This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft File: YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft (raw, json) Hash identifier: mHa6Sg83/mbktuWbMHm0jQuCyAK7iHAFrxzCH5gekWg= Subject key identifier: 37:B0:0A:12:37:85:F2:CD:F2:A1:FB:18:CA:44:5D:B6:F9:47:20:AD Authority key identifier: 61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98 Certificate issuer: /CN=6149cbba3e6629beaebfb69668678ada51744898 Certificate serial: 019AF50B3A6214860FB4D6E0E116837613E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft Manifest number: 148B Signing time: Sat 06 Dec 2025 19:02:24 +0000 Manifest this update: Sat 06 Dec 2025 19:02:24 +0000 Manifest next update: Sun 07 Dec 2025 19:02:24 +0000 Files and hashes: 1: 0IG70QW2hCrm52M5Cqyqdv7Bcb0.roa (hash: usdtXTbOrc0vwd46ZO8C/l/xue6j9QcbuHgY1Bupvvo=) 2: YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl (hash: VSus0VIvmbqkqrckTJIjXDBfCt1MRLHvWeNeCdE5r78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:3a:62:14:86:0f:b4:d6:e0:e1:16:83:76:13:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6149cbba3e6629beaebfb69668678ada51744898 Validity Not Before: Dec 6 19:02:24 2025 GMT Not After : Dec 7 19:02:24 2025 GMT Subject: CN=37b00a123785f2cdf2a1fb18ca445db6f94720ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:85:72:2e:02:62:30:f6:8c:ae:f9:a3:6e:de: c5:c2:70:0c:da:2b:b0:e7:31:81:73:f7:f9:6c:bd: 39:fb:48:2e:7d:0b:40:65:bf:67:a9:dd:8e:dc:b0: 08:f7:5b:10:0e:34:c5:fe:d5:00:67:32:81:5e:ad: 35:ef:e6:aa:f5:97:28:e9:d1:dc:16:39:03:d8:fb: b3:ea:c7:17:d3:e7:eb:0b:54:1d:61:8e:cb:6d:b7: 4c:65:31:bc:b1:f0:fe:db:3a:5c:51:22:cb:2f:4c: 0d:6f:ff:a4:b1:1d:0f:c8:9b:5a:ca:0c:83:6a:ba: cb:55:92:4b:f7:06:32:f2:23:e0:e3:a4:7d:38:0f: 05:80:25:7c:d0:9b:b4:b2:40:73:d9:ad:52:6d:10: 7e:13:0e:8e:10:a8:61:06:51:1a:57:cd:e0:95:60: 2b:1f:96:5b:1c:df:d9:ff:a3:ac:86:e7:2f:bc:a4: 60:03:ab:86:86:9a:d5:99:be:1d:8a:2a:48:2d:d7: 21:c8:91:e9:95:2b:6d:dd:5c:33:b2:8c:e6:1c:52: 6c:7c:c7:b4:0b:4c:ff:06:7c:ba:07:e9:37:3a:92: 5a:dd:af:b1:8e:09:c6:d2:53:03:5f:0d:54:32:a3: 09:2e:d4:c4:4b:5c:e0:e4:cb:8f:bc:6d:63:3b:06: 59:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B0:0A:12:37:85:F2:CD:F2:A1:FB:18:CA:44:5D:B6:F9:47:20:AD X509v3 Authority Key Identifier: keyid:61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:25:dc:6b:d2:d1:89:7e:b2:3d:48:dc:e7:6e:90:6f:f1:f0: 3b:44:c4:66:0c:d1:84:6a:09:5d:1d:4f:f4:87:9b:8e:d6:1c: 1c:0a:8d:75:c4:38:ee:af:1e:30:e2:87:95:d7:80:d1:03:a2: 10:b8:d5:a0:8a:25:40:91:d8:db:cd:d6:ec:45:69:90:93:11: 64:44:ac:28:18:c9:ca:33:a9:79:11:c1:88:cf:96:30:12:8d: 91:a2:92:45:7b:79:1a:2b:63:c5:f6:98:be:75:e5:6e:85:f5: 2d:bf:63:83:94:ee:54:80:a5:8c:c9:08:51:ee:b1:9e:7e:03: b4:6e:fc:fb:1c:1b:29:aa:2d:09:4f:2f:51:4f:68:e0:f5:cd: 52:19:e0:80:12:7c:17:a4:fe:f6:d1:60:b6:1e:3e:32:4b:cd: 76:db:b6:16:f2:d9:0c:07:3c:74:49:b8:e4:98:5b:7d:53:7d: 26:18:c5:7c:b5:26:da:4c:01:71:76:66:8a:9c:2d:60:79:bd: 95:b8:1e:a1:47:ee:d6:63:cb:b1:64:37:79:2e:58:5f:71:2c: 71:0d:c7:98:55:0b:d0:96:1c:37:f5:73:21:25:b5:93:6e:1f: 3f:53:1c:3b:f2:62:34:71:45:60:3a:a3:1d:7f:30:68:ce:23: b7:4c:ff:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CzpiFIYPtNbg4RaDdhPkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNDljYmJhM2U2NjI5YmVhZWJmYjY5NjY4Njc4YWRhNTE3 NDQ4OTgwHhcNMjUxMjA2MTkwMjI0WhcNMjUxMjA3MTkwMjI0WjAzMTEwLwYDVQQD EygzN2IwMGExMjM3ODVmMmNkZjJhMWZiMThjYTQ0NWRiNmY5NDcyMGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIVyLgJiMPaMrvmjbt7FwnAM2iuw 5zGBc/f5bL05+0gufQtAZb9nqd2O3LAI91sQDjTF/tUAZzKBXq017+aq9Zco6dHc FjkD2Puz6scX0+frC1QdYY7LbbdMZTG8sfD+2zpcUSLLL0wNb/+ksR0PyJtaygyD arrLVZJL9wYy8iPg46R9OA8FgCV80Ju0skBz2a1SbRB+Ew6OEKhhBlEaV83glWAr H5ZbHN/Z/6OshucvvKRgA6uGhprVmb4diipILdchyJHplStt3VwzsozmHFJsfMe0 C0z/Bny6B+k3OpJa3a+xjgnG0lMDXw1UMqMJLtTES1zg5MuPvG1jOwZZCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDewChI3hfLN8qH7GMpEXbb5RyCtMB8GA1UdIwQY MBaAFGFJy7o+Zim+rr+2lmhnitpRdEiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVVuTHVqNW1LYjZ1djdhV2FHZUsybEYwU0pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yM2Y1MzItZmU4Ni00MTk4LThjM2It NGQ0M2Y2NmFiNzMxLzEvWVVuTHVqNW1LYjZ1djdhV2FHZUsybEYwU0pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yM2Y1MzItZmU4Ni00MTk4LThjM2ItNGQ0M2Y2NmFiNzMx LzEvWVVuTHVqNW1LYjZ1djdhV2FHZUsybEYwU0pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyXca9LR iX6yPUjc526Qb/HwO0TEZgzRhGoJXR1P9IebjtYcHAqNdcQ47q8eMOKHldeA0QOi ELjVoIolQJHY283W7EVpkJMRZESsKBjJyjOpeRHBiM+WMBKNkaKSRXt5GitjxfaY vnXlboX1Lb9jg5TuVICljMkIUe6xnn4DtG78+xwbKaotCU8vUU9o4PXNUhnggBJ8 F6T+9tFgth4+MkvNdtu2FvLZDAc8dEm45JhbfVN9JhjFfLUm2kwBcXZmipwtYHm9 lbgeoUfu1mPLsWQ3eS5YX3EscQ3HmFUL0JYcN/VzISW1k24fP1McO/JiNHFFYDqj HX8waM4jt0z/Wg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:35:38 2025 by rpki-client