This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft File: YjUmrZ--xXT6TsPZuttUM_2qyns.mft (raw, json) Hash identifier: KnAcV5Zu+49LoJZqHU4tcP0maFzS1wsvkDzCascpmnc= Subject key identifier: 1F:4B:34:87:6F:45:28:F0:64:7D:2C:2A:90:17:CB:EA:20:D6:11:82 Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b Certificate serial: 019B30B0C8A419366AD623F51A0A9C78D133 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft Manifest number: 0D98 Signing time: Thu 18 Dec 2025 09:00:50 +0000 Manifest this update: Thu 18 Dec 2025 09:00:50 +0000 Manifest next update: Fri 19 Dec 2025 09:00:50 +0000 Files and hashes: 1: Ccywd-EFb-47zGXwVvm1HK3gD5g.roa (hash: tofGggOpzVU4QpBRLmwlmpDY705qfzw44/NrLhvXC/s=) 2: I8Tt-Zu-4KuSLBycV3-omKCgA2k.roa (hash: Zd+eY+EVCzF5gjwTJThQ6dJvOjSgC7ThbQkI/3E4k6Q=) 3: YjUmrZ--xXT6TsPZuttUM_2qyns.crl (hash: 3KmZ1Mfeda3CRGN+hDLmejvjkjk981SHN1FwICU4chY=) 4: hqQDTg86IXDCJKqDxF4L3S5iCf8.roa (hash: H2Wy84IqHXcbFRYxZCEIcsyGOCDB08MT81RQd+tDuH4=) 5: sDw4_lTU4iQJOaN0yUvzocqZ23c.roa (hash: 9muZnI3+r+Noi3k3hRSo6GnSQDK9o1ZrpIfj14cPaHM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:b0:c8:a4:19:36:6a:d6:23:f5:1a:0a:9c:78:d1:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b Validity Not Before: Dec 18 09:00:50 2025 GMT Not After : Dec 19 09:00:50 2025 GMT Subject: CN=1f4b34876f4528f0647d2c2a9017cbea20d61182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:34:e3:f8:f5:66:7e:cd:c6:2e:c0:e8:a6:7d: 86:f9:76:eb:ed:47:99:45:f8:3c:52:1d:ec:9d:08: 9f:1b:90:9c:56:81:65:4a:5e:9b:eb:b3:43:27:3b: 2a:56:e4:7b:aa:b1:3e:07:47:27:3e:e0:4c:ab:aa: fa:8f:d3:5d:62:ef:39:3d:f8:75:18:f1:c4:25:c6: 15:79:24:e6:15:82:c1:2c:b2:1b:51:28:33:e3:89: 44:38:3f:e6:0e:33:68:20:c6:5f:6f:a0:ff:36:e1: 99:78:cd:23:13:1b:52:4c:f2:07:d5:01:64:3f:4b: 97:89:8f:16:f4:b3:cc:5f:85:28:7e:b8:f1:6c:68: ac:69:c7:2d:15:21:df:79:79:15:f7:07:ce:41:d9: 86:26:aa:b0:ed:4f:95:e0:63:65:cc:0d:6c:6b:05: 22:34:00:21:bd:d9:88:6e:38:d9:c6:44:79:ab:e4: e5:88:fe:d8:b3:35:7c:bf:57:7d:db:08:ac:5e:aa: 99:05:30:06:9f:ff:e1:f8:83:e4:0a:b8:fe:87:75: b6:22:e4:58:8b:54:3c:40:79:00:2f:1a:9f:12:71: 7e:d7:81:6c:5e:4c:5d:26:c1:c1:78:5c:2f:3f:77: b7:fb:16:4e:f3:43:47:1c:ee:55:7f:77:ff:a8:bc: 9e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4B:34:87:6F:45:28:F0:64:7D:2C:2A:90:17:CB:EA:20:D6:11:82 X509v3 Authority Key Identifier: keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:3a:d5:70:90:6c:ea:1d:c6:78:2a:28:76:a5:af:ff:ae:af: c5:31:f4:43:3c:0a:91:bd:15:41:98:70:ab:9c:71:6a:57:e9: b0:d2:61:8e:53:c2:1b:e6:55:79:0f:34:da:8b:7c:2a:d6:3d: 91:88:88:2d:c5:19:75:9c:67:85:0b:e5:7c:ab:c4:51:e3:17: 24:af:6c:ce:53:0f:71:f8:7c:0a:1a:3f:00:8d:ae:5c:8c:c3: da:ae:4d:6a:14:01:bb:99:ae:ee:73:d0:2a:34:5d:d7:c6:89: 4d:01:bc:0b:7f:c8:50:ba:af:ed:5d:e9:8f:b0:7e:fc:3b:6f: 4b:34:5f:e6:7d:3c:9d:a3:38:f0:f0:8a:e3:df:78:58:8d:ed: 35:34:a7:b1:33:e6:3b:15:62:69:b9:38:8f:5f:9c:45:c7:a4: 3e:3a:9e:a3:24:86:24:36:d1:74:6e:ec:52:1e:a0:9e:db:91: e1:ab:40:91:8c:f0:52:08:65:c1:c1:c8:0f:5a:eb:ea:b9:94: cf:86:53:5d:97:b4:92:be:0f:f6:77:e1:c5:17:ca:b6:a2:ba: 91:19:57:69:b3:2d:56:cd:e3:89:65:9e:ba:66:77:e3:76:98: 82:e8:f7:07:cc:7c:ec:c5:e8:61:a5:68:38:13:e0:e8:19:37: 64:51:72:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswsMikGTZq1iP1GgqceNEzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMzUyNmFkOWZiZWM1NzRmYTRlYzNkOWJhZGI1NDMzZmRh YWNhN2IwHhcNMjUxMjE4MDkwMDUwWhcNMjUxMjE5MDkwMDUwWjAzMTEwLwYDVQQD EygxZjRiMzQ4NzZmNDUyOGYwNjQ3ZDJjMmE5MDE3Y2JlYTIwZDYxMTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zTj+PVmfs3GLsDopn2G+Xbr7UeZ Rfg8Uh3snQifG5CcVoFlSl6b67NDJzsqVuR7qrE+B0cnPuBMq6r6j9NdYu85Pfh1 GPHEJcYVeSTmFYLBLLIbUSgz44lEOD/mDjNoIMZfb6D/NuGZeM0jExtSTPIH1QFk P0uXiY8W9LPMX4UofrjxbGisacctFSHfeXkV9wfOQdmGJqqw7U+V4GNlzA1sawUi NAAhvdmIbjjZxkR5q+TliP7YszV8v1d92wisXqqZBTAGn//h+IPkCrj+h3W2IuRY i1Q8QHkALxqfEnF+14FsXkxdJsHBeFwvP3e3+xZO80NHHO5Vf3f/qLyebwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9LNIdvRSjwZH0sKpAXy+og1hGCMB8GA1UdIwQY MBaAFGI1Jq2fvsV0+k7D2brbVDP9qsp7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xZDhmYzktYjIxYi00ZGI1LTk1Y2Yt ODFjOGNlNzUwMTI0LzEvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8xZDhmYzktYjIxYi00ZGI1LTk1Y2YtODFjOGNlNzUwMTI0 LzEvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAzrVcJBs 6h3GeCoodqWv/66vxTH0QzwKkb0VQZhwq5xxalfpsNJhjlPCG+ZVeQ802ot8KtY9 kYiILcUZdZxnhQvlfKvEUeMXJK9szlMPcfh8Cho/AI2uXIzD2q5NahQBu5mu7nPQ KjRd18aJTQG8C3/IULqv7V3pj7B+/DtvSzRf5n08naM48PCK4994WI3tNTSnsTPm OxViabk4j1+cRcekPjqeoySGJDbRdG7sUh6gntuR4atAkYzwUghlwcHID1rr6rmU z4ZTXZe0kr4P9nfhxRfKtqK6kRlXabMtVs3jiWWeumZ343aYguj3B8x87MXoYaVo OBPg6Bk3ZFFybw== -----END CERTIFICATE-----Generated at Thu Dec 18 13:42:43 2025 by rpki-client