This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft File: YWeZlkXhW2Umig2TuxTE9RckRRs.mft (raw, json) Hash identifier: v9F+iogbSsFEk5kMHRiLaJ35ykJmEW8FkEEjc3VIF1U= Subject key identifier: FE:A2:18:C6:DE:14:D1:D6:5C:08:18:A9:AF:E6:4C:06:91:11:F6:70 Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B Certificate issuer: /CN=6167999645e15b65268a0d93bb14c4f51724451b Certificate serial: 019AF2097E7F4395878A888A1792E73FF663 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:39 +0000 Manifest this update: Sat 06 Dec 2025 05:01:39 +0000 Manifest next update: Sun 07 Dec 2025 05:01:39 +0000 Files and hashes: 1: WskaznLEMYwubtusiQFBluw68yw.roa (hash: uh2j/ttzj+A4Z4+a8ZWSmr/34qkzodFFdTgCIu7Q+QU=) 2: YWeZlkXhW2Umig2TuxTE9RckRRs.crl (hash: ljVz9PGECBvDn5gKCLZCwG7DPYZuu4N5UbT1SWKAZ6c=) 3: nW9JmwgiiGAVB_K1nO2cWSvmKyY.roa (hash: TXBtN/KFQ2Gy96mdP11tBg++FsQ+5qL+BiMyEx1qPZo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:7e:7f:43:95:87:8a:88:8a:17:92:e7:3f:f6:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b Validity Not Before: Dec 6 05:01:39 2025 GMT Not After : Dec 7 05:01:39 2025 GMT Subject: CN=fea218c6de14d1d65c0818a9afe64c069111f670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3c:57:f1:55:29:42:5f:72:29:6d:fa:9e:94: 75:87:1c:8d:93:0b:fb:fb:43:48:0c:23:74:0f:9d: 03:c6:1b:01:45:a9:3a:75:8d:5f:50:03:f0:9d:51: 4e:6a:eb:4b:92:b4:0f:a0:b0:e9:60:d2:f5:bf:6a: 1b:58:aa:08:6a:78:5d:3a:5d:8b:62:84:6b:5d:9f: 49:7a:d4:f1:59:0f:6b:64:a3:5a:1c:e9:e5:53:ba: 23:db:dc:44:82:87:35:42:3d:ea:47:69:48:bb:8a: c9:35:61:92:d8:bb:e7:23:4e:76:5a:33:33:c1:43: c2:6e:2b:4b:5e:fe:25:b9:94:f8:fc:95:8c:7e:0c: aa:e2:52:1c:04:e3:bc:51:3a:10:8c:12:ad:02:5d: 19:b6:57:3d:77:5f:ea:08:76:84:d4:00:0e:eb:02: de:7c:48:0a:61:5c:98:af:f3:fc:a2:f2:b7:45:9c: 6c:4e:85:c5:79:41:79:78:83:15:64:b6:c6:41:71: 7c:a2:77:4b:fa:4f:56:b5:a6:31:9d:0f:51:0f:a1: e8:fe:80:61:b6:56:38:ff:88:5a:d7:3a:9d:24:da: 9e:13:2b:62:ff:cf:8a:28:f2:8e:e3:49:f3:ae:4d: 39:e8:92:e1:3a:e2:56:cb:6d:51:34:c4:79:c0:2f: 95:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A2:18:C6:DE:14:D1:D6:5C:08:18:A9:AF:E6:4C:06:91:11:F6:70 X509v3 Authority Key Identifier: keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:cd:60:1b:13:0f:29:1c:e6:2f:e7:9f:94:aa:a8:9c:17:2e: 8a:ff:5c:b9:a8:df:64:d4:7a:8c:70:d2:51:51:ef:10:2c:45: 29:65:25:d3:7c:24:ee:43:e9:bd:2d:a6:ed:d2:7f:52:8f:b4: 6f:7d:b7:9f:5a:0b:c3:3a:d2:35:ef:06:94:61:5a:42:c1:a2: b2:2d:04:8e:84:d3:85:11:ab:8f:7a:8c:c4:e7:c2:27:ad:db: 9c:f8:4e:81:7c:64:2a:5c:e8:09:3f:25:4a:ad:40:4c:55:9b: cc:cd:c3:6c:51:4d:00:3f:57:5a:b2:3d:65:80:8b:79:10:eb: 5a:4b:04:3d:1f:8b:22:a4:49:d1:f5:30:70:a0:0e:78:9a:78: 40:25:36:55:d5:1e:50:cd:7b:8a:90:3a:30:ee:c0:23:fd:5c: 74:a6:94:b9:2e:1c:37:ad:d7:67:36:16:8c:b8:a1:f1:7f:09: d0:51:17:ae:87:25:50:1b:2e:77:e8:06:6f:fe:c1:34:93:47: 11:17:cc:cc:40:02:48:9a:41:2f:e1:08:00:04:68:cf:f9:62: 84:31:14:74:86:12:32:90:1b:42:4b:21:05:fb:1d:21:fc:87: e3:7a:76:6b:74:10:80:88:fd:a0:18:de:e0:b7:2c:7c:93:a7: 15:53:3d:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCX5/Q5WHioiKF5LnP/ZjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNjc5OTk2NDVlMTViNjUyNjhhMGQ5M2JiMTRjNGY1MTcy NDQ1MWIwHhcNMjUxMjA2MDUwMTM5WhcNMjUxMjA3MDUwMTM5WjAzMTEwLwYDVQQD EyhmZWEyMThjNmRlMTRkMWQ2NWMwODE4YTlhZmU2NGMwNjkxMTFmNjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjxX8VUpQl9yKW36npR1hxyNkwv7 +0NIDCN0D50DxhsBRak6dY1fUAPwnVFOautLkrQPoLDpYNL1v2obWKoIanhdOl2L YoRrXZ9JetTxWQ9rZKNaHOnlU7oj29xEgoc1Qj3qR2lIu4rJNWGS2LvnI052WjMz wUPCbitLXv4luZT4/JWMfgyq4lIcBOO8UToQjBKtAl0Ztlc9d1/qCHaE1AAO6wLe fEgKYVyYr/P8ovK3RZxsToXFeUF5eIMVZLbGQXF8ondL+k9WtaYxnQ9RD6Ho/oBh tlY4/4ha1zqdJNqeEyti/8+KKPKO40nzrk056JLhOuJWy21RNMR5wC+VPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6iGMbeFNHWXAgYqa/mTAaREfZwMB8GA1UdIwQY MBaAFGFnmZZF4VtlJooNk7sUxPUXJEUbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVdlWmxrWGhXMlVtaWcyVHV4VEU5UmNrUlJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kMzFhMjUtMjUwNy00NzFkLWFkYzct ODgwN2Y5NWFlNzVkLzEvWVdlWmxrWGhXMlVtaWcyVHV4VEU5UmNrUlJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9kMzFhMjUtMjUwNy00NzFkLWFkYzctODgwN2Y5NWFlNzVk LzEvWVdlWmxrWGhXMlVtaWcyVHV4VEU5UmNrUlJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgc1gGxMP KRzmL+eflKqonBcuiv9cuajfZNR6jHDSUVHvECxFKWUl03wk7kPpvS2m7dJ/Uo+0 b323n1oLwzrSNe8GlGFaQsGisi0EjoTThRGrj3qMxOfCJ63bnPhOgXxkKlzoCT8l Sq1ATFWbzM3DbFFNAD9XWrI9ZYCLeRDrWksEPR+LIqRJ0fUwcKAOeJp4QCU2VdUe UM17ipA6MO7AI/1cdKaUuS4cN63XZzYWjLih8X8J0FEXroclUBsud+gGb/7BNJNH ERfMzEACSJpBL+EIAARoz/lihDEUdIYSMpAbQkshBfsdIfyH43p2a3QQgIj9oBje 4LcsfJOnFVM9nw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:59 2025 by rpki-client