:c0:25:50:60: 31:8c:9e:3e:30:54:f0:5e:40:2d:c3:fc:d1:86:48:81:c8:dd: b0:19:30:1b:0a:d5:76:cd:97:ce:c6:aa:11:30:c1:7e:46:c8: b5:a1:9e:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsm0mhY6b15KQ2zFASKwJVvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZTI1NjU2YzUwYmIyNTRmNTgwNzdkMWI5NjZlNDc0YjE2 MzQ3YWYwHhcNMjUxMjE2MTEwMTIxWhcNMjUxMjE3MTEwMTIxWjAzMTEwLwYDVQQD EygyNzdlNWE1ZmNkN2M0N2RmNmYzOWQ0YWUyNTg4OTIzY2ZiNDBhOTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zYSU1ojNEuyNkrXOn+EzBwi/P1L sbKltR0US63U9KOeGcqPjBm/cwY50mPwQhrzhXlZ3JyAIUM00wTfBw7aXiqA577y tTUjEEzyYOYuG+5BHrx+hf5eMh7W0q/EZUtvP8hRpC6GWCwQw0XCNIGAvJJlT7lX +JUl+/dtQCSpJAvH1U/XstG0w2hdRhd8/0Gvkt9Yft6BltMC8pGb8bZo/R4TXVdg PW9F3c4DTYQ4ki4MHOkk0oJQJF072O4/HcyQF5W0SNy0MBOu5vxSIFNFhYUR43Qs r5UuMaHs/fppNZeqtFO5zGACrkXXEMnOTkv3X2qcEtgDUYV90SdV5ngRgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCd+Wl/NfEffbznUriWIkjz7QKlEMB8GA1UdIwQY MBaAFGLiVlbFC7JU9YB30blm5HSxY0evMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXVKV1ZzVUxzbFQxZ0hmUnVXYmtkTEZqUjY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80MjQ2ODUtZDhhOS00MzY4LThkM2Mt YzIwNjRiMGY5YWI5LzEvWXVKV1ZzVUxzbFQxZ0hmUnVXYmtkTEZqUjY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS80MjQ2ODUtZDhhOS00MzY4LThkM2MtYzIwNjRiMGY5YWI5 LzEvWXVKV1ZzVUxzbFQxZ0hmUnVXYmtkTEZqUjY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehoA7MMS 3uP2QK9lNrF4HZ15IsVie1JsjXxE+GCMAP9oKj/9gyx6u8++rCIk8LiampN91NzV 4mjFoEM//425uYcVTfcLQboWw3GEWyfYkOA9OBGzDAL30t29cE8voD4mK28/Bk++ +CfkLYwO4RVUNRgcre1fYyNIFDUQnv/AfXSs0FCNoSe1V7Z7kFs2/VVjso2wYN0Y +W5T2SnGgCMnmdq6q3xcqz4Zq9iKPeq8x+12rL5ruIp+JMcO4GK0DwIEzxkszlfF KdMztR963CMX0KrfPW3AJVBgMYyePjBU8F5ALcP80YZIgcjdsBkwGwrVds2Xzsaq ETDBfkbItaGedQ== -----END CERTIFICATE-----Generated at Tue Dec 16 19:16:32 2025 by rpki-client