This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft File: YU9WZQWavHvjR17553qXl7cW_Ic.mft (raw, json) Hash identifier: JYYsOUHVKcj79+SeAW+HffE0+SuV0OtY1y1JVeCjN04= Subject key identifier: E2:7F:CF:ED:77:68:DE:4A:54:72:CB:AA:3F:48:25:1E:8F:0D:56:0A Authority key identifier: 61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87 Certificate issuer: /CN=614f5665059abc7be3475ef9e77a9797b716fc87 Certificate serial: 019AF0BF72773EF831BAE877D2B3CB5327D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft Manifest number: 134B Signing time: Fri 05 Dec 2025 23:01:09 +0000 Manifest this update: Fri 05 Dec 2025 23:01:09 +0000 Manifest next update: Sat 06 Dec 2025 23:01:09 +0000 Files and hashes: 1: TBiZ_CyXMsOJcf6YES-qeNnA7K4.roa (hash: QMLp06BguaI0fqG8Q739POQiUPSQCHhnkaMoIvb33Vg=) 2: YU9WZQWavHvjR17553qXl7cW_Ic.crl (hash: wTD2uO3kU/k3gaPW0uXNOVZoLEdWarhDa7ovIPrsRJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:72:77:3e:f8:31:ba:e8:77:d2:b3:cb:53:27:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614f5665059abc7be3475ef9e77a9797b716fc87 Validity Not Before: Dec 5 23:01:09 2025 GMT Not After : Dec 6 23:01:09 2025 GMT Subject: CN=e27fcfed7768de4a5472cbaa3f48251e8f0d560a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2f:2f:b2:98:fc:cb:5e:c0:84:70:a4:99:35: 12:ba:4d:0f:31:f4:c5:67:b9:17:b8:ea:16:cf:71: cf:ec:50:35:b2:a7:71:a7:55:95:c8:fb:54:d1:15: 18:69:ae:f7:f4:2c:88:d3:40:09:8f:37:a0:24:36: 4f:67:2c:85:38:ca:93:46:70:cd:9a:03:72:2e:82: 98:b2:ea:b8:21:32:17:ee:70:6d:fa:50:c3:01:60: 7f:a7:d9:32:9a:f0:f7:45:59:b1:8b:18:bf:74:dd: 80:35:80:d1:15:b7:aa:c9:4b:78:1f:11:05:0b:fa: 68:a9:65:bf:4e:89:b4:0d:0b:32:b8:01:99:81:dd: 04:81:7a:a6:a5:64:64:38:89:76:1a:c8:9a:89:d5: ab:9b:1a:f4:d8:60:f6:25:eb:32:a6:7d:37:7a:3c: 66:ef:d4:9d:04:53:31:4b:34:d9:e8:98:9a:75:ac: a1:f0:9e:2a:2f:e2:fe:d1:89:90:91:21:f5:1d:7a: 9e:8a:c5:d6:cc:24:9b:aa:80:73:0e:6f:d1:36:63: c6:4b:2f:09:60:ed:4b:dd:37:70:11:df:33:31:43: f2:db:ed:e1:e8:60:51:d1:a6:d0:8e:1f:96:a9:5d: d1:13:2a:e8:da:4c:e7:59:8e:f9:99:5f:15:e3:03: a4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7F:CF:ED:77:68:DE:4A:54:72:CB:AA:3F:48:25:1E:8F:0D:56:0A X509v3 Authority Key Identifier: keyid:61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:84:19:c5:2b:a2:05:fb:12:08:0f:96:46:9f:79:ee:e3:3c: 9f:cc:b8:e3:d4:76:dd:cd:1c:56:04:16:5a:f3:cd:99:ac:3c: 0f:0e:fb:91:e9:61:e2:3e:da:74:65:37:4d:b2:55:3f:7f:3d: 93:26:a4:ba:3e:45:10:93:7e:cc:fa:e4:4d:df:0a:ef:b0:9a: a7:d5:ad:7e:f8:32:8b:2d:73:cf:10:fa:11:09:62:3a:8f:33: 9d:59:c6:45:72:13:e1:1d:cb:f4:9b:df:3a:d0:d0:bd:89:24: b4:fb:5b:0c:bc:b6:13:25:94:20:a0:d5:0b:dc:22:33:6a:eb: b1:52:d9:3d:12:c2:80:73:2b:3a:36:0c:3f:42:9f:75:7c:d0: 93:58:e8:52:b0:e3:5e:08:a9:90:5f:25:6b:3e:27:bc:6c:2d: 2d:10:c9:fd:84:68:b2:91:43:8e:6c:be:87:d9:77:b2:e0:22: 45:89:44:5f:81:1e:a3:34:d1:36:26:a0:d8:65:18:ef:ee:58: 87:7a:88:c5:94:30:18:f0:76:36:a2:0a:88:da:39:89:68:6d: 90:dd:65:0b:10:fe:56:4c:57:33:66:0c:7c:08:21:5c:6d:76: ef:e5:9a:59:14:30:28:05:1d:ca:7e:2d:96:16:4f:0f:4e:f4: ca:55:b7:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3J3Pvgxuuh30rPLUyfXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNGY1NjY1MDU5YWJjN2JlMzQ3NWVmOWU3N2E5Nzk3Yjcx NmZjODcwHhcNMjUxMjA1MjMwMTA5WhcNMjUxMjA2MjMwMTA5WjAzMTEwLwYDVQQD EyhlMjdmY2ZlZDc3NjhkZTRhNTQ3MmNiYWEzZjQ4MjUxZThmMGQ1NjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS8vspj8y17AhHCkmTUSuk0PMfTF Z7kXuOoWz3HP7FA1sqdxp1WVyPtU0RUYaa739CyI00AJjzegJDZPZyyFOMqTRnDN mgNyLoKYsuq4ITIX7nBt+lDDAWB/p9kymvD3RVmxixi/dN2ANYDRFbeqyUt4HxEF C/poqWW/Tom0DQsyuAGZgd0EgXqmpWRkOIl2GsiaidWrmxr02GD2Jesypn03ejxm 79SdBFMxSzTZ6Jiadayh8J4qL+L+0YmQkSH1HXqeisXWzCSbqoBzDm/RNmPGSy8J YO1L3TdwEd8zMUPy2+3h6GBR0abQjh+WqV3REyro2kznWY75mV8V4wOktQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJ/z+13aN5KVHLLqj9IJR6PDVYKMB8GA1UdIwQY MBaAFGFPVmUFmrx740de+ed6l5e3FvyHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVU5V1pRV2F2SHZqUjE3NTUzcVhsN2NXX0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS84ODhhMDQtNzdmNC00MTU5LTk4NmMt M2NlZjU5M2QxNmI0LzEvWVU5V1pRV2F2SHZqUjE3NTUzcVhsN2NXX0ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS84ODhhMDQtNzdmNC00MTU5LTk4NmMtM2NlZjU5M2QxNmI0 LzEvWVU5V1pRV2F2SHZqUjE3NTUzcVhsN2NXX0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvYQZxSui BfsSCA+WRp957uM8n8y449R23c0cVgQWWvPNmaw8Dw77kelh4j7adGU3TbJVP389 kyakuj5FEJN+zPrkTd8K77Cap9Wtfvgyiy1zzxD6EQliOo8znVnGRXIT4R3L9Jvf OtDQvYkktPtbDLy2EyWUIKDVC9wiM2rrsVLZPRLCgHMrOjYMP0KfdXzQk1joUrDj XgipkF8laz4nvGwtLRDJ/YRospFDjmy+h9l3suAiRYlEX4EeozTRNiag2GUY7+5Y h3qIxZQwGPB2NqIKiNo5iWhtkN1lCxD+VkxXM2YMfAghXG127+WaWRQwKAUdyn4t lhZPD070ylW3VA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:12 2025 by rpki-client