This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft File: YH4TV4xoDumP2q0gI3DxDjwoKvw.mft (raw, json) Hash identifier: h49cGO/L5PnUS15FqjjcNyubuKjpXKKvBNkPt6TwgCk= Subject key identifier: 4E:C0:44:BE:40:E1:29:9C:B8:DB:C9:7D:FB:22:5A:31:35:D0:14:78 Authority key identifier: 60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC Certificate issuer: /CN=607e13578c680ee98fdaad202370f10e3c282afc Certificate serial: 019B2F3071CD2F39750FF42C014DF6B89DE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft Manifest number: 1069 Signing time: Thu 18 Dec 2025 02:01:02 +0000 Manifest this update: Thu 18 Dec 2025 02:01:02 +0000 Manifest next update: Fri 19 Dec 2025 02:01:02 +0000 Files and hashes: 1: YH4TV4xoDumP2q0gI3DxDjwoKvw.crl (hash: aUk8a5w+ZwW/Yv/73xoOQSH2+NTswx4gaT/bp1pbOh4=) 2: wjF-boaSBdJpFX21HtXG9GjSpyA.roa (hash: AbHr9ss+TI1KskPrNJWukMpmmelIuYFTcEXRCT6a0es=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.crl rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 02:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:71:cd:2f:39:75:0f:f4:2c:01:4d:f6:b8:9d:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=607e13578c680ee98fdaad202370f10e3c282afc Validity Not Before: Dec 18 02:01:02 2025 GMT Not After : Dec 19 02:01:02 2025 GMT Subject: CN=4ec044be40e1299cb8dbc97dfb225a3135d01478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:33:c2:54:91:4c:f4:c8:e1:f6:ab:ea:f9:5e: ba:1e:16:2f:89:39:b8:4a:be:be:ef:b2:d5:93:84: 01:60:21:f0:65:f8:35:b0:c4:7a:3c:6b:bb:02:f5: 9d:6d:06:a4:c2:1b:73:98:be:e7:87:ab:8f:5d:1a: b6:11:74:c9:9f:a9:cf:b4:71:4c:31:93:3a:b4:8a: 3a:46:45:8e:d7:70:0c:78:fe:13:ae:c0:5a:6a:ab: c7:8a:c8:a5:9f:a9:22:d8:a8:8b:c8:b7:90:ae:4a: fe:3a:14:2e:10:79:e0:5e:18:81:1e:88:dd:5d:07: 33:a6:78:78:48:aa:4a:fd:2c:3b:40:f1:64:4f:be: 75:1c:66:6d:16:0b:19:52:30:b1:e1:49:ec:7d:12: 47:88:07:76:3f:90:b6:e4:a6:20:42:62:23:4b:8a: 6c:2d:f4:7c:ab:81:5f:31:fd:55:dc:aa:cd:bd:cd: 70:b0:d5:82:e2:f6:62:fb:22:f3:b0:bc:5c:f6:32: d6:f9:82:8f:11:e4:7d:e6:d2:b6:cf:5c:02:e1:c5: 3a:cc:f6:da:12:f1:e9:fb:36:19:48:d8:0e:1d:ae: 42:9b:24:b7:7e:d4:33:3d:da:18:0e:e9:95:cb:17: 3b:1c:4a:0c:6f:c4:aa:11:f8:9e:f0:8e:8d:b4:24: 71:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C0:44:BE:40:E1:29:9C:B8:DB:C9:7D:FB:22:5A:31:35:D0:14:78 X509v3 Authority Key Identifier: keyid:60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:17:92:f0:7a:15:89:a3:f4:70:59:6a:be:ea:e3:ca:0e:21: 44:2c:7b:9f:00:a2:39:a7:47:a3:d4:15:bb:87:f2:cf:bf:00: 02:c2:86:8c:2f:d7:cc:c3:e4:3c:87:1c:f1:7c:3d:24:63:a5: bd:b3:21:4a:08:68:5c:4c:49:09:d4:75:a1:a4:99:64:0c:82: 39:f4:b3:18:b8:9b:2f:c4:49:a9:3b:41:ca:dd:d6:a3:63:92: f7:a0:52:9f:98:04:09:e4:17:47:4c:00:fc:13:24:cf:b7:59: 65:5e:6f:5f:ad:dc:43:e6:19:1a:65:f7:a4:da:a7:86:eb:f7: 54:41:62:3e:07:67:23:b5:9e:26:71:37:ae:c5:05:a1:2e:34: 84:d6:28:1c:55:b2:d9:f4:98:9c:be:84:1c:55:72:22:9b:6c: 69:ed:58:fa:74:78:5c:49:a6:ef:58:8e:18:c4:d6:00:86:10: 47:25:74:d4:a4:8e:e0:81:a0:58:41:0b:64:f5:2c:81:a7:a0: 5e:8c:e1:a7:17:a1:3c:ee:fa:59:78:67:f4:5c:12:30:6d:bb: 52:3b:1f:a9:05:70:c1:8b:b7:6a:31:1b:29:01:70:6c:e0:eb: 2e:41:bc:fe:26:22:15:ab:ce:46:5f:57:63:67:96:47:8a:d5: c0:4c:e4:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMHHNLzl1D/QsAU32uJ3kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwN2UxMzU3OGM2ODBlZTk4ZmRhYWQyMDIzNzBmMTBlM2My ODJhZmMwHhcNMjUxMjE4MDIwMTAyWhcNMjUxMjE5MDIwMTAyWjAzMTEwLwYDVQQD Eyg0ZWMwNDRiZTQwZTEyOTljYjhkYmM5N2RmYjIyNWEzMTM1ZDAxNDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zPCVJFM9Mjh9qvq+V66HhYviTm4 Sr6+77LVk4QBYCHwZfg1sMR6PGu7AvWdbQakwhtzmL7nh6uPXRq2EXTJn6nPtHFM MZM6tIo6RkWO13AMeP4TrsBaaqvHisiln6ki2KiLyLeQrkr+OhQuEHngXhiBHojd XQczpnh4SKpK/Sw7QPFkT751HGZtFgsZUjCx4UnsfRJHiAd2P5C25KYgQmIjS4ps LfR8q4FfMf1V3KrNvc1wsNWC4vZi+yLzsLxc9jLW+YKPEeR95tK2z1wC4cU6zPba EvHp+zYZSNgOHa5CmyS3ftQzPdoYDumVyxc7HEoMb8SqEfie8I6NtCRxawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7ARL5A4SmcuNvJffsiWjE10BR4MB8GA1UdIwQY MBaAFGB+E1eMaA7pj9qtICNw8Q48KCr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUg0VFY0eG9EdW1QMnEwZ0kzRHhEandvS3Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9hMjFiYmUtYmE0ZC00ZTAzLWJlZjgt YmFmZmUzYjY3N2RmLzEvWUg0VFY0eG9EdW1QMnEwZ0kzRHhEandvS3Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9hMjFiYmUtYmE0ZC00ZTAzLWJlZjgtYmFmZmUzYjY3N2Rm LzEvWUg0VFY0eG9EdW1QMnEwZ0kzRHhEandvS3Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWheS8HoV iaP0cFlqvurjyg4hRCx7nwCiOadHo9QVu4fyz78AAsKGjC/XzMPkPIcc8Xw9JGOl vbMhSghoXExJCdR1oaSZZAyCOfSzGLibL8RJqTtByt3Wo2OS96BSn5gECeQXR0wA /BMkz7dZZV5vX63cQ+YZGmX3pNqnhuv3VEFiPgdnI7WeJnE3rsUFoS40hNYoHFWy 2fSYnL6EHFVyIptsae1Y+nR4XEmm71iOGMTWAIYQRyV01KSO4IGgWEELZPUsgaeg XozhpxehPO76WXhn9FwSMG27UjsfqQVwwYu3ajEbKQFwbODrLkG8/iYiFavORl9X Y2eWR4rVwEzkvw== -----END CERTIFICATE-----Generated at Thu Dec 18 11:24:09 2025 by rpki-client