This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft File: YRuftFY550kvKzYx9kD2q5r7YpA.mft (raw, json) Hash identifier: izQOpzOR9HU4Vqoe3GdKsSGiOHtwKGKPEBDdamkuX9U= Subject key identifier: 05:9B:A4:CB:74:61:9A:1C:33:08:D1:39:D2:1A:2C:E7:56:B5:F4:84 Authority key identifier: 61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90 Certificate issuer: /CN=611b9fb45639e7492f2b3631f640f6ab9afb6290 Certificate serial: 019AF0BF95D0E86AB316B09ED286F7F77BFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft Manifest number: 0203 Signing time: Fri 05 Dec 2025 23:01:18 +0000 Manifest this update: Fri 05 Dec 2025 23:01:18 +0000 Manifest next update: Sat 06 Dec 2025 23:01:18 +0000 Files and hashes: 1: 78p7eZsSQ8zonV0TNMaLaLjK96I.roa (hash: +QO+TKXARPaWdOJ8baQ83Q+fqGFHJ3lndWpB+9vwuT8=) 2: Aqz_ehMSCGzxFOJ8FvGbcOAmgSU.roa (hash: s3KelrVfC9+y7bPujzwFv1EKOWZnruzzVkasMV5xnU4=) 3: Dz7fUAyA3Q6aEL4NtI6fDewBO-Q.roa (hash: xVI7un3YDJ74QBZKCGBUFc9S59Re+F08cwvGlwnT43k=) 4: LuLOUOJIGHxq7ykgB21inUS-57w.roa (hash: ab5+eNLQ6Vj2WxgXbW4Ku3+IuOco/UzZZHvYaaD6UKw=) 5: YRuftFY550kvKzYx9kD2q5r7YpA.crl (hash: AozmExefeCF5njjqNLluxSclPJVgQobyYrCQquQNG6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:95:d0:e8:6a:b3:16:b0:9e:d2:86:f7:f7:7b:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=611b9fb45639e7492f2b3631f640f6ab9afb6290 Validity Not Before: Dec 5 23:01:18 2025 GMT Not After : Dec 6 23:01:18 2025 GMT Subject: CN=059ba4cb74619a1c3308d139d21a2ce756b5f484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:10:a6:b9:7a:fa:15:8d:a5:72:2a:13:6a:c0: a9:8d:6a:0b:9a:38:72:ae:f8:dc:02:b1:21:b3:46: d4:c7:54:b6:89:84:04:a7:2c:7a:fd:c1:d2:89:8a: 25:ea:a5:9b:6d:2a:4c:43:a3:36:35:eb:ac:bc:25: 46:a0:d8:9e:68:b8:06:ff:09:b9:5c:22:bf:2a:4e: 7e:08:6f:5f:ab:56:e2:72:93:0f:39:0a:fe:8e:ec: bf:5d:c4:c1:cb:f8:e7:25:7a:64:bd:68:93:17:1a: aa:ed:f9:37:a3:26:9d:8d:9e:1b:bd:af:d3:09:78: 46:1d:b6:a2:fc:8c:31:6c:b5:cf:18:0e:fc:53:b3: fb:f3:ea:aa:28:e5:4b:61:89:22:9d:c3:0c:52:c5: 47:0f:2d:be:da:86:cd:f9:3d:88:67:38:b2:33:a1: d8:84:fc:77:bf:a7:11:11:b0:6a:bc:59:48:bd:ad: 96:91:ff:8c:5c:4f:6d:1f:54:dd:d8:79:f0:f8:af: a1:a0:23:4a:81:a4:66:49:b6:76:9d:ee:66:f8:03: bd:17:d7:41:17:6b:52:2c:1d:38:c6:0c:76:6b:ce: c9:c0:99:38:2f:20:fa:41:e4:6f:22:ee:65:78:ab: 82:13:47:03:6a:de:b8:f8:23:6b:fb:f1:fb:fe:f9: 12:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9B:A4:CB:74:61:9A:1C:33:08:D1:39:D2:1A:2C:E7:56:B5:F4:84 X509v3 Authority Key Identifier: keyid:61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:28:21:a1:e8:37:b1:40:20:24:d8:81:b0:55:9c:3b:f4:fc: 51:25:fc:02:5c:e6:d2:ea:74:4d:21:7b:9c:34:23:3b:62:50: 4f:c0:10:72:f6:35:1d:1d:ed:4c:83:8f:35:02:d3:31:45:bb: 8e:83:01:f7:2e:bc:0b:65:69:c5:aa:b1:f3:4c:f1:9d:04:af: 88:f9:ee:a5:24:19:52:84:5a:5f:ec:6b:c2:40:73:3d:e2:6f: 6b:8f:42:ab:2b:e9:85:81:e0:3e:e6:2a:88:f0:0a:31:ce:ef: 9a:4b:ee:53:7b:87:95:ce:5c:85:dc:2f:33:e6:ad:97:9b:29: 4b:b1:a2:f6:ab:47:a1:ad:a2:00:d4:10:b7:25:f0:9b:b8:37: af:f8:6f:4a:92:be:7d:46:47:ca:04:13:4c:03:56:0a:5e:a9: 46:36:1d:76:cc:ed:26:f2:a4:33:8a:4d:fc:18:2b:d7:2c:e3: b3:fa:31:87:7f:df:43:1e:fa:d8:50:ea:ef:16:c6:44:a7:71: d7:c0:d8:24:36:98:3d:3f:30:09:96:17:69:02:b6:02:e3:fe: f7:9d:2a:47:4f:9b:8e:0e:f6:12:18:b3:35:5d:11:d9:b3:6f: 98:97:43:a0:ec:08:5f:2d:82:62:82:3a:9b:74:26:91:7f:e8: 11:69:f5:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5XQ6GqzFrCe0ob393v6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMWI5ZmI0NTYzOWU3NDkyZjJiMzYzMWY2NDBmNmFiOWFm YjYyOTAwHhcNMjUxMjA1MjMwMTE4WhcNMjUxMjA2MjMwMTE4WjAzMTEwLwYDVQQD EygwNTliYTRjYjc0NjE5YTFjMzMwOGQxMzlkMjFhMmNlNzU2YjVmNDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BCmuXr6FY2lcioTasCpjWoLmjhy rvjcArEhs0bUx1S2iYQEpyx6/cHSiYol6qWbbSpMQ6M2NeusvCVGoNieaLgG/wm5 XCK/Kk5+CG9fq1bicpMPOQr+juy/XcTBy/jnJXpkvWiTFxqq7fk3oyadjZ4bva/T CXhGHbai/IwxbLXPGA78U7P78+qqKOVLYYkincMMUsVHDy2+2obN+T2IZziyM6HY hPx3v6cREbBqvFlIva2Wkf+MXE9tH1Td2Hnw+K+hoCNKgaRmSbZ2ne5m+AO9F9dB F2tSLB04xgx2a87JwJk4LyD6QeRvIu5leKuCE0cDat64+CNr+/H7/vkSBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWbpMt0YZocMwjROdIaLOdWtfSEMB8GA1UdIwQY MBaAFGEbn7RWOedJLys2MfZA9qua+2KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVJ1ZnRGWTU1MGt2S3pZeDlrRDJxNXI3WXBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi84NDgyZDItNzIzMy00MTc3LTk5MmYt N2Q3NWUyYjFhN2I5LzEvWVJ1ZnRGWTU1MGt2S3pZeDlrRDJxNXI3WXBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi84NDgyZDItNzIzMy00MTc3LTk5MmYtN2Q3NWUyYjFhN2I5 LzEvWVJ1ZnRGWTU1MGt2S3pZeDlrRDJxNXI3WXBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSghoeg3 sUAgJNiBsFWcO/T8USX8Alzm0up0TSF7nDQjO2JQT8AQcvY1HR3tTIOPNQLTMUW7 joMB9y68C2Vpxaqx80zxnQSviPnupSQZUoRaX+xrwkBzPeJva49CqyvphYHgPuYq iPAKMc7vmkvuU3uHlc5chdwvM+atl5spS7Gi9qtHoa2iANQQtyXwm7g3r/hvSpK+ fUZHygQTTANWCl6pRjYddsztJvKkM4pN/Bgr1yzjs/oxh3/fQx762FDq7xbGRKdx 18DYJDaYPT8wCZYXaQK2AuP+950qR0+bjg72EhizNV0R2bNvmJdDoOwIXy2CYoI6 m3QmkX/oEWn1bQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:32 2025 by rpki-client