This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/205dbe-7714-4d0e-9473-2bce81a431eb/1/You5JTbCD0KwW-UywNuquYt1XzU.mft File: You5JTbCD0KwW-UywNuquYt1XzU.mft (raw, json) Hash identifier: aATn2YokwOfZ4kgtbfZprybyG+Ix4EBdCuPC+wTshZ8= Subject key identifier: 4D:4D:AE:DA:3D:60:ED:18:93:21:AC:D2:81:BE:8B:D5:ED:4C:C2:59 Authority key identifier: 62:8B:B9:25:36:C2:0F:42:B0:5B:E5:32:C0:DB:AA:B9:8B:75:5F:35 Certificate issuer: /CN=628bb92536c20f42b05be532c0dbaab98b755f35 Certificate serial: 019AF2ADC762AA17724A45BB20182AD176A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/You5JTbCD0KwW-UywNuquYt1XzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/205dbe-7714-4d0e-9473-2bce81a431eb/1/You5JTbCD0KwW-UywNuquYt1XzU.mft Manifest number: 0217 Signing time: Sat 06 Dec 2025 08:01:06 +0000 Manifest this update: Sat 06 Dec 2025 08:01:06 +0000 Manifest next update: Sun 07 Dec 2025 08:01:06 +0000 Files and hashes: 1: You5JTbCD0KwW-UywNuquYt1XzU.crl (hash: Mqpw8/OrP6qJFOhZfLK+7QlUDK0OXzZsCC2XaH1qL+0=) 2: lUZIxGhzOYxZGWoE_bPIsAcvBns.roa (hash: 181xs0vbEO2Q9NjKNLp5nMH7XagJ9a8i0PdC3k4WAwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/205dbe-7714-4d0e-9473-2bce81a431eb/1/You5JTbCD0KwW-UywNuquYt1XzU.crl rsync://rpki.ripe.net/repository/DEFAULT/76/205dbe-7714-4d0e-9473-2bce81a431eb/1/You5JTbCD0KwW-UywNuquYt1XzU.mft rsync://rpki.ripe.net/repository/DEFAULT/You5JTbCD0KwW-UywNuquYt1XzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:c7:62:aa:17:72:4a:45:bb:20:18:2a:d1:76:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=628bb92536c20f42b05be532c0dbaab98b755f35 Validity Not Before: Dec 6 08:01:06 2025 GMT Not After : Dec 7 08:01:06 2025 GMT Subject: CN=4d4daeda3d60ed189321acd281be8bd5ed4cc259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:91:41:9b:b6:5c:20:3a:1a:8b:ce:40:c3:f6: 6a:e0:28:f4:87:e2:89:37:e1:46:af:4b:4c:55:10: a8:9c:e3:7e:dd:26:14:a0:7f:4c:db:a0:70:82:0a: b1:38:e2:d5:f8:6c:5f:06:c4:7c:ec:b8:18:ed:1d: 16:d7:f2:70:3c:c7:c7:9c:8a:c8:d5:ee:aa:f4:a2: 01:4a:df:ce:63:60:43:0d:f6:18:2d:2b:42:7b:c3: 76:ad:cd:cb:0d:e8:06:01:29:bb:d6:85:8b:6c:f0: e5:2c:6f:b3:69:fb:b7:58:94:04:9b:cc:5f:e6:9c: ad:9d:4e:60:7d:78:c7:c1:6a:c5:3e:29:46:e5:cc: b0:48:9e:6f:ef:97:ae:50:a7:63:11:4f:ca:f8:e0: d2:d1:16:ae:8e:ac:ef:bd:78:10:45:d0:f0:04:60: 4a:21:59:81:48:88:fa:aa:a6:95:1b:29:19:e7:49: 95:58:b5:25:c5:63:8b:46:58:c1:b0:9a:44:bd:2b: b4:75:7d:54:e6:d7:d4:26:42:cd:8f:81:fc:73:b1: 09:3f:26:32:62:81:fe:cf:50:ce:93:10:11:c9:1f: 8a:92:27:f3:ad:50:8e:b7:53:59:99:d7:8d:6c:82: ef:f1:0d:e6:29:af:2a:a0:10:b4:18:0c:21:59:24: a6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4D:AE:DA:3D:60:ED:18:93:21:AC:D2:81:BE:8B:D5:ED:4C:C2:59 X509v3 Authority Key Identifier: keyid:62:8B:B9:25:36:C2:0F:42:B0:5B:E5:32:C0:DB:AA:B9:8B:75:5F:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/You5JTbCD0KwW-UywNuquYt1XzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/205dbe-7714-4d0e-9473-2bce81a431eb/1/You5JTbCD0KwW-UywNuquYt1XzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/205dbe-7714-4d0e-9473-2bce81a431eb/1/You5JTbCD0KwW-UywNuquYt1XzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:01:06:5c:78:38:b1:dc:39:41:d2:ee:5c:cb:5d:e3:e4:a4: 93:bb:07:e4:99:9c:5b:1e:ca:a5:67:ee:89:56:4a:ae:e5:dd: 0f:78:14:70:c9:c0:6c:84:dc:65:c7:e1:34:ee:df:b9:cc:a0: 40:e8:35:c3:e6:9a:1a:cf:8f:f4:b5:74:7c:32:b1:40:bd:ec: ad:c1:7f:e9:14:42:2c:93:e4:03:f9:55:ed:34:e3:f4:23:40: 83:14:b0:ca:6c:00:8e:ad:35:be:82:9b:82:7d:0b:72:5e:a7: ef:ce:94:41:96:0b:21:5c:2e:bd:96:c4:e4:4d:e9:2c:3f:69: 87:5c:28:03:1c:0f:6f:1d:cb:03:1b:f2:db:1a:dd:0c:18:b3: e5:fc:b4:5e:cb:f8:5d:8d:3b:5d:3e:77:a4:e7:87:c8:cf:ff: 9d:b2:3d:42:c9:a9:c2:67:32:d8:7a:fa:ce:10:f8:62:a3:84: d4:40:29:9e:cf:03:ec:18:66:de:b2:c2:60:23:32:ae:74:bf: 3a:7c:27:46:2a:e8:f7:81:67:81:56:10:71:02:75:a4:b6:56: 5c:16:b1:3e:ae:96:6a:0e:25:7c:fb:ca:a5:fa:7f:ae:bf:2a: 74:78:16:05:7e:f4:c6:a9:f4:4f:dc:17:a0:8c:e3:ea:7b:41: 7c:b1:51:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrcdiqhdySkW7IBgq0XaoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyOGJiOTI1MzZjMjBmNDJiMDViZTUzMmMwZGJhYWI5OGI3 NTVmMzUwHhcNMjUxMjA2MDgwMTA2WhcNMjUxMjA3MDgwMTA2WjAzMTEwLwYDVQQD Eyg0ZDRkYWVkYTNkNjBlZDE4OTMyMWFjZDI4MWJlOGJkNWVkNGNjMjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpFBm7ZcIDoai85Aw/Zq4Cj0h+KJ N+FGr0tMVRConON+3SYUoH9M26BwggqxOOLV+GxfBsR87LgY7R0W1/JwPMfHnIrI 1e6q9KIBSt/OY2BDDfYYLStCe8N2rc3LDegGASm71oWLbPDlLG+zafu3WJQEm8xf 5pytnU5gfXjHwWrFPilG5cywSJ5v75euUKdjEU/K+ODS0RaujqzvvXgQRdDwBGBK IVmBSIj6qqaVGykZ50mVWLUlxWOLRljBsJpEvSu0dX1U5tfUJkLNj4H8c7EJPyYy YoH+z1DOkxARyR+KkifzrVCOt1NZmdeNbILv8Q3mKa8qoBC0GAwhWSSmgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1Nrto9YO0YkyGs0oG+i9XtTMJZMB8GA1UdIwQY MBaAFGKLuSU2wg9CsFvlMsDbqrmLdV81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW91NUpUYkNEMEt3Vy1VeXdOdXF1WXQxWHpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8yMDVkYmUtNzcxNC00ZDBlLTk0NzMt MmJjZTgxYTQzMWViLzEvWW91NUpUYkNEMEt3Vy1VeXdOdXF1WXQxWHpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8yMDVkYmUtNzcxNC00ZDBlLTk0NzMtMmJjZTgxYTQzMWVi LzEvWW91NUpUYkNEMEt3Vy1VeXdOdXF1WXQxWHpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAwEGXHg4 sdw5QdLuXMtd4+Skk7sH5JmcWx7KpWfuiVZKruXdD3gUcMnAbITcZcfhNO7fucyg QOg1w+aaGs+P9LV0fDKxQL3srcF/6RRCLJPkA/lV7TTj9CNAgxSwymwAjq01voKb gn0Lcl6n786UQZYLIVwuvZbE5E3pLD9ph1woAxwPbx3LAxvy2xrdDBiz5fy0Xsv4 XY07XT53pOeHyM//nbI9Qsmpwmcy2Hr6zhD4YqOE1EApns8D7Bhm3rLCYCMyrnS/ OnwnRiro94FngVYQcQJ1pLZWXBaxPq6Wag4lfPvKpfp/rr8qdHgWBX70xqn0T9wX oIzj6ntBfLFRRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:13:17 2025 by rpki-client