This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft File: YXfFgJJlmeg6tzW6LgT8EId4xEE.mft (raw, json) Hash identifier: OXjtmAbLCFf2hDLw1XBhYmq6ayPrWsBZzugJ0yE7Elw= Subject key identifier: 13:81:6D:74:DB:B3:81:94:97:7F:BB:D7:62:41:42:11:17:F9:0C:8B Authority key identifier: 61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41 Certificate issuer: /CN=6177c580926599e83ab735ba2e04fc108778c441 Certificate serial: 019B34C5C7604CBBE725691A2B2DF6AEA4F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft Manifest number: 0EDB Signing time: Fri 19 Dec 2025 04:02:15 +0000 Manifest this update: Fri 19 Dec 2025 04:02:15 +0000 Manifest next update: Sat 20 Dec 2025 04:02:15 +0000 Files and hashes: 1: Gu9ez5zlQGgsXPCgSAa011q3NCY.roa (hash: XMVaMgOJ4WWG4Lp4VxV89GlWKPKFR9zZG9BiqqxMKyA=) 2: YXfFgJJlmeg6tzW6LgT8EId4xEE.crl (hash: X3uawckm5AWrh++q2f0N/a7/2MG8B8ZEdPTRK1jaBLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:c7:60:4c:bb:e7:25:69:1a:2b:2d:f6:ae:a4:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6177c580926599e83ab735ba2e04fc108778c441 Validity Not Before: Dec 19 04:02:15 2025 GMT Not After : Dec 20 04:02:15 2025 GMT Subject: CN=13816d74dbb38194977fbbd76241421117f90c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:da:08:2f:0a:04:15:e7:50:a0:5c:4c:b7:51: 73:c1:70:ac:be:6a:e7:8d:dc:9a:72:d1:50:fb:24: 84:ec:d8:3a:27:0e:10:fa:28:27:c5:b4:85:7e:f9: e2:7d:51:88:5a:aa:b9:8c:72:db:7d:f8:62:6e:93: 1a:85:bd:d2:6a:1e:52:5b:9b:74:9d:ef:60:3a:62: ec:a6:44:4b:aa:90:0e:a8:98:8d:a2:8b:6a:a1:4e: 05:bd:4b:08:c2:4e:3e:8a:79:de:8b:e5:87:4d:79: 0b:2a:2c:73:0d:29:a1:0c:dd:d3:3e:21:e3:e2:64: 90:50:83:21:38:55:27:3e:c4:9f:19:06:6f:cc:91: dd:7c:40:40:92:86:aa:15:77:3b:01:17:90:8d:03: b1:48:5f:11:7a:36:17:85:09:8a:c8:e3:5a:9f:42: 44:8f:47:d4:a1:28:a5:86:48:99:3e:4f:09:42:ae: 08:24:b2:0f:3f:09:b4:1e:d8:67:a0:24:15:25:8f: 66:ec:30:f7:9b:99:9d:0b:d0:e4:b1:b3:50:ad:d5: 39:62:c0:ae:98:08:c4:64:0e:0a:de:32:7d:32:28: 67:83:b5:fc:c6:d0:68:5b:f9:c8:fa:d4:44:bb:a7: 9b:a3:f7:e5:01:cf:f2:01:d3:25:a7:1d:2e:47:13: cc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:81:6D:74:DB:B3:81:94:97:7F:BB:D7:62:41:42:11:17:F9:0C:8B X509v3 Authority Key Identifier: keyid:61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:21:57:12:2d:d4:ef:8d:26:5b:c0:94:be:b5:5b:e5:0e:66: c3:e3:70:85:03:6d:67:a0:89:7d:6e:b8:95:09:be:ba:ef:66: d8:6a:67:a0:fc:a9:52:97:4e:33:9c:ac:eb:e8:e4:75:f7:17: 84:28:91:3b:50:a3:5d:9c:de:99:2f:6c:82:4e:8b:f0:e4:42: 41:da:57:e7:4c:d0:9c:7f:57:ab:9a:bf:c6:4b:62:42:fb:9d: 62:81:f7:81:e2:75:1a:f4:6f:ac:fb:4b:c7:37:73:8c:61:0f: 33:8b:43:31:0b:66:0f:72:c4:19:f0:ef:4b:78:43:94:2f:61: 76:3a:81:b7:24:fe:46:63:56:b4:37:cc:23:55:a9:1f:c7:1a: b5:fd:5f:30:4e:d0:07:79:33:9f:e9:c6:3a:8d:95:21:ca:96: 7f:ec:08:bf:3c:f4:aa:bd:11:93:7e:41:f6:ce:c1:55:47:7e: fa:2e:2d:ef:b5:d8:d8:b4:57:c2:71:95:b9:34:be:fe:a8:18: 1e:69:8f:af:b1:a7:9d:b4:0d:09:25:88:75:d3:db:cd:5a:2f: 32:19:9d:e6:62:22:d3:7c:bd:b5:19:79:2d:5c:f7:17:5c:f9: a9:14:d9:5c:16:cb:d9:53:16:e7:8e:69:c2:24:f2:df:d0:e7: 1e:e5:61:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xcdgTLvnJWkaKy32rqT2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNzdjNTgwOTI2NTk5ZTgzYWI3MzViYTJlMDRmYzEwODc3 OGM0NDEwHhcNMjUxMjE5MDQwMjE1WhcNMjUxMjIwMDQwMjE1WjAzMTEwLwYDVQQD EygxMzgxNmQ3NGRiYjM4MTk0OTc3ZmJiZDc2MjQxNDIxMTE3ZjkwYzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtoILwoEFedQoFxMt1FzwXCsvmrn jdyactFQ+ySE7Ng6Jw4Q+ignxbSFfvnifVGIWqq5jHLbffhibpMahb3Sah5SW5t0 ne9gOmLspkRLqpAOqJiNootqoU4FvUsIwk4+innei+WHTXkLKixzDSmhDN3TPiHj 4mSQUIMhOFUnPsSfGQZvzJHdfEBAkoaqFXc7AReQjQOxSF8RejYXhQmKyONan0JE j0fUoSilhkiZPk8JQq4IJLIPPwm0HthnoCQVJY9m7DD3m5mdC9DksbNQrdU5YsCu mAjEZA4K3jJ9Mihng7X8xtBoW/nI+tREu6ebo/flAc/yAdMlpx0uRxPMbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOBbXTbs4GUl3+712JBQhEX+QyLMB8GA1UdIwQY MBaAFGF3xYCSZZnoOrc1ui4E/BCHeMRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVhmRmdKSmxtZWc2dHpXNkxnVDhFSWQ0eEVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yOWJmN2ItNDc0NS00NDIzLWE4ZmEt YTMyZTJlZDBjZmQzLzEvWVhmRmdKSmxtZWc2dHpXNkxnVDhFSWQ0eEVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8yOWJmN2ItNDc0NS00NDIzLWE4ZmEtYTMyZTJlZDBjZmQz LzEvWVhmRmdKSmxtZWc2dHpXNkxnVDhFSWQ0eEVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyFXEi3U 740mW8CUvrVb5Q5mw+NwhQNtZ6CJfW64lQm+uu9m2GpnoPypUpdOM5ys6+jkdfcX hCiRO1CjXZzemS9sgk6L8ORCQdpX50zQnH9Xq5q/xktiQvudYoH3geJ1GvRvrPtL xzdzjGEPM4tDMQtmD3LEGfDvS3hDlC9hdjqBtyT+RmNWtDfMI1WpH8catf1fME7Q B3kzn+nGOo2VIcqWf+wIvzz0qr0Rk35B9s7BVUd++i4t77XY2LRXwnGVuTS+/qgY HmmPr7GnnbQNCSWIddPbzVovMhmd5mIi03y9tRl5LVz3F1z5qRTZXBbL2VMW545p wiTy39DnHuVh9Q== -----END CERTIFICATE-----Generated at Fri Dec 19 12:01:28 2025 by rpki-client