This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft File: YQfi4ugXHTGdobxks2w8mF5kbCo.mft (raw, json) Hash identifier: DBIonQT/2U71akoWjW2wLPM8183j/5GKMSbOBUTC7r4= Subject key identifier: EC:BC:F3:55:69:F1:97:15:4B:14:16:D3:06:67:86:6D:E5:15:10:D6 Authority key identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A Certificate issuer: /CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a Certificate serial: 019B30431EF5E9BF85124EC2E96E69AD4422 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft Manifest number: 1788 Signing time: Thu 18 Dec 2025 07:01:03 +0000 Manifest this update: Thu 18 Dec 2025 07:01:03 +0000 Manifest next update: Fri 19 Dec 2025 07:01:03 +0000 Files and hashes: 1: 2lOhAzlC5K0mMI8bchXi_D9R3Rw.roa (hash: wULZZ92mny/AlScu8gAC9jEDmMKs+7xfe1mY5oB7zrA=) 2: Djx6QNMoJb-cW9yeKmXUOuLZGxc.roa (hash: kSdS/jX6rRQff6lKohOcXS4NIaspZuS+tTFddGQqIfY=) 3: YQfi4ugXHTGdobxks2w8mF5kbCo.crl (hash: jiF030yqhME4B/88vUS5C8eVmhHKWToOB/cH55IxWec=) 4: n7FqNgB42yMNZn9HsllZdTK6BM4.roa (hash: El5LuNO8gbAy7J9nIaZ/6jvlxDskopE6EQQyObfppsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 07:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:43:1e:f5:e9:bf:85:12:4e:c2:e9:6e:69:ad:44:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a Validity Not Before: Dec 18 07:01:03 2025 GMT Not After : Dec 19 07:01:03 2025 GMT Subject: CN=ecbcf35569f197154b1416d30667866de51510d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5c:52:1c:87:56:a1:90:c3:b2:51:44:b2:4a: 74:b2:27:fe:d1:68:fe:fb:84:d0:1a:c4:68:b8:49: 5f:13:47:cf:99:08:36:4f:96:26:39:d2:8c:75:3c: 6c:f4:77:75:e3:a9:69:23:3c:fa:48:29:22:d7:6c: 08:f6:c3:d2:40:5f:6a:e8:e8:23:e9:f0:b4:c6:2f: 89:41:fa:03:44:86:66:d3:0c:a9:39:97:bf:6f:41: 66:d9:1e:38:e1:c0:c5:d8:f5:b0:e0:e8:b4:34:8c: a2:e1:86:96:70:56:2e:41:d3:37:7f:4b:cc:df:c0: d9:67:1a:68:c5:56:8d:de:e6:d2:1f:8e:e1:ac:6e: 20:1a:92:11:12:fb:da:d3:95:b5:0a:d8:17:75:84: 39:32:20:cd:d0:d8:61:77:cb:7a:e9:66:47:5d:ed: b4:01:e5:e1:ca:67:fb:71:e3:ae:99:3f:f7:1d:5e: 2d:cf:16:ba:8d:75:c0:c2:d0:0a:18:60:44:1f:1b: ce:b8:76:2f:cf:1a:42:f9:2f:24:b5:97:ea:31:bc: 15:95:07:35:b9:3a:0e:dd:8c:43:da:f1:98:37:15: 20:62:64:bb:00:9c:89:23:86:fb:ef:80:03:9a:78: 80:80:66:e8:78:7c:11:d2:48:18:36:9d:10:82:1e: 09:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BC:F3:55:69:F1:97:15:4B:14:16:D3:06:67:86:6D:E5:15:10:D6 X509v3 Authority Key Identifier: keyid:61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:9a:d8:fc:ee:5b:38:09:10:64:5b:17:c3:c8:c6:c9:8b:e7: 2d:28:de:df:29:74:21:45:65:20:15:43:f3:5e:7f:36:ef:b1: 7c:e5:9e:70:8a:a7:ad:ca:5a:eb:e2:10:46:bf:41:6e:6e:ef: 9f:39:69:38:14:87:85:65:86:f7:12:3f:39:1e:91:27:36:59: 75:25:7c:80:9f:12:ed:7f:7c:41:2c:71:8d:ae:e5:69:f3:a1: 3c:f1:9a:3f:34:58:76:ec:7c:d6:66:d8:b5:76:4a:6a:3e:f7: 86:63:c0:a6:77:4f:f0:df:c1:c5:a8:6e:ca:96:af:c4:c1:0f: 8d:82:98:6c:27:03:da:54:2d:12:91:47:57:37:a5:eb:6b:08: 1a:40:0c:5f:b0:50:dd:ff:ad:a3:55:f8:e9:1b:cb:25:83:28: 89:96:56:9f:50:a1:69:db:86:e8:c4:0f:ec:9a:09:99:e4:50: e9:6b:e1:cb:0c:ec:8c:62:e8:08:ee:0f:f1:d7:91:4f:72:df: 71:08:7d:0a:80:df:b4:c8:fb:32:9b:be:60:0c:87:e9:1d:7c: bd:54:8f:fc:92:19:6b:aa:80:b7:b3:05:11:7c:1c:ba:38:28: ac:3c:de:12:bc:50:22:e1:a6:04:ca:8a:6b:6d:b7:a7:ab:86: 29:55:42:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQx716b+FEk7C6W5prUQiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMDdlMmUyZTgxNzFkMzE5ZGExYmM2NGIzNmMzYzk4NWU2 NDZjMmEwHhcNMjUxMjE4MDcwMTAzWhcNMjUxMjE5MDcwMTAzWjAzMTEwLwYDVQQD EyhlY2JjZjM1NTY5ZjE5NzE1NGIxNDE2ZDMwNjY3ODY2ZGU1MTUxMGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFxSHIdWoZDDslFEskp0sif+0Wj+ +4TQGsRouElfE0fPmQg2T5YmOdKMdTxs9Hd146lpIzz6SCki12wI9sPSQF9q6Ogj 6fC0xi+JQfoDRIZm0wypOZe/b0Fm2R444cDF2PWw4Oi0NIyi4YaWcFYuQdM3f0vM 38DZZxpoxVaN3ubSH47hrG4gGpIREvva05W1CtgXdYQ5MiDN0Nhhd8t66WZHXe20 AeXhymf7ceOumT/3HV4tzxa6jXXAwtAKGGBEHxvOuHYvzxpC+S8ktZfqMbwVlQc1 uToO3YxD2vGYNxUgYmS7AJyJI4b774ADmniAgGboeHwR0kgYNp0Qgh4JPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOy881Vp8ZcVSxQW0wZnhm3lFRDWMB8GA1UdIwQY MBaAFGEH4uLoFx0xnaG8ZLNsPJheZGwqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVFmaTR1Z1hIVEdkb2J4a3MydzhtRjVrYkNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iMDdlNTgtZjkzYS00ZDVmLWI5MmQt NjAxNmQ1YzA1ZjMwLzEvWVFmaTR1Z1hIVEdkb2J4a3MydzhtRjVrYkNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9iMDdlNTgtZjkzYS00ZDVmLWI5MmQtNjAxNmQ1YzA1ZjMw LzEvWVFmaTR1Z1hIVEdkb2J4a3MydzhtRjVrYkNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5rY/O5b OAkQZFsXw8jGyYvnLSje3yl0IUVlIBVD815/Nu+xfOWecIqnrcpa6+IQRr9Bbm7v nzlpOBSHhWWG9xI/OR6RJzZZdSV8gJ8S7X98QSxxja7lafOhPPGaPzRYdux81mbY tXZKaj73hmPApndP8N/BxahuypavxMEPjYKYbCcD2lQtEpFHVzel62sIGkAMX7BQ 3f+to1X46RvLJYMoiZZWn1ChaduG6MQP7JoJmeRQ6WvhywzsjGLoCO4P8deRT3Lf cQh9CoDftMj7Mpu+YAyH6R18vVSP/JIZa6qAt7MFEXwcujgorDzeErxQIuGmBMqK a223p6uGKVVCRw== -----END CERTIFICATE-----Generated at Thu Dec 18 14:19:08 2025 by rpki-client