This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft File: YH4TV4xoDumP2q0gI3DxDjwoKvw.mft (raw, json) Hash identifier: ya1bV3Yyk3LtPpwBpIK3tN7ym6pzY3vSlYvK0ITQOZA= Subject key identifier: C4:C7:42:28:32:1A:DD:1C:FF:B3:C0:A0:7B:E5:E4:E1:51:FE:26:7D Authority key identifier: 60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC Certificate issuer: /CN=607e13578c680ee98fdaad202370f10e3c282afc Certificate serial: 019AF540C9DD613B4315B26E6E72679FF72A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft Manifest number: 104B Signing time: Sat 06 Dec 2025 20:00:55 +0000 Manifest this update: Sat 06 Dec 2025 20:00:55 +0000 Manifest next update: Sun 07 Dec 2025 20:00:55 +0000 Files and hashes: 1: YH4TV4xoDumP2q0gI3DxDjwoKvw.crl (hash: 7mIh7+5KtxJgEpe1j5p1rImiNhJa7K3h73+D7YHvX/4=) 2: wjF-boaSBdJpFX21HtXG9GjSpyA.roa (hash: AbHr9ss+TI1KskPrNJWukMpmmelIuYFTcEXRCT6a0es=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.crl rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:c9:dd:61:3b:43:15:b2:6e:6e:72:67:9f:f7:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=607e13578c680ee98fdaad202370f10e3c282afc Validity Not Before: Dec 6 20:00:55 2025 GMT Not After : Dec 7 20:00:55 2025 GMT Subject: CN=c4c74228321add1cffb3c0a07be5e4e151fe267d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:c9:c7:13:64:0a:db:d0:c9:e9:1e:12:e2:b4: c8:24:8f:52:8e:ad:bf:6c:82:21:5e:b6:4b:c8:aa: 94:0d:24:41:cd:51:8b:ef:2f:88:14:ca:f0:45:11: 39:83:67:02:13:6c:ea:3c:83:9a:d2:66:4b:1a:d2: df:a9:70:29:08:5e:9a:bf:c8:18:0d:25:21:3d:36: 3c:c4:84:7f:c8:00:05:92:68:41:74:f9:1a:f3:16: c8:29:6a:32:aa:e6:84:64:10:0e:1b:e5:14:7a:3a: 48:6b:a9:ac:19:58:24:e1:ea:4e:23:6e:54:8e:b5: 33:9e:30:bf:da:a4:c7:f3:cb:7a:09:6a:8b:ef:12: e4:3e:e8:98:b6:39:a9:2b:99:44:18:d6:61:04:2c: ac:fa:f4:65:9b:bf:cb:b5:2f:bb:54:68:a0:8f:d4: 32:c9:bb:9e:5b:29:4a:bd:fe:1b:c8:08:28:df:a1: a4:7e:9b:53:8f:5a:fa:26:80:96:be:02:fb:66:92: c2:17:55:bf:3d:24:1f:1e:be:aa:b1:ae:1c:aa:c0: fd:41:58:50:37:1c:c9:7e:d2:ee:4f:53:bf:14:b4: 53:fe:b7:28:87:75:b5:05:d0:d4:e1:67:5d:90:93: c9:cc:d8:8d:b6:a1:e1:d5:99:a7:f7:9a:3d:1b:ef: 51:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C7:42:28:32:1A:DD:1C:FF:B3:C0:A0:7B:E5:E4:E1:51:FE:26:7D X509v3 Authority Key Identifier: keyid:60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:f1:02:cc:1d:fc:3d:02:09:e8:59:3d:02:87:42:53:90:1d: 94:c4:8f:9a:44:f2:53:fb:79:13:e3:47:3f:26:a5:08:5a:dd: 24:89:da:55:04:8e:1e:81:b5:a7:bf:2b:df:8c:15:61:ab:77: 02:2d:89:5e:3a:9e:b7:b6:b8:68:ed:65:b0:e3:84:33:a6:53: c6:53:87:86:fc:64:b1:58:e8:54:fd:3a:5f:ef:ea:33:ce:9a: 5a:c2:72:05:4b:7b:1c:a1:cc:d5:fb:ce:f8:e4:30:b0:bb:5d: 6a:09:f7:c6:99:64:6d:44:ac:34:f9:7f:6d:57:1f:23:25:fb: fd:e5:0b:d2:a7:4d:be:b8:3a:fb:f9:c0:f4:dd:c6:54:c9:39: 38:a5:8f:19:04:c7:48:9c:b4:b4:5c:4d:b5:10:bc:ef:de:55: 39:6a:9b:05:4b:f7:e3:d6:bb:f4:2c:38:62:51:16:92:8d:6b: 21:36:b4:ed:af:0a:1b:99:65:3e:b3:b8:5c:44:02:0c:7f:95: 15:67:22:16:9d:18:d1:10:60:8b:b5:24:f3:e2:76:5d:a1:7c: 9c:db:75:a0:c3:24:12:29:54:76:22:5d:5c:f3:31:5f:48:0f: 05:db:13:88:f9:8d:92:42:54:b1:c3:ff:ae:7e:6d:48:04:ce: 2b:de:ae:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QMndYTtDFbJubnJnn/cqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwN2UxMzU3OGM2ODBlZTk4ZmRhYWQyMDIzNzBmMTBlM2My ODJhZmMwHhcNMjUxMjA2MjAwMDU1WhcNMjUxMjA3MjAwMDU1WjAzMTEwLwYDVQQD EyhjNGM3NDIyODMyMWFkZDFjZmZiM2MwYTA3YmU1ZTRlMTUxZmUyNjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA88nHE2QK29DJ6R4S4rTIJI9Sjq2/ bIIhXrZLyKqUDSRBzVGL7y+IFMrwRRE5g2cCE2zqPIOa0mZLGtLfqXApCF6av8gY DSUhPTY8xIR/yAAFkmhBdPka8xbIKWoyquaEZBAOG+UUejpIa6msGVgk4epOI25U jrUznjC/2qTH88t6CWqL7xLkPuiYtjmpK5lEGNZhBCys+vRlm7/LtS+7VGigj9Qy ybueWylKvf4byAgo36GkfptTj1r6JoCWvgL7ZpLCF1W/PSQfHr6qsa4cqsD9QVhQ NxzJftLuT1O/FLRT/rcoh3W1BdDU4WddkJPJzNiNtqHh1Zmn95o9G+9RRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTHQigyGt0c/7PAoHvl5OFR/iZ9MB8GA1UdIwQY MBaAFGB+E1eMaA7pj9qtICNw8Q48KCr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUg0VFY0eG9EdW1QMnEwZ0kzRHhEandvS3Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9hMjFiYmUtYmE0ZC00ZTAzLWJlZjgt YmFmZmUzYjY3N2RmLzEvWUg0VFY0eG9EdW1QMnEwZ0kzRHhEandvS3Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9hMjFiYmUtYmE0ZC00ZTAzLWJlZjgtYmFmZmUzYjY3N2Rm LzEvWUg0VFY0eG9EdW1QMnEwZ0kzRHhEandvS3Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/ECzB38 PQIJ6Fk9AodCU5AdlMSPmkTyU/t5E+NHPyalCFrdJInaVQSOHoG1p78r34wVYat3 Ai2JXjqet7a4aO1lsOOEM6ZTxlOHhvxksVjoVP06X+/qM86aWsJyBUt7HKHM1fvO +OQwsLtdagn3xplkbUSsNPl/bVcfIyX7/eUL0qdNvrg6+/nA9N3GVMk5OKWPGQTH SJy0tFxNtRC8795VOWqbBUv349a79Cw4YlEWko1rITa07a8KG5llPrO4XEQCDH+V FWciFp0Y0RBgi7Uk8+J2XaF8nNt1oMMkEilUdiJdXPMxX0gPBdsTiPmNkkJUscP/ rn5tSATOK96uzg== -----END CERTIFICATE-----Generated at Sun Dec 7 06:00:51 2025 by rpki-client