This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft File: YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft (raw, json) Hash identifier: temb7Q6ZWaK0DQ/rS0VWNf281o6AdxM53Sl5yfb8hcI= Subject key identifier: 39:18:3C:74:BD:60:D8:92:E0:01:3A:67:DB:10:17:73:0C:A5:AB:59 Authority key identifier: 61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5 Certificate issuer: /CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5 Certificate serial: 019B3CECB8A57C21E73523AF6330180D715E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft Manifest number: 0F22 Signing time: Sat 20 Dec 2025 18:01:45 +0000 Manifest this update: Sat 20 Dec 2025 18:01:45 +0000 Manifest next update: Sun 21 Dec 2025 18:01:45 +0000 Files and hashes: 1: 02GOfZbMNICRgOj9G0mIGs2I4vI.roa (hash: 7F9bn3m0UkAUH0crYUw2LxUKO5iFZMnEUQvddNdyyzY=) 2: 1wktyXo13sUHT1rATESg5FNiuyk.roa (hash: hCP3ZMMgaFh8n4sim6mqZazNXZKLtUNK2izenZ+UBc4=) 3: YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl (hash: oZJXMPeH0AkAQ2PfLG6MlXDLQszaHQb8u7yb946u6rM=) 4: yxSHMNq1K4qzrK8RBcry_vpRL0Y.roa (hash: ES8XPk3Ggq1Zs2KaMQwv/Lx7ybdkBhCiefUow9lLBOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:b8:a5:7c:21:e7:35:23:af:63:30:18:0d:71:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5 Validity Not Before: Dec 20 18:01:45 2025 GMT Not After : Dec 21 18:01:45 2025 GMT Subject: CN=39183c74bd60d892e0013a67db1017730ca5ab59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:30:2d:08:8e:f8:87:a8:e8:c4:1a:cb:ef:3c: 3e:31:03:a2:99:aa:80:f1:81:98:a3:1b:47:36:58: 45:f1:47:af:72:42:d8:d5:76:0b:be:4a:f4:a5:42: aa:0c:19:45:61:7b:12:c2:57:f4:06:30:59:84:c6: 81:d9:ee:20:c4:ef:96:2a:cb:51:7c:c9:a1:a6:a5: 17:22:7e:7c:a4:43:be:f9:6a:20:fd:58:96:1d:61: 83:46:c1:ec:fe:fb:06:81:35:77:c4:9c:c3:03:23: b4:90:fe:9c:6e:9a:d0:e4:79:dd:17:8a:fe:05:0e: 5b:64:7e:0b:1e:a5:81:e5:8b:78:3d:20:f8:6e:55: 20:e2:b6:ba:44:08:ef:90:f8:ca:63:ac:91:30:eb: 8a:02:56:c7:6f:68:bf:ff:70:5d:a4:d2:66:b2:84: d5:9d:a5:f0:e4:3b:bf:db:e8:e6:76:9a:1e:aa:81: ee:17:6d:28:6a:aa:29:c1:56:d0:0a:28:b1:2f:63: c5:a2:4e:34:b2:71:17:c3:22:9d:ff:0c:12:c9:5a: 21:d3:32:b6:70:9f:64:7b:21:a8:1e:9e:8d:b5:a8: 8a:26:c3:10:ef:46:1a:18:76:b9:97:25:bf:03:8d: eb:47:c5:4d:65:16:11:2e:11:70:5e:9e:fe:d7:3c: aa:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:18:3C:74:BD:60:D8:92:E0:01:3A:67:DB:10:17:73:0C:A5:AB:59 X509v3 Authority Key Identifier: keyid:61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:a4:d6:ac:03:3d:e7:19:9f:65:23:e6:71:5a:f1:8e:22:24: 22:77:b9:ec:52:8d:43:c4:d9:d2:d9:ca:75:61:b9:99:60:2f: d5:1a:84:fc:d1:32:bc:c6:eb:0d:9b:cb:3a:16:9b:73:e0:0d: 49:19:bd:e7:46:5b:4c:4f:a6:04:ed:fb:1c:75:1e:57:8b:b8: ae:bf:53:aa:49:d8:83:97:75:34:05:69:a5:00:95:a8:c6:d7: 27:64:f1:6c:de:ad:b0:48:8f:4a:63:a4:f1:46:14:14:7e:02: 3e:12:56:aa:cb:cc:27:04:61:1a:dc:fb:d1:3d:f8:60:57:7b: f0:6f:3a:06:16:4a:ca:46:08:78:3c:f5:a9:b2:ef:2e:0e:8c: 9f:7b:58:a2:de:d7:58:8c:22:ad:eb:bd:3a:cc:1a:22:24:6e: af:b4:6d:75:79:d8:00:3e:44:9e:d7:81:da:d7:df:c6:f1:5f: 3d:4c:3c:12:0c:5a:19:37:2c:c4:3b:e6:e1:cb:9d:f4:9a:b1: 69:62:82:42:da:17:32:cd:89:7d:9d:8c:6b:1b:d6:ac:c9:4b: e7:2e:da:a5:88:9b:e3:91:c3:09:9a:e7:77:03:d1:15:1c:b8: 8e:c2:b8:30:e4:02:e5:eb:af:43:92:2a:cc:24:42:71:66:5b: 7b:f1:77:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87LilfCHnNSOvYzAYDXFeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNGUxOWEyMjc1ODE2YTI4ZTVlODBjOGY5YTI4Y2M1YTFk OWMwZDUwHhcNMjUxMjIwMTgwMTQ1WhcNMjUxMjIxMTgwMTQ1WjAzMTEwLwYDVQQD EygzOTE4M2M3NGJkNjBkODkyZTAwMTNhNjdkYjEwMTc3MzBjYTVhYjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjAtCI74h6joxBrL7zw+MQOimaqA 8YGYoxtHNlhF8UevckLY1XYLvkr0pUKqDBlFYXsSwlf0BjBZhMaB2e4gxO+WKstR fMmhpqUXIn58pEO++Wog/ViWHWGDRsHs/vsGgTV3xJzDAyO0kP6cbprQ5HndF4r+ BQ5bZH4LHqWB5Yt4PSD4blUg4ra6RAjvkPjKY6yRMOuKAlbHb2i//3BdpNJmsoTV naXw5Du/2+jmdpoeqoHuF20oaqopwVbQCiixL2PFok40snEXwyKd/wwSyVoh0zK2 cJ9keyGoHp6NtaiKJsMQ70YaGHa5lyW/A43rR8VNZRYRLhFwXp7+1zyqJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkYPHS9YNiS4AE6Z9sQF3MMpatZMB8GA1UdIwQY MBaAFGFOGaInWBaijl6AyPmijMWh2cDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVU0Wm9pZFlGcUtPWG9ESS1hS014YUhad05VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lNThlMjctY2FmZC00MTdjLTk1ZDAt ODcwNTQ0Y2FhZmFiLzEvWVU0Wm9pZFlGcUtPWG9ESS1hS014YUhad05VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9lNThlMjctY2FmZC00MTdjLTk1ZDAtODcwNTQ0Y2FhZmFi LzEvWVU0Wm9pZFlGcUtPWG9ESS1hS014YUhad05VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKTWrAM9 5xmfZSPmcVrxjiIkIne57FKNQ8TZ0tnKdWG5mWAv1RqE/NEyvMbrDZvLOhabc+AN SRm950ZbTE+mBO37HHUeV4u4rr9TqknYg5d1NAVppQCVqMbXJ2TxbN6tsEiPSmOk 8UYUFH4CPhJWqsvMJwRhGtz70T34YFd78G86BhZKykYIeDz1qbLvLg6Mn3tYot7X WIwireu9OswaIiRur7RtdXnYAD5EnteB2tffxvFfPUw8EgxaGTcsxDvm4cud9Jqx aWKCQtoXMs2JfZ2MaxvWrMlL5y7apYib45HDCZrndwPRFRy4jsK4MOQC5euvQ5Iq zCRCcWZbe/F3gA== -----END CERTIFICATE-----Generated at Sun Dec 21 01:48:28 2025 by rpki-client