This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json) Hash identifier: mwSjkL893OfxsF2vOhGAn9j9AidQ2+uHTcYgjfeAowk= Subject key identifier: F1:76:28:45:CF:4D:5F:F7:CB:B8:C9:EA:B6:02:B7:E1:6D:C8:EC:4A Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25 Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25 Certificate serial: 019AF19A94F6BF2E9C9024352186652705B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft Manifest number: 168E Signing time: Sat 06 Dec 2025 03:00:30 +0000 Manifest this update: Sat 06 Dec 2025 03:00:30 +0000 Manifest next update: Sun 07 Dec 2025 03:00:30 +0000 Files and hashes: 1: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: x30aAycUsGwIl6dtYLX1MvmBAXfmNhK+SpR5ibviAIc=) 2: _wocLw8I_D0bWM_gydbHP3YBnWM.roa (hash: ipZCy+v8LxPOj8oL+HxTUZYzmJcHqr9rYLmV463tU+U=) 3: jP1IuFeYqRVYzU2ZxiYcMgwYBwo.roa (hash: 8tUnk9Rc0BoFNUvYX8+NZuDnDdmkv70Pafdtm7lPIM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:94:f6:bf:2e:9c:90:24:35:21:86:65:27:05:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61a14553cacf103274d433e6b268066e01541b25 Validity Not Before: Dec 6 03:00:30 2025 GMT Not After : Dec 7 03:00:30 2025 GMT Subject: CN=f1762845cf4d5ff7cbb8c9eab602b7e16dc8ec4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:42:a4:08:e7:a8:59:a5:60:e7:56:f3:21:a8: 97:b5:63:8e:90:12:f6:67:9f:af:3c:a0:c2:86:8f: 5e:25:e8:b4:18:7f:78:b6:01:03:27:7e:b1:b3:4f: ed:fa:b9:ca:9d:06:47:a9:b3:ad:4e:de:dc:ec:4a: 24:a1:1f:eb:40:b4:07:97:f9:91:d1:35:97:b9:07: 6b:89:ae:7b:cc:ee:e4:10:da:85:81:0d:02:fb:1b: 82:04:0a:6f:f4:f3:fb:37:16:b4:3b:27:1c:dd:5a: 8d:31:8a:4f:4f:99:8e:1f:50:f5:8d:f1:e3:1d:54: 91:95:47:28:c0:08:c8:9f:81:26:f3:54:f5:10:f7: 4e:81:5a:36:61:c2:c4:66:79:ea:8a:99:c1:41:70: 70:7d:31:19:ca:e7:b5:a3:56:6b:73:f9:ae:c7:84: 80:b6:b9:ef:7d:a5:db:3a:e5:45:1e:1c:87:4f:3b: e8:90:6e:58:80:f9:3e:29:4c:78:da:4d:43:f1:7a: 5c:9c:29:ce:03:2b:48:1e:82:70:77:66:1a:b9:6a: a8:61:8f:4d:2c:a4:0d:a7:b7:53:11:e2:89:31:c2: c3:78:55:a7:04:ec:13:67:bd:72:be:61:d7:e4:66: eb:77:af:94:e4:14:3e:e1:58:9f:51:9a:1b:a6:53: 78:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:76:28:45:CF:4D:5F:F7:CB:B8:C9:EA:B6:02:B7:E1:6D:C8:EC:4A X509v3 Authority Key Identifier: keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:e1:7b:39:b7:0a:e8:ce:60:39:f3:82:41:6e:fc:6f:a7:af: 05:94:15:ee:05:2f:13:fe:53:b1:1e:4c:d1:56:bd:4b:eb:33: a6:a8:34:49:a6:be:97:85:80:fe:b2:38:41:0d:03:fb:6d:ae: b2:96:08:a6:aa:56:c1:11:d3:cf:08:05:93:8e:1c:85:a8:dc: 79:5c:5c:91:c0:55:0a:16:d3:0e:2c:6a:4c:b3:ec:58:8d:21: a6:92:b4:24:3a:59:46:16:cc:9b:b9:04:75:48:82:08:0a:ee: 44:b3:be:39:f4:b4:07:d2:d5:1b:f3:68:8e:aa:b2:6c:59:d0: 83:14:2e:0e:d5:7e:b6:56:71:62:f8:8e:50:b8:88:54:17:da: 0b:9b:9e:c3:e6:5d:12:62:ef:ab:bd:0e:59:dd:6e:9f:7e:c4: 45:89:5b:08:ae:09:d9:8f:60:5c:1d:a2:6d:e5:a1:73:aa:28: 24:48:4e:c4:9f:3a:1c:33:f5:fe:ed:6a:a9:4e:38:6e:9c:59: db:a0:37:a7:2b:d7:41:1a:de:f5:e9:c5:00:dd:bb:f8:75:15: 67:8a:b9:56:4f:2e:8a:c5:27:42:a0:95:4e:e3:63:e2:4d:cf: d2:4a:80:31:0a:54:7a:4d:1b:82:f2:8e:0b:d9:7b:cb:d4:69: d9:7b:00:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpT2vy6ckCQ1IYZlJwWyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYTE0NTUzY2FjZjEwMzI3NGQ0MzNlNmIyNjgwNjZlMDE1 NDFiMjUwHhcNMjUxMjA2MDMwMDMwWhcNMjUxMjA3MDMwMDMwWjAzMTEwLwYDVQQD EyhmMTc2Mjg0NWNmNGQ1ZmY3Y2JiOGM5ZWFiNjAyYjdlMTZkYzhlYzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0KkCOeoWaVg51bzIaiXtWOOkBL2 Z5+vPKDCho9eJei0GH94tgEDJ36xs0/t+rnKnQZHqbOtTt7c7EokoR/rQLQHl/mR 0TWXuQdria57zO7kENqFgQ0C+xuCBApv9PP7Nxa0Oycc3VqNMYpPT5mOH1D1jfHj HVSRlUcowAjIn4Em81T1EPdOgVo2YcLEZnnqipnBQXBwfTEZyue1o1Zrc/mux4SA trnvfaXbOuVFHhyHTzvokG5YgPk+KUx42k1D8XpcnCnOAytIHoJwd2YauWqoYY9N LKQNp7dTEeKJMcLDeFWnBOwTZ71yvmHX5Gbrd6+U5BQ+4VifUZobplN47wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPF2KEXPTV/3y7jJ6rYCt+FtyOxKMB8GA1UdIwQY MBaAFGGhRVPKzxAydNQz5rJoBm4BVBslMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC84ZGQwNTEtZTJlNy00OTZjLWE5ZDAt ZmEyNjZiYjcyZjczLzEvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC84ZGQwNTEtZTJlNy00OTZjLWE5ZDAtZmEyNjZiYjcyZjcz LzEvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMeF7ObcK 6M5gOfOCQW78b6evBZQV7gUvE/5TsR5M0Va9S+szpqg0Saa+l4WA/rI4QQ0D+22u spYIpqpWwRHTzwgFk44chajceVxckcBVChbTDixqTLPsWI0hppK0JDpZRhbMm7kE dUiCCAruRLO+OfS0B9LVG/NojqqybFnQgxQuDtV+tlZxYviOULiIVBfaC5uew+Zd EmLvq70OWd1un37ERYlbCK4J2Y9gXB2ibeWhc6ooJEhOxJ86HDP1/u1qqU44bpxZ 26A3pyvXQRre9enFAN27+HUVZ4q5Vk8uisUnQqCVTuNj4k3P0kqAMQpUek0bgvKO C9l7y9Rp2XsAOw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:39:26 2025 by rpki-client