This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft File: YQfi4ugXHTGdobxks2w8mF5kbCo.mft (raw, json) Hash identifier: g7zrS0jknt0qxktl0nAOy3JPRlq8gQ549Vvup5ubeD4= Subject key identifier: 48:29:02:B0:01:47:1E:D3:FA:0E:70:A7:62:37:BA:01:25:D0:FC:35 Authority key identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A Certificate issuer: /CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a Certificate serial: 019AF2765A360A7E4128E0D37902997814B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 07:00:33 +0000 Manifest this update: Sat 06 Dec 2025 07:00:33 +0000 Manifest next update: Sun 07 Dec 2025 07:00:33 +0000 Files and hashes: 1: 2lOhAzlC5K0mMI8bchXi_D9R3Rw.roa (hash: wULZZ92mny/AlScu8gAC9jEDmMKs+7xfe1mY5oB7zrA=) 2: Djx6QNMoJb-cW9yeKmXUOuLZGxc.roa (hash: kSdS/jX6rRQff6lKohOcXS4NIaspZuS+tTFddGQqIfY=) 3: YQfi4ugXHTGdobxks2w8mF5kbCo.crl (hash: VNYRq8UnI3gN+QO3UqBjqNUBAyzzJgWKTJxQ0KrLPJ8=) 4: n7FqNgB42yMNZn9HsllZdTK6BM4.roa (hash: El5LuNO8gbAy7J9nIaZ/6jvlxDskopE6EQQyObfppsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:5a:36:0a:7e:41:28:e0:d3:79:02:99:78:14:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a Validity Not Before: Dec 6 07:00:33 2025 GMT Not After : Dec 7 07:00:33 2025 GMT Subject: CN=482902b001471ed3fa0e70a76237ba0125d0fc35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cf:65:f5:71:d4:3a:e4:de:11:27:b7:f3:16: 82:90:f4:66:54:69:cd:97:47:97:a3:bf:54:ce:3b: a4:03:a1:2e:e3:39:96:11:c1:4b:45:1d:da:8d:4a: 98:ad:e5:e1:4a:87:81:ae:2b:b1:3f:38:84:00:39: 77:c1:13:ae:70:51:19:42:32:23:5f:cb:86:c3:5d: 12:e7:88:a8:c6:5e:d3:f1:af:41:ca:53:22:3a:4b: 01:d1:98:79:65:6d:67:84:05:b8:e0:27:70:b4:f6: 82:6a:ff:1f:9c:14:44:ef:b7:7b:ac:6a:05:9e:2c: 82:38:f6:21:bf:e0:76:d4:f0:4c:33:cb:80:85:60: dd:55:e8:c7:11:48:a5:36:5b:86:a2:4a:f1:7b:60: 94:4d:a6:7a:61:b1:34:4a:8d:bf:55:a4:0e:ce:76: f6:e1:61:4d:78:d7:00:ac:c7:f0:25:8f:eb:48:9a: 7f:b9:d5:95:7f:57:a6:6d:33:89:1b:41:af:3f:10: fa:fc:8c:44:2a:1c:80:32:24:a8:9e:46:79:c9:62: 03:f6:0e:a4:69:62:6b:25:c1:16:7a:60:ba:b4:90: 27:07:74:3e:9c:de:6c:8e:46:bc:60:aa:86:8d:ea: 0a:80:fe:3b:d2:f9:47:e1:bc:68:4a:57:39:80:10: 59:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:29:02:B0:01:47:1E:D3:FA:0E:70:A7:62:37:BA:01:25:D0:FC:35 X509v3 Authority Key Identifier: keyid:61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:41:c1:57:77:17:b2:d4:3d:3a:1c:17:26:15:4c:de:05:01: 22:f7:9a:07:dc:e6:58:a2:a9:a2:9f:c3:5c:d4:12:88:d5:9e: 79:9d:ce:0f:30:d2:f0:dc:6d:d1:63:57:6e:85:e7:9c:c8:9d: 37:f2:58:13:1a:84:e4:3f:a7:11:ec:36:20:6c:42:24:7e:7a: b9:34:71:13:6a:b6:73:0e:d1:f6:9c:6a:be:58:3f:de:84:50: 76:03:34:96:ff:f9:2d:4d:78:86:7b:14:0f:b4:48:24:e2:4e: fb:5a:72:28:49:20:ee:ed:0a:82:55:70:ad:32:69:c6:26:4d: f0:ff:99:60:a4:9b:ec:63:24:ee:21:f3:e3:b3:d5:16:4a:bb: 7e:d9:50:29:18:17:bc:8b:3c:01:cc:88:f1:ef:75:f6:8c:c1: 30:44:19:fb:13:7c:35:68:77:c6:ef:f1:cf:1c:df:d2:80:2f: c5:d0:93:6c:37:c8:7b:64:bd:8a:68:a6:c8:83:cb:e9:f8:59: e1:37:72:9b:09:40:c5:e2:d7:08:7d:f6:24:0f:a8:cc:0d:11: 68:63:ac:a0:cc:91:5f:df:55:de:cd:54:09:8b:f6:ba:6d:f3: cc:d3:59:3b:4e:8f:bb:5f:64:5a:89:78:0a:27:a5:51:ec:1a: 41:73:0b:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydlo2Cn5BKODTeQKZeBSyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMDdlMmUyZTgxNzFkMzE5ZGExYmM2NGIzNmMzYzk4NWU2 NDZjMmEwHhcNMjUxMjA2MDcwMDMzWhcNMjUxMjA3MDcwMDMzWjAzMTEwLwYDVQQD Eyg0ODI5MDJiMDAxNDcxZWQzZmEwZTcwYTc2MjM3YmEwMTI1ZDBmYzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos9l9XHUOuTeESe38xaCkPRmVGnN l0eXo79UzjukA6Eu4zmWEcFLRR3ajUqYreXhSoeBriuxPziEADl3wROucFEZQjIj X8uGw10S54ioxl7T8a9BylMiOksB0Zh5ZW1nhAW44CdwtPaCav8fnBRE77d7rGoF niyCOPYhv+B21PBMM8uAhWDdVejHEUilNluGokrxe2CUTaZ6YbE0So2/VaQOznb2 4WFNeNcArMfwJY/rSJp/udWVf1embTOJG0GvPxD6/IxEKhyAMiSonkZ5yWID9g6k aWJrJcEWemC6tJAnB3Q+nN5sjka8YKqGjeoKgP470vlH4bxoSlc5gBBZwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgpArABRx7T+g5wp2I3ugEl0Pw1MB8GA1UdIwQY MBaAFGEH4uLoFx0xnaG8ZLNsPJheZGwqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVFmaTR1Z1hIVEdkb2J4a3MydzhtRjVrYkNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iMDdlNTgtZjkzYS00ZDVmLWI5MmQt NjAxNmQ1YzA1ZjMwLzEvWVFmaTR1Z1hIVEdkb2J4a3MydzhtRjVrYkNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9iMDdlNTgtZjkzYS00ZDVmLWI5MmQtNjAxNmQ1YzA1ZjMw LzEvWVFmaTR1Z1hIVEdkb2J4a3MydzhtRjVrYkNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAekHBV3cX stQ9OhwXJhVM3gUBIveaB9zmWKKpop/DXNQSiNWeeZ3ODzDS8Nxt0WNXboXnnMid N/JYExqE5D+nEew2IGxCJH56uTRxE2q2cw7R9pxqvlg/3oRQdgM0lv/5LU14hnsU D7RIJOJO+1pyKEkg7u0KglVwrTJpxiZN8P+ZYKSb7GMk7iHz47PVFkq7ftlQKRgX vIs8AcyI8e919ozBMEQZ+xN8NWh3xu/xzxzf0oAvxdCTbDfIe2S9imimyIPL6fhZ 4TdymwlAxeLXCH32JA+ozA0RaGOsoMyRX99V3s1UCYv2um3zzNNZO06Pu19kWol4 CielUewaQXMLjw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:57:16 2025 by rpki-client