This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft File: YaXSF3WehhaW_HftmqY7lO2zvn0.mft (raw, json) Hash identifier: ualY4u66GImaI+fsyxgU+j8P7CFn2/zPRrjSZhrv9dU= Subject key identifier: B2:9A:B2:3C:8E:F3:66:D4:38:19:D2:D5:E2:F0:0E:C7:1C:3E:2D:C6 Authority key identifier: 61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D Certificate issuer: /CN=61a5d217759e861696fc77ed9aa63b94edb3be7d Certificate serial: 019AF12D461DD375F0D1CAD05D850FF6BA2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft Manifest number: 16F1 Signing time: Sat 06 Dec 2025 01:01:07 +0000 Manifest this update: Sat 06 Dec 2025 01:01:07 +0000 Manifest next update: Sun 07 Dec 2025 01:01:07 +0000 Files and hashes: 1: 5fuh3MDvvFTdM9YPWplIlmW8ZkA.roa (hash: Wdi/0+eUolZTOBljIE3hewam0WUu332lXIc8cs32Fgk=) 2: 925S4SchOi83vL3V68Y_AUuJSD8.roa (hash: 6EULq2ShinRvQFwY+uALe+ivLl2vWfr/F3fyELn3cug=) 3: PGmGsgYp4SpOgDQPzfkm2Kp84ms.roa (hash: QvQzg0nCw1e7QpH5gXcvQpoprtCI6UOH6zwCxDuFkv0=) 4: YaXSF3WehhaW_HftmqY7lO2zvn0.crl (hash: YAqWonIHFZQOfeAddMdgeDGFDWU0OicdBPduMyePqlk=) 5: z3s2kSvc4H2ywLCnLljgXCeMKHc.roa (hash: pgMrP+tE9sQxVvQRywnzdq3UOn28MH01XXGUWXVHask=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:46:1d:d3:75:f0:d1:ca:d0:5d:85:0f:f6:ba:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61a5d217759e861696fc77ed9aa63b94edb3be7d Validity Not Before: Dec 6 01:01:07 2025 GMT Not After : Dec 7 01:01:07 2025 GMT Subject: CN=b29ab23c8ef366d43819d2d5e2f00ec71c3e2dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0c:3c:dd:7d:89:58:b0:fe:ba:27:59:22:54: da:a9:cb:4e:2d:d4:0c:2d:fb:17:82:10:a7:47:52: ef:38:03:fa:72:52:49:9e:16:2e:a3:3a:d5:46:3a: 0a:0b:d2:82:81:67:fe:c3:87:e3:32:e2:03:7e:94: 1c:c6:c1:b2:bd:e9:f9:1d:a7:41:18:8a:88:b9:91: 08:8b:50:bd:5c:89:70:e5:f5:a2:9a:af:9a:c6:e5: db:4c:19:4f:2e:a7:a7:30:c2:72:ed:d4:80:2f:af: 90:1b:52:26:d2:d6:7e:f5:bb:10:27:d2:b3:64:4d: 4d:01:4f:f0:d2:8b:e2:17:fd:6c:52:e0:62:26:4f: f3:e6:ff:a0:05:20:38:8e:ef:44:48:2a:35:06:3c: 3d:33:95:16:35:da:c1:a4:55:83:31:9d:5c:21:76: 6b:76:22:ba:62:68:37:0f:c8:55:a0:1b:5c:59:ce: 4b:00:29:2a:0f:cb:90:93:98:5f:aa:f4:d4:5f:e8: 4d:25:8d:e5:ea:cb:ff:d1:98:cf:a2:a4:c1:1b:22: 3a:e5:cb:ea:b9:61:78:00:8f:cd:d7:c3:5d:28:f8: 11:d2:20:9c:e5:54:70:4d:9b:8e:a0:da:7e:5b:8a: bd:e1:bf:c7:f5:6f:d7:05:e5:dc:2b:0b:3e:98:50: 0a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:9A:B2:3C:8E:F3:66:D4:38:19:D2:D5:E2:F0:0E:C7:1C:3E:2D:C6 X509v3 Authority Key Identifier: keyid:61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f0:2c:c3:36:80:f3:3b:b0:ce:c0:93:97:85:b1:48:d3:aa: 03:68:3b:d1:d3:e7:c4:73:e7:03:7f:d8:0c:72:d8:9d:f5:08: b7:c3:f2:ac:2c:b1:b5:97:c2:18:1a:69:ee:f1:15:83:ac:db: 07:f2:ae:ab:ac:e3:e3:8f:97:35:a4:3a:8f:c8:9a:6d:ca:ae: d0:c1:97:07:c0:59:5a:cf:71:90:93:b5:b5:ea:94:9e:83:81: 06:5f:6f:cb:ff:4c:f0:6c:01:14:42:fd:1a:ac:2e:d4:19:00: 8f:2a:1e:a6:46:59:09:ce:9b:b1:d8:37:c8:40:2f:18:2a:88: 88:02:72:b9:44:84:a7:7b:bc:b3:7d:ce:22:a2:bc:c3:da:fb: 84:01:f9:01:1f:de:86:97:b9:77:e2:6d:7d:85:b8:57:83:a9: b9:01:76:a0:2d:2a:16:41:fd:88:f7:18:8c:fc:49:38:39:eb: 3b:be:35:e4:21:5e:83:bb:63:a8:95:c8:7f:d9:e2:c7:9c:fa: f3:bc:fb:fd:5b:c5:50:2c:4a:4e:6e:8c:a1:a2:2d:79:ec:6e: f9:00:3f:ef:b0:e8:f8:6a:5b:c9:e8:cc:b9:96:58:90:9d:78: 59:c7:7a:d8:5d:2f:d1:63:27:db:09:5a:cc:8b:f1:5c:44:9b: a5:ba:d3:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLUYd03Xw0crQXYUP9roqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYTVkMjE3NzU5ZTg2MTY5NmZjNzdlZDlhYTYzYjk0ZWRi M2JlN2QwHhcNMjUxMjA2MDEwMTA3WhcNMjUxMjA3MDEwMTA3WjAzMTEwLwYDVQQD EyhiMjlhYjIzYzhlZjM2NmQ0MzgxOWQyZDVlMmYwMGVjNzFjM2UyZGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Qw83X2JWLD+uidZIlTaqctOLdQM LfsXghCnR1LvOAP6clJJnhYuozrVRjoKC9KCgWf+w4fjMuIDfpQcxsGyven5HadB GIqIuZEIi1C9XIlw5fWimq+axuXbTBlPLqenMMJy7dSAL6+QG1Im0tZ+9bsQJ9Kz ZE1NAU/w0oviF/1sUuBiJk/z5v+gBSA4ju9ESCo1Bjw9M5UWNdrBpFWDMZ1cIXZr diK6Ymg3D8hVoBtcWc5LACkqD8uQk5hfqvTUX+hNJY3l6sv/0ZjPoqTBGyI65cvq uWF4AI/N18NdKPgR0iCc5VRwTZuOoNp+W4q94b/H9W/XBeXcKws+mFAKwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKasjyO82bUOBnS1eLwDsccPi3GMB8GA1UdIwQY MBaAFGGl0hd1noYWlvx37ZqmO5Tts759MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWFYU0YzV2VoaGFXX0hmdG1xWTdsTzJ6dm4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83MmY2Y2YtOWJkNC00NjdhLWE5MmEt NWE2NGE1ZmM4YTY0LzEvWWFYU0YzV2VoaGFXX0hmdG1xWTdsTzJ6dm4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS83MmY2Y2YtOWJkNC00NjdhLWE5MmEtNWE2NGE1ZmM4YTY0 LzEvWWFYU0YzV2VoaGFXX0hmdG1xWTdsTzJ6dm4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvAswzaA 8zuwzsCTl4WxSNOqA2g70dPnxHPnA3/YDHLYnfUIt8PyrCyxtZfCGBpp7vEVg6zb B/Kuq6zj44+XNaQ6j8iabcqu0MGXB8BZWs9xkJO1teqUnoOBBl9vy/9M8GwBFEL9 Gqwu1BkAjyoepkZZCc6bsdg3yEAvGCqIiAJyuUSEp3u8s33OIqK8w9r7hAH5AR/e hpe5d+JtfYW4V4OpuQF2oC0qFkH9iPcYjPxJODnrO7415CFeg7tjqJXIf9nix5z6 87z7/VvFUCxKTm6MoaIteexu+QA/77Do+GpbyejMuZZYkJ14Wcd62F0v0WMn2wla zIvxXESbpbrT2g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:43 2025 by rpki-client