This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft File: Yf4ur6ZKzq8fz8-8phUKei01vko.mft (raw, json) Hash identifier: +oIW/qNtaKINl6fXIlGc/u1QJdAa3i1koncNr4TkIV8= Subject key identifier: DF:BD:0C:03:BD:E1:83:A2:8D:FB:28:DE:5D:67:E5:23:1D:44:18:E8 Authority key identifier: 61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A Certificate issuer: /CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a Certificate serial: 019AF38954A7DD3794DAE35C6BC7E488DBC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 12:00:54 +0000 Manifest this update: Sat 06 Dec 2025 12:00:54 +0000 Manifest next update: Sun 07 Dec 2025 12:00:54 +0000 Files and hashes: 1: Yf4ur6ZKzq8fz8-8phUKei01vko.crl (hash: h2qFTM/0X8D4H5+/GOftapkIh+1YFx7C4vSOgGv8nXU=) 2: wsNRODSlq_nh1GDEKdmia3PTMko.roa (hash: oJgNuBgkHwRy1QBN/xCPFqgneU9FqbAO/DZOxkV4624=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:54:a7:dd:37:94:da:e3:5c:6b:c7:e4:88:db:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a Validity Not Before: Dec 6 12:00:54 2025 GMT Not After : Dec 7 12:00:54 2025 GMT Subject: CN=dfbd0c03bde183a28dfb28de5d67e5231d4418e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:60:4b:50:aa:da:74:78:52:01:4c:49:f6:1d: 09:f3:c1:15:4c:0f:d3:9b:a4:76:73:bb:0c:9e:be: 34:5f:b4:9d:66:2b:85:f0:4a:fc:76:b5:c5:c9:7a: e8:d5:70:b3:48:92:90:1b:24:72:c8:b9:1e:35:cb: ff:a6:3a:46:72:5f:5f:9f:25:f7:3e:3d:30:d7:13: ed:76:8d:85:6a:37:8e:59:86:21:58:c4:91:63:b5: e7:1b:03:e4:9f:92:fe:0a:49:95:85:07:40:f0:48: cf:c6:8b:f3:3c:d7:c8:c8:a3:1b:ac:96:18:72:24: 0d:80:f8:2c:98:00:2c:43:9c:f7:b5:6a:ab:4a:05: 28:d0:61:9d:0e:81:16:27:fb:e9:aa:7a:40:a8:c3: 18:cd:d4:7f:69:f6:2b:d2:d1:ae:ad:cd:fe:60:15: 14:59:ca:c4:86:1b:9d:39:f0:ad:e1:e6:60:30:e6: 02:50:f2:c9:8a:5d:9a:57:a2:04:48:ed:78:64:8a: 64:47:f5:73:1b:87:b3:da:bd:b5:61:92:50:5b:0b: 71:94:57:4b:f0:7d:fc:c1:68:c5:1d:ef:13:d7:cb: 17:2f:bd:68:08:f6:e4:08:02:19:86:af:a8:b9:0c: 82:37:91:e7:cf:94:24:b7:81:95:a4:73:3a:79:68: 13:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BD:0C:03:BD:E1:83:A2:8D:FB:28:DE:5D:67:E5:23:1D:44:18:E8 X509v3 Authority Key Identifier: keyid:61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:2c:85:4f:4f:10:0a:b8:14:70:61:e5:8f:bd:f1:51:ae:d8: 8b:b2:0c:ae:9c:a0:68:7a:8d:b6:b2:cd:f7:b3:dc:f0:27:49: 63:9d:2e:da:1c:cb:ce:9e:f2:03:12:be:6b:c0:eb:2c:e8:d9: b6:8a:0a:d7:f1:61:38:85:d2:ea:74:32:45:79:9a:9c:2d:08: 03:e1:c3:73:3c:59:d6:e4:81:17:c7:1c:eb:56:7e:d8:a0:e6: 3e:5e:ad:30:7e:e3:d9:24:1a:48:43:de:9f:6d:2e:af:62:9a: 0f:84:5e:d7:82:37:96:aa:d4:2b:0b:25:14:b4:89:ff:44:22: b6:ce:e3:ed:83:70:ca:6a:d8:7b:10:bd:5c:eb:bf:2e:d1:f0: ec:d9:16:c8:03:ca:ee:7d:5c:57:7f:39:17:19:0d:a5:d3:03: d1:fa:ec:c6:2d:00:5e:1f:17:07:7a:2a:cf:b1:b7:14:10:de: cd:b5:57:09:b3:22:32:1c:53:6a:18:e4:6d:52:b8:87:cc:35: f4:fa:ee:5f:3f:ba:f3:a9:8f:ca:63:c6:d5:9e:e2:1c:67:d4: c5:34:59:f0:50:25:3e:59:6e:32:2f:0f:16:8a:0c:11:e9:f4: 06:02:3d:67:2f:8e:e8:c4:c6:aa:c7:c3:e9:ba:7d:fa:d2:b2: e6:65:da:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziVSn3TeU2uNca8fkiNvIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxZmUyZWFmYTY0YWNlYWYxZmNmY2ZiY2E2MTUwYTdhMmQz NWJlNGEwHhcNMjUxMjA2MTIwMDU0WhcNMjUxMjA3MTIwMDU0WjAzMTEwLwYDVQQD EyhkZmJkMGMwM2JkZTE4M2EyOGRmYjI4ZGU1ZDY3ZTUyMzFkNDQxOGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2BLUKradHhSAUxJ9h0J88EVTA/T m6R2c7sMnr40X7SdZiuF8Er8drXFyXro1XCzSJKQGyRyyLkeNcv/pjpGcl9fnyX3 Pj0w1xPtdo2FajeOWYYhWMSRY7XnGwPkn5L+CkmVhQdA8EjPxovzPNfIyKMbrJYY ciQNgPgsmAAsQ5z3tWqrSgUo0GGdDoEWJ/vpqnpAqMMYzdR/afYr0tGurc3+YBUU WcrEhhudOfCt4eZgMOYCUPLJil2aV6IESO14ZIpkR/VzG4ez2r21YZJQWwtxlFdL 8H38wWjFHe8T18sXL71oCPbkCAIZhq+ouQyCN5Hnz5Qkt4GVpHM6eWgTBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+9DAO94YOijfso3l1n5SMdRBjoMB8GA1UdIwQY MBaAFGH+Lq+mSs6vH8/PvKYVCnotNb5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8yMWNhNDMtZDNlMS00ZWMwLTlhOWQt MzlhZmQ5MzE2NTk4LzEvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8yMWNhNDMtZDNlMS00ZWMwLTlhOWQtMzlhZmQ5MzE2NTk4 LzEvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlyyFT08Q CrgUcGHlj73xUa7Yi7IMrpygaHqNtrLN97Pc8CdJY50u2hzLzp7yAxK+a8DrLOjZ tooK1/FhOIXS6nQyRXmanC0IA+HDczxZ1uSBF8cc61Z+2KDmPl6tMH7j2SQaSEPe n20ur2KaD4Re14I3lqrUKwslFLSJ/0Qits7j7YNwymrYexC9XOu/LtHw7NkWyAPK 7n1cV385FxkNpdMD0frsxi0AXh8XB3oqz7G3FBDezbVXCbMiMhxTahjkbVK4h8w1 9PruXz+686mPymPG1Z7iHGfUxTRZ8FAlPlluMi8PFooMEen0BgI9Zy+O6MTGqsfD 6bp9+tKy5mXaug== -----END CERTIFICATE-----Generated at Sat Dec 6 22:45:03 2025 by rpki-client