This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft File: YuJWVsULslT1gHfRuWbkdLFjR68.mft (raw, json) Hash identifier: /MfZVwEk3VvysKzHRxk2kCeFduaIOIRMHrpP1ISoVdc= Subject key identifier: AE:69:2F:2C:85:CB:3A:4C:CA:40:AD:A9:5A:2F:64:B8:19:92:13:F0 Authority key identifier: 62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF Certificate issuer: /CN=62e25656c50bb254f58077d1b966e474b16347af Certificate serial: 019AF2ADC32A61EB1A5E404AE037048C6B6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 08:01:05 +0000 Manifest this update: Sat 06 Dec 2025 08:01:05 +0000 Manifest next update: Sun 07 Dec 2025 08:01:05 +0000 Files and hashes: 1: 8gQzPchz9vCwdjVN_ZBPueH3G6Y.roa (hash: Z7w2/N0mbKOYhB3ua7HBgoWG65DoIXePIy8hWS+i+vg=) 2: YuJWVsULslT1gHfRuWbkdLFjR68.crl (hash: v/i0u54Y2thErRlU9H4cUH/adx6rRDm0akS3y0XrIVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:c3:2a:61:eb:1a:5e:40:4a:e0:37:04:8c:6b:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62e25656c50bb254f58077d1b966e474b16347af Validity Not Before: Dec 6 08:01:05 2025 GMT Not After : Dec 7 08:01:05 2025 GMT Subject: CN=ae692f2c85cb3a4cca40ada95a2f64b8199213f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4d:61:61:92:8b:06:de:22:94:eb:8f:06:6a: 6e:3f:3b:8f:7a:ec:5f:da:b4:d0:d7:9a:b5:2d:89: fe:82:ac:b1:cc:ab:19:c8:b4:6a:35:93:ce:4e:47: a3:13:54:2b:7a:e3:42:7b:a2:cb:9d:9d:71:d8:87: 28:10:65:0c:7b:ec:53:40:83:cf:87:fc:ab:de:9b: 28:a4:c4:ab:75:80:fa:8d:4b:0f:12:01:c9:26:69: 46:5b:ca:d0:04:54:d2:08:90:ad:c4:5f:83:68:d6: 3a:6b:b8:20:fa:6e:c6:dc:88:d9:9f:94:ac:55:65: f2:94:81:da:da:ac:f6:40:76:c5:4d:51:20:2b:bc: 45:6b:ca:0b:a6:68:1b:0d:2b:13:27:e3:b3:7a:53: 04:c1:f3:7d:34:40:45:d0:49:d9:5d:d4:41:5a:de: 28:b6:24:b8:c7:de:92:9f:f6:31:91:0a:39:99:98: a0:c0:7c:09:6e:83:ae:e9:fb:46:d7:37:b5:ce:74: 0b:1a:69:9c:5e:8b:c1:e7:37:e4:e7:1c:ea:15:39: a4:6e:2d:15:7e:9b:48:96:6d:72:d7:ba:64:f8:9d: 9a:5d:1e:3b:af:a6:e5:1f:f6:96:d0:f9:f2:60:f3: 10:25:06:54:24:1d:e9:97:da:6d:32:65:ff:66:59: 8e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:69:2F:2C:85:CB:3A:4C:CA:40:AD:A9:5A:2F:64:B8:19:92:13:F0 X509v3 Authority Key Identifier: keyid:62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:cd:fb:22:20:7e:7e:be:44:23:c0:0f:6b:5f:7a:ae:27:35: 2a:71:50:70:44:f5:d7:89:6e:87:df:52:c4:01:55:db:17:49: ca:e8:2e:87:dc:db:51:c5:17:5e:84:b9:94:f0:64:81:2c:aa: 74:70:26:fa:6b:67:a3:31:dc:5c:b6:fe:70:b7:01:f6:79:a7: 50:63:eb:69:06:4d:8c:a0:5b:3d:ea:e3:22:68:69:94:6a:24: 50:cb:a4:ab:93:cb:fb:36:e2:59:f5:f7:a1:b1:29:b0:b5:d4: 78:91:a1:07:9b:67:72:e9:c2:d2:b0:2a:87:2d:b7:78:a1:cf: 54:70:5d:45:9e:e4:2d:4d:85:97:4f:41:1d:bf:b8:42:07:44: 8e:f7:01:3a:97:f9:0e:2f:80:a3:c4:b6:4b:93:4d:ae:38:0d: 93:59:64:0e:4b:16:93:9f:14:af:71:52:5c:a9:f4:c9:de:7f: 5f:83:a5:5b:68:1d:4c:76:7d:f7:6a:ea:db:16:7b:c8:52:c9: ab:38:99:62:fb:4d:dc:c6:17:6a:2c:d0:4d:6d:a3:d1:bb:c8: 26:23:e6:0a:f1:90:e6:22:7c:5d:c5:dc:63:43:f4:03:d6:16: eb:95:67:aa:9b:04:41:0d:81:17:ab:d9:e5:61:a7:e8:e0:b1: 82:81:7c:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrcMqYesaXkBK4DcEjGttMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZTI1NjU2YzUwYmIyNTRmNTgwNzdkMWI5NjZlNDc0YjE2 MzQ3YWYwHhcNMjUxMjA2MDgwMTA1WhcNMjUxMjA3MDgwMTA1WjAzMTEwLwYDVQQD EyhhZTY5MmYyYzg1Y2IzYTRjY2E0MGFkYTk1YTJmNjRiODE5OTIxM2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk1hYZKLBt4ilOuPBmpuPzuPeuxf 2rTQ15q1LYn+gqyxzKsZyLRqNZPOTkejE1QreuNCe6LLnZ1x2IcoEGUMe+xTQIPP h/yr3psopMSrdYD6jUsPEgHJJmlGW8rQBFTSCJCtxF+DaNY6a7gg+m7G3IjZn5Ss VWXylIHa2qz2QHbFTVEgK7xFa8oLpmgbDSsTJ+OzelMEwfN9NEBF0EnZXdRBWt4o tiS4x96Sn/YxkQo5mZigwHwJboOu6ftG1ze1znQLGmmcXovB5zfk5xzqFTmkbi0V fptIlm1y17pk+J2aXR47r6blH/aW0PnyYPMQJQZUJB3pl9ptMmX/ZlmOwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK5pLyyFyzpMykCtqVovZLgZkhPwMB8GA1UdIwQY MBaAFGLiVlbFC7JU9YB30blm5HSxY0evMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXVKV1ZzVUxzbFQxZ0hmUnVXYmtkTEZqUjY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80MjQ2ODUtZDhhOS00MzY4LThkM2Mt YzIwNjRiMGY5YWI5LzEvWXVKV1ZzVUxzbFQxZ0hmUnVXYmtkTEZqUjY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS80MjQ2ODUtZDhhOS00MzY4LThkM2MtYzIwNjRiMGY5YWI5 LzEvWXVKV1ZzVUxzbFQxZ0hmUnVXYmtkTEZqUjY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcc37IiB+ fr5EI8APa196ric1KnFQcET114luh99SxAFV2xdJyuguh9zbUcUXXoS5lPBkgSyq dHAm+mtnozHcXLb+cLcB9nmnUGPraQZNjKBbPerjImhplGokUMukq5PL+zbiWfX3 obEpsLXUeJGhB5tncunC0rAqhy23eKHPVHBdRZ7kLU2Fl09BHb+4QgdEjvcBOpf5 Di+Ao8S2S5NNrjgNk1lkDksWk58Ur3FSXKn0yd5/X4OlW2gdTHZ992rq2xZ7yFLJ qziZYvtN3MYXaizQTW2j0bvIJiPmCvGQ5iJ8XcXcY0P0A9YW65VnqpsEQQ2BF6vZ 5WGn6OCxgoF8Lw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:32 2025 by rpki-client